Table Of Contents

A - B - C - D - E - F - G - H - I - J - L - M - N - O - P - R - S - T - U - V - W -

Index

A

antivirus utilities, requirement to disable 3-4

assigning

AUS to devices

after migration 5-6

Configuration Engines to devices

after migration 5-6

audience for this document i-xii

AUS-managed devices

association with AUS

after migration 5-6

migrating

servers for 5-6

Auto Update Server (AUS)

assigning to devices

after migration 5-6

documentation i-xiv

downgrading 5-7

importing from DCR

after migration 5-6

licensing 1-6

migrating

for AUS-managed devices 5-6

overview 1-3

upgrading 5-3

B

backing up

across mapped drives 5-4

before upgrade 5-4

database for downgrade 5-7

interference with network management applications 5-4

Security Manager database 5-4

backup and restore

upgrade using, definition 5-1

upgrade using, procedure 5-3

bootstrapping devices 8-4

browsers

requirements

cache 6-1

client 2-7

server 2-5

See also Firefox

See also Internet Explorer

C

C/C++ library files, where stored 4-1

cautions

regarding

system time, changing after installing RME 7-2

cautions, significance of i-xii

CD-ONE

unsupported use 3-3

certificates. See digital certificates

checklists

client, browser best practices 6-1

server

enhancing performance 3-1

installation readiness 3-4

post-installation tasks 8-1

security best practices 8-3

Cisco Marketplace i-xv

Cisco Press i-xv

Cisco Product Quick Reference Guide, obtaining i-xv

Cisco product security

PSIRT i-xv

SAFE blueprint i-xii

vulnerability policy portal i-xv

Cisco Security Agent

customized, standalone version

overwritten during installation 5-4

documentation B-1

fully configurable version

not overwritten during installation 5-4

installation, conditions for 1-5

installing with Security Manager server 5-4

IPS Event Viewer and modifying policy 1-4

modifying policy for IPS Event Viewer

automatically 1-4

manually 1-4

not installed on Security Manager server

automatically modifying policy for IPS Event Viewer 1-4

not uninstalled with server uninstallation 5-4

overview 1-5

policies

exported, on DVD 1-5

standalone agent 1-5, B-1

preexisting on Security Manager server

manually modifying policy for IPS Event Viewer 1-4

security levels

changing B-2

default B-2

understanding B-2

troubleshooting B-1

Cisco Security Agent

policies

exported, on DVD 3-2

imported, requirement to reconcile 3-2

troubleshooting A-12

uninstalling, recommendation against 3-2, A-12

Cisco Security Manager

interoperability with

Performance Monitor 3.1 1-5

overview 1-2

Cisco Security Manager

basic concepts 8-4

getting started 8-4

late-breaking information about i-xi

logging in 6-13

Cisco Security Monitoring, Analysis, and Response System (Cisco Security MARS)

date and time synchronization 3-4

interoperation with 3-4

overview i-xi

CiscoView Device Manager

unsupported use 3-3

CiscoWorks

Common Services, overview 1-2

TCP ports

Daemon Manager 2-3

HTTP 2-3

VPN/Security Management Solution (VMS)

migrating data to SecurityManager i-xiii

client software

logging in to a server 6-13

using 6-13

client systems

deleting Temp files 6-2

Device View

representing devices managed by AUS and CNS after upgrade 5-6

file locations on 6-11

recommendation to delete Temp files 6-2

video (graphics) card drivers

confirming installed versions 2-6

upgrading 2-6

CMFLOCK.TXT file, deleting 4-7

CNS-managed devices

association with Configuration Engines

after migration 5-6

migrating

Configuration Engines for 5-6

Common Services

licensing 1-6

required version 1-2

Common Services

documentation 2-1

installing 2-1

requirement to use 2-1

upgrading 5-1

Configuration Engines

assigning to devices

after migration 5-6

importing from DCR

after migration 5-6

migrating

for devices managed by 5-6

CSTM TCP port 2-3

D

database TCP port 2-3

date and time settings

caution against changing 3-4

recommendation to synchronize 2-1, 3-4

use of NTP servers 2-1

device bootstrapping 8-4

device credentials repository (DCR)

