Cisco Security Manager

Centralized Management of Cisco Security Solutions

Cisco Security Manager (CSM) helps to enable consistent policy enforcement and rapid troubleshooting of security events, offering summarized reports across the security deployment. Using its centralized interface, organizations can scale efficiently and manage a wide range of Cisco security devices with improved visibility.

Features and Capabilities

Cisco Security Manager provides a comprehensive management solution for:

• Cisco ASA 5500 Series Adaptive Security Appliances
• Cisco IPS 4200 and 4500 Series Sensors
• Cisco AnyConnect Secure Mobility Client

Benefits include:

Policy and Object Management

• Helps enable reuse of security rules and objects
• Facilitates process compliance and error-free deployments
• Improves ability to monitor security threats

Event Management

• Supports syslog messages created by Cisco security devices
• Facilitates viewing of real-time and historical events
• Provides rapid navigation from events to source policies
• Includes pre-bundled and customizable views for firewall, intelligent protection switching (IPS), and VPN

Reporting and Troubleshooting

• Provides system and custom reports
• Offers export and scheduled email delivery of reports in CSV or PDF format
• Provides advanced troubleshooting with tools such as ping, traceroute, and packet tracer

Image Management

• Provides direct, simplified upgrade of firewall software images using an intuitive wizard
• Offers scheduling of image upgrade jobs during network maintenance windows
• Imports images from the Cisco online software website or from a local file system
• Provides automated updates that can be performed on each firewall individually or run in groups

Health and Performance Monitoring (HPM)

• Adds visibility around health and performance of firewalls, intrusion prevention systems (IPSs), and VPNs.
• Offers ability to set thresholds on various parameters
• Provides alerts when predefined thresholds are reached

API Access

• Shares information with other essential network services such as compliance and advanced security analysis systems
• Provides direct access to data from any security device managed by Cisco Security Manager using external firewall compliance systems
• Is compatible with various security compliance vendors such as Tufin, Algosec, and Skybox

Other functionalities

• Provides insight into Cisco Security Intelligence Operations (SIO) recommendations
• Helps administrators fine-tune their environments prior to deploying signature updates

For information on security management software to manage smaller, simpler deployments and email and web security devices, see the Network Security Management page.

Specifications at a Glance

• Reuse of security rules and objects to monitor security threats and minimize potential errors
• Integrated end-to-end tools to facilitate consistent policy enforcement and rapid troubleshooting
• Consolidated event management to help enable viewing of real-time and historical events
• Insight into Cisco SIO guidance

Additional Resources