Guest

CiscoWorks Security Information Management Solution

CiscoWorks Security Information Management Solution (SIMS) 3.2.1

  • Viewing Options

  • PDF (53.1 KB)
  • Feedback
Q&A

STARTER-KIT SOFTWARE UPGRADE

Q. What is the CiscoWorks Security Information Management Solution (SIMS) 3.2.1 release?
A. It is a software-only upgrade to the existing software-based CiscoWorks SIMS starter kit, not for appliance offering software upgrade.
Q. What is the exact release number of the shipping starter-kit software?
A. The shipping software is CiscoWorks SIMS 3.2.1.02. Customer who receives 3.2.1.02 release can obtain the 3.2.1.02 patch from CCO. Customers who order CiscoWorks SIMS after June 2005 will receive both CiscoWorks SIMS 3.2.1.01 and 3.2.1.02.
Q. What software release is the baseline installation required for the upgrade?
A. The minimum required software baseline is the 3.1.2 software-only release. Depending on the release of the installed software, customers must take the following path for successful upgrades to this latest release:
3.1- 3.1.1.01 - 3.1.2-3.2.1.01-3.2.1.02
Q. How can existing CiscoWorks SIMS customers obtain the upgrade?
A. There are two ways to obtain the upgrade: (1) Use valid a Software Application Support (SAS) number to obtain the software upgrade using the Cisco.com upgrade tool at http://tools.cisco.com/gct/Upgrade/jsp/index.jsp. (2) Customers without valid SAS contracts can purchase the upgrade (see Tables 2 and 3).
Q. What are the new features of this 3.2.1 release?
A. Please read the white paper posted on the product Website at http://www.cisco.com/go/sims.
Q. Will this release include Network Admission Control (NAC) support?
A. Yes. NAC phase 1 is supported since CiscoWorks SIMS 3.1.2. CiscoWorks SIMS 3.2.1 (software option only) or later will support future phases of NAC.
Q. What will be the next release upgrade to CiscoWorks SIMS 3.2.1?
A. CiscoWorks SIMS 3.3 will be released in summer of 2005. Customers who are interested in the new features and functionality of CiscoWorks SIMS 3.3 can contact their sales representatives.

CISCOWORKS SIMS APPLIANCE UPGRADE

Q. Can the CiscoWorks SIMS 3.1 solution engine (appliance) software be upgraded to this 3.2.1 release?
A. No. CiscoWorks SIMS 3.2.1 is a software-only release and this upgrade is only for customer who has purchased software based CiscoWorks SIMS.
Q. When will the appliance upgrade plan for CiscoWorks SIMS 3.2.1 be announced by Cisco Systems ®?
A. Cisco ® will announce the upgrade plan in summer 2005.
Q. Will Cisco Technical Assistance Center (TAC) and netForensics support the appliance installation of CiscoWorks SIMS 3.2.1 if a customer does the "forced" upgrade on the CiscoWorks SIMS appliance?
A. Cisco has not officially validated CiscoWorks SIMS 3.2.1 running on CiscoWorks SIMS Engine (appliance). Cisco and netForensics TAC will not support this "forced upgrade." Please contact your Cisco security sales representative for special-needs assistance.
Q. My company has a CiscoWorks SIMS appliance installed but needs to migrate the existing appliance to a software-based solution to accommodate growth. How shall I proceed?
A. There is a planned software migration option for appliance customers. Please contact your Cisco security sales representative who can ask for special migration assistance from Cisco product team.
Q. Will my company receive CiscoWorks SIMS 3.2.1 software if migrating from the appliance to software-based licensing?
A. Yes. Please contact your Cisco security sales representative for assistance.
Q. When will the next release of the CiscoWorks SIMS appliance be?
A. The CiscoWorks SIMS 3.1.2 appliance is planned to be released in summer 2005.
Q. My company has purchased both the CiscoWorks SIMS appliance and software. Can I turn the appliance into an "engine" that can forward events to the software central server?
A. Yes. Please consult your Administrative Guide for implementation guidance..

SOFTWARE ADD-ON MODULES UPGRADE

Q. What are the add-on software modules that Cisco has released?
A. They are Rules-Based Correlation (RBC), Incident Resolution Management (IRM), Vulnerability Correlation Engine (VCE), Enterprise Security Portal (ESP), and Universal Agent (UA).
Q. What are the differences between "vertical products" and add-on modules?
A. They are the same.
Q. What are the add-on modules impacted by this CiscoWorks SIMS 3.2.1 release?
A. The impacted add-on modules are RBC, VCE, and IRM only.
Q. Will there be any patch update of the impacted modules required to support this 3.2.1 upgrade?
A. Yes. The latest minor updates are RBC (1.0.04), IRM (1.0.03), and VCE (1.0.03). Customers can download the update patches from Cisco.com.
Q. What is the baseline software "starter-kit" required to work with all the add-on software modules?
A. Cisco recommends CiscoWorks SIMS 3.2.1.02.
Q. What are the new features and capabilities of these add-on modules?
A. Please read the respective white papers posted on the product Website at http://www.cisco.com/go/sims.

