Supplement and Release Notes for CiscoWorks Security Information Management Solution (SIMS) 3.4.1 OL-11757-01 Revised October 31, 2006 This document provides Cisco-specific information to supplement the CiscoWorks Security Information Management Solution (SIMS) 3.4.1 documentation, developed by netForensics, Inc.
Acknowledgements • Obtaining Additional Publications and Information, page 18 • CiscoWorks SIMS Licensing and Registration, page 19 Acknowledgements CiscoWorks SIMS is the netForensics, Inc., Security Information Management Solution. This product is offered to Cisco Systems customers in cooperation with netForensics, Inc. Important Information About This Update Caution If you use a CiscoWorks SIMS version earlier than 3.4, you must upgrade to version 3.
Important Information About This Update • nFX OSP Reports Guide • nFX OSP Vulnerability Correlation Administration Guide See Documentation Roadmap, page 6 for detailed information. Agents in This Update This update includes new and changed agents. To learn more, see these topics: • Changed Terminology, page 3 • New and Replaced Agents, page 3 • Updated Agents, page 4 • Agent Installation Notes, page 5 Changed Terminology The 3.3 Consolidated Agent from CiscoWorks SIMS 3.3 has been renamed.
Important Information About This Update Note nF Agent for Unix OS replaces the following two agents: • nF Agent for HP Unix • nF Agent for IBM AIX OS Updated Agents Agent Installation (October 2006) includes updates to the following agents: 4 • nF Agent for Sidewinder • nF Agent for Dragon Sensor • nF Agent for Sourcefire EStreamer • nF Agent for Real Secure ISS Site Protector • nF Agent for Real Secure Desktop Protector • nF Agent for Arbor Peakflow X • nF Agent for Cisco Secure IPS •
Important Information About This Update Agent Installation Notes The version of CiscoWorks SIMS that you have determines whether, how, and when you use Agent Installation (October 2006). For detailed information, see nFAgentReleaseNotes(October2006).Cisco.pdf. Version Notes 3.4.1 You already have the software that this update contains. 3.4 You must apply Point Update 58405 from the Agent Installation (October 2006) CD-ROM before you install any of the agents included in this release: 3.3.1 3.
Product Availability Change Notice Product Availability Change Notice Note • Although certain earlier releases of CiscoWorks SIMS provided a Starter Kit option, CiscoWorks SIMS 3.4.1 does not. Instead, you can purchase the CiscoWorks SIMS Enterprise Lite software, which provides additional software components. See Additional License Restrictions, page 20. • Registered CiscoWorks SIMS Starter Kit customers will receive a Starter Kit upgrade to CiscoWorks SIMS 3.4.1.
Documentation Roadmap Sequence to Read Core CiscoWorks SIMS Documentation PDF Filename 1. nfsupp341.pdf (this document) Document Title; Description and Intended Audience; Part Number Written By netForensics Written By Cisco Systems PDF in the CiscoWorks SIMS ISO Image on Cisco.com HTML and PDF on Cisco.com Table 1 Supplement and Release Notes for CiscoWorks Security Information Management Solution 3.4.
Documentation Roadmap Sequence to Read Core CiscoWorks SIMS Documentation (continued) PDF Filename 5. nFX_OSP_DeplPlanIm plGuide.Cisco.pdf Document Title; Description and Intended Audience; Part Number Written By netForensics Written By Cisco Systems PDF in the CiscoWorks SIMS ISO Image on Cisco.com HTML and PDF on Cisco.com Table 1 nFX OSP Deployment Planning and Implementation Guide Version 3.
Documentation Roadmap Sequence to Read Core CiscoWorks SIMS Documentation (continued) PDF Filename 8. Document Title; Description and Intended Audience; Part Number nFX_OSP_UsersGuide. nFX OSP User’s Guide Version 3.4.1 Cisco.pdf Network security professionals and general users; describes how to use CiscoWorks SIMS (nFX OSP) to view and analyze security information in a computer network. OL-11532-01 9. Written By netForensics Written By Cisco Systems PDF in the CiscoWorks SIMS ISO Image on Cisco.
