Cisco Multicloud Defense Ordering Guide
Available Languages
Bias-Free Language
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
This document describes the pricing and packaging structure and ordering for Cisco® Multicloud Defense as an a la carte item.
Audience: This guide is for the Cisco field and any customer, distributor, or partner that can utilize CCW. Cisco Commerce Workspace (CCW) provides an integrated commerce experience that allows you to register deals, configure and price products, software and related services, and order from a single platform.
Scope: This ordering guide describes the pricing and ordering for the following products and services:
● Cisco Multicloud Defense Advantage
● Cisco Multicloud Defense Premier
For more detailed information on Cisco Multicloud Defense product, go to cisco.com/go/multicloud-defense.
Cisco Multicloud Defense delivers consistent and automated protection across AWS, Azure, GCP, OCI, and private cloud. It is the industry’s first solution to integrate network security with multicloud networking. Organizations remain efficient by reducing vendor sprawl while gaining multi-directional protection across clouds and workloads to stop inbound attacks, prevent lateral movement, and block data exfiltration through a single, dynamic policy.
With Cisco Multicloud Defense, you don’t have to compromise in the cloud. Instead, meet critical multicloud security and compliance requirements at cloud speed and scale. Sign up for a free trial account today at cisco.com/go/multicloud-defense.
The product licensing is based on the consumed amount of aggregated gateway hours across all the (cloud) environments. The product has two tiers available, namely, “Advantage” and “Premier.” Even though the licensing is based on consumption, this is not a pay-as-you-go offering; however, hours can be added to current subscriptions in 1-, 3-, or 5-year intervals with the change subscription workflow (documented under the “Subscription renewals, changes, and cancellations” section).
The comparison between “Advantage” and “Premier”:
|
|
Advantage |
Premier |
| Visibility |
|
|
| Unlimited accounts |
|
|
| FQDN egress filtering (outbound) |
|
|
| Malicious IP and geography-based blocking |
|
|
| IPS/IDS |
|
|
| Cisco Talos® Threat Intelligence |
|
|
| TLS decryption |
|
|
| 3rd-party integrations |
|
|
| URL filtering |
|
|
| DLP (block exfiltration) |
|
|
| Web application firewall |
|
|
| API rate limiting |
|
|
| Antivirus |
|
|
| Multicloud connectivity |
|
Coming Soon |
| Hybrid segmentation |
|
Coming Soon |
There is no active license/usage enforcement; however, all consumptions are monitored. In the case that the Multicloud Defense Service is consumed beyond purchased hours, there will be no impact on traffic or functionality. In the event of severe oversubscription/overconsumption on an account, the Customer will be notified—after three notifications without response from the Customer, the administrative access will be revoked and read-only access will be available for the product until the commercial status is restored.
Understanding the quoting and ordering process
Orders for Cisco Multicloud Defense involve four PID/SKU types:
● The subscription PID is used to define the subscription term and start date.
● The product PIDs (also known as “billing PIDs”) are used to define the products and quantities that make up the subscription.
● The support SKU defines the level of support for the subscription.
Greenfield customers (no existing Cisco Defense Orchestrator tenant)
Before starting the order, the Customer will be required to set up a free Cisco Defense Orchestrator (CDO) tenant via https://getcdo.com if they have not already done so.
1. Sign in to the CDO tenant after it’s been successfully provisioned (notified via email).
2. Select the tenant’s name at the top-right corner to expand the menu.
3. Click on Settings and scroll down on the page until “Tenant ID”
4. Save the “Tenant ID” as it will be required at the end of the CCW ordering flow
Follow the Ordering Process section.
Brownfield customers (existing Cisco Defense Orchestrator tenant)
The Modify Subscription workflow can be leveraged in CCW to add Cisco Multicloud Defense gateway hours to an existing CDO subscription. This flow is documented under the “Subscription renewals, changes, and cancellations” section of the document.
If the Customer doesn’t have an existing CDO subscription with a CDO-BASE-LIC included – it will be required to create a new CDO subscription.
1. Sign in to the CDO tenant.
2. Select the tenant’s name at the top-right corner and expand the menu.
3. Click on Settings and scroll down on the page until “Tenant ID”
4. Save the “Tenant ID” as it will be required at the end of the CCW ordering flow
Orders start with the selection of the CDO-SEC-SUB subscription SKU. This is followed by the configuration of the subscription by selecting the product and support SKUs that will constitute the subscription. The product is only available via Cisco Defense Orchestrator, and this guide covers the ordering process for Cisco Multicloud Defense setup. If you require help for any additional elements of the Cisco Defense Orchestrator SKU, please refer to the CDO ordering guide.
The subscription SKU for Cisco Multicloud Defense is: CDO-SEC-SUB, because the product is offered under the Cisco Defense Orchestrator subscription. Pricing is determined when product SKUs are added and configured. Gateway Hour license quantity will be entered when the product SKUs are added to the subscription.
Click “Select Options” to configure and expand the “Cisco Multicloud Defense” section:
Next, fill out the requested amount of Gateway Hours for the required tier—please note that the quantity you will enter here is the estimated amount of gateway hours. (The system will automatically convert them to units by dividing this number with 100)
1. Let’s estimate one Gateway running for 24/7 for 1 year which is 8760 hours.
2. We would like to have this on the Premier tier.
3. Fill out the “quantity of Gateway Hours” for the correct tier with “8760” and hit Enter. The system will automatically turn it to ~88 units which will be presented on the quote.
In the image below, the price calculations changed accordingly, and some additional items have been automatically included in the quote.
The items automatically included are:
● CDO-BASE-LIC: This item is the base tenant license for Cisco Defense Orchestrator, which is required because the Cisco Multicloud Defense is accessible only via CDO. The system defaults it to a 3-year term, which can be changed.
● SVS-CDO-SUP-S: This item is the services contract for Solution Support – this enables the service contract attachment for both CDO and Multicloud Defense.
The following are additional service contract offerings that can be added manually:
● SVS-MCD-SUP-E: This item is the services contract for Enhanced Support for Multicloud Defense. This includes Customer Success Onboarding Services.
● SVS-MCD-SUP-P: This item is the services contract for Premium Support for Multicloud Defense. This includes Customer Success Onboarding and Adoption Services as well as lifecycle management.
The Service level can be modified under the “Service” tab by clicking the “Swap” button to the desired service level:
After selecting the desired product options, choose Requested Terms and Billing to edit the subscription term and the requested start date.
Note: Annual billing option.
● Only terms that are 12 to 60 months are allowed (1 to 11 months require nonstandard approval and can only be requested to co-term to another contract greater than 12 months).
● A Purchase Order (PO) needs to be issued for the full amount, and billing will occur annually before the start date of each service year.
● While billing is annual, the subscription is for the entire term and cannot be cancelled midterm. The service is provisioned, and the subscription starts on the service start date. The provisioning of the service may take up to 72 hours, assuming the order information is complete and correct.
The subscription term will default to a 36-month term and Prepaid Term Billing. The Requested Start Date and the frequency of billing may also be changed at this time.
Once the subscription term, services and the product have been configured – the next step is to give the provisioning information.
All Cisco Multicloud Defense orders require a purchaser to provide the following end-customer information during order entry to properly provision Cisco Defense Orchestrator and Multicloud Defense accounts to the end customer.
Note: The end customer is the person who will be the Multicloud Defense administrator responsible for initially activating and accessing the new Multicloud Defense account.
● Cisco Defense Orchestrator Tenant UID (captured at the beginning of the ordering process).
● The administrator email who will have access to the product and configure it.
The region where the Cisco Defense Orchestrator and Multicloud Defense Controller access is to be provisioned.
Cisco Multicloud Defense services will be provisioned, and the subscription will begin on the service start date specified on the order.
Note: Keep in mind that the Multicloud Defense Gateway can be deployed in any cloud region and can communicate with the Multicloud Defense Controller regardless of the controller’s region. Recommended guidance includes selecting the region that defines either the company HQ (due to regulatory/compliance purposes like GDPR) or the region where most of the assets to be secured by the solution are located.
Subscription renewals, changes, and cancellations
Cisco Multicloud Defense PIDs have to be manually renewed leveraging the Change/Modify Subscription flow for the customer’s Subscription ID. This is because unit price of quantity is based on Number of Gateway hours independent of term selected. Customers should receive subscription expiration notices. The Customer or Partner will receive an invoice at the start of each new annual term.
Note: At time of ordering, the subscription is set to auto-renew as a default; however, auto-renew can be turned off (toggle button on lower left as shown above) without triggering the deal to become nonstandard.
Customers who purchase on or after December 2, 2019, who would like to change their subscription, must do so via the CCW change subscription portal.
Partners can make changes to the products, quantities, or terms of a subscription, at any time during the term of the subscription. To change the subscription, select Cloud/SaaS Subscriptions under the Services and Subscriptions tab. Attempting to add products or seats by creating a new subscription will result in an ordering error.
Search for the active subscription and click to see the subscription details. Next, select the Modify/Renew button.
Partners are now able to adjust the products, quantities, start date, and term. To change products or quantities, start by selecting the appropriate product in the subscription configuration summary. The guidance below uses a Cisco Defense Orchestrator subscription as an example.
Navigate to the Subscriptions and Services tab and select Cloud/SaaS Subscriptions:
Search and view for Subscription ID:
Please find more information on the change subscription workflow under the following link.
For a manual renewal or to change the subscription terms, select “Change the terms of my subscription.” For a manual renewal, update the start date to begin one day after the existing subscription’s end date.
Renewals may be cancelled up to 60 days before the start date of the new term. If the subscription is not cancelled, the subscription will automatically renew. Midterm cancellations of subscriptions for credit are not allowed.
For quoting or ordering questions, please contact cs-support@cisco.com, or open a case at www.cisco.com/cisco/psn/web/workspace.
Transacting via Public Cloud Marketplaces
The product is currently included in the Cisco CPPO 2.0 (Consulting Partner Private Offer) program which enables customers to use their committed cloud spent on this product via AWS Marketplace.
The team is working to expand this to other Cloud Service Provider marketplaces such as Azure, GCP and OCI.
Cisco Multicloud Defense and Cisco Defense Orchestrator are available globally except the following countries:
China
Comoros
Cuba
Iran
North Korea
Lesotho
Russia
Sudan
Syria
Western Sahara
Yemen