inventory file exported from

for adding AUS and Configuration Engines 5-6

server process 3-4

TCP port 2-3

troubleshooting 3-4

Device View

red X icon

representing devices managed by AUS and CNS 5-6

digital certificates

requirement to create 8-1

troubleshooting 3-4

directory encryption, restriction against 2-5, 3-4

documentation

audience for this i-xii

on Cisco.com i-xv

ordering i-xv

reviewing updated i-xiii

typographical conventions in i-xii

documentation, obtaining

Auto Update Server i-xiv

Cisco Security Agent B-1

Cisco SecurityManager i-xiii

CommonServices i-xiv

Resource Manager Essentials (RME) i-xiv

domain controllers (primary or backup), unsupported use 2-5

downgrading

related applications 5-7

requirements to be met 5-7

restoring backed up data 5-7

to earlier supported versions

from 3.2 5-7

E

encrypted directories, restriction against 2-5, 3-4

evaluation license

upgrading to permanent license 1-5

Event Services software TCP port requirements

HTTP 2-3

listening 2-3

routing 2-3

services 2-3

F

FAQs, in the troubleshooting guide i-xiii

files, where stored

Cisco Security Agent

logs B-2

policies 1-5

Cisco Security Agent

policies 3-2

file system recommendations 2-5

Firefox

cache size requirement 6-3

confirming the installed Java version 2-7

versions supported 2-5, 2-7

G

gatekeeper HIPO TCP port 2-3

getting started with Cisco SecurityManager 8-4

H

HTTP TCP port 2-2

I

inline upgrade

See also in place upgrade

in place upgrade

definition 5-1

error during 5-2

from an earlier version with pending data 5-2

procedure 5-2

running the installer 5-2

installation

planning and preparation i-xi

servers

dependencies 2-1

general requirements 2-1

post-installation tasks 8-1

preparatory tasks 3-1

starting an installation 4-3

troubleshooting 4-3

verifying 8-3

installing RME

installation notes 7-1

procedures

custom installations 7-4

typical installations 7-2

installing server software 4-1

Internet Explorer

cache size requirement 6-2

confirming the installed Java version 2-7

security settings 6-2

versions supported 2-5, 2-7

See also browsers

Internet Information Server (IIS)

conflict with SecurityManager 3-3, 3-4

requirement to uninstall 3-3, 3-4

IP addresses

multiple network interface cards and 2-6

static address requirement 2-6

using dynamic addresses 2-6

using multiple interface cards 2-6

IPS Event Viewer client

communicating with server 1-4

IPS Event Viewer server

communicating with client

modifying firewall software policy 1-4

installing on a server with CSA 1-4

IPS Manager

downgrading 5-7

J

Java

confirming the installed version 2-7

embedded version on client systems 2-7

L

language versions supported (Windows)

server 2-5, 2-7

LAN Management Solution (LMS), unsupported use 3-3

licenses

file locations for

Performance Monitor 1-5

installing 1-6

Product Authorization Key (PAK) 1-6

Security Manager kit part numbers 1-5

settings 1-5

Software License Claim Certificate 1-6

understanding 1-5

upgrading 1-5

uploading new 1-5

working with 1-5

license server TCP port 2-3

M

McAfee Antivirus

reenabling 6-11

memory (RAM)

client requirements 2-7

server requirements 2-5

modifying firewall software policy 1-4

N

NETBIOS, recommendation to disable 3-3

Networking Professionals Connection i-xv

network management applications

backup failure 5-4

network protocols, recommendation to disable 3-3

network shares, recommendation to avoid 3-3

Network Time Protocol (NTP) server, recommendation to use 2-1, 3-4

Norton Internet Security 2005

incompatibility 6-11

requirement to uninstall 6-11

NTFS file system, requirement to use 2-5

O

ODBC driver manager

confirming the installed version 2-5

requirements 2-5

working with Sybase files 2-5

OGS TCP port 2-3

online help, tips for viewing 6-2

operating systems

on client systems

Windows2003 2-7

WindowsVista 2-7

WindowsXP Professional 2-7

on servers

Windows 2003 Server 2-5

Osagent UDP port 2-3

overview 1-1

P

passwords

security basics C-3

strong passwords

characteristics C-2

definition 3-2

how to require 3-2

recommendations C-2

peer support, Networking Professionals Connection i-xv

pending data

and upgrading 5-2, 5-3

submitting

in non-Workflow mode 5-2, 5-3

in Workflow mode 5-2, 5-3

taking over a user's session

before upgrading 5-2, 5-3

Performance Monitor

license file location 1-5

overview 1-5

version 3.1, interoperability with

Security Manager 3.2 1-5

permanent license, upgrading from evaluation license 1-5

point patches

applying to a client 6-12

caution against accepting from a third-party 5-7

default location on client systems 6-12

deleting Temp files on client systems 6-2

obtaining 5-7

version mismatch 6-12

popup blockers

configuring 6-1, 6-2

conflicting with other installed software 3-2

disabling 6-1, 6-2

requirements 6-1

troubleshooting 6-1, 6-2

ports

required for TCP 2-1

required for UDP 2-1

product registration. See licenses

PSIRT i-xv

publications, obtaining additional i-xv

R

red X icon

in Device View

representing devices managed by AUS and CNS 5-6

reinstalling

after database corruption

using restorebackup.pl 4-8

Common Services 4-8

server software 4-8

warning message 4-8

related documentation, obtaining i-xiv

Remote Copy Protocol TCP port 2-3

removable media drives, security implications if compromised 8-3

requirements

client system 2-6

servers

installation, general 2-1

system 2-4

Resource Manager Essentials (RME)

