Automate Security for Dynamic Defense

The Cisco FireSIGHT Management Center continually monitors how your network is changing over time. New threats are automatically correlated against the vulnerabilities that exist in your network to determine whether they can affect your business. This enables you to cut through all of the noise and focus your efforts on responding to the events that will have the most impact. Critical security activities such as policy tuning are also automated, saving time and effort, while adapting your network defenses to changing conditions. This results in optimized security policies that are specifically tailored to the network you have and the threats that you face.

Choice of Deployment Modes

Cisco FireSIGHT Management Center can be deployed as a physical or virtual appliance, allowing you to choose what options work best for your environment. Physical Cisco FireSIGHT Management Center appliances generally manage a higher number of sensors and provide greater event storage capabilities than their virtual counterparts. Virtual Cisco FireSIGHT Management Center appliances provide the convenience of being able to use your existing VM infrastructure. They can be easily deployed using VMware vSphere provisioning and can be used to protect assets in a physical network. Version 5.x virtual appliances can be hosted on VMware ESX and ESXi hypervisors and can manage up to 25 physical or virtual sensors.

• Maximum number of sensors managed: 10
• Maximum number of IPS events: 20 million
• Event storage: 100 GB
• Maximum network map (hosts/users): 2,000/2,000
• Maximum flow rate (flows per second): 2,000 fps
• Centralized device, license, event, and policy management
• Role-based management (segmented and isolated views and duties based on administrator role or group)
• Customizable dashboard with custom and template-based reports
• Comprehensive reporting and alerts for both general and focused information
• Event and contextual information displayed in hyperlinked tables, graphs, and charts
• Network behavior and performance monitoring
• Robust high-availability options to help ensure there's no single point of failure
• Correlation and remediation features for real-time threat response
• Open APIs for integration with third-party solutions and customer work streams, such as firewalls, network infrastructure, log management, security information and event management (SIEM), trouble ticketing, and patch management
• Network Interfaces: 2 x 1Gbps
• High availability: Lights-out management (LOM)
• Trends and high-level statistics: Helps managers and executives understand security posture at a moment in time as well as how it's changing, for better or worse.
• Event detail, compliance, and forensics: Provides an understanding of what happened during a security event to improve defenses, support breach containment efforts, and aid in legal enforcement actions.
• Workflows: Easily exports data to support responses to an event, improving response management.