IT organizations are becoming asked to take on further responsibilities, frequently with all the exact same or even much less headcount. Administrators are expected to be specialists in various diverse areas, from security to communications systems, and have to also be familiar with - and in a position to use - a number of different products and systems in each and every area. And as organizations expand and develop, the amount of management overhead can boost exponentially.
The Cisco IronPort™ M-Series Security Management Appliance centralizes and consolidates crucial management and reporting insight in a single interface, offering a central platform for all reporting and auditing details for Cisco IronPort internet and e-mail security systems.
Centralized Management and Reporting
For distributed networks with multiple locations, the Cisco IronPort M-Series Security Management Appliance enables centralized, consistent policy across various C-Series or S-Series appliances, and across geographic boundaries. Built on the Cisco IronPort AsyncOS® operating method, the Cisco IronPort M-Series supplies industry-leading robustness, scalability, and supportability, conveniently supporting significant enterprise and ISP customers.
E mail Reporting
Advanced message tracking enables administrators to know exactly where and when an e-mail communication took place. They are able to search message telemetry for several email security appliances according to sender, recipient, message subject, or perhaps a host of advanced parameters. They can then report the complete scanning outcomes, such as spam/virus verdicts or policy violations, at the same time as delivery particulars like TLS statistics, e-mail authentication, or Cisco IronPort E mail Encryption technologies.
Cisco IronPort Spam Quarantine is actually a self-service answer with an easy-to-use web- or email-based interface and easy integration into existing directory and mail systems. All operations are automatic and self-managing, so there is certainly no risk of a capacity overload. Most importantly, Cisco IronPort Spam Quarantine demands no maintenance by the administrator or the finish user. End customers might be authenticated against a corporate LDAP directory or by using their frequent email password for any standards-based IMAP or POP server. Message distribution lists is usually managed through one-click authentication from the quarantine message digests. Cisco IronPort Spam Quarantine totally integrates the capability for end users to make their private safelists and blocklists.
Internet Reporting
Cisco IronPort reporting data from many internet security appliances is usually consolidated and centralized to present fully integrated security reporting. A exceptional threat correlation engine delivers unprecedented insight into even the highest-volume networks in the world. Detailed and correct details is integrated into interactive and actionable reports, suitable for all levels of an organization. Cross-application reporting gives insight in to the threats getting blocked from inside and outside the network, also as internal user behavior and critical content material security policy. Administrators can see which customers are going to websites or web applications in violation of acceptable use policies, and may track policy infractions across any department or web-site.
Complete internet reports enable network security administrators to identify and troubleshoot malware threats, prospective infections, and botnet activity. With centralized net reporting, technique administrators can view the biggest threats to their network, which customers are encountering by far the most blocks or warnings, and which sites and URL categories are posing the largest risk.
Product Line
• Cisco IronPort Security Management Appliance M1070: Consolidated management appliance developed to meet the needs of the most demanding networks on the planet.
• Cisco IronPort Security Management Appliance M670: Designed for organizations with multiple gateway security appliances and a large number of customers.
• Cisco IronPort Security Management Appliance M170: Designed for organizations with many gateway security appliances and less than 2000 users.
| | Cisco IronPort M1070 | Cisco IronPort M670 | Cisco IronPort M170 |
Chassis |
Form Factor | 2U | 2U | 1U |
Dimensions | 3.5" (h)x 17.5" x 26.8"(d) | 3.5" (h) x 17.5" x 26.8" (d) | 1.67" (h) x 16.9" x 15.5" (d) |
Total Weight (lb) | 57.5 | 52.2 | 26.96 |
Power Supply | 870W, 100/240V | 870 watts, 100/240V | 400 watts, 100/240V |
Redundant Power Supply | Yes | Yes | No |
Processor, Memory and Disks |
CPUs | 2x4 (2 Quad Cores) | 2x4 (2 Quad Cores) | 1x2 (1 Dual Core) |
Memory | 4 GB | 4 GB | 4 GB |
Disk Space & Count | 3.6 TB (600 * 6) | 1.8 TB (300 * 6) | 500GB (250 * 2) |
Hot Swappable Hard Disk | Yes | Yes | Yes |
RAID Level & Controller | RAID 10. Hardware | RAID 10, Hardware | RAID 1, Software |
Interfaces |
Ethernet | 4 Gigabit NICs, RJ-45 | 4 Gigabit NICs, RJ-45 | 2 Gigabit NICs, RJ-45 |
Serial | 1xRS-232 (DB-9), Serial | 1xRS-232 (DB-9), Serial | 1xRS-232 (RJ-45) |
Fiber | Yes | No | No |
USB | 0 | 0 | 2 |
Configuration Logging and Monitoring |
Web Interface | GUI-based (HTTPS) | GUI-based (HTTPS) | GUI-based (HTTPS) |