documentation i-xiv

entitlement to install 1-4

installing on a Security Manager server

with VirusScan enabled 4-6

with VirusScan turned off 4-6

licensing 1-6

overview 1-4

restorebackup.pl

reinstalling

server software 4-8

restoring

after upgrade 5-4

database after downgrade 5-7

Security Manager database 5-4

using perl script 4-8

S

SAFE blueprint i-xii

Secure Shell (SSH) TCP port 2-2

security

advisories i-xv

incidents, obtaining assistance i-xv

news from Cisco

registering to receive i-xv

RSS feed URL i-xv

notices i-xv

PSIRT i-xv

vulnerabilities, reporting i-xv

Security Manager database

pending data

and upgrading 5-2, 5-3

SecurityManager database TCP port 2-3

server

configuration

boot settings 3-3

date and time settings 3-4

downgrading from 3.2 5-7

file locations

database files 4-1

log files 4-1

miscellaneous files 4-1

installations

best practices 3-1

dependencies 2-1

procedures 4-1, 5-1

performance

best practices for enhancing 3-1

operating environment 2-4, 4-1

preparation checklists 3-1

processes, verifying status 8-3

traffic

required inbound ports 2-2

required outbound ports 2-2

upgrading 5-3

service agreement contracts 1-5

service packs

applying to a client 6-12

caution against accepting from a third-party 5-7

default location on client systems 6-12

deleting Temp files on client systems 6-2

obtaining 5-7

recommendation to delete Temp files on client systems 6-2

version mismatch 6-12

service requests

submitting i-xv

services

minimum required for Windows 3-3

required for TCP 2-1

required for UDP 2-1

SNMP polling UDP port 2-2

SNMP trap UDP port 2-2

software updates. See point patches

SSL certificate invalidation 3-4

SSL mode (for HTTP server) TCP port 2-2

support

Networking Professionals Connection i-xv

obtaining from Cisco i-xv

service agreement contracts 1-5

Software Application Support contracts 1-5

Sybase, requirement to disable 3-4

Sybase database files, requirement to use correct ODBC version 2-5

Syslog UDP port 2-3

T

TACACS+ TCP port 2-2

TCP

list of required ports 2-1

list of required services 2-2

technical support (TAC)

obtaining i-xv

URL for service requests i-xv

Telnet TCP port 2-2

Terminal Services

requirements 2-5, 3-4

unsupported configuration 2-5

Tomcat

Ajp13 connector TCP port 2-3

global library files, where stored 4-1

shutdown TCP port 2-3

training, obtaining i-xv

Trivial File Transfer Protocol (TFTP) UDP port 2-2

troubleshooting

antivirus scanners 3-2

Cisco Security Agent

blocking a valid operation A-13

blocking network access A-12

diagnostic utility A-13

icon appearance changed in system tray A-13

obtaining a revised agent from TAC A-12

recognizing when the agent is disabled A-13

security level is High A-12

setting the security level to Medium A-12

untrusted rootkit detected A-12

using the log file A-12

collecting server troubleshooting information A-14

DCRServer process does not start 3-4

error messages

client installation A-7

server installation A-2

server uninstallation A-5

file contents cannot be unpacked 4-3

file corruption

executable file 4-3

host-based intrusion software 3-2

incorrect GUI 2-6, 8-4, A-3

installation

does not run A-11

hangs A-3, A-9

reviewing log files A-15

interoperation with CS-MARS 3-4

invalid SSL certificate 3-4

java.security.cert errors 3-4

mapped drives A-4

missing

GUI A-3

product features A-3

popup blockers 3-2, 6-1, 6-2

security software conflicts 3-2

server processes

changing A-14

restarting A-15

viewing A-14

server self-test A-13

time-dependent features 7-2

uninstallation

does not run A-11

hangs A-6

using MDCSupport.exe A-14

troubleshooting guide, obtaining i-xiii

typographical conventions in this document i-xii

U

UDP

list of required ports 2-2

list of required services 2-2

uninstallation

cautions against

uninstalling from infected servers 4-7

recommendation to restart client systems 6-13

recommendation to restart servers 4-8

servers

deleting CMFLOCK.TXT 4-7

failure to delete CSCOpx/bin folder 4-7

server software 4-7

updates. See point patches

upgrading

earlier versions supported for 5-3

pending data

committing 5-2, 5-3

discarding 5-2, 5-3

taking over a user's session 5-2, 5-3

using

backup and restore 5-4

in place 5-2

upgrading from

an earlier release 4-6, 5-1

VMS 4-6, 5-1

upgrading migrating to RME 4.0.5

backing up and restoring RME data to RME 4.0.5 7-8

upgrading from RME 4.0.x to RME 4.0.5

local upgrade 7-7

remote upgrade 7-8

user accounts

admin C-1

casuser C-1

System Identity C-1

understanding C-1

user permissions, understanding C-2

V

verifying an installation 8-3

VirusScan

disabled on a Security Manager server

stopping Performance Monitor installation 4-6

stopping RME installation 4-6

failed installation of

RME and Performance Monitor 4-6

installed on a Security Manager server

with Performance Monitor 4-6

with RME 4-6

On-Access Scan feature

running 4-6

turned off 4-6

workaround for

installing Performance Monitor 4-6

installing RME 4-6

W

web context files, where stored 4-1

Windows services, required 3-3