Guest

CiscoWorks VPN/Security Management Solution

Announcing VMS 2.0 and upgrades from CSPM and VMS 1.0, No. 1506

Product Bulletin 1506

Announcing CiscoWorks VPN/Security Management Solution 2.0 and
Upgrades from
VMS 1.0 and CSPM 2.3

Cisco Systems announces the availability of the CiscoWorks VPN/Security Management Solution (VMS) 2.0.* The following are VMS 2.0 packaging and licensing changes:

  • CSPM 3.0 designed to support Cisco firewall and VPN devices is being offered exclusively as part of the VMS 2.0 solution. VMS 2.0 also contains CSPM 2.3.3 for managing Cisco IDS sensors. A standalone version of Cisco Secure Policy Manager 2.3.3, featuring a restricted license for 3 IDS sensors, is also available as a standalone offering for a limited time.

  • VMS 2.0 ordering numbers now reflect license increments based on CSPM support for the number of Cisco PIX® Firewall, router, and Intrusion Detection System (IDS) devices being managed.

    • The restricted versions are Windows-only releases. CSPM 3.0 supports up to 10 PIX firewalls and routers, combined. CSPM 2.3.3i supports up to 10 intrusion detection sensors.

    • The unrestricted versions are Windows and Solaris releases that have no licensing limits on the number of devices supported.

  • Customers running CSPM 2.x or CiscoWorks VMS 1.0, can upgrade to CiscoWorks VMS 2.0 using the part numbers outlined in this bulletin.

The CiscoWorks VMS 2.0 solution is an integrated set of Web applications with features that assist in configuring, monitoring, and troubleshooting virtual private network (VPN) and security devices. The components of the solution are VPN Monitor, IDS Host Sensor, CSPM, Resource Manager Essentials (RME), CiscoView (CD One) and Inventory Services (CD Two).

Key features of CiscoWorks VMS 2.0 include the following:

  • VPN Monitor 1.1—New device support includes Cisco 1700, 2600, and 3600 Series routers.

  • Cisco Intrusion Detection System (IDS) Host Sensor 2.0—IDS Host Sensor is a new addition to the solution providing full prevention and reporting of security threats to the console server. The IDS Host Sensor can also manage remote servers with intrusions agents installed on them. Includes both the management console and evaluation sensor agents.

  • Cisco Secure Policy Manager (CSPM) 3.0f—Features a new task-based graphical user interface (GUI), a rule table with the look and feel of Cisco PIX Device Manager (PDM), an enhanced database with syslog aging based upon severity, support for Cisco PIX 501 version 6.1, and import of existing security policies from PIX Firewall and Cisco IOS® Software devices. CSPM 2.3.3i (IDS support) will continue to be bundled with CSPM 3.0f.

  • RME 3.3 includes support for PIX and IOS software distribution, inventory and change audit management

  • CD One 4th Edition, CD Two 3rd Edition—These maintenance update releases include CiscoView 5.3

Availability

The CiscoWorks VMS 2.0 solution and associated upgrade kits will start shipping at the beginning of November 2001. Existing VMS 1.0 and CSPM 2.x customers are eligible for an upgrade discount when purchasing VMS 2.0. Customers interested in purchasing these products can place orders through their normal sales channels (see Table 1 below for ordering information) beginning October 8, 2001. Some components in VMS 2.0 include strong encryption technologies, which are restricted for some types of U.S. export.

CiscoWorks VMS 2.0 and the upgrade kits are packaged differently based on their licensing and intended device support. The restricted (10-device) version of VMS 2.0 contains product CDs for Windows environments only. The unrestricted versions of VMS 2.0 contain product CDs for Windows and Solaris environments as they are designed for environments requiring higher levels of device support and scalability.

The CiscoWorks Server, RME inventory services, Cisco IDS Host Sensor, and VPN Monitor software components are licensed for installation on only one server platform per purchased copy. Licensing provisions allow some VMS 2.0 subcomponent applications to be loaded on separate servers for improved scalability and performance.