ORDERING INFORMATION

Q. What part number(s) should I use for the new order?
A. New customers can order these latest software and add-on modules using existing part numbers posted on the Cisco.com pricing tool. Table 1 lists these part numbers.

Table 1. Software Part Numbers for New Order (Partial Listing)

Part Numbers

Description

CWSIM-3.1-SS-K9

Security Information Management Solution (SIMS) 3.1.x, 3.2.1.x starter kit for Solaris; 30 device

CWSIM-3.1-SL-K9

SIMS 3.1.x, 3.2.1.x starter kit for Linux; 30 device

CWSIM-3.1-EN-K9

Distributed Engine for CiscoWorks SIMS 3.1.x, 3.2.1.x for Solaris and Linux

CWSIM-EUA-L-LIC=

Enterprise Universal Agent for CiscoWorks SIMS (Linux)

CWSIM-EUA-S-LIC=

Enterprise Universal Agent for CiscoWorks SIMS (Solaris)

CWSIM-ESPL-1.0-LC=

Enterprise Security Portal 1.0 for CiscoWorks SIMS (Linux)

CWSIM-ESPS-1.0-LC=

Enterprise Security Portal 1.0 for CiscoWorks SIMS (Solaris)

CWSIM-IRML-1.0-LC=

Incident Resolution Manager 1.0.x for CiscoWorks SIMS (Linux)

CWSIM-IRMS-1.0-LC=

Incident Resolution Manager 1.0.x for CiscoWorks SIMS (Solaris)

CWSIM-RBCL-1.0-LC=

Rules-Based Correlation Engine 1.0.x for CiscoWorks SIMS (Linux)

CWSIM-RBCS-1.0-LC=

Rules-Based Correlation Engine 1.0.x for CiscoWorks SIMS (Solaris)

CWSIM-VCEL-1.0-LC=

Vulnerability Correlation Engine 1.0.x for CiscoWorks SIMS (Linux)

CWSIM-VCES-1.0-LC=

Vulnerability Correlation Engine 1.0.x for CiscoWorks SIMS (Solaris)

Please refer to Cisco Global Price List, http://www.cisco.com/cgi-bin/front.x/pricing?Request=ViewDownloadListPage, for complete listing of all part numbers.

SOFTWARE PART NUMBERS REQUIRED FOR THE UPGRADES

Q. I have CiscoWorks SIMS 3.1.1.01 installed and my SAS contract expired. How can I order the upgrade?
A. Customers without a Cisco SAS contract in place who would like to obtain a CiscoWorks SIMS 3.2.1 upgrade can contact their Cisco sales representative to purchase the upgrade in one of two ways: (1) purchasing the SAS service contract, using part number in Table 2, which includes free software upgrades in addition to other Cisco service support benefits; (2) purchasing software upgrade using part number in Table 3.

Table 2. Service Support Contract Part Numbers

Part Numbers

Description

CON-SAS-CWSIM3SS

SAS for CiscoWorks SIMS 3.2.1.x upgrade (Solaris) from 3.1.x

CON-SAS-CWSIM3SL

SAS for CiscoWorks SIMS 3.2.1.x upgrade (Linux) from 3.1.x

Table 3. Software Upgrade Part Numbers

Part Numbers

Description

CWSIM3.2-L-UP-K9

CiscoWorks SIMS 3.1.x upgrade 3.2.1.x starter kit (Linux)

CWSIM3.2-S-UP-K9

CiscoWorks SIMS 3.1.x upgrade to 3.2.1.x starter kit (Solaris)

Q. What are the upgrade part numbers for updates of RBC, VCE, and IRM?
A. There is no part number for the upgrade. Please download the update patches directly from Cisco.com.
Q. How is device licensing priced?
A. Please contact your Cisco security sales representative for assistance.

ADDITIONAL INFORMATION

Q. Will future release of CiscoWorks SIMS software be supported on Cisco branded Intel-based hardware?
A. Nothing has been committed. Cisco is considering the option for our customer to run further release of CiscoWorks SIMS on Cisco branded Intel hardware. Please contact your Cisco security sales representative for your special hardware-support needs.
Q. Will CiscoWorks SIMS be supporting Windows-based operating systems?
A. Nothing has been committed. Cisco is considering Microsoft Windows based option of CiscoWorks SIMS. Please contact your Cisco security sales representative for further assistance.
Q. How soon can I anticipate new Cisco security hardware or security solutions to be supported on CiscoWorks SIMS software?
A. Usually, within 1 to 3 months of the hardware release or public announcement by Cisco.
Q. Why can't this be the same date when netForensics officially releases its software to its customer?
A. Cisco engineering will need to conduct acceptance testing of the software before release to Cisco customers.
Q. How can I order hands-on training of this product?
A. Contact your Cisco product marketing or Cisco security sales representative for training ordering and arrangement.
Q. Is CiscoWorks SIMS a part of the Cisco Self-Defending Network initiative?
A. Yes. CiscoWorks SIMS is one of the primary security product offerings in this initiative.
Q. What is the difference between Cisco Security Monitoring, Analysis and Response System (MARS), and CiscoWorks SIMS?
A. Cisco Security MARS is the appliance-based product line and CiscoWorks SIMS is the software-based product line. The two products have unique functions and capabilities that can meet customers' different needs. Customers can contact Cisco security sales representatives for respective detailed product information.
Q. Are Cisco Security MARS and CiscoWorks SIMS competing products?
A. No. Both products have been successfully deployed in their respective customers. Cisco customers from different market segments (commercial, medium enterprises, large and global enterprises, and managed security service providers) have found these two products are well positioned to meet their specific security monitoring and mitigation needs. Customers can contact Cisco security sales representatives for assistance.

