Cisco Confidential © 2010 Cisco and/or its affiliates. All rights reserved. 1 Security Management Update
Cisco Confidential © 2010 Cisco and/or its affiliates. All rights reserved. 2
Cisco Confidential © 2010 Cisco and/or its affiliates. All rights reserved. 3 Manager of Managers Multi-TenantScalableAnalysis Global Policies ReliableVisibility CSM & ASDM Flagship ASA Management Solutions Complete ASA device Management 10+ years of Development 1000’s of Customers Breadth of features PRSM Next Generation Management ASA and NGFW Management Schema Driven Web 2.0 User Experience Windows Based ScalabilityScalability Out of Band Changes Client & Server Architecture Native HA
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 4
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5 Cisco ISR G2 Cisco ISR 1000 Cisco Prime InfrastructureCisco PRSM API BASED DATA SHARING ISR with NGFW ASA NGFW
Cisco Confidential © 2010 Cisco and/or its affiliates. All rights reserved. 6
Cisco Confidential 7 Unified Security Management for Firewall, IPS, VPN and Remote Access Security Configuration Event Management Tactical Reporting Proactive Monitoring
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13 (Not Committed)
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14 2HCY12 1HCY132HCY13
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16 Supported OS & Models X 5515-X 5525-X 5545-X 5555-X Peregrine
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17 Supported Features Peregrine
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18 Unsupported Features Peregrine
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19 Support 5585-X SSP 40 and 60 Additional CLI for troubleshooting Telemetry Malicious transaction report Policy Based Rate Limiting Warn End Users Enhancements Safe Search
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 20 Internet Edge Use Case 80% Internet Edge Signatures Threat Protection Updates Threat Protection Workflows Threat Protection Licensing Threat Protection Objects Threat Protection Profiles Features
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 21 New Features New Policy Model Policy Sharing Per Device Configuration Repository View CLI Preview HA Dashboard Scale 25 Devices
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 22 Key Features Device Selector ASA Policy Tab NGFW Policy Tab 5- Tuple Rule base Policy Sharing Install On Device Configuration Tab
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 23 APIAPI
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 24 Complete Migration Workspace (CSM & Device) PRSM Migration Workspace ObjectsObjects PoliciesPolicies ConfigurationConfiguration MappingMapping SaveSave ValidateValidate Clean upClean up CSV BulkCSV Bulk
Cisco Confidential © 2010 Cisco and/or its affiliates. All rights reserved. 25
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 26 I want complete ASA management I want complete ASA logging and reporting I want comprehensive ASA image management I want detailed Health monitoring of ASA I want to manage ASA S2S VPN I want to manage ASA RA VPN I want to manage IPS Stand alone I want ASA FW Policy Validation I want to manage more than 50+ ASA devices I don’t have the need for NGFW
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 27 ** Next Gen IPS (Internet Edge) I want basic ASA FW, NAT Management I want basic ASA device management I need to deploy new ASA’s I want complete NGFW management I want web client for management I want unified NGFW and IPS management** I want better User Experience
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 28 I want complete ASA management (CSM) I want complete NGFW management (PRSM) I have a Internet Edge deployment use case I want to maintain my current deployments I want to test PRSM before migration
Cisco Confidential © 2010 Cisco and/or its affiliates. All rights reserved. 29
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 30 High Availability component Connects to PRSM, Logger, PRSM Console
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 31 Logger HA
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 32 Logger
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 33 CSM Videos External