Guest

Cisco IDS Host Sensors

Cisco IDS Host Sensor Migration Program

Product Bulletin No. 2197


Cisco IDS Host Sensor
 Migration Program


This document describes the details of the Cisco® IDS Host Sensor Migration Program. This migration program is intended to support existing IDS Host Sensor customers that choose to migrate to the new Cisco Security Agent product line based on the Okena technology.

Cisco Systems® has announced the end of sale and end of life of the Cisco IDS Host Sensor product line, based on technology licensed from Entercept Security Technologies. This end of life action is the result of Cisco's acquisition of Okena, Inc., and the Cisco Security Agent product line based on the Okena technology will replace the Cisco IDS Host Sensor product line from Entercept. Further information about the Cisco IDS Host Sensor end-of-sale and end-of-life action is available at:

http://www.cisco.com/en/US/products/sw/ secursw/ps976/prod_eol_notice09186a008014dda0.html.

As a result of this end-of-life action, Cisco will offer a no-cost, one-for-one product replacement/migration program for all Cisco IDS Host Sensor customers to the new Cisco Security Agent product line based on the Okena technology. The intent of this program is to support existing IDS Host Sensor customers who choose to migrate to the new Cisco Security Agent product line. All Cisco IDS Host Sensor customers will be eligible for this migration program, whether or not the customer has purchased a Cisco Software Application Support (SAS) service contract for their Cisco IDS Host Sensor products. For more information about the Cisco Security Agent product line, review the product data sheet at:

http://www.cisco.com/en/US/products/sw/ secursw/ps5057/products_data_sheet09186a0080144669.html

Customers who choose to accept this migration program will be required to uninstall and destroy their Cisco IDS Host Sensor software and licenses within a reasonable period of time after installing the replacement Cisco Security Agent product. Customers are permitted to run both products for a reasonable period of time to support an orderly migration process, because Cisco does not expect customers to transition completely to the replacement product at one time. It is important to note that the Cisco Security Agent components (the management application and the agents) cannot coexist on the same platform with Cisco IDS Host Sensor components. This is discussed further in the Installation/Replacement Notes section of this document.

Migration Program Timeline and Process

Customers can formally request replacement Cisco Security Agent product under this migration program through a Web form posted on Cisco.com by selecting the "Cisco IDS Host Sensor to Cisco Security Agent Migration Form" link on one of the following sites:

  • For customers who are registered Cisco.com users:

http://www.cisco.com/pcgi-bin/Software/FormManager/formgenerator.pl

  • For customers who are not registered Cisco.com users:

http://www.cisco.com/pcgi-bin/Software/FormManager/formgenerator.pl

The replacement product will be shipped beginning in early July 2003 to customers requesting to migrate. This is the time Cisco expects to ship the Cisco-branded version of the Cisco Security Agent product integrated with the CiscoWorks VPN and Security Management Solution (VMS) version 2.2 software, and integrated into the Cisco licensing infrastructure. The replacement product will be available only on CD-ROM; it will not be available for customer download. For more information about the CiscoWorks VMS product, review the information posted at

http://www.cisco.com/en/US/products/sw/cscowork/ps2330/index.html

This migration program will be offered to customers through June 30, 2004. After this date, customers must purchase replacement products.

Product Migration Details

The migration program will provide all Cisco IDS Host Sensor customers the following no-cost, one-for-one product replacement:

  • Replacement of each Cisco IDS Host Sensor Console purchased (either standalone or as part of CiscoWorks VMS 2.0 or 2.1) with a full-featured copy VMS Restricted version 2.2 or later (depending upon the VMS version that is shipping at the time of migration).
  • Replacement of each Cisco IDS Host Sensor Web or Standard Agent license (Solaris or Windows) purchased with a Cisco Security Server Agent license (which supports either Solaris or Windows).

In addition to the replacement products previously mentioned, Cisco will also provide the following Cisco Security Agent products at no cost to customers who migrate from Cisco IDS Host Sensor to the Cisco Security Agent before June 30, 2004:

  • Thirty Cisco Security Desktop Agent licenses (per customer) plus one additional Desktop Agent license for each Cisco IDS Host Sensor Agent license purchased.
  • For customers who accept the migration program before January 31, 2004, Cisco will also provide one Cisco Security Agent Profiler license per customer. The Cisco Security Agent Profiler is a plug-in application for CiscoWorks VMS that provides a comprehensive application analysis and policy creation tool for custom applications and environments. It analyzes application behavior to create custom policies allowing customers to protect any application, even extremely complex ones that have been highly customized to an individual customer's environment. The Cisco Security Agent Profiler is licensed on a per-VMS instance, so customers migrating more than one Cisco IDS Host Sensor Console and wanting to activate the Profiler function on all of them will need to purchase additional Cisco Security Agent Profiler licenses.