FOR MORE INFORMATION

For more information about the CiscoWorks SIMS, visit http://www.cisco.com/go/sims or contact your local Cisco account representative or send
e-mail to ciscoworks@cisco.com.
Text Box:  Corporate HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706USAwww.cisco.comTel:	408 526-4000	800 553-NETS (6387)Fax:	408 526-4100	European HeadquartersCisco Systems International BVHaarlerbergparkHaarlerbergweg 13-191101 CH AmsterdamThe Netherlandswww-europe.cisco.comTel:	31 0 20 357 1000Fax:	31 0 20 357 1100	Americas HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706USAwww.cisco.comTel:	408 526-7660Fax:	408 527-0883	Asia Pacific HeadquartersCisco Systems, Inc.168 Robinson Road#28-01 Capital TowerSingapore 068912www.cisco.comTel: +65 6317 7777Fax: +65 6317 7799Cisco Systems has more than 200 offices in the following countries and regions. Addresses, phone numbers, and fax numbers are listed onthe Cisco Website at www.cisco.com/go/offices.Argentina · Australia · Austria · Belgium · Brazil · Bulgaria · Canada · Chile · China PRC · Colombia · Costa Rica · Croatia · Cyprus Czech Republic · Denmark · Dubai, UAE · Finland · France · Germany · Greece · Hong Kong SAR · Hungary · India · Indonesia · Ireland · Israel Italy · Japan · Korea · Luxembourg · Malaysia · Mexico · The Netherlands · New Zealand · Norway · Peru · Philippines · Poland · Portugal Puerto Rico · Romania · Russia · Saudi Arabia · Scotland · Singapore · Slovakia · Slovenia · South Africa · Spain · Sweden · Switzerland · Taiwan Thailand · Turkey · Ukraine · United Kingdom · United States · Venezuela · Vietnam · ZimbabweCopyright  2005 Cisco Systems, Inc. All rights reserved. CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Empowering the Internet Generation, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys, MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, ProConnect, RateMUX, ScriptShare, SlideCast, SMARTnet, StrataView Plus, TeleRouter, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0502R) 	205314.BT_ETMG_LF_6.05Printed in the USA Text Box:  Corporate HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706USAwww.cisco.comTel:	408 526-4000	800 553-NETS (6387)Fax:	408 526-4100	European HeadquartersCisco Systems International BVHaarlerbergparkHaarlerbergweg 13-191101 CH AmsterdamThe Netherlandswww-europe.cisco.comTel:	31 0 20 357 1000Fax:	31 0 20 357 1100	Americas HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706USAwww.cisco.comTel:	408 526-7660Fax:	408 527-0883	Asia Pacific HeadquartersCisco Systems, Inc.168 Robinson Road#28-01 Capital TowerSingapore 068912www.cisco.comTel: +65 6317 7777Fax: +65 6317 7799Cisco Systems has more than 200 offices in the following countries and regions. Addresses, phone numbers, and fax numbers are listed onthe Cisco Website at www.cisco.com/go/offices.Argentina · Australia · Austria · Belgium · Brazil · Bulgaria · Canada · Chile · China PRC · Colombia · Costa Rica · Croatia · Cyprus Czech Republic · Denmark · Dubai, UAE · Finland · France · Germany · Greece · Hong Kong SAR · Hungary · India · Indonesia · Ireland · Israel Italy · Japan · Korea · Luxembourg · Malaysia · Mexico · The Netherlands · New Zealand · Norway · Peru · Philippines · Poland · Portugal Puerto Rico · Romania · Russia · Saudi Arabia · Scotland · Singapore · Slovakia · Slovenia · South Africa · Spain · Sweden · Switzerland · Taiwan Thailand · Turkey · Ukraine · United Kingdom · United States · Venezuela · Vietnam · ZimbabweCopyright  2005 Cisco Systems, Inc. All rights reserved. CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Empowering the Internet Generation, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys, MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, ProConnect, RateMUX, ScriptShare, SlideCast, SMARTnet, StrataView Plus, TeleRouter, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0502R) 	205314.BT_ETMG_LF_6.05Printed in the USA