Cisco Cisco Firepower Management Center 2000 Installation Guide
1-7
Cisco NGIPS for Blue Coat X-Series Installation and Configuration Guide
Chapter 1 Introduction to Cisco NGIPS for Blue Coat X-Series
Understanding Cisco NGIPS for Blue Coat X-Series Capabilities
A FireSIGHT license is included with each Defense Center purchase, and is required to perform host,
application, and user discovery. The FireSIGHT license on your Defense Center also determines how
many individual hosts and users you can monitor with the Defense Center and its managed devices, as
well as how many users you can use to perform user control. FireSIGHT host and user license limits are
model specific, as listed in the following table.
application, and user discovery. The FireSIGHT license on your Defense Center also determines how
many individual hosts and users you can monitor with the Defense Center and its managed devices, as
well as how many users you can use to perform user control. FireSIGHT host and user license limits are
model specific, as listed in the following table.
You can use the following FireSIGHT System licenses on Cisco NGIPS for Blue Coat X-Series:
Protection
A Protection license allows managed devices to perform intrusion detection and prevention, file
control, and Security Intelligence filtering.
control, and Security Intelligence filtering.
Control
A Control license allows managed devices to perform user and application control. A Control
license requires a Protection license. You cannot enable a Control license on Cisco NGIPS for Blue
Coat X-Series to perform user and application control, switching, routing, or NAT.
license requires a Protection license. You cannot enable a Control license on Cisco NGIPS for Blue
Coat X-Series to perform user and application control, switching, routing, or NAT.
URL Filtering
A URL Filtering license allows managed devices to use regularly updated cloud-based category and
reputation data to determine which traffic can traverse your network, based on the URLs requested
by monitored hosts. A URL Filtering license requires a Protection license.
reputation data to determine which traffic can traverse your network, based on the URLs requested
by monitored hosts. A URL Filtering license requires a Protection license.
Malware
A Malware license allows managed devices to perform network-based advanced malware protection
(AMP), that is, to detect and block malware in files transmitted over your network. It also allows
you to view trajectories, which track files transmitted over your network. A Malware license
requires a Protection license. You cannot enable a Malware license on Cisco NGIPS for Blue Coat
X-Series to perform block malware or to store and submit files for further analysis.
(AMP), that is, to detect and block malware in files transmitted over your network. It also allows
you to view trajectories, which track files transmitted over your network. A Malware license
requires a Protection license. You cannot enable a Malware license on Cisco NGIPS for Blue Coat
X-Series to perform block malware or to store and submit files for further analysis.
For detailed information on licensing, see the Licensing the FireSIGHT System chapter in the FireSIGHT
System User Guide.
System User Guide.
Table 1-3
FireSIGHT Limits by Defense Center Model
Defense Center Model
FireSIGHT Host and User Limit
DC500
1000 (no user control)
DC750
2000
DC1000
20,000
DC1500
50,000
DC2000
100,000
DC3000
100,000
DC3500
300,000
DC4000
600,000
virtual
50,000