Documentation Roadmap Table 1 Sequence to Read Core CiscoWorks SIMS Documentation (continued) Document Title; Description and Intended Audience; Part Number 12. nFX_OSP_RBC_Admi nFX OSP Rule Based Correlation Administration Guide Written By netForensics Written By Cisco Systems PDF in the CiscoWorks SIMS ISO Image on Cisco.com HTML and PDF on Cisco.com PDF Filename nistrationGuide.Cisco.p Version 3.4 df All users. OL-10761-01 13. nFX_OSP_ RBC_LoggingTuningG uide.cisco.
Obtaining Documentation Sequence to Read Core CiscoWorks SIMS Documentation (continued) PDF Filename Document Title; Description and Intended Audience; Part Number Written By netForensics Written By Cisco Systems PDF in the CiscoWorks SIMS ISO Image on Cisco.com HTML and PDF on Cisco.com Table 1 16. nFX_OSP_QuickConne nFX OSP Quick Connect User Guide ct_UserGuide.Cisco.pd Version 3.
Obtaining Documentation Note Cisco Systems does not sell documentation that netForensics prepares for users of nFX OSP products, also known collectively as CiscoWorks SIMS. For information on where and how a Cisco customer can obtain netForensics documentation for CiscoWorks SIMS 3.4, see Table 1 on page 7. Cisco.com You can access the most current Cisco documentation at this URL: http://www.cisco.com/techsupport You can access the Cisco website at this URL: http://www.cisco.
Documentation Feedback Ordering Documentation You must be a registered Cisco.com user to access Cisco Marketplace. Registered users may order Cisco documentation at the Product Documentation Store at this URL: http://www.cisco.com/go/marketplace/docstore If you do not have a user ID or password, you can register at this URL: http://tools.cisco.com/RPF/register/register.
Cisco Product Security Overview To see security advisories, security notices, and security responses as they are updated in real time, you can subscribe to the Product Security Incident Response Team Really Simple Syndication (PSIRT RSS) feed. Information about how to subscribe to the PSIRT RSS feed is found at this URL: http://www.cisco.com/en/US/products/products_psirt_rss_feed.html Reporting Security Problems in Cisco Products Cisco is committed to delivering secure products.
Product Alerts and Field Notices If you do not have or use PGP, contact PSIRT to find other means of encrypting the data before sending any sensitive material. Product Alerts and Field Notices Modifications to or updates about Cisco products are announced in Cisco Product Alerts and Cisco Field Notices. You can receive Cisco Product Alerts and Cisco Field Notices by using the Product Alert Tool on Cisco.com.
Obtaining Technical Assistance Access to all tools on the Cisco Technical Support & Documentation website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a user ID or password, you can register at this URL: http://tools.cisco.com/RPF/register/register.do Note Use the Cisco Product Identification Tool to locate your product serial number before submitting a request for service online or by phone.
Obtaining Technical Assistance solutions. If your issue is not resolved using the recommended resources, your service request is assigned to a Cisco engineer. The TAC Service Request Tool is located at this URL: http://www.cisco.com/techsupport/servicerequest For S1 or S2 service requests, or if you do not have Internet access, contact the Cisco TAC by telephone. (S1 or S2 service requests are those in which your production network is down or severely degraded.
Obtaining Additional Publications and Information Obtaining Additional Publications and Information Information about Cisco products, technologies, and network solutions is available from various online and printed sources. • The Cisco Online Subscription Center is the website where you can sign up for a variety of Cisco e-mail newsletters and other communications. Create a profile and then select the subscriptions that you would like to receive.
CiscoWorks SIMS Licensing and Registration • Networking Professionals Connection is an interactive website where networking professionals share questions, suggestions, and information about networking products and technologies with Cisco experts and other networking professionals. Join a discussion at this URL: http://www.cisco.com/discuss/networking • “What’s New in Cisco Documentation” is an online publication that provides information about the latest documentation releases for Cisco products.
CiscoWorks SIMS Licensing and Registration Supplemental End-User License Agreement SUPPLEMENTAL LICENSE AGREEMENT FOR CISCO SYSTEMS SECURITY MANAGEMENT SOFTWARE: CiscoWorks Security Information Management Solution Product Line IMPORTANT—READ CAREFULLY: This Supplemental License Agreement (“SLA”) contains additional limitations on the license to the Software provided to Customer under the Software License Agreement between Customer and Cisco.
