Cisco Systems 3700, 3600 Cisco PIX Security Appliance Series, VPN and Security Products Features

Product

Features

Page

CiscoWorks

Combines general device management tools for configuring, monitoring, and troubleshooting

9-16

VPN/Security

enterprise networks with powerful security solutions for managing virtual private networks

Management Solution

(VPNs), firewalls, and network and host-based intrusion detection systems (IDS). An integral part

of the Cisco SAFE Blueprint for Enterprise, this bundle also delivers network device inventory,

change audit and software distribution features. CiscoWorks VMS is organized into several

functional areas: Firewall Management, IDS Management, network and host-based, VPN Router

Management, Security Monitoring, VPN Monitoring, and Operational Management

See Chapter 9-1—IOS Software & Network Management for more information on CiscoWorks

VPN/Security Management Solution

CiscoWorks Security

A solution that collects, analyzes, and correlates security event data from across the enterprise- 9-18

Information

letting you detect and respond to security events as they occur.

Management Solution

• Event monitoring of multivendor security environments

and CiscoWorks

• Extensive reporting for operators and high-level administrators

Security Information

• Risk assessment information to understand overall vulnerability of critical network assets within

Management Solution

the enterprise; Forensics tools to investigate attacks

Engine

• Traffic utilization reports and graphs to understand changes in traffic patterns

See Chapter 9-1—IOS Software & Network Management for more information on CiscoWorks

Security Information Management Solution

Cisco IOS Firewall

• Tightly integrated with IOS VPN and advanced routing technologies

5-15

• Application aware stateful packet inspection via context-based access control (CBAC) for TCP,

UDP, SIP, Skinny, H.323 and others

• Supports user authentication for https, ftp and telnet connections

• URL filtering through router exclusive domains or use of external Websense and N2H2 servers

• Inline intrusion prevention for real-time response to network attacks supporting 100 common

attack signatures

• Dynamic, network-to network, per-user authentication and authorization via TACACS+ and

RADIUS

Cisco VPN Security

Cisco 1700, 2600, 3600, 3700, and 7200 VPN Security Router Bundles with Enhanced Integrated

1-1

Router Bundles

Network Security. See individual product pages for more detail (page 1-1)

Cisco 1700, 2600, 3600,

Wide variety of modular router platforms with options for IOS-based and hardware-enabled VPN 1-1

and 7200

and security support. See individual product pages and Cisco IOS Firewall Feature Set (page

5-15).

Cisco 7100 Series

Large branch and central site VPN router

5-16

• Comprehensive suite of VPN services, including encryption, tunneling, firewall, and bandwidth

management