MS Word Template 102504 - Amazon Web Services Toolkits/The... · Cisco Virtual Appliances ... Network modules in nine configurations to support fiber and copper with integrated fail-open

© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 1 of 43

Cisco Security

Ordering Guide for

Legacy Sourcefire Products and Services

November 2014

This ordering guide is intended for use by Cisco sales, partners, and distributors and is NOT intended for public use or wide

distribution. Send inquiries to:

Email: [email protected]

Phone: Toll Free (USA): +1-800-225-0905 International +1-408-902-4872 or 8-902-4872 (Cisco internal)

Live Chat (i.e. Click-to-Chat): http://tinyurl.com/ciscosac

Ordering Guide


Contents

Introduction .............................................................................................................................................................. 3 Audience ............................................................................................................................................................... 3 Scope .................................................................................................................................................................... 3

Overview of Solution ............................................................................................................................................... 3

New Cisco Product Names ..................................................................................................................................... 3

Understanding the Product Offers ......................................................................................................................... 4 Cisco FirePOWER Appliances .............................................................................................................................. 4 Cisco Virtual Appliances ....................................................................................................................................... 7

Understanding Software Licenses and Subscriptions ....................................................................................... 11

Understanding the Service Offers ........................................................................................................................ 19

Understanding the Ordering Process .................................................................................................................. 23

Appendix A: All Offerings ..................................................................................................................................... 26

Appendix B: Example Sourcefire vs. Cisco Quote ............................................................................................. 41


Introduction

The ordering guide is designed to help Cisco sales, partners, and distributors order Cisco® Sourcefire solutions.

This guide will help you:

● Understand Cisco security products and service offers

● Understand specific Cisco Security Offers and identify the right ones for your customers

● Make sure that the right quantities and types of parts are selected to reduce the risk of order rejection

● Provide information about the end-to-end Quote-to-Fulfillment process in Cisco Commerce Workspace and

Cisco Service Contract Center for these offers

Audience

This guide is intended for Cisco sales, partners, and distributors qualified to sell Cisco security products and

services based on the Cisco Global Price List.

Scope

This ordering guide provides information about quoting, ordering, and pricing for Cisco security products and

services available based on the Cisco Global Price List.

Overview of Solution

On October 7, 2013, Cisco completed the acquisition of Sourcefire, a leader in intelligent cybersecurity solutions.

Today Sourcefire is part of Cisco’s Security Group, which delivers intelligent cybersecurity solutions, providing one

of the industry's most comprehensive advanced threat protection solution and service portfolios as well as a broad

set of enforcement and remediation options that are integrated, pervasive, continuous, and open. Cisco's threat-

centric approach to security reduces complexity while providing unmatched visibility, consistent control, and

advanced threat protection across the entire attack continuum - before, during, and after an attack.

New Cisco Product Names

In May 2014, Cisco began rebranding Sourcefire products. The legacy Sourcefire product and solutions will use

Cisco master brand with approved FireX names as referenced in Table 1. Please contact your Cisco Security sales

representative or partner directly if you need assistance.

Table 1. New Cisco Product Names

Sourcefire Product Names New Cisco Names

FirePOWER Appliance Cisco FirePOWER Appliance

FirePOWER 7000 Series Cisco FirePOWER 7000 Series Appliances

FirePOWER 8000 Series Cisco FirePOWER 8000 Series Appliances

AMP for FirePOWER Cisco Advanced Malware Protection for Networks Cisco AMP for Networks

FireAMP (for endpoints, Macs, PC, mobile, virtual) Cisco Advanced Malware Protection for xxx Cisco AMP for xxx

Sourcefire SSL Appliance Series Cisco SSL Appliance


Sourcefire Product Names New Cisco Names

FirePOWER Licenses Cisco FirePOWER Services Subscriptions

● Cisco FirePOWER Services Subscription for IPS and Apps

● Cisco FirePOWER Services Subscription for AMP

● Cisco FirePOWER Services Subscription for URL

Cisco FirePOWER Appliance Subscriptions

● Cisco FirePOWER Appliance Subscription for IPS and Apps

● Cisco FirePOWER Appliance Subscription for AMP

● Cisco FirePOWER Appliance Subscription for URL

Virtual Platforms

● FireAMP Private Cloud Virtual Appliance

● Virtual IPS/Virtual FireSIGHT Management Center

● IPS for Crossbeam

Cisco Virtual Appliances

● Cisco Advanced Malware Protection Virtual (AMPv) Private Cloud

● Cisco NGIPSv for VMware

● Cisco NGIPS for Blue Coat X-Series

Sourcefire 3D System Cisco FireSIGHT System

Sourcefire Defense Center Series Cisco FireSIGHT Management Center

Understanding the Product Offers

Cisco’s intelligent cybersecurity solutions operate on purpose-built network security sensor appliances, which

monitor traffic and provide contextual network awareness. These sensor appliances are available as physical fault-

tolerant appliances with a range of throughputs and capabilities. They are also available as virtual appliances for

VMware platforms.

The appliances can be configured as a next-generation intrusion prevention system (NGIPS), a next-generation

firewall (NGFW), or dedicated network-based advanced malware protection (AMP) sensors. More specifics on

these configurations are provided later in this guide.

Cisco FirePOWER Appliances

Cisco FirePOWER network security appliances are based on a flexible enterprise security architecture that delivers

industry-best threat protection and low total cost of ownership (TCO) with unmatched performance, scalability, and

energy efficiency. Cisco FirePOWER network security appliances are the foundation for Cisco’s portfolio of network

security solutions.

There are currently two appliance series which are further divided into models as discussed below.

Cisco FirePOWER 8000 Series Appliances

The higher-end Cisco FirePOWER 8000 Series appliances combine an extensible platform with the industry’s

fastest and most accurate IPS inspection to meet the needs of your network today and into the future. The 8000

Series includes these features:

● 11 throughput models from 2 Gbps to 60 Gbps

● Network modules in nine configurations to support fiber and copper with integrated fail-open bypass and

nonbypass capabilities

● AC or DC power options

● Stacking capability (8140, 8250, and 8350 models)

● FirePOWER Services software release 5.x


Cisco FirePOWER 7000 Series Appliances

The Cisco FirePOWER 7000 Series appliances support midrange and lower-network performance requirements,

avoiding overbuying while offering the same standardized features and management ease as the Cisco

FirePOWER 8000 Series appliances. The 7000 Series includes these features:

● 10 throughput models from 50 Mbps to 1.25 Gbps

● Up to 12 ports to support mixed media

● FirePOWER Services software release 5.x

Table 2 provides more detailed descriptions of the two series.

Table 2. Cisco FirePOWER 7000 and 8000 Series Appliances

Part Number Description

FP7010-K9 Cisco FirePOWER 7010 chassis, 1RU, 8-port copper




FP7110-FI-K9 Cisco FirePOWER 7110 chassis, 1RU, 8-port 1-Gbps Fiber


FP7115-K9 Cisco FirePOWER 7115, 1RU, 4-port copper and 8 SFP ports

FP7120-FI-K9 Cisco FirePOWER 7120 chassis, 1RU, 8-port 1-Gbps Fiber


FP8120-K9 Cisco FirePOWER 8120 chassis, 1RU, 3 slots




FP8270-K9 Cisco FirePOWER 8270 chassis, 6RU, 5 slots (40-Gbps ready)






Cisco FireSIGHT Management Center

The Cisco FireSIGHT Management Center provides a centralized management console and database repository. It

automatically aggregates and correlates the events generated by the Cisco security appliances deployed in a

network. The FireSIGHT Management Center, like its sensor counterpart, is available in a range of physical

appliance models or as a virtual appliance for VMware. A physical Cisco FireSIGHT appliance can manage both

physical and virtual sensors. A virtual Cisco FireSIGHT appliance can also manage both physical and virtual

sensors.


Netmods and Small Form-Factor Pluggable (SFP) Support for FirePOWER Appliances

Cisco FirePOWER 8000 Series appliances ship without any traffic-sensing interfaces and require network modules

(netmods) to function. Netmods are available in two variants:

● Configurable bypass (also referred to as “fail-to-wire”)

● Non-bypass

Both variants offer 1-Gbps copper RJ-45; 1-Gbps 850-nm (SX) fiber; 10-Gbps short-range (SR) and long-range

(LR); and 40-Gbps SR4 (double height, bypass, only for 82XX and 83XX models). Netmods may be mixed on a

single platform if desired.