Command Line Interface | SSH or Telnet (command-based) | SSH or Telnet (command-based) | SSH or Telnet (command-based) |
Logging | Squid, Apache, Syslog, W3C | Squid, Apache, Syslog, W3C | Squid, Apache, Syslog, W3C |
Centralized Reporting | Supported | Supported | Supported |
File Transfer | SCP FTP | SCP FTP | SCP, FTP |
Configuration Files | XML-based | XML-based | XML-based |
Centralized Configuration | Supported | Supported | Supported |
Monitoring | SNMPv1-3, email alerts | SNMPv1-3, email alerts | SNMPv1-3, email alerts |
Environmental Operating Ranges |
Total Current (A) | 3.7 | 2.8 | 4.85 (max) |
Input Voltage (V) | 100 to 240 VAC | 100 to 240 VAC | 100 to 240 VAC |
Operating Power (W) | 399.3 | 306.8 | 400W (max) |
Total Heat Dissipation (BTU/Hr) | 1904 | 1801.6 | 432.6 |
Leakage Current (mA) | 3.5 | 3.5 | 3.5 |
Fan Exhaust Volume (CFM) | 43.1 | 37.4 | Idle at 24°C: 12.3 Full fan speed: 34.4 |
Ambience Noise (bels) | 6.3 | 6.1 | Idle: 41.3 dBa Stress: 64.2 dBa max. |
Effective MTBF (Hours) | 94400 | 94400 | 107356 |
Operating |
Temperature (⁰C) | 10°C to 35°C | 10°C to 35°C | -5⁰C to 45⁰C |
Relative Humidity (%) | 20% to 80% (noncondensing) | 20% to 80% (noncondensing) | 20% to 80% (noncondensing) |
Altitude (m) | 3048 | 3048 | 3000 |
Vibration | 0.26 Grms at 5-350Hz | 0.26 Grms at 5-350Hz | 0.41Grms, at 3Hz-500Hz |
Non - Operating |
Temperature (⁰C) | -40°C to 65°C | -40°C to 65°C | -25⁰C to 70⁰C |
Relative Humidity (%) | 5% to 95% (noncondensing) | 5% to 95% (noncondensing) | 5% to 95% (noncondensing) |
Altitude (m) | 10,600 | 10,600 | 4570 |
Vibration | 1.54 Grms at 10-250Hz | 1.54 Grms at 10-250Hz | 1.12Grms at 3Hz-500Hz |
Industry Certifications |
RoHS | Yes | Yes | Yes |
Other Certifications | | | Safety: cULus, CB, CCC, BSMI EMC:CE, FCC, VCCI, C-TICK, KC |
The way that we operate has gone by way of a basic shift. Applications and communications tools have moved towards the net, and social media has emerged as a strategy to enhance company revenues. Currently, more than ever, the web would be the instrumental business tool. Workers use several devices to access corporate information and to perform both inside and outside the corporate network.
Cisco IronPort™ S-Series Web Security Appliances provide control, security, and visibility into internet usage and threats. This single-appliance resolution allows firms to benefit from the new net landscape with out sacrificing security.
Security
The Cisco IronPort S-Series multilayer security architecture incorporates Cisco IronPort Internet Reputation Filters and antimalware to stop both known and zero-day threats.
Net reputation filters use the analysis of more than 200 unique net targeted traffic and network parameters to accurately decide the trustworthiness of a URL or address. Pattern-based assessment and per-object scanning enables protection from botnets and exploit filtering.
Multiple antimalware engines comply with with bidirectional content scanning. Cisco gives the alternative of Sophos, Webroot, and McAfee to prevent identified threats from reaching your finish customers.
Furthermore, Cisco IronPort S-Series Web Security Appliances are powered by Cisco Security Intelligence Operations (SIO), an advanced security infrastructure that supplies threat detection, correlation, and mitigation across the widest range of information, encompassing network, content material, and endpoint security threats. Cisco SIO tracks over 40,000 vulnerabilities and collects and correlates traffic data-about 500 GB is processed daily-from almost each and every publicly routable IP address online. Everyday, over three,300 IPS signatures are made and over eight million rules are pushed out by Cisco SIO.
Manage
Cisco IronPort Web Usage Controls offer protection against unwanted content entering the network, as well as visibility into web use violations. A combination of net content classification, real-time dynamic categorization, and net application manage gives administrators the capability to manage, at a granular level, the activities of their finish users - from blocking inappropriate content to preventing the use of functionality inside a web application like Facebook.
This control extends down for the function level inside internet applications; as an example, allowing access to Facebook but throttling all streaming media or permitting access to instant messaging but blocking file transfer. Manage is additional extended out to public cloud applications for instance salesforce.com or Google Apps, by providing a centralized approach of authenticating customers. With this approach it can be feasible to possess a single, central point of control and revocation for access control to enterprise SaaS applications.
Secure Mobility
With all the quickly growing trend of employing mobile devices to access corporate assets and also the improve inside the quantity of mobile workers, extending policy and security beyond office boundaries is critical. Cisco IronPort S-Series Internet Security Appliances enable secure mobility via integration with the Cisco AnyConnect™ client and Cisco® ASA firewalls. Secure mobility enables mobile workers to seamlessly access the tools they must work productively whilst permitting administrators to enforce policy and security for mobile devices and users no matter their location.
Visibility
Understanding just what is happening across your entire user base is crucial to understanding your security posture, monitoring policies, and employing actionable data to produce policy enhancements. On-box reporting offers insight into net activity and security, with information ranging from high-level trends to transaction-level detail. Organizations can use these reports to understand small business trends, measure productivity, analyze security threats, and strategy for the future.
The Cisco M-Series Security Management Appliance provides centralized reporting and management for a number of Cisco S-Series Internet Security Appliances.
Product Line
The Cisco IronPort net security item line address issues faced by organizations ranging from compact corporations to the Global 2000.
• Cisco IronPort Internet Security Appliance S670: Created for organizations with over 10,000 customers.
• Cisco IronPort Internet Security Appliance S370: Developed for organizations with two,000 to ten,000 users.
• Cisco IronPort Web Security Appliance S170: Developed for little organizations and organizations with as much as 2,000 customers.
| | Cisco IronPort S670 | Cisco IronPort S370 | Cisco IronPort S170 |
Chassis |
Form Factor | 2U | 2U | 1U |
Dimensions | 3.5" (h) x 17.5" x 26.8" (d) | 3.5" (h) x 17.5" x 26.8" (d) | 1.67" (h) x 16.9" x 15.5" (d) |
Total Weight (lbs) | 57.5 | 57.5 | 26.96 |
Power Supply | 870 watts, 100/240V | 870 watts, 100/240V | 400 watts, 100/240V |
Redundant Power Supply | Yes | Yes | No |
Processor, Memory and Disks |
CPUs | 2x4 (2 Quad Cores) | 1x4 (1 Quad Core) | 1x2 (1 Dual Core) |
Memory | 8 GB | 4 GB | 4GB |
Disk Space & Count | 2.7 TB (450 * 6) | 900GB (450 * 2) | 500GB (250 * 2) |
Hot Swappable Hard Disk | Yes | Yes | Yes |
RAID Level & Controller | RAID 10, Hardware | RAID 10, Hardware | RAID 1, Software |
Interfaces |
Ethernet | 5 Gigabit NICs, RJ-45 | 5 Gigabit NICs, RJ-45 | 5 Gigabit NICs, RJ-45 |
Serial | 1xRS-232 (DB-9), Serial | 1xRS-232 (DB-9), Serial | 1xRS-232 (RJ-45) |
Fiber | Optional | No | No |
USB | 0 | 0 | 2 |
Configuration Logging and Monitoring |
Web Interface | GUI-based (HTTPS) | GUI-based (HTTPS) | GUI-based (HTTPS) |
Command Line Interface | SSH or Telnet (command-based) | SSH or Telnet (command-based) | SSH or Telnet (command-based) |
Logging | Squid, Apache, Syslog, W3C | Squid, Apache, Syslog, W3C | Squid, Apache, Syslog, W3C |
Centralized Reporting | Supported | Supported | Supported |
File Transfer | SCP FTP | SCP FTP | SCP, FTP |
Configuration Files | XML-based | XML-based | XML-based |
Centralized Configuration | Supported | Supported | Supported |
Monitoring | SNMPv1-3, email alerts | SNMPv1-3, email alerts | SNMPv1-3, email alerts |
Environmental Operating Ranges |
Toal Current (A) | 4 | 2.5 | 4.85 (max) |
Input Voltage (V) | 100 to 240 VAC | 100 to 240 VAC | 100 to 240 VAC |
Operating Power (W) | 427.1 | 267.3 | 400W (max) |
Total Heat Dissipation (BTU/hr) | 1928.5 | 1471 | 432.6 |
Leakage Current (mA) | 3.5 | 3.5 | 3.5 |
Fan Exhaust Volume (CFM) | 43.1 | 37.4 | Idle at 24°C: 12.3 Full fan speed: 34.4 |
Ambience Noise (Bels) | 6.3 | 6.1 | Idle: 41.3 dBa Stress: 64.2 dBa max. |
Effective MTBF (Hours) | 94400 | 94400 | 107356 |
Operating |
Temperature (°C) | 10°C to 35°C | 10°C to 35°C | -5°C to 45°C |
Relative Humidity (%) | 20% to 80% (noncondensing) | 20% to 80% (noncondensing) | 20% to 80% (noncondensing) |
Altitude (m) | 3048 | 3048 | 3000 |
Vibration | 0.26 Grms at 5-350Hz | 0.26 Grms at 5-350Hz | 0.41Grms, at 3Hz-500Hz |
Non - Operating |
Temperature (°C) | -40°C to 65°C | -40°C to 65°C | -25°C to 70°C |
Relative Humidity (%) | 5% to 95% (noncondensing) | 5% to 95% (noncondensing) | 5% to 95% (noncondensing) |
Altitude (m) | 10,600 | 10,600 | 4570 |
Vibration | 1.54 Grms at 10-250Hz | 1.54 Grms at 10-250Hz | 1.12Grms at 3Hz-500Hz |
Industry Certifications |
RoHS | Yes | Yes | Yes |
Other Certifications | | | Safety:cULus, CB, CCC, BSMI EMC:CE, FCC, VCCI, C-TICK, KC |