Migration Example

The customer purchased two copies of the Cisco IDS Host Sensor Console (one as the standalone console product and the other through CiscoWorks VMS 2.1) along with five Windows Web agents, five Windows standard agents, and five Solaris standard agents. This customer would be entitled to the following Cisco Security Agent products at no cost under the migration program:

  • Two copies of CiscoWorks VMS Restricted, which includes the CiscoWorks Management Center for Cisco Security Agents
  • Fifteen Cisco Security Server Agent licenses (license covers both Windows and Solaris Agents)
  • 45 Cisco Security Desktop Agent licenses
  • One Cisco Security Agent Profiler license (if the customer accepted migration before January 31, 2004)

Cisco Software Application Support

Although the migration program will be offered to all Cisco customers who have purchased the Cisco IDS Host Sensor software, Cisco strongly recommends that all customers migrating under this program purchase a maintenance contract. Future software updates and technical support for the Cisco Security Agent product line will only be available to customers who purchase maintenance. Cisco offers a portfolio of Technical Support Services to ensure that Cisco software operates efficiently, and benefits from the most up-to-date software enhancements. Cisco SAS is available for the Cisco Security Agent software. Cisco SAS includes 24-hour support from the Cisco Technical Assistance Center (TAC), and access to Cisco.com for online technical information, plus software updates (maintenance and minor releases for the software application), all for one annual fee. Cisco Services Migration Program

To assist customers with the migration from the Cisco IDS Host Sensor product to Cisco Security Agent product, Cisco is also offering some special incentives to customers who migrate.

Cisco IDS Host Sensor Customers with a Current SAS Contract

Customers with a current Cisco SAS contract for Cisco IDS Host Sensor software (standalone console and agents or CiscoWorks VMS 2.0 or 2.1 and Cisco IDS Host Sensor agents) who choose to migrate to the Cisco Security Agent software will receive the following:

  • Support for the new CiscoWorks VMS Restricted package and the associated Cisco Security Server Agents at no additional charge for the remainder of their current Cisco SAS contract.
  • Support for the new Cisco Security Agent Desktop Agent licenses provided by Cisco through this migration program at no charge (30 Desktop Agents per customer, plus 1 Desktop Agent per Cisco IDS Host Sensor Agent) for the remainder of the customer's Cisco SAS contract.
  • Customers with a Cisco SAS contract that expires within 90 days of migration will receive 90 days of support at no additional charge for CiscoWorks VMS and the associated Cisco Security Server and Desktop Agent licenses.
  • Customers will need to purchase a Cisco SAS contract for the Cisco Security Agent Profiler provided under this migration program.

Cisco IDS Host Sensor Customers Without a Cisco SAS Contract

Cisco IDS Host Sensor customers that do not currently have a Cisco SAS contract who choose to migrate to the Cisco Security Agent product are eligible for some service incentives as well. If a customer that has not previously had a Cisco SAS contract purchases a new one-year SAS contract for the CiscoWorks VMS Restricted package and Cisco Security Server Agents, they will receive:

  • A 25-percent discount for the first year of Cisco SAS for the CiscoWorks VMS Restricted package(s), the Cisco Security Server Agent licenses and the Cisco Security Agent Profiler provided under this migration program. Renewals will be processed at the then-current SAS fees for the console and all agents.
  • One-year Cisco SAS support at no charge for the new Cisco Security Desktop Agent licenses provided by Cisco through the product migration program (30 Desktop Agents plus 1 additional Desktop Agent license for each Cisco IDS Host Sensor Agent purchased).

The Cisco VMS console and all agent licenses must be covered by 1 Cisco SAS contract and be purchased within 30 days of migration.

These service migration incentives are available to migrating customers through January 31, 2004. After this date, customers must purchase Cisco SAS at standard prices.

Installation/Replacement Notes

It is important to note that the Cisco Security Agent components (both the management application and the agents) cannot coexist on the same platform with Cisco IDS Host Sensor components. The two products will interfere with each other, potentially causing platform stability issues. Customers must uninstall the Cisco IDS Host Sensor components before installing Cisco Security Agent components on the same platform. This applies to both the console and the agents. Instructions for uninstalling the Cisco IDS Host Sensor components are available at the following URLs. Note that the agents must be uninstalled before uninstalling the console.

Windows Agent Uninstall:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/host/host25/install/hidsch3.htm#xtocid5

Solaris Agent Uninstall:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/host/host25/install/hidsch3.htm#xtocid12

Console Uninstall:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/host/host25/install/hidsch2.htm#1024883

Customers should register the replacement product upon receipt, per the instructions provided with the product, in order to receive the required license keys before installing the product. License keys are required to activate the Cisco Security Agent product functions.

Additional Information

For more information about Cisco products or services, contact your Cisco account manager or Cisco channel partner.

For more information about the Cisco Security Agent product line, review the information posted at:

http://www.cisco.com/en/US/products/sw/secursw/ps5057/index.html