The 40-Gbps SR4 netmod requires a 40-Gbps NMSB switch module in a single 82XX or 83XX system or in the

primary unit in a stacked configuration. By default, the Cisco FirePOWER 8270, 8290, 8360, 8370, and 8390

appliances are 40-Gbps ready and are able to use the 40-Gbps netmod as shipped. If the 40-Gbps netmod is

desired on an 8250, 8260, or 8350 appliance, the 40-Gbps NMSB switch module is required and must be ordered

separately. This is not an issue for the 8100 Series platforms, because the double-height 40-Gbps netmod will not

physically fit into those units and is therefore not an option with these appliances. Please consult your Cisco

account representative for ordering information.

The Cisco FirePOWER 7115 and 7125 Appliances both offer 4 fixed copper fail-to-wire bypass 1-Gbps interfaces

along with 8 Small Form-Factor Pluggable (SFP) network ports. SFP modules are available in 1-Gbps copper RJ-

45, 1-Gbps 1300-nm (LX) Fiber, and 1-Gbps SX fiber. SFPs may be used in any combination in up to 8 ports per

appliance.

The Cisco FirePOWER 7110 and 7120 Appliances offer 8 fixed copper or fiber 1-Gbps fail-to-wire interfaces, and

the 7010, 7020, and 7030 offer 8 fixed copper 1-Gbps fail-to-wire interfaces.

Sensor “Stacking” Capability

In a Cisco FirePOWER appliance deployment, combining the resources of identically configured devices in a

stacked configuration can increase the amount of traffic inspected on network segments. In a stack, one device is

designated as the primary device and is connected to the network segments. All other devices are designated as

secondary devices and are used to provide additional processing resources to the primary device.

The primary device contains traffic-sensing interfaces and one set of dedicated stacking interfaces for each

additional device connected to it. The sensing interfaces on the primary device are connected to network segments

in the same way as a non-stacked device.

The stacking interfaces on the primary device are connected to the stacking interfaces on the secondary devices

with the stacking cables. Each secondary device is connected directly to the primary device using the stacking

interfaces. A sensing interface on a stacked device is not enabled or functional. The same principle applies to a

third and fourth device in a stack (each is connected to the primary device by means of dedicated stacking

netmods and does not offer a sensing interface).


A stacking module is an optional add-on to the Cisco FirePOWER 8140, 8250, and 8350 Appliances. Stacking

modules are included with the 8260, 8270, 8290, 8360, 8370, and 8390 products:

● The 8140, 8250, and 8350 products do not include a stacking module, but one can be added at a later date

if desired.

● The 8260 and 8360 are delivered with one stacking module in the primary device and one stacking module

in the secondary device.

● The 8270 and 8370 are delivered with two stacking modules in the primary device and one stacking module

in each of the two secondary devices.

● The 8290 and 8390 are delivered with three stacking modules in the primary device and one stacking

module in each of the three secondary devices.

Devices may be stacked in the following 3 configurations:

1. Two FirePOWER 8140s

2. Up to four FirePOWER 8250s

● A FirePOWER 8260 (a 10-Gbps-capable primary device and a secondary device)

● A FirePOWER 8270 (a 40-Gbps-capable primary device and two secondary devices)

● A FirePOWER 8290 (a 40-Gbps-capable primary device and three secondary devices)

3. Up to four FirePOWER 8350s

● A FirePOWER 8360 (a 40-Gbps-capable primary device and a secondary device)

● A FirePOWER 8370 (a 40-Gbps-capable primary device and two secondary devices)

● A FirePOWER 8390 (a 40-Gbps-capable primary device and three secondary devices)

For the Cisco FirePOWER 8260, 8270, 8360, and 8370, you may stack additional devices for a total of four devices

in the stack. The factory configurations for the FirePOWER 8270, 8290, 8360, 8370, and 8390 include a 40Gbps

switch module in the primary device to allow use of the 40Gbps Netmod. For customers that wish to stack

additional devices with deployed units, the 40Gbps switch module is ONLY necessary if they wish to use a 40Gbps

Netmod.

The Cisco FireSIGHT Management Center creates, edits, and manages the stacked configuration. One device is

designated as the primary device and is displayed on the Management Center’s web interface with the primary

role. All other devices in the stacked configuration are secondary and displayed in the web interface with the

secondary role. You use the combined resources as a single entity except when viewing information from the

stacked devices.

Cisco Virtual Appliances

Cisco virtual appliances provide all of the threat protection capabilities found in the Cisco FirePOWER appliances.

Virtual appliances are designed to protect assets in a virtual network and to use a customer’s existing VMware

infrastructure to protect assets in a physical network. Version 5.x virtual appliances can be hosted on VMware

ESX/ESXi. Although not available as a dedicated network-based AMP configuration, the virtual sensor has an AMP

license available (order Virtual Appliance 5.x for the VMware Advanced Malware Protection subscription).

Additionally, a URL Filtering subscription license can be ordered for the virtual appliance.

System requirements are available in the Cisco virtual appliances data sheet:

https://na8.salesforce.com/sfc/p/80000000dRH9KXPLJqkSwWBoW3e_vtLbnXOyiNg=.

https://na8.salesforce.com/sfc/p/80000000dRH9KXPLJqkSwWBoW3e_vtLbnXOyiNg


Regardless of the licenses installed and applied, virtual appliances do not support hardware-based features,

including clustering, switching, routing, Network Address Translation, fast-path and fail-open, nor is VPN

supported. Also, virtual appliances do not have a web-based interface.

The Cisco FireSIGHT Management Center

The Cisco FireSIGHT Management Center provides a centralized management point and an event database for

sensor deployment. Physical and virtual Cisco FireSIGHT appliances aggregate and correlate intrusion, file,

malware, discovery, connection, and performance data. This capability allows you to monitor the information that

your devices report in relation to one another and to assess and control the overall activity that occurs in your

network.

Key features of the Cisco FireSIGHT Management Center include:

● Device, license, and policy management

● Event and contextual information displayed in tables, graphs, and charts

● Health and performance monitoring

● External notification and alerting

● Correlation and remediation features for real-time threat response

● Custom and template-based reporting

● Integration with a variety of third-party systems, such as firewalls, routers, log management, security

information and event management (SIEM), trouble ticketing, patch management, and other technologies

Cisco FireSIGHT Management Centers are selected based on the number of sensor appliances and events to

monitor. Cisco FireSIGHT Management Center appliances 750, 1500, and 3500 (see Table 3), when bundled with

a FireSIGHT license, require Cisco System 5.x.

Table 3. Cisco FireSIGHT Management Center Appliance Models

Feature FireSIGHT FS750 FireSIGHT FS1500 FireSIGHT FS3500 FireSIGHT FS4000

Maximum number of devices managed

10 35 150 300

Maximum number of IPS events

20M 30M 150M 300M

Event storage 100 GB 125 GB 400 GB 4TB+

Maximum network map (hosts/users)

2,000/2,000 50,000/50,000 300,000/300,000 600,000/600,000

High-availability Lights-out management (LOM)

RAID 1, LOM, high-availability pairing



Note: A Cisco FireSIGHT Management Center appliance must be present for a sensor to function. All sensor

licensing and management is handled by the Management Center.

For those customers with existing deployments and Management Centers, ordering a sensor by itself is

acceptable. For new deployments, it is imperative that a Management Center be ordered with sensor devices.

FireSIGHT licenses are by default included with FireSIGHT Management Centers. This approach helps

ensure that real-time awareness technology is available for the customer. FireSIGHT licenses can also be ordered

separately to add to existing Management Centers.


Optional Licenses for Cisco FireSIGHT Management Centers

In addition to the Management Centers with FireSIGHT bundles, customers may buy separate licenses for the

Management Center.

FireSIGHT licenses (to be added to the existing FireSIGHT Management Center) cannot exceed maximum limits.

Cisco Virtual FireSIGHT Management Centers

Cisco FirePOWER Services software release 5.x for the FireSIGHT Management Center may be hosted on

VMware ESX/ESXi. FireSIGHT Management Centers can manage up to 25 physical or virtual devices. System

requirements are available in the Cisco FirePOWER and Cisco SSL appliance specifications document.

Virtual FireSIGHT Management Centers do not offer high availability. However, native VMware capabilities such as

vSphere High Availability, Distributed Resource Scheduling (DRS), and snapshotting can improve availability.

Similar to the physical FireSIGHT Management Center, both FireSIGHT and Cisco NetFlow licenses can be added

to the Virtual FireSIGHT Management Center.

Cisco FireSIGHT Real-Time Awareness

Cisco FireSIGHT discovery and awareness technology collects information about hosts, operating systems,

applications, users, files, networks, geolocation information, and vulnerabilities. You can use the Management

Center’s web interface to view and analyze data collected by FireSIGHT. You can also use this data to help you

perform access control and modify intrusion rule states. When ordering Cisco FireSIGHT functionality, confirm that

the customer is running Version 5.x, which is required for the FireSIGHT license.

Cisco SSL Appliances

Cisco SSL appliances (see Table 4) decrypt SSL traffic so that inspection technologies like Cisco NGIPS can

analyze and block attacks that would otherwise be obfuscated in the encrypted stream. Sales of the Cisco SSL

appliances usually require that the customer has Cisco FirePOWER appliances installed already or that the

purchase is part of an opportunity that includes Cisco FirePOWER appliances running NGIPS. When the Cisco

SSL appliance is used, in-line traffic is decrypted, inspected by the NGIPS, and then re-encrypted and forwarded

back into the network. This process is transparent to the user. Dedicated SSL appliances avoid this scenario and

are ideal for high-throughput requirements. Network appliances that perform both SSL decryption and NGIPS at

the same time can introduce significant performance issues.

You can deploy Cisco SSL appliances as a transparent proxy to detect SSL sessions on all ports, not just port 443.

Since it can be deployed as a “bump on the wire,” the appliance does not require significant network

reconfiguration, IP address changes, topology changes, or modification to client IP and web browsers. Further,

transparent SSL proxies see all network traffic, not just SSL, and have the ability to cut through non-SSL flows

without introducing any significant latency. By contrast, traditional SSL proxies require IP address configuration and

possibly network topology changes to inspect traffic. These SSL proxies are then vulnerable to all attacks, just as

any other host or network element would be. Also, these proxies often assume that all SSL traffic is directed to port

443 and ignore SSL traffic on other ports.

The Cisco SSL appliances support passive as well as inline configuration. In this scenario, the appliance sends

traffic to a Cisco FirePOWER appliance running IPS, which is also running in passive mode and is not required to

block any traffic.


The Cisco SSL appliances are versatile and can inspect both inbound and outbound SSL traffic. With inbound SSL

inspection, the appliance inspects traffic destined for an enterprise’s web servers hosting SSL applications. With

outbound SSL inspection, the appliance inspects SSL application traffic outside the enterprise, such as Google

Gmail traffic. Cisco SSL appliances are available with a range of interface options, which all include a

programmable fail-open capability.

Note: Software Version 5.4 expected to release later in 2014 will include integrated SSL functionality.

Table 4. Cisco SSL Appliance Models

SSL1500 SSL2000 SSL8200

Form factor 1RU 1RU 2RU

Inspection 1.5 Gbps 2.0 Gbps 3.5 Gbps

Series 7100 Series 8100 Series 8200 Series

Ports 8 ports 1-Gbps copper or 1-Gbps fiber

Modular: up to 3 netmods; copper, SX or SR

Modular: up to 7 netmods; copper, SX or SR

Power Redundant AC Redundant AC or DC Redundant AC or DC

Cisco NGIPS Software for Blue Coat X-Series

The Cisco NGIPS Software for Blue Coat X-Series, formerly known as Crossbeam X-Series, is a software-only

version of the Cisco NGIPS sensor designed to run on the X-Series operating system (XOS).

The X-Series is a chassis-and-blade-based range of security appliances that collapse switching, routing, and

computation into a single fault-tolerant solution. Blades are called application processing modules (APMs).

Customers can run multiple security applications on the system concurrently and add more APMs as more capacity

is needed. Any of the multiple applications running on the chassis can be configured to failover to a common

backup APM. For example, one APM could act as a standby for three blades running IPS, firewall, and web

inspection. This eliminates the need to purchase a backup APM for each production APM and its respective

security application.

Cisco offers X-Series software on a per-instance basis. Each APM usually runs one instance of the Cisco

application. There are two price points for the licenses targeting two APM product families with different computing

capacities. Licenses are installed on the Cisco FireSIGHT Management Console and determine the number of

APMs that can be supported from a policy management and event collection standpoint.

Cisco NGIPS Software for Blue Coat X-Series Bundle PID’s

For convenience and ease of ordering, bundles have been created that include both the NGIPS license as well as

the choice of 1 or 3Y NGIPS subscriptions. The PID’s are listed in the Appendix and contain a “-BUN” suffix.

Qualys Connector

The Qualys Connector is a software application that collects Qualys Guard vulnerability report data and sends it to

the Cisco FireSIGHT Management Center. The Qualys data is then aggregated with Cisco’s vulnerability

information found in the 'Host Map'. Customers can choose to use Cisco or Qualys data, or both, for Impact Flag

Calculation and automatic Rule Recommendations.

The Qualys Connector is a software application that collects Qualys Guard vulnerability report data and sends it to

the Cisco FireSIGHT Management Center. The Qualys vulnerability data is then aggregated with Cisco's

vulnerability information found in the 'Host Map'. Customers can configure “Impact Flag” correlation as well as

“Rule Recommendations” to be driven by the Qualys data set, the Cisco data set or the combination of both.


Understanding Software Licenses and Subscriptions

A Cisco FirePOWER appliance is a configurable solution platform. It can be deployed as a NGIPS, a NGFW, and

as a network AMP. The sensor configuration is determined by the licenses and subscriptions enabled on the

appliance.

All FirePOWER appliances ship with a Base license (intrusion prevention and detection plus application

identification and application control, or “IPS and Apps”). An optional VPN license is offered, as well as optional

subscriptions for AMP and for URL and content filtering. All services require annual subscriptions to function and to

issue critical signatures and updates to the customer.

When customers order a subscription, they receive an activation key unique to that product. They use this key to

generate a license to install the sensor on their FireSIGHT Management Center. The Management Center controls

and manages all sensor subscriptions.

The license structure consists of the following components:

1. Base license (TA): IPS (intrusion detection and prevention, or IDS/IPS) and Apps (application identification

and application control in an NGFW). The Base license is included with the appliance

(for example, FP7010-BUN).

2. These licenses require an annual subscription for functionality and updates. For example, FP7010-TA-1Y is a

one-year license to receive IPS and Apps updates.

3. VPN: site-to-site virtual private network. An example of this optional feature license would be FP7010-VPN-K9.

4. Advanced malware protection (M): A network-based optional feature that requires an annual subscription. An

example of a one-year bundle with IPS and Apps would be FP7010-TAM-1YR.

5. URL and content filtering (C): An example of a one-year subscription of this option bundled with IPS and Apps

updates would be FP7010-TAC-1YR.

Sample Valid Cisco Commerce Workspace Configuration for the FirePOWER 7010 Appliance

Table 5 features a Cisco Commerce Workspace (CCW) configuration for the FirePOWER 7010 appliance.

Note: For new orders, you are required to order a Bundle (BUN) PID which combines both hardware, and the

software subscription, including the hardware SMARTnet support (8x5xNBD). Cisco only offers a choice to select

either 1 year or 3 year software subscription.

Table 5. CCW Configuration for FirePOWER 7010 Appliance

Line PID Description Notes

1.0 FP7010-BUN Cisco FirePOWER 7010 chassis and Subscription Bundle

Base Bundle PID for FP7010 Bundle

1.1 FP7010-K9 Cisco FirePOWER 7010 Chassis, 1U, 8 Port Copper FP7010 Hardware Appliance

1.1.0.1 CON-SNT-FP7010 SMARTNET 8X5XNBD FirePOWER FP7010

Duration: 12 Month(s)

SMARTnet Support Contract (HW and SW)

1.1.1 CAB-AC AC power cord (North America), C13, NEMA 5-15P, 2.1 m

Power cord (required selection)

1.1.2 SF-FP5.2-K9 Cisco FirePOWER software release 5.2 FirePOWER software version (required selection)

1.1.3 FP7010-VPN-K9 Cisco FirePOWER 7010 VPN license VPN license (optional selection)

1.1.4 FP-PWR-BRICK Cisco FirePOWER Power Brick for 7000 Series Power supply (Included by default, no user selection)

1.1.5 FP7000-RACK Cisco FirePOWER Appliances - Rack Kit (Tray) Provides rackmount capability for up to TWO (2) FP7000 Series appliances


Line PID Description Notes

1.1.6 FP7010-CTRL-LIC Cisco FirePOWER 7010 Control license (Included by default, no user selection)

1.2 FP7010-TA-LIC= Cisco FirePOWER 7010 IPS and Apps Service licenses

Subscription container selection for IPS and Apps, 1 year (required selection)

1.2.0.1 FP7010-TA-1Y Cisco FirePOWER 7010 IPS and Apps 1-year Service subscription

Duration: 12 Month(s)

Subscription for IPS and Apps, 1 year (required selection)

Any 7000 or 8000 Series model appliance and virtual appliance can be configured with a combination of these

licenses or all of them, depending on the customer’s application.

Base Configuration

The Base license configuration includes the IPS and Apps license.

“IPS” comprises a passive intrusion detection system (IDS) mode, which notifies the customer of any suspicious

network traffic and behavior, while the inline IPS mode blocks threats. “Apps” comprises the Application Control

license and provides application identification and control (NGFW functionality). The Apps functionality provides

control of more than 1,800 applications, detected and classified by risk and business relevance.

Additional Sensor Feature Licenses

VPN License

The VPN feature is used to establish site-to-site VPN communications between Cisco sensors. VPN is a perpetual

license and requires that the customer run Version 5.x of the system software.

URL Filtering Annual Subscription

The URL Filtering annual subscription is available for any Cisco FirePOWER appliance, adding the ability to filter

more than 280 million top-level domains by risk level and more than 82 categories. URL filtering can be purchased

as a standalone license or bundled with the Base (IPS and Apps) and AMP licenses.

AMP for Networks Annual Subscription

AMP for Networks is a license option that can be added to the Base configuration of a FirePOWER appliance at

any time. It delivers inline network protection against sophisticated malware. See later AMP sections for more

detailed information.

Any part number with “AMP” after the appliance name denotes an AMP license that can be added later. Any part

number with “M” for a new appliance includes the AMP license.

For example, these part numbers (with descriptions) are for customers who want to add AMP only:

PID Description

FP7010-AMP-1Y (FirePOWER 7010 Advanced Malware Protection 1YR Subscription)

FP7010-AMP-3Y (FirePOWER 7010 Advanced Malware Protection 3YR Subscription)

These bundles include AMP:

PID Description

FP7010-TAM-1Y (Cisco FirePOWER 7010 IPS, Apps and AMP 1YR Subscription)

FP7010-TAM-3Y (Cisco FirePOWER 7010 IPS, Apps and AMP 3YR Subscription)

FP7010-TAMC-1Y (Cisco FirePOWER 7010 IPS, Apps, AMP and URL 1YR Subs)

FP7010-TAMC-3Y (Cisco FirePOWER 7010 IPS, Apps, AMP and URL 3YR Subs)


Product High-Availability Configurations

Type 1: Sensor Clustering for High Availability

● If the customer wants high availability for sensors, two appliances are required.

● Appliances must be of the same model and generation.

● Both appliances must be identically licensed and have support.

● Licenses will be applied to the same primary FireSIGHT Management Center managing the

high-availability pair.

Type 2: High Availability for Cisco FireSIGHT Management Centers

● If customer wants high availability for the Cisco FireSIGHT Management Center, an additional FireSIGHT

appliance is required.

● The secondary FireSIGHT Management Center must be of the same model and generation as the primary.

● If the primary FireSIGHT Management Center has a FireSIGHT license, it is not necessary to order an

additional FireSIGHT license for the secondary FireSIGHT Management Center.

● License keys for all sensors, feature licenses (including FireSIGHT), and subscriptions managed on the

primary FireSIGHT Management Center can be duplicated and loaded unto the secondary FireSIGHT

Management Center, using the original activation keys.

Product Licensing and License Activation

● License activation keys are used to generate licenses to activate the functionality on all virtual and physical

appliances. License keys activate added software features such as VPN and/or subscription-based features

such as URL filtering and AMP for Networks.

● The customer logs on to https://cisco.com/go/licensing and uses the activation key to request an appliance

or feature license(s). This license is then applied to the FireSIGHT Management Center that is going to

manage the feature or appliance.

● Exceptions:

◦ FireSIGHT Management Center (physical or virtual) does not require an activation key, and none is

issued.

◦ AMP for Endpoints does not require an activation key at this time.

Cisco Advanced Malware Protection Solutions

Cisco Advanced Malware Protection (AMP) solutions continuously aggregate data and events across extended

networks, endpoints, mobile devices, and virtual environments. They deliver visibility and control against malware

and persistent threats across the full attack continuum - before, during, and after an attack.

In addition, Cisco AMP solutions use the power of Big Data analytics, continuous analysis, and real-time security

intelligence to deliver detection, tracking, analysis, and remediation to protect the enterprise against malware and

targeted persistent attacks. Continuous analysis leverages cloud-based big data analytics to go beyond point-in-

time detection, constantly re-evaluating new and historical data gathered over time to detect stealthy attacks. This

enables robust retrospective security tools that alerts security teams to a malware attack that evaded initial

detection but was later identified, often the case with targeted zero-day attacks.

https://cisco.com/go/licensing


The various AMP solutions listed below offer:

● Malware blocking and continuous analysis

● Tracking of malware proliferation and activity via trajectory tools

● Indications of compromise

● Root cause analysis

● Outbreak control

● Impact reporting

With these capabilities, the AMP Solution enables security operations to focus on the threats that matter most,

increasing security effectiveness and operational efficiency while decreasing incident response times.

Cisco Advanced Malware Protection for Networks

Cisco AMP for Networks is based on the FirePOWER platform. It delivers network-based protection against

targeted and advanced malware attacks. AMP for Networks is available in two deployment options:

● AMP for Networks Add-On Subscription: a software-enabled subscription that can be added to any

FirePOWER appliance as part of either an NGIPS or an NGFW configuration

● Dedicated AMP for Networks Appliance: a purpose-built FirePOWER-based appliance that provides

enhanced processing and storage facilities over standard FirePOWER appliances

Note: A separate subscription is required for AMP functionality, even with dedicated AMP for Networks

Appliances.

Both AMP for Networks deployment options offer:

● Detection and blocking of malware-infected files attempting to enter or traverse the network

● Continuous analysis and retrospective alerting for malware attacks that evaded initial detection but were

later identified, often the case with targeted zero-day attacks

● Tracking of malware that has entered the network; identifying point of entry, propagation, protocols used,

and users and host(s) affected

● Correlation of malware-related events to broader security events, like intrusion events, with integrated

contextual data that enables a deeper understanding of malicious activity and its impact on assets

Furthermore, all FirePOWER harware platforms, in which AMP for Networks is deployed, offer:

● Ability to enable AMP, NGIPS, NGFW, and URL filtering functionality concurrently

● FirePOWER acceleration

● Redundant Power Supplies

● Integrated Lights Out Management

● Solid State Storage

● Centralized Management via the FireSIGHT Management Center


Cisco Advanced Malware Protection Dedicated Appliances - AMP7150 and AMP8150

Cisco Advanced Malware Protection for Dedicated Appliances AMP7150 and AMP8150 give you all of the same

benefits offered in the AMP for Networks solution above, but is deployed on appliance models that offer dedicated

processing power and storage to meet goals in demanding environments.

● AMP8150 - This dedicated AMP model offers

◦ Up to 2 Gbps of network-based advanced malware protection performance

◦ 400 GB of storage capacity

◦ Modular network interfaces using Sourcefire Network Modules (Netmods)

◦ Fixed 10/100/1000 RJ-45 (Copper) interface Netmods

(Netmods are available with and without integrated fail-to-wire operation)

◦ SFP/SFP+/QSFP interface Netmods for total network media flexibility

● AMP7150 - This dedicated AMP model offers

◦ Up to 500 Mbps of network-based advanced malware protection performance

◦ 120 GB of storage capacity

◦ Eight (8) SFP ports for network media flexibility

(non-integrated fail-to-wire operation)

◦ Four (4) 10/100/1000 RJ-45 (Copper) interfaces

(integrated fail-to-wire operation)

Cisco Malware Storage Packs

Cisco offers additional storage for the 8100 and 8200/8300 Series Appliances in the form of Malware Expansion

Packs. The Malware Storage Packs offer a second solid state storage drive (SSD) that can be added to the 8100

and 82/8300 appliances via a simple drive carrier installation. The Malware Storage Packs are dedicated storage

for malware purposes and are NOT general-purpose storage expansion. There are two PID’s for the Malware

Storage Packs:

PID Description

FP8100-SSD480= Cisco FirePOWER Malware Storage, 1U 8100 Series, SSD, 480GB

FP8200-SSD480= Cisco FirePOWER Malware Storage, 2U 8200 and 8300 Series, SSD, 480GB

Cisco Advanced Malware Protection for Endpoints

Cisco Advanced Malware Protection for Endpoints delivers endpoint protection against malware for Windows-

based systems, including mobile devices in both physical and virtual environments.