CiscoWorks SIMS Licensing and Registration • Device Licenses for Agents: The SIM Starter Kit and its upgrade provide a license certificate to allow agents to monitor a minimum of thirty (30) devices, in the Customer’s network environment. Additional device licenses are purchased separately.
CiscoWorks SIMS Licensing and Registration • Device Licenses for Agents: The SIM Starter Kit and its upgrade provide a license certificate to allow agents to monitor up to ten (10) devices, in the Customer’s network management environment. Additional device licenses are purchased separately. • Enterprise Security Portal: Customer may install on one (1) server, per license certificate, in the Customer’s network management environment.
CiscoWorks SIMS Licensing and Registration – The following restrictions apply when Customer has exercised an option to purchase additional software components or device licenses for CiscoWorks SIMS: • • Enterprise Security Portal: Customer may install on one (1) server, per license certificate, in the Customer’s network management environment. • Rule Based Correlation Engine: Customer may install on one (1) server, per license certificate, in the Customer’s network management environment.
CiscoWorks SIMS Licensing and Registration Registration and Licensing Notes for All CiscoWorks SIMS Components and Add-On Kits To obtain a production license for your CiscoWorks SIMS software — including but not limited to the optional software components (see Additional License Restrictions, page 20), you must register your copy of the software.
CiscoWorks SIMS Licensing and Registration End User License Software License Agreement PLEASE READ THIS SOFTWARE LICENSE AGREEMENT CAREFULLY BEFORE DOWNLOADING, INSTALLING OR USING CISCO OR CISCO-SUPPLIED SOFTWARE. BY DOWNLOADING OR INSTALLING THE SOFTWARE, OR USING THE EQUIPMENT THAT CONTAINS THIS SOFTWARE, YOU ARE BINDING THE BUSINESS ENTITY THAT YOU REPRESENT (“CUSTOMER”) TO THIS AGREEMENT.
CiscoWorks SIMS Licensing and Registration Customer’s license to use the Software shall be limited to, and Customer shall not use the Software in excess of, a single hardware chassis or card or that number of agent(s), concurrent users, sessions, IP addresses, port(s), seat(s), server(s) or site(s), as set forth in the applicable Purchase Order which has been accepted by Cisco and for which Customer has paid to Cisco the required license fee.
CiscoWorks SIMS Licensing and Registration AGREEMENT: (1) CUSTOMER HAS NO LICENSE OR RIGHT TO USE ANY ADDITIONAL COPIES OR UPGRADES UNLESS CUSTOMER, AT THE TIME OF ACQUIRING SUCH COPY OR UPGRADE, ALREADY HOLDS A VALID LICENSE TO THE ORIGINAL SOFTWARE AND HAS PAID THE APPLICABLE FEE FOR THE UPGRADE; (2) USE OF UPGRADES IS LIMITED TO CISCO EQUIPMENT FOR WHICH CUSTOMER IS THE ORIGINAL END USER PURCHASER OR LESSEE OR WHO OTHERWISE HOLDS A VALID LICENSE TO USE THE SOFTWARE WHICH IS BEING UPGRADED; AND (3) THE M
CiscoWorks SIMS Licensing and Registration Export. Software, including technical data, may be subject to U.S. export control laws, including the U.S. Export Administration Act and its associated regulations, and may be subject to export or import regulations in other countries. Customer agrees to comply strictly with all such regulations and acknowledges that it has the responsibility to obtain licenses to export, re-export, or import Software. U.S. Government End User Purchasers.
CiscoWorks SIMS Licensing and Registration Restrictions.
CiscoWorks SIMS Licensing and Registration above-stated warranty fails of its essential purpose. BECAUSE SOME STATES OR JURISDICTIONS DO NOT ALLOW LIMITATION OR EXCLUSION OF CONSEQUENTIAL OR INCIDENTAL DAMAGES, THE ABOVE LIMITATION MAY NOT APPLY TO YOU. The Warranty and the Software License shall be governed by and construed in accordance with the laws of the State of California, without reference to principles of conflict of laws.