Ordering Information

The CiscoWorks VMS 2.0 solution and associated upgrade kits will begin shipping at the same time mentioned above. Existing VMS 1.0 and CSPM 2.x customers are eligible for an upgrade discount when purchasing VMS 2.0. Customers interested in purchasing these products can place orders through their normal sales channels (see Table 1 below for ordering information) beginning October 8, 2001. Some components in VMS 2.0 include strong encryption technologies, which are restricted for some types of U.S. export.

Table 1 gives part number information for ordering CiscoWorks VMS 2.0.


Table 1: Ordering Information for CiscoWorks VMS 2.0
Part Number Description
CWVMS-2.0-UR-K9

CiscoWorks VMS 2.0 for Windows and Solaris1 (Unrestricted License); Includes: VPN Monitor 1.1, RME 3.3, CD One 4th Edition and CD Two 3rd Edition, CSPM 3.0f/2.3.3i, (WIN Only) IDS Host Sensor v2.0 (WIN Only)

CWVMS-2.0-WINR-K9

CiscoWorks VMS 2.0 for Windows (10-device Restricted License); Includes: VPN Monitor 1.1, RME 3.3, CSPM 3.0f/2.3.3i, IDS Host Sensor v2.0, CD One 4th Edition and CD Two 3rd Edition

CWVMS-2.0-URC-K9

Conversion from CiscoWorks VMS 2.0 for Windows (10-device Restricted License 2.0) to Unrestricted License (adds Solaris versions of CV, RME, VPN, and adds an unrestricted license to CSPM for Windows)

CWVMS-2.0-UPGUR-K9

Upgrade from CSPM 2.x (Unrestricted License) to CiscoWorks VMS 2.0 for Windows and Solaris1 (Unrestricted License)

CWVMS-2.0-WUPGR-K9

Upgrade from VMS 1.0 or CSPM 2.x (Restricted License) to CiscoWorks VMS 2.0 for (10-device Restricted License)

CON-SAS-CWVMS-UR2

SAS Service for CiscoWorks VMS 2.x for Windows and Solaris (Unrestricted License)

CON-SAS-CWVMS-R2

SAS Service for CiscoWorks VMS 2.x for Windows (10-device Restricted License)

1The management console from Cisco IDS Host Sensor can be installed only on a Windows NT/2000 server and CSPM can be installed only on a Windows NT server.

Table 2 gives part number information for ordering the standalone Cisco Secure Policy Manager 2.3.3, featuring a 3-IDS sensor restricted license.


Table 2: Ordering Information for CSPM 2.3.3
Part Number Description
SEC-POL-MGR-2.3-R

CSPM 2.3.3 Restricted License; restricts the number of managed IDS devices to 3 units.

Note: A new CSPM 3.0 version, designed to support Cisco's firewall and VPN devices, is being offered exclusively as part of the VMS 2.0 solution. VMS 2.0 also contains CSPM 2.3.3 for managing Cisco's IDS sensors.

CON-SAS-SECMGRR

SAS service contract for CSPM v2.3.3 restricted.

Existing Products Affected

With the availability of the CiscoWorks VMS 2.0, Cisco is announcing the End of Sales (EoS) for the following products. Older versions will continue to have extended support contracts offered for them as indicated below.


Table 3: Product End of Sales Dates
Part Number Description End-of-Sales Date
CWVMS-1.0-P2

Promotion: VMS 1.0 for Windows and Solaris

October 15, 2001

CWVMS-1.0

VMS 1.0 for Windows and Solaris

October 8, 2001

SEC-POL-MGR-2.3-UR

CSPM 2.3 Unrestricted License

October 8, 2001

SEC-POL-MGR-UPG

Upgrade to CSPM 2.x

October 8, 2001

CON-SAS-CWVMS-1.X

SAS service contract for VMS 1.0 for Windows and Solaris

February 1, 2003

CON-SAS-SECMGRUR

SAS service contract for CSPM 2.x Unrestricted License

April 1, 2003

Product Information

For additional product information refer to: http://www.cisco.com/go/cwvms.

Additional Information

For additional information or questions, send an e-mail to the product-marketing group at ciscoworks@cisco.com.