Cisco Cisco Security Manager 4.4 インストールガイド

ページ / 32
 
2
Deployment Planning Guide for Cisco Security Manager 4.4
OL-28916-01
  Cisco Security Manager 4.4 Applications
Configuration Manager 
Configuration Manager enables you to centrally manage security policies over 250 different types and 
models of Cisco security devices. Security Manager supports integrated provisioning of firewall, IPS, 
and VPN (most Site-to-site, Remote Access and SSL) services across: 
IOS/ISR/ASR routers 
Catalyst switches 
ASA and PIX security appliances 
Catalyst Service Modules related to firewall, VPN, and IPS 
IPS appliances and various service modules for routers and ASA devices 
For a complete list of devices and OS versions supported by Security Manager, please refer to 
 on Cisco.com. 
Event Viewer 
The high-performance and easy-to-use integrated Event Viewer allows you to centrally monitor events 
from IPS, ASA, and FWSM devices and correlate them to the related configuration policies. This helps 
you identify problems and troubleshoot configurations. Then, using Configuration Manager, you can 
make adjustments to the configurations and deploy them. Event Viewer supports event management for 
Cisco ASA, IPS, and FWSM devices. 
In addition to the Primary Event Data Store, events can be copied and stored in the Extended Event Data 
Store. The Extended Event Data Store can be used to back up and archive a larger number of events. This 
is useful for historical review and analysis of events where Event Viewer can gather event data from both 
the Primary Event Data Store and the Extended Event Data Store. The Extended Event Data Store can 
be enabled in Event Management in Security Manager’s Administration settings. 
For supported platforms and more information, refer to the “Monitoring and Diagnostics” part of the 
 on Cisco.com. 
Report Manager 
The integrated Report Manager application allows you to generate and schedule ASA, IPS, and Remote 
Access VPN reports. Reports for ASA and IPS devices are created by aggregating and summarizing 
events collected by Event Viewer. Security reports can be utilized to efficiently monitor, track, and audit 
network use and security problems reported by managed devices. Users can use Report Manager to 
develop and customize reports for Cisco ASA and IPS devices. 
For supported platforms and more information, refer to the “Monitoring and Diagnostics” part of the 
 on Cisco.com. 
Health and Performance Monitor 
The Health and Performance Monitor has the following features: 
Provides monitoring capabilities for ASA, VPN, and IPS devices 
Provides trending graphs for critical metrics 
Provides a summary panel for consolidated health, alert, and metric value information within a view