Summary

The Cisco Security Management Suite provides configuration and monitoring of a . The Cisco Security Manager product is the configuration component of the Cisco Security Management Suite, and the Cisco Security MARS product is the monitoring component of the security management suite. Cisco Security Manager is a centralized management product that can configure up to 5000 security devices. Cisco Security Manager supports many of the products previously discussed in this book, including the ASA, IOS routers, and IPS sensors. Cisco Security Manager also supports Catalyst 6500/7600 chassis configuration and security linecard modules, including the FWSM, VPN SPA, and the IPS services linecard module (IPSM).

Cisco Security Manager features three main views: Device View, Map View, and Policy View. The Device View is similar in ease-of-use and scope to that of a device manager, such as the ASA Device Manager (ASDM). The Device View also features the ability to share or copy policies from one device to another. The Map View allows users to place devices and hosts on to a topology map and graphically configure their . The Map View enables a user to select a device from the topology map and configure the device directly from the topology map. The Map View can be advantageous for smaller networks. The Policy View enables the user to select or configure the policy first and then apply the policy to multiple devices. The Policy View is designed to enable the user to configure and apply a single security policy to hundreds or thousands of security devices.