These deployment options make possible:

● Defense of endpoints and remote workers against sophisticated malware from the point of entry through

propagation, to post-infection remediation

● Detection and blocking of malware, confirmation of infection, path-tracing behavior analysis, target

remediation, and a report on malware impact


● Speedy response times and automation of remediation to prevent future attacks, mitigate damage, and

eliminate the risk of reinfection

● Identification of indicators of compromise at both the network and system levels, typically missed by single-

purpose detection technologies

● Use of Cisco’s Security Intelligence Operations global network of sensors, as well as intelligence collected

from theTalos Security Intelligence and Research Group, to provide “collective security intelligence”

protection to benefit from the billions of malware samples analyzed monthly

The Cisco AMP Windows Connector supports both 32-bit and 64-bit versions of these operating systems. The

Cisco AMP Mac Connector supports 64-bit versions of OS X. The Cisco AMP Mobile supports Android 2.2 and

later.

Cisco Advanced Malware Protection for Virtual Appliances

The Cisco AMP for Virtual Appliances has the following minimum hardware and software requirements:

● vSphere ESX 5 or later, dual core processors, 16 GB RAM, 75 GB free disk space.

The Cisco AMP for Virtual Appliances currently supports the following connector operating systems:

● Microsoft Windows XP with Service Pack 3 or later

● Microsoft Windows Vista

● Microsoft Windows 7

● Microsoft Windows Server 2003

● Microsoft Windows Server 2008

● AMP for FirePOWER (5.3 or later)

Cisco Advanced Malware Protection Virtual (AMPv) Private Cloud

AMP Private Cloud delivers all of the same benefits as the solutions above, offering comprehensive advanced

malware protection using big data analytics, continuous analysis and security intelligence, however, it is delivered

as a single on-premises solution. This solution enables organizations with strict privacy requirements to deploy a

private cloud appliance to service their endpoint connectors. Along with a high level of security data privacy, AMP

Private Cloud provides detection, blocking, tracking, analysis, and remediation to protect the enterprise against

targeted and persistent malware attacks.

Key benefits include:

● Ensures privacy via a self-contained virtual machine - The AMP Private Cloud and management system

is a single on-premises solution that customers install on their own hardware.

● Delivers network and endpoint protection - The AMP Private Cloud virtual appliance connects to

endpoints via AMP Connectors and directly to AMP for Networks for protection against network malware.

● Scales to meet expanding needs - Each Private Cloud instance supports up to 10,000 connectors and

multiple Private Cloud virtual appliances can be added to the environment.


Software Subscription Licenses

Cisco FirePOWER appliances offer a rich set of software features. These software features are bundled in logical

groupings to provide value and convenience to customers, the field, and partners. Full descriptions of each

software feature offering are provided in Appendix A, including a list of all of the major components of each feature

bundle.

Purchase of a subscription entitles a customer to activate the features on an associated platform. For example,

customers who buy a Cisco FirePOWER 7010 IPS and Apps one-year Service subscription are entitled to apply

the subscription to a single FirePOWER 7010 Appliance. Further instructions later in this guide will explain the

process for ordering and activating these subscriptions.

Cisco FireSight Management Appliances differ slightly in software updates. A separate “SASU” (Cisco Software

Application Support plus Upgrades) PID is added to the configuration when the management appliances are

configured to allow the customer to access upgrades to the FireSIGHT Management appliance.

Note: Customers may purchase and activate software features for an associated platform only because the

subscriptions are specific to a platform. All subscriptions provide the appropriate platform name in the description

(for example, “Cisco FirePOWER 7010 IPS and Apps 1YR Service Subscription” is for use only with the

FirePOWER 7010 Appliance).

Term-Based Subscription Licenses

All software feature licenses are term-based subscriptions, available for one or three years. Each software feature

or feature set has a corresponding part number for the three term options. For example, if a customer desires just

the IPS and Apps license (“TA”) set for a one-year term, the appropriate part number is Cisco FirePOWER FPXXX

IPS and Apps 1YR Subscription (see Figure 1). This part number entitles the customer to the features listed in the

description for the associated bundle for one year. The customer may choose to buy multiple-year terms such as

Cisco FirePOWER FPXXX IPS and Apps 3YR Subscription. The multiyear subscriptions provide discounts over a

single year.

Following the completion of the term, the licenses will be deactivated unless they are renewed.

Figure 1. Example of FirePOWER Basic License for IPS and Apps (NGFW) for One-Year Term


If a customer wishes to bundle multiple features on top of the IPS and Apps Base license, part numbers are

similarly constructed. For example, if a customer desires the IPS and Apps license plus AMP and URL filtering for

the FirePOWER 7010 appliance for three years, the part number shown in Figure 2 is selected:

Figure 2. Example of FirePOWER License for IPS, Apps, AMP, and URL Filtering for a Three-Year Term

Figure 3. Subscription Decoder Key Table

TA “IPS and Apps” Updates Subscription (1 or 3Y Options)

TAC “IPS and Apps” Updates Plus URL Filtering Subscription (1 or 3Y Options)

TAM “IPS and Apps” Updates Plus AMP Subscription (1 or 3Y Options)

TAMC “IPS and Apps” Updates Plus URL Filtering and AMP Subscription (1 or 3Y Options)

Quantity-Based Subscription Licenses

The Cisco portfolio uses tiered quantity-based pricing, with the user count entered as the applicable quantity. Sales

and partner representatives should work with customers to determine the correct sizing for each customer

deployment so that the user count is selected for each license. Cisco Commerce Workspace and Cisco Service

Contract Center automatically select the appropriate part number associated with the user count that is entered.

They then apply the associated price point to the entered quantity to generate a total price for that particular

product.

Software Subscription Support

Cisco security licenses include software subscription support. Packaged with Cisco security solutions, software

subscription support is essential to keeping your business-critical applications available, highly secure, and

operating at optimal performance. For the term of your software subscription licenses, you will receive timely,

uninterrupted access to the latest software updates and major upgrade releases that may contain significant

architectural changes and new features and functionality. With software subscription support, you will have the

current Cisco security solution working to protect your business. You will also have access to a wide range of

online tools and communities that can help you solve issues quickly, maintain business continuity, improve your

competitiveness, and make the most of limited resources through increased productivity.


This support entitles customers to the services listed below for the full term of the purchased software subscription:

● Software updates and major upgrades, to keep applications performing optimally at the most current

feature set

● Access to the Cisco Technical Assistance Center (TAC), which provides fast, specialized support

● Online tool building, to expand in-house expertise and boost business agility

● Collaborative learning, to provide additional knowledge and training opportunities

No additional products or fees are required to receive these services with a software subscription.

Understanding the Service Offers

Cisco Advanced Services

The Cisco Global Security Solutions team provides comprehensive assessment, design, deployment, migration

and optimization services.

Cisco Security Deployment Service for Firewalls and IPS is an Advanced Service Fixed (AS-F) offer that

provides pre-deployment, deployment, and post-deployment activities for up to 15 sensors for Customer to enable

a Cisco Firewall and IPS solution. Services are delivered both remotely and onsite to customer.

Cisco AS-Fixed Service Structure and the Global Bookings Policy for AS Fixed Services

All Cisco service offers that are defined by the AS-Fixed structure have a single Advanced Services PID

(project ID) associated to a single service offer. There is one AS-Fixed service description associated to each AS-

Fixed SKU. There is a 1-to-1-to-1 relationship regarding the AS-Fixed service description, the AS-Fixed SKU, and

the AS-Fixed PID. When the AS-Fixed service is ordered in the CCW ordering tool, the associated PID is

automatically created. The Cisco Advanced Services delivery personnel that are responsible for delivering the AS-

Fixed service will be auto-notified of the new project and will use that project to track all of their delivery activities

for the fulfillment of the service.

The Cisco current global bookings policy for AS-Fixed service offers defines specific time parameters for starting,

delivering and invoicing all AS-Fixed projects.

Important AS-Fixed Bookings Policy Note: As of May 2014, the current Cisco bookings policy for AS-Fixed

services requires that every AS-Fixed project must be started within 90 days of ordering the service and completed

(delivered to the customer) within 90 days of the project start date. Therefore, an AS-Fixed SKU must be used only

when the customer understands and agrees that each AS-Fixed line item on a given order must be delivered within

6 months of the original order.

To order Cisco Security Deployment Services Firewalls and IPS in Cisco Commerce Workspace, use the following

AS-F part number:

AS-F Part Number Description Price

AS-F: ASF-CORE-FW-DEP Cisco Security Deployment Services for IPS/Firewalls Fixed price per install site country

Cisco Advanced Services Transaction (AS-T)

The following Advanced Services Transaction (AS-T) offers are custom scoped and priced and written on a

Statement of Work (SOW). Partners will need to engage a Cisco Services account manager to purchase them.


Cisco Security Plan and Build Services helps customers develop and deploy a comprehensive security strategy

they can rely on to deliver the industry's most comprehensive advanced threat protection solution. This service

incorporates a best-practice review, design, and deployment procedure followed by a thirty-day post deployment

service to help ensure the system is alerting properly.

Cisco Security Migration Services will help customers move from Version 4 of software on Sourcefire appliances

to the most current version. Cisco will perform an analysis of the current Sourcefire environment, develop a

migration plan, test the plan in a lab, and perform the migration in the production environment.

To order Cisco Advanced Services Transaction, use the AS Quoter Tool and the following AS-T part numbers:

AS-T Part Numbers Description Price

AS-SEC-CNSLT (-A, -L) Cisco Security Plan and Build Services Custom priced

AS-SEC-CNSLT (-A, -L) Cisco Security Migration Services Custom priced

The Security Account Manager is responsible and accountable for creating an accurate AS-T quote and SOW, and

must engage delivery experts (Executive Client Services Manger/Client Services Manager) within the Cisco Global

Security Solutions organization to effectively build out a properly scoped SOW.

To better understand how to create AS-T quotes and orders for customers and partners, review the AS Transaction

Sales and Delivery Guide.

Note: Only Cisco employees have access to this document. Partners must work with their assigned Cisco

Account Representative to generate a SOW.

The AS Transaction Quoting Tool allows you to input key requirements for the enagement and will provide you with

the necessary documentation to submit with the SOW.

Cisco Security Optimization Service is an Advanced Services Subscription (AS-S) service that combines

network security audits and assessments, optimization support, knowledge and learning activities to help

customers address today’s security needs while planning for the future. It provides access to an engineer (or a

subject matter expert) that can perform a select number of services per the customer’s needs. This service can

also provide customers with a technical account manager who will immerse himself or herself in the customer’s

environment, serving as a full-time or part-time consultant. The technical account manager provides assistance

with extended deployment, onsite tuning and analysis support, ongoing operations, project resource augmentation,

or any combination of these activities.

To order Cisco Security Optimization Service, use the following AS-S part number:

AS-S Part Numbers Description Price

AS-S: CON-AS-SEC Cisco Security Optimization Service Subscription

The AS Subcription Sales and Delivery Guide details how to process a quote and book an AS Subscription order.

Cisco Technical Services

Cisco Technical Services can be quoted and ordered in Cisco tools, including the Cisco Service Contract Center

(CSCC), and Cisco Commerce Workspace (CCW). Tool usage will vary depending on service offer, partner type,

timing of services being attached and whether the service is new or a renewal of an existing service offering.

http://wwwin-eng.cisco.com/CA/AS/Global_Policy_and_Process/Deal_Hub/AS_Deal_Mgt_Guides/Sales_and_Delivery_AS_Transaction_Guide.pdf

http://wwwin-eng.cisco.com/CA/AS/Global_Policy_and_Process/Deal_Hub/AS_Deal_Mgt_Guides/Sales_and_Delivery_AS_Transaction_Guide.pdf

http://iwe.cisco.com/web/view-post/post/-/posts?postId=357800189

http://wwwin-tools.cisco.com/cecsearch/display?url=http%3A%2F%2Fwwwin-eng.cisco.com%2FCA%2FAS%2FGlobal_Policy_and_Process%2FDeal_Hub%2FAS_Deal_Mgt_Guides%2FSales_and_Delivery_AS_Subscription_Guide.pdf&pos=2&strqueryid=1&websessionid=OEDF6RWtiaPTaFFZNttTXy5&query=sales%2Band%2Bdelivery%2Bguide


Cisco SMARTnet Service*

Customers purchase Cisco SMARTnet™

Service for Cisco hardware (see Table 6). Cisco SMARTnet Service gives

customers access to a wealth of Cisco support tools and expertise, providing them with greater network availability

and performance while reducing operating costs. Cisco SMARTnet Service provides:

● Global 24-hour access to the Cisco Technical Assistance Center

● Access to online knowledge base, communities, and tools

● Current hardware replacement option: next business day, where available

● Operating system software updates

● Smart, proactive diagnostics and real-time alerts on devices enabled with Smart Call Home

Please refer to the following link for more detailed information regarding Cisco SMARTnet:

http://www.cisco.com/en/US/products/svcs/ps3034/ps2827/ps2978/serv_group_home.html.

Recommended Attach * Technical service is automatically attached at the point of the product sale so that customers get the necessary

support and entitlement and the best possible return on investment. When ordering Cisco products in the Cisco

Commerce Workspace, the appropriate SMARTnet service item(s) will automatically be added to your quote. It is

not recommended that customers purchase security products without the appropriate services attached.

Table 6. Cisco SMARTnet SKUs for FirePOWER NGIPS

Appliance Product Number License Number Software Subscription Number

Cisco SMARTnet SKU

Cisco FirePOWER 8250 chassis, 2RU, 7 slots FP8250-K9 FP8250-AMP-LIC= FP8250-AMP-1Y CON-SNT-FP8250

Cisco FirePOWER 8260 chassis, 4RU, 6 Slots FP8260-K9 FP8260-AMP-LIC= FP8260-AMP-1Y CON-SNT-FP8260

Partner Support Services (PSS)

For Partners who are qualified to offer Partner Support Services (PSS), please refer to the Cisco Services Partner

Program Guide for quoting and ordering information.

Table 7. Example: Cisco Partner Services Support SKUs for FirePOWER Network Modules and Virtual FireSIGHT

Hardware Product Number PSS SKU for USA & Canada PSS SKU for Rest of World

Cisco FirePOWER Network Modules

FPNM-2LR-10G-BP= CON-PSUT-NM-2LR CON-PSRT-NM-2LR

Software Product Number PSS SKU (Worldwide)

Cisco Virtual FireSIGHT FS-VMW-SW-K9 CON-PSUU-VMW

Cisco Software Application Support Service plus Upgrades (SASU)*

Cisco Software Application Support Service plus Upgrades (SASU) is essential to keeping business-critical

applications available, highly secure, and operating optimally. SASU should be ordered with the Virtual FireSIGHT

Management Center. Cisco SASU includes:

● Registered access to Cisco.com

● 24-hour access to the Cisco Technical Assistance Center and Cisco software specialists

http://www.cisco.com/en/US/products/svcs/ps3034/ps2827/ps2978/serv_group_home.html

http://www.cisco.com/web/partners/services/programs/collaborative/downloads/PSS_Partner_Ordering_Guide.pdf

http://www.cisco.com/web/partners/services/programs/collaborative/downloads/PSS_Partner_Ordering_Guide.pdf


● Maintenance and minor software release updates

● Major software upgrade releases

*Please refer to the following link for more detailed information regarding Cisco SASU:

http://www.cisco.com/en/US/services/ps2827/ps2993/services_at_a_glance_sas_sasu.pdf.

Recommended Attach

Technical service is automatically attached at the point of the sale in Cisco Commerce Workspace so that

customers have access to software subscription support and critical software upgrades the first year after

purchase. When ordering Cisco Virtual FireSIGHT Management Center in the Cisco Commerce Workspace, the

appropriate Cisco SASU service item(s) will automatically be added to your quote as it is not recommended that

customers buy security products without the appropriate service attached.

