Cisco Systems® announces the availability of CiscoWorks VPN/Security Management Solution (VMS) 2.2. This suite of network security applications combines Web-based tools for configuring, monitoring, and troubleshooting enterprise VPN, firewalls, network intrusion detection systems (IDSs) and host-based intrusion prevention systems (IPSs).
The following features are included in CiscoWorks VMS 2.2:
• New technology for intrusion prevention-This provides superior, industry-leading protection of both servers and desktops from network security threats. This technology is distributed and is composed of:
– Management Center for Cisco Security Agents 4.01-A console providing centralized policy definitions, distribution, and software updates with constant communications to primary agents.
– Cisco® Security Agents-Endpoint software that resides on servers, desktops, or laptops and autonomously enforces local policies that prevent unauthorized access. Three server agents are provided to protect CiscoWorks VMS 2.2. Additional server or desktop agents are sold separately.
CiscoWorks Management Center updates include:
• CiscoWorks Management Center for Firewalls 1.2.2 and CiscoWorks Auto Update Server Software 1.1 to support large deployments of firewall service modules and Cisco PIX® firewalls. Updates feature device hierarchy and policy inheritance, as well as user-defined device and customer groups, including nesting.
• CiscoWorks Management Center for IDS Sensors 1.2.2 centrally configures multiple Cisco network and switch IDS sensors using group security profiles. It now supports Cisco IDS 4.1 sensors.
• CiscoWorks Management Center for VPN Routers 1.2.1 provides centralized multidevice administration for large-scale, site-to-site VPN connections in a hub-and-spoke topology. It allows the configuration and deployment of Internet Key Exchange (IKE) and IP Security (IPSec) tunnel policies and now supports the VPN service module.
• CiscoWorks Monitoring Center for Security 1.2.2 identifies potential network attacks by capturing, storing, and reporting on events from Cisco network IDSs, switch IDSs, host IPSs, firewalls, and routers.
• CiscoWorks Monitoring Center for Performance 2.0 assists in monitoring and troubleshooting the health and performance of remote-access VPN, firewall, load-balancing, and SSL services that contribute to enterprise network security.
• CiscoWorks Resource Manager Essentials 3.5 provides detailed inventory information, device configurations tools, change audit reports, and syslog analysis for notification of VPN and security operational problems.
AVAILABILITY
CiscoWorks VPN/Security Management Solution 2.2 and associated minor release update kits will start shipping in early July 2003. Customers can purchase these new products through their regular sales channels beginning on May 12, 2003.
Existing CiscoWorks VMS 2.x customers with current Software Application Support (SAS) contracts can request a CiscoWorks VMS 2.2 minor update kit using their contract number at www.cisco.com/upgrade beginning on July 1, 2003. Minor update kits, including the October 2003 VMS 2.2 Update 1 revisions, will be available from the Cisco Product Upgrade Tool at www.cisco.com/upgrade beginning December 15, 2003.
On March 19, 2003, Cisco announced the end of sale of the Cisco IDS Host Sensor Console product line, based on technology licensed from Entercept Security Technologies. Cisco IDS Host Sensor Console will no longer be sold as standalone or as part of the CiscoWorks VMS bundle.
The Cisco IDS Host Sensor Console products are being replaced with the Management Center for Cisco Security Agents, which is based on recently acquired Okena technology. CiscoWorks VMS 2.0, 2.1, standalone Entercept, and standalone Okena customers are eligible to migrate to the Management Center for Cisco Security Agents in CiscoWorks VMS 2.2 using their SAS contract. Customers can go to: www.cisco.com/upgrade or use the following update and upgrade part numbers in the "Ordering Information" section of this bulletin.
Cisco is announcing the end of sale of the CiscoWorks VPN Monitor application. The CiscoWorks Monitoring Center for Performance will be replacing VPN Monitor over a phased release schedule. The CiscoWorks Monitoring Center for Solaris will start shipping immediately, followed shortly by a release for Windows. Please check the Cisco.com Software Center for new updates and availability of new CiscoWorks VMS module releases.
Tables 2-4 provide additional information on update and upgrade paths along with migration options available to customers wanting to move from their previous Cisco security and intrusion detection solutions to the new CiscoWorks VMS 2.2 solution. Table 5 shows CiscoWorks VMS part numbers that are affected by this release.
ORDERING INFORMATION
Table 1 shows part numbers commonly used to order CiscoWorks VMS 2.2. Some components include strong encryption technologies, which are restricted for some types of U.S. export.
Table 1
Ordering Information for CiscoWorks VMS 2.2
Part Number
Description
CWVMS-2.2-UR-K9
CiscoWorks VMS 2.2 for Windows or Solaris, with unrestricted device usage license and one server installation license. Includes: CiscoWorks Management Center for Firewalls 1.2.2, CiscoWorks Management Center for IDS Sensors 1.2.2, CiscoWorks Management Center for Cisco Security Agents 4.0.1*, and CiscoWorks Management Center for VPN Routers 1.2.1; CiscoWorks Auto Update Server Software 1.1; CiscoWorks Monitoring Center for Security 1.2.2; CiscoWorks Monitoring Center for Performance 2.0**; CiscoWorks VPN Monitor 1.2.1*; CiscoWorks Resource Manager Essentials (RME) 3.5; and, CiscoWorks Common Services Software 2.2. Also includes the October 2003 VMS 2.2 Update 1 minor updates.
CWVMS-2.2-WINR-K9
CiscoWorks VMS 2.2 for Windows, with 20-device restricted usage license and one server installation license. Includes: CiscoWorks Management Center for Firewalls 1.2.2, CiscoWorks Management Center for IDS Sensors 1.2.2, CiscoWorks Management Center for Cisco Security Agents 4.0.1, and CiscoWorks Management Center for VPN Routers 1.2.1; CiscoWorks Auto Update Server Software 1.1; CiscoWorks Monitoring Center for Security 1.2.2; CiscoWorks VPN Monitor 1.2.1; CiscoWorks RME 3.5; and, CiscoWorks Common Services Software 2.2. Also includes the October 2003 VMS 2.2 Update 1 minor updates.
CWVMS-2.2-UPGUR-K9
Upgrade from Cisco Secure Policy Manager 2.x standalone, or Cisco Secure IDS Director, CiscoWorks VMS 1.x, or CiscoWorks VMS 2.x unrestricted license, or convert from CiscoWorks VMS 1.x restricted license to CiscoWorks VMS 2.2 for Windows and Solaris unrestricted device usage and one server installation license. Includes the October 2003 VMS 2.2 Update 1 minor updates.
Part Number
Description
CWVMS-2.2-WUPGR-K9
Upgrade from Cisco Secure Policy Manager 2.x, Cisco Secure IDS Director, or CiscoWorks VMS 2.x restricted license to CiscoWorks VMS 2.2 for Windows with 20-device restricted usage and one server installation license. Includes the October 2003 VMS 2.2 Update 1 minor updates.
CWVMS-DEC03-URMR-K9
December 2003 minor update kit for existing CiscoWorks VMS 2.x with unrestricted device usage. Includes the October 2003 VMS 2.2 Update 1 service release and minor updates for Windows and Solaris to existing components, including management and monitoring centers***.
CWVMS-DEC03-RMR-K9
December 2003 minor update kit for existing CiscoWorks VMS 2.x. with 20-device restricted usage. Includes the October 2003 VMS 2.2 Update 1 service release and minor updates for Windows to existing components including management and monitoring centers***.
CON-SAS-CWVMS22UR
SAS for CiscoWorks VMS 2.2 for Windows and Solaris with unrestricted device license. Provides Cisco Technical Assistance Center (TAC) support, Cisco.com Software Center access, and minor updates.
CON-SAS-CWVMS22K9
SAS for CiscoWorks VMS 2.2 for Windows with 20-device restricted license. Provides Cisco TAC support, Cisco.com Software Center access, and minor updates.
CON-SAS-CWVMS22UP
SAS for CiscoWorks VMS 2.2 Upgrade Kit for Windows and Solaris with unrestricted device license. Provides Cisco TAC support, Cisco.com Software Center access, and minor updates.
CON-SAS-CWVMS2220
SAS for CiscoWorks VMS 2.2 Upgrade Kit for Windows with 20-device restricted license. Provides Cisco TAC support, Cisco.com Software Center access, and minor updates.
*Indicates Windows-only support.
**Indicates Solaris-only support
*** Minor upgrade kits are for existing CiscoWorks VMS 2.x customers only. They do not provide licenses needed to move from CiscoWorks VMS 1.x or a standalone Cisco Secure Policy Manager 2.x.
Please check the CiscoWorks VMS Q&A documentation online at the following link for updates on the latest Windows and Solaris server support:
With the availability of CiscoWorks VMS 2.2, Cisco is announcing the end of sale for the following products. Cisco will continue to offer extended support to earlier versions as indicated below.
Table 5
Product End-of-Sale Dates
Part Number
Description
End of Sale
End of Support
CWVMS-2.1-UR-K9
CiscoWorks VMS 2.1 for Windows with unrestricted license
June 20, 2003
June 2006
CWVMS-2.1-WINR-K9
CiscoWorks VMS 2.1 for Windows with 20-device restricted license
June 20, 2003
June 2006*
CWVMS-2.1-URC-K9
Conversion from CiscoWorks VMS 2.1 with 20-device restricted license to unrestricted license
June 20, 2003
June 2006*
CWVMS-2.1-UPGUR-K9
Upgrade from Cisco Secure Policy Manager 2.x with unrestricted license to CiscoWorks VMS 2.1with unrestricted license
June 20, 2003
June 2006*
Part Number
Description
End of Sale
End of Support
CWVMS-2.1-WUPGR-K9
Upgrade from CiscoWorks VMS 1.x or Cisco Secure Policy Manager 2.x with restricted license to CiscoWorks VMS 2.1 with 20-device restricted license
June 20, 2003
June 2006*
CWVMS-2.2-UR-MR-K9
Minor update kit for existing CiscoWorks VMS 2.x with unrestricted device usage customers. Includes minor updates for Windows and Solaris to existing components, including management and monitoring centers.
December 8, 2003
-
CWVMS-2.2-R-MR-K9
Minor update kit for existing CiscoWorks VMS 2.x with 20-device restricted usage. Includes minor updates for Windows to existing components, including management and monitoring centers.
December 8, 2003
-
* Note: Support may require customers to move to a later product version for resolution.
PRODUCT INFORMATION
For CiscoWorks VMS installation documentation, go to: