Cisco Security Manager

Cisco® Security Manager is an enterprise-class management application designed to configure firewall, VPN, and intrusion prevention (IPS) security services on Cisco network and security devices. Cisco Security Manager can be used in networks of all sizes—from small networks to large networks consisting of thousands of devices—by using policy-based management techniques. Cisco Security Manager works in conjunction with the Cisco Security Monitoring, Analysis, and Response System (MARS). Used together, these two products provide a comprehensive security management solution that addresses configuration management, security monitoring, analysis, and mitigation.

• Firewall Management: Device-agnostic, unified interface for managing firewall rules across different Cisco devices supporting the firewall feature set; flexible rule specification methods for improved productivity and organization of rules; powerful toolset to identify configuration errors and optimize firewall rules
• VPN Management: VPN Wizard for rapid, simple definition of site-to-site and remote access VPNs
• IPS Management: Comprehensive solution for configuration management of all Cisco IPS technologies and automation of signature updates
• Policy-based Management: Ability to define aspects of a device's configuration into a named, shareable policy, which can be re-used across multiple devices; support for policy hierarchies to allow logical structuring and maximum re-usability
• Rich-client Graphical User Interface: Integrated, easy-to-use interface providing multiple views optimized around specific configuration tasks; device-centric view, map-centric view, and policy-centric view
• Workflow: Provides an approval framework, whereby proposed configuration changes and deployments can be reviewed and approved
• Role-based Access Control: Integration with Cisco ACS for granular, role-based access control to devices and management functions
• Flexible Deployment Options: Support for various methods of deploying configuration changes such as direct to device, to file, or using call-home based techniques
• Integration with Cisco Security MARS: Cross-correlation between firewall rules and related events and between IPS signatures and related events