Q. What is the CiscoWorks Security Information Management Solution (SIMS) 3.2.1 release?
A. It is a software-only upgrade to the existing software-based CiscoWorks SIMS starter kit, not for appliance offering software upgrade.
Q. What is the exact release number of the shipping starter-kit software?
A. The shipping software is CiscoWorks SIMS 3.2.1.02. Customer who receives 3.2.1.02 release can obtain the 3.2.1.02 patch from CCO. Customers who order CiscoWorks SIMS after June 2005 will receive both CiscoWorks SIMS 3.2.1.01 and 3.2.1.02.
Q. What software release is the baseline installation required for the upgrade?
A. The minimum required software baseline is the 3.1.2 software-only release. Depending on the release of the installed software, customers must take the following path for successful upgrades to this latest release:
3.1- 3.1.1.01 - 3.1.2-3.2.1.01-3.2.1.02
Q. How can existing CiscoWorks SIMS customers obtain the upgrade?
A. There are two ways to obtain the upgrade: (1) Use valid a Software Application Support (SAS) number to obtain the software upgrade using the Cisco.com upgrade tool at
http://tools.cisco.com/gct/Upgrade/jsp/index.jsp. (2) Customers without valid SAS contracts can purchase the upgrade (see Tables 2 and 3).
Q. What are the new features of this 3.2.1 release?
Q. Will this release include Network Admission Control (NAC) support?
A. Yes. NAC phase 1 is supported since CiscoWorks SIMS 3.1.2. CiscoWorks SIMS 3.2.1 (software option only) or later will support future phases of NAC.
Q. What will be the next release upgrade to CiscoWorks SIMS 3.2.1?
A. CiscoWorks SIMS 3.3 will be released in summer of 2005. Customers who are interested in the new features and functionality of CiscoWorks SIMS 3.3 can contact their sales representatives.
CISCOWORKS SIMS APPLIANCE UPGRADE
Q. Can the CiscoWorks SIMS 3.1 solution engine (appliance) software be upgraded to this 3.2.1 release?
A. No. CiscoWorks SIMS 3.2.1 is a software-only release and this upgrade is only for customer who has purchased software based CiscoWorks SIMS.
Q. When will the appliance upgrade plan for CiscoWorks SIMS 3.2.1 be announced by Cisco Systems
® will announce the upgrade plan in summer 2005.
Q. Will Cisco Technical Assistance Center (TAC) and netForensics support the appliance installation of CiscoWorks SIMS 3.2.1 if a customer does the "forced" upgrade on the CiscoWorks SIMS appliance?
A. Cisco has not officially validated CiscoWorks SIMS 3.2.1 running on CiscoWorks SIMS Engine (appliance). Cisco and netForensics TAC will not support this "forced upgrade." Please contact your Cisco security sales representative for special-needs assistance.
Q. My company has a CiscoWorks SIMS appliance installed but needs to migrate the existing appliance to a software-based solution to accommodate growth. How shall I proceed?
A. There is a planned software migration option for appliance customers. Please contact your Cisco security sales representative who can ask for special migration assistance from Cisco product team.
Q. Will my company receive CiscoWorks SIMS 3.2.1 software if migrating from the appliance to software-based licensing?
A. Yes. Please contact your Cisco security sales representative for assistance.
Q. When will the next release of the CiscoWorks SIMS appliance be?
A. The CiscoWorks SIMS 3.1.2 appliance is planned to be released in summer 2005.
Q. My company has purchased both the CiscoWorks SIMS appliance and software. Can I turn the appliance into an "engine" that can forward events to the software central server?
A. Yes. Please consult your Administrative Guide for implementation guidance..
SOFTWARE ADD-ON MODULES UPGRADE
Q. What are the add-on software modules that Cisco has released?
A. They are Rules-Based Correlation (RBC), Incident Resolution Management (IRM), Vulnerability Correlation Engine (VCE), Enterprise Security Portal (ESP), and Universal Agent (UA).
Q. What are the differences between "vertical products" and add-on modules?
A. They are the same.
Q. What are the add-on modules impacted by this CiscoWorks SIMS 3.2.1 release?
A. The impacted add-on modules are RBC, VCE, and IRM only.
Q. Will there be any patch update of the impacted modules required to support this 3.2.1 upgrade?
A. Yes. The latest minor updates are RBC (1.0.04), IRM (1.0.03), and VCE (1.0.03). Customers can download the update patches from Cisco.com.
Q. What is the baseline software "starter-kit" required to work with all the add-on software modules?
A. Cisco recommends CiscoWorks SIMS 3.2.1.02.
Q. What are the new features and capabilities of these add-on modules?
Q. I have CiscoWorks SIMS 3.1.1.01 installed and my SAS contract expired. How can I order the upgrade?
A. Customers without a Cisco SAS contract in place who would like to obtain a CiscoWorks SIMS 3.2.1 upgrade can contact their Cisco sales representative to purchase the upgrade in one of two ways: (1) purchasing the SAS service contract, using part number in Table 2, which includes free software upgrades in addition to other Cisco service support benefits; (2) purchasing software upgrade using part number in Table 3.
Table 2. Service Support Contract Part Numbers
SAS for CiscoWorks SIMS 3.2.1.x upgrade (Solaris) from 3.1.x
SAS for CiscoWorks SIMS 3.2.1.x upgrade (Linux) from 3.1.x
CiscoWorks SIMS 3.1.x upgrade to 3.2.1.x starter kit (Solaris)
Q. What are the upgrade part numbers for updates of RBC, VCE, and IRM?
A. There is no part number for the upgrade. Please download the update patches directly from Cisco.com.
Q. How is device licensing priced?
A. Please contact your Cisco security sales representative for assistance.
Q. Will future release of CiscoWorks SIMS software be supported on Cisco branded Intel-based hardware?
A. Nothing has been committed. Cisco is considering the option for our customer to run further release of CiscoWorks SIMS on Cisco branded Intel hardware. Please contact your Cisco security sales representative for your special hardware-support needs.
Q. Will CiscoWorks SIMS be supporting Windows-based operating systems?
A. Nothing has been committed. Cisco is considering Microsoft Windows based option of CiscoWorks SIMS. Please contact your Cisco security sales representative for further assistance.
Q. How soon can I anticipate new Cisco security hardware or security solutions to be supported on CiscoWorks SIMS software?
A. Usually, within 1 to 3 months of the hardware release or public announcement by Cisco.
Q. Why can't this be the same date when netForensics officially releases its software to its customer?
A. Cisco engineering will need to conduct acceptance testing of the software before release to Cisco customers.
Q. How can I order hands-on training of this product?
A. Contact your Cisco product marketing or Cisco security sales representative for training ordering and arrangement.
Q. Is CiscoWorks SIMS a part of the Cisco Self-Defending Network initiative?
A. Yes. CiscoWorks SIMS is one of the primary security product offerings in this initiative.
Q. What is the difference between Cisco Security Monitoring, Analysis and Response System (MARS), and CiscoWorks SIMS?
A. Cisco Security MARS is the appliance-based product line and CiscoWorks SIMS is the software-based product line. The two products have unique functions and capabilities that can meet customers' different needs. Customers can contact Cisco security sales representatives for respective detailed product information.
Q. Are Cisco Security MARS and CiscoWorks SIMS competing products?
A. No. Both products have been successfully deployed in their respective customers. Cisco customers from different market segments (commercial, medium enterprises, large and global enterprises, and managed security service providers) have found these two products are well positioned to meet their specific security monitoring and mitigation needs. Customers can contact Cisco security sales representatives for assistance.