Cisco Learning Services

Cisco Learning Services include technical training and certification programs on many Cisco products and their

underlying technologies. Security classes provide the knowledge, insight, and hands-on lab experiences needed to

help customers deploy, integrate, troubleshoot, and manage their Cisco networks more effectively.

Four new Security courses and certifications have been added to Cisco Learning Services:

● Securing Cisco Networks with Sourcefire Intrusion Prevention System (SSFIPS)

● Securing Cisco Networks with Snort Rule Writing Best Practices (SSFRULES)

● Securing Cisco Networks with Sourcefire AMP for Endpoints (SSFAMP)

● Securing Cisco Networks with Open Source Snort (SSFSNORT)

Ordering Process and Course Registration

● To view a list of security courses and their descriptions, go to the Cisco Security Resource Training website.

● Customers can register for a course, view published schedules, and locate Cisco Learning Partners, go to

the Cisco Learning Locator, and enter the name of the desired course in which you are interested.

● By selecting a course from within the Cisco Learning Locator tool, customers can obtain pricing information

and the number of Cisco Learning Credits required for each course and how to contact Cisco Learning

Partners for additional information.

● Customers can purchase learning credits at the same time they purchase Cisco products and services. For

more information, access Cisco Learning Credits Quick Reference Guide to learn more.

● If a customer is interested in hosting a closed-enrollment, or private, on-site training class, Cisco Learning

Partners may also be contacted to obtain custom quotations in relevant currencies and Cisco Learning

Credits.

Note: Customers may also access Cisco Learning Network to access supplemental training options.

Exam Certification Ordering and Registration Process

● Cisco certification exams are purchased directly from Pearson VUE website.

● Customers log in or create a new user ID and password on Pearson VUE to purchase, schedule and

register for certification exams.

● Cisco certification exams are delivered in a proctored environment at a Pearson VUE Authorized Test

Center. Customers can schedule a certification exam or find a local test center by going to Pearson VUE

website.

http://www.cisco.com/en/US/services/ps2827/ps2993/services_at_a_glance_sas_sasu.pdf

http://www.cisco.com/web/learning/learning_services/courses/security.html

http://tools.cisco.com/GlobalLearningLocator/

http://www.cisco.com/web/learning/le31/l59/docs/CLC_QuickRef_Customer.pdf

https://learningnetwork.cisco.com/

http://www.vue.com/cisco

http://www.vue.com/cisco/

http://www.vue.com/cisco/


Understanding the Ordering Process

High-Level Summary of a Cisco Order

There are two primary tools for ordering Cisco products and services. Cisco Commerce Workspace (CCW) is used

for all product and new service orders, and Cisco Service Contract Center (CSCC) used for service orders

including renewals, software subscriptions, and advanced services. See Table 7 for a comparison of the two tools.

Cisco Commerce Workspace (CCW)

CCW is the primary tool used for ordering Cisco products and new services offered on the Cisco Price List. Three

main steps are involved in creating an order in CCW: creating a quick quote, converting a quote to an order, and

submitting an order (see Figure 4). Details about using CCW can be found here:

http://www.cisco.com/web/partners/events/commerce_workspace.html.

CCW also acts as a quoting, pricing, configuration, and status tool.

Figure 4. Cisco Commerce Workspace Ordering Workflow

Cisco Service Contract Center (CSCC)

The CSCC is the primary tool used for ordering services, purchasing follow-on software subscription licenses, and

processing renewals of service offerings available on the Cisco Price List. Three main steps are involved in

creating an order in the CSCC: creating a quick quote, validating the quote, and submitting an order (see Figure 5

for more detail). Customers and partners use the standard quoting process, while distributors have the option of

using the standard or quick-quote functionality to create a quote in CSCC. Partners and distributors will validate

and save the quote once all software subscription licenses and services have been added prior to ordering.

Note: SMARTnet Renewals in CSCC for services will be available in fiscal year Q2FY15.

http://www.cisco.com/web/partners/events/commerce_workspace.html


Table 8. CCW Compared with CSCC

CCW (With Software and Technical Services)

CSCC Software Renewals and Contract Management

● Quote

● Order

● Configure

● Deal registration

● Quoting and ordering: Follow-on and renewal of software subscription licenses and technical services

● Contract management

CCW CSCC

Initial purchase of Cisco product and technical services X

Add-on additional licenses X X

Add-on additional appliances X

Renewal of current licenses (only 1 Tier) Q2FY15 X

Renewal of additional licenses X X

Renewal with additional licenses and purchase of additional appliances

X (Appliance)

X (Renewal and licenses)

Search and manage contracts contract management actions X

Figure 5. Renew Software and Service Subscriptions (High-Level Workflow)


Cisco Software Fulfillment and Infrastructure Technology (SWIFT) Tool

The Cisco Software Fulfillment and Infrastructure Technology (SWIFT) tool is a framework used for entitlement and

fulfillment of Cisco software licenses. The link to register your PAK Key can be accessed via

https://tools.cisco.com/SWIFT/LicensingUI/Home. Customers and partners use the tool for customer data entry and

activation of software subscription licenses. Customers and partners who successfully place an order for a

software subscription will receive a claim certificate with a product activation key (PAK), which is entered in SWIFT

to provision licenses and associate them to a customer’s deployed appliances.

For more information on quoting, ordering, and product support, please visit the webpages described in Table 9.

Table 9. Cisco Resources

Topic Description

General ordering support Use My Cisco Workspace to open and manage service cases for orders, quotes, returns, deals, service contracts, profiles and logins, tool access, training, reporting, feedback, and more.

Product support For products purchased from Cisco, customers will obtain product support from Cisco Technical Assistance Center (TAC) using the Online Support Case Manager tool.

Integration Information The Sourcefire Integration Partner Communities site will be your one source of truth for all integration communications and training available. Check this site regularly for integration updates and links to available training.

Integration-specific support The Sales Acceleration Center (SAC) is a one-stop shop for pre-sales support across technologies/architectures. SAC will provide a heightened level of service to ease the transition period for you and solve transaction challenges.

SAC is designed to complement existing support processes, as well as assist in finding the correct support resource based on the question or issue.

Email: [email protected]

Phone: +1-800-225-0905, +1-408-902-4872

Partner-specific support Existing and new Cisco partners should consult the Sourcefire Community Page as an information hub from which additional content can be accessed. This page will be updated periodically throughout the integration process.

IT-specific support

(internal only)

For Internal audiences experiencing IT issues, go to the Service Request Management tool to open and track cases as well as the Business Support and Operational Systems page for additional information and existing issues being tracked.

Licensing and PAK registration

A self-serve option is available for many licensing functions. However, you may also get assistance from the Global Licensing Operation (GLO) team by completing the form found here or opening a case using the Support Case Manager tool.

Partner program support Visit the Partner Education Connection for more information on partner programs, trainings, specializations, certifications, and much more.

Partner Helpline The Partner Helpline provides presales product support, and the Cisco Commerce Workspace provides full Commerce Workspace support.

Technology Solutions Network (TSN)

TSN is a 24x5 global network of Virtual Systems Engineers providing pre-sales technical services and talent development for Cisco's Sales Organization.

http://iwe.cisco.com/web/salessecentral/tsn

Deal registration guidance For help transitioning your existing deals to Cisco, please work with your account managers and security account managers to obtain the necessary guidance.

Cisco Commerce Workspace Submit hardware and new service orders, check order status, and create configurations at https://cisco-apps.cisco.com/cisco/psn/commerce.

Training link: http://www.cisco.com/web/partners/events/commerce_workspace.html.

Cisco Service Contract Center

View, renew, and make changes to service contracts at: http://www.cisco.com/web/services/ordering/cscc/index.html.

Training link: http://www.cisco.com/web/services/resources/cscc/training/index.html.

Cisco web-based tool suite All online tools: http://www.cisco.com/web/ordering/root/index.html

https://tools.cisco.com/SWIFT/LicensingUI/Home

http://www.cisco.com/cisco/psn/web/workspace

https://tools.cisco.com/ServiceRequestTool/scm/mgmt/case

https://communities.cisco.com/docs/DOC-51132

mailto:[email protected]



http://alli-prd.cisco.com/arsys/forms/alli-prd-rcdn/SRS:ServiceRequestConsole/enduser/?&mode=submit&cacheid=a39a4bc9&mode=submit&cacheid=a39a4bc9&mode=submit&cacheid=a39a4bc9

http://iwe.cisco.com/web/bsos/home

http://iwe.cisco.com/web/bsos/home

https://tools.cisco.com/SWIFT/LicensingUI/Quickstart

https://survey.opinionlab.com/survey/s?s=10422



http://cisco.partnerelearning.com/Saba/Web/Main

http://www.cisco.com/web/partners/tools/helponline/index.html

http://iwe.cisco.com/web/salessecentral/tsn

https://cisco-apps.cisco.com/cisco/psn/commerce



http://www.cisco.com/web/services/ordering/cscc/index.html

http://www.cisco.com/web/services/ordering/cscc/index.html

http://www.cisco.com/web/services/resources/cscc/training/index.html

http://www.cisco.com/web/services/resources/cscc/training/index.html

http://www.cisco.com/web/ordering/root/index.html


Appendix A: All Offerings

For access to the Cisco PID Mapping references, see below:

Cisco FirePOWER Bundle (Hardware and Subscription)

Part Number Product Description

AMP7150-BUN Cisco AMP FirePOWER 7150 Chassis and Subscription Bundle

AMP8150-BUN Cisco AMP FirePOWER 8150 Chassis and Subscription Bundle

FP7010-BUN Cisco FirePOWER 7010 Chassis and Subscription Bundle





FP7110-FI-BUN Cisco FirePOWER 7110 Chassis Fiber and Subscription Bundle



FP7120-FI-BUN Cisco FirePOWER 7120 Chassis Fiber and Subscription Bundle

FP7125-BUN Cisco FirePOWER 7125 Chassis Fiber and Subscription Bundle












FP-VMW-IPS-BUN Cisco FirePOWER Virtual Appliance and Support Bundle

FP-AMP-CLOUD-BUN Cisco AMPv Private Cloud SW and Service Subscription Bundle

Cisco NGIPS Software and Subscription Bundle

Part Number Product Description

FP-CRS-8650-BUN Cisco NGIPS For BlueCoat X-Series APM-8650 and Subsription

FP-CRS-9600-BUN Cisco NGIPS BlueCoat SW X-Series APM-9600 Blades and Subs

FP-CRS-UPG8600-BUN Cisco NGIPS BlueCoat X-Series APM8600 to APM9600 & Subs

FP-CRS-UPG8650-BUN Cisco NGIPS BlueCoat from APM-8650 to APM-9600 & Subsription

FPCRS-UPG8600B-BUN Cisco NGIPS BlueCoat UPG from APM-8600B to 8650 & Subs

Cisco Qualys Connector and Subscription Bundle

FP-QUALYS-SW-BUN Cisco FirePOWER Qualys Connector Utility and Subscription


Cisco FirePOWER, SSL and FireSIGHT Management Center Appliances

Part Number Product Description SMARTnet SKU Software Support

AMP7150-K9 Cisco FirePOWER 7150, 1U, 4 Port Copper and 8 SFP Ports CON-SNT-AMP7150

AMP8150-K9 Cisco FirePOWER 8150 Chassis, 1U, 3 Slots CON-SNT-AMP8150

FP7010-K9 Cisco FirePOWER 7010 Chassis, 1U, 8 Port Copper CON-SNT-FP7010





FP7110-FI-K9 Cisco FirePOWER 7110 Chassis, 1U, 8 Port 1Gbps Fiber CON-SNT-FP7110-FI

FP7115-K9 Cisco FirePOWER 7115, 1U, 4 Port Copper and 8 SFP Ports CON-SNT-FP7115


FP7120-FI-K9 Cisco FirePOWER 7120 Chassis, 1U, 8 Port 1Gbps Fiber CON-SNT-FP7120-FI

FP7125-K9 Cisco FirePOWER 7125, 1U, 4 Port Copper and 8 SFP Ports CON-SNT-FP7125

FP8120-K9 Cisco FirePOWER 8120 Chassis, 1U, 3 Slots CON-SNT-FP8120





FP8270-K9 Cisco FirePOWER 8270 Chassis, 6U, 5 Slots (40Gbps Ready) CON-SNT-FP8270






FP8140-STACK-K9 Cisco FirePOWER Stacking Kit for 8140 CON-SNT-STK8140



FP-SSL1500-K9 FirePOWER SSL1500 Appl, 8GE CU w/ Bypass, 1.5Gbps Inspection

CON-SNT-SSL1500

FP-SSL1500-FI-K9 FirePOWER SSL1500 Appl, 8GE FI w/ Bypass, 1.5Gbps Inspection

CON-SNT-SSL1500-FI

FP-SSL2000-K9 Cisco FirePOWER SSL2000 Appliances, 1U, 3 Slots, AC Power

CON-SNT-SSL2000

FP-SSL8200-K9 Cisco FirePOWER SSL8200 Appliances, 2U, 7 Slots, AC Power

CON-SNT-SSL8200

FS750-K9 Cisco FireSIGHT Management Center 750 Chassis, 1U CON-SNT-FS750 CON-SAU-FS750



FS4000-K9 Cisco FireSIGHT Management Center 4000 Chassis CON-SNT-FS4000 CON-SAU-FS4000

FS750-K9= Cisco FireSIGHT Management Center 750 Chassis, no license CON-SNT-FS750

FS1500-K9= Cisco FireSIGHT Management Center 1500 Chassis, no license

CON-SNT-FS1500

FS3500-K9= Cisco FireSIGHT Management Center 3500 Chassis, no license

CON-SNT-FS3500


Cisco Software Offerings

Product Software SKUs Description Service or Subscription Support

Subscription SKU

Cisco FirePOWER Software Version

SF-FP5.2-K9 Cisco FirePOWER Software v5.2



Cisco FirePOWER Virtual Appliance and Service Subscription

Cisco AMP for FirePOWER Virtual Appliance Service License

FP-VMW-AMP-LIC=

FP-VMW-AMP-1Y

FP-VMW-AMP-3Y

Cisco FirePOWER Virtual Appl. URL Filtering Service License

FP-VMW-URL-LIC=

FP-VMW-URL-1Y

FP-VMW-URL-3Y

FP-VMW-IPS-K9 Cisco NGIPSv for VMWare Appliance

FP-VMW-TA-LIC=

FP-VMW-TA-1Y

FP-VMW-TA-3Y

Cisco FirePOWER Virtual IPS, Apps and URL Service License

FP-VMW-TAC-LIC=

FP-VMW-TAC-1Y

FP-VMW-TAC-3Y

Cisco FirePOWER Virtual IPS, Apps and AMP Service License

FP-VMW-TAM-LIC=

FP-VMW-TAM-1Y

FP-VMW-TAM-3Y

Cisco FirePOWER Virtual IPS, Apps, AMP and URL Svc Licenses

FP-VMW-TAMC-LIC=

FP-VMW-TAMC-1Y

FP-VMW-TAMC-3Y

Cisco AMP Virtual Private Cloud

FP-AMP-CLOUD-SW Cisco AMPv Private Cloud Service Subscription

FP-AMP-CLOUD= FP-AMP-CLOUD-1Y

FP-AMP-CLOUD-3Y

Cisco NGIPS for BlueCoat X-Series

FP-CRS-UPG-8600-K9 Cisco NGIPS For BlueCoat SW X-Series APM-8600 to APM-9600

FP-CRS-UPG-8600=

FP-CRS-UPG-8600-1Y

FP-CRS-UPG-8600-3Y

FP-CRS-UPG8600B-K9 Cisco NGIPS For BlueCoat SW Upgrade from APM-8600B to 8650

FP-CRS-UPG-8600B=

FP-CRS-UPG-8600B1Y

FP-CRS-UPG-8600B3Y

FP-CRS-UPG-8650-K9 Cisco NGIPS For BlueCoat SW X-Series APM-8650 to APM-9600

FP-CRS-UPG-8650=

FP-CRS-UPG-8650-1Y

FP-CRS-UPG-8650-3Y




Subscription SKU

FP-CRS-8650-K9 Cisco NGIPS For BlueCoat X-Series APM-8650

FP-CRS-8650-LIC=

FP-CRS-8650-1Y

FP-CRS-8650-3Y

FP-CRS-9600-K9 Cisco NGIPS For BlueCoat SