Table Of Contents
End-to-End Operations Management Through a Single Management Console
"Manager of Managers" Streamlining Event Management
Cisco Info Center for Security Management Subscriber Identity Module Tools
Real-Time and Historical Reporting
Third-Party Integration Support
Data Sheet
Cisco Info Center for Security Management Release 1.0
Integrated, Multiservice, Multivendor Security Management
Cisco® Info Center for Security Management extends the Cisco Info Center operational management environment to offer integrated and proactive security monitoring from a central network-operations-center (NOC) and security-operations-center (SOC) facility. Management across all network operational activities, including security breaches, provides the most accurate real-time analysis of potential impact prior to the actual attack.
End-to-End Operations Management Through a Single Management Console
The Cisco Info Center for Security Management solution provides for the collection, consolidation, and analysis of the data generated across all Cisco security tools. Based on the Cisco Info Center application, the Cisco Info Center for Security Management solution can correlate disparate events to a single breach, provide a single real-time event management interface, automatically notify personnel of potential breaches, and offer historical security reports for ongoing analysis.
Cisco Info Center for Security Management enables rapid operator responsiveness by offering several new ways to view, assimilate, and remedy real-time data on security threats and the status of the IT environment. The most critical advantage that Cisco Info Center for Security Management presents is its unique ability to provide operations teams with centralized security monitoring through the following attributes:
•
Market-leading, mature technology—Cisco Info Center for Security Management is based on the established OEM technology partnership with Micromuse. Micromuse is the market leader in network fault management and event consolidation. It has been delivering proven and scalable service and business assurance management solutions to more than 1400 service providers and enterprises worldwide. Cisco Info Center for Security Management can collect and process thousands of events, making it an ideal solution for managing the large volume of data security.
•
•
"Manager of Managers" Streamlining Event Management
The Cisco Info Center for Security Management solution collects disparate network and security events and can consolidate and correlate multiple events to a single breach. It looks at events across the entire network and identifies network and service outages that can occur via its correlation and analysis intelligence.
The Cisco Info Center for Security Management solution can automatically notify security operations personnel of potential breaches and events via e-mail or pager based on the severity of the event. Its correlation and notification capabilities make it easier for security operations teams to focus and resolve security-related problems. The Cisco Info Center for Security Management solution supports:
•
•
•
•
•
•
•
Cisco Info Center for Security Management Subscriber Identity Module Tools
The Cisco Info Center for Security Management solution allows you to give your security staff a single interface to access all security information and their tools. The features in Version 1.0 allow full management control and extensible methods for locating and tracking security information that could potentially threaten IT systems and business processes. It offers policies and new tools for more effective monitoring and tracking of security data. The features include:
•
•
•
•
•
•
The Cisco Info Center for Security Management solution eliminates event "noise," allowing security staff to focus on the relevant information. Cisco Info Center for Security Management can remotely collect and monitor data and bring it back to the consolidation point securely.
Alarm Correlation
The Cisco Info Center for Security Management solution performs correlation by linking security events with other Cisco Info Center-collected intelligence and establishes a relationship between security events and potential incidents. Cisco Info Center for Security Management can consolidate multiple, disparate security events to a single potential threat and can relate potential security events to known service outages. Customers can easily customize and expand correlation capabilities.
Alarm Notification
The Cisco Info Center for Security Management solution can also automatically notify IT and security teams and operations personnel of alarms and breaches. This functionality is completely customizable—providing initial notification on critical events and then customizing to escalate notification based upon the time and severity of the threat. Cisco Info Center for Security Management can identify ongoing critical threats and initiate threat resolutions. Customizations can be made to invoke a denial of access to any offending IP address or start a failover to a nonaffected server or services.
Real-Time and Historical Reporting
The Cisco Info Center for Security Management solution is not just data consolidation and correlation. It offers intuitive, off-the-shelf reports that fit the needs of security operations management. Cisco Info Center for Security Management historically logs all the information it collects, and provides reports that can be dynamically published and distributed. Some of the reports include:
•
•
•
•
•
•
•
•
•
•
The Cisco Info Center for Security Management can be sold independently or as an add-on extension package to Cisco Info Center customers. The Cisco Info Center for Security Management Policy Pack provides customizations and automations for the Cisco Info Center Info Server, Cisco Info Center for Security Management Impact, Cisco Info Center Reporter Gateway, and Cisco Info Center Info Meditator.
Third-Party Integration Support
•
•
•
•
•
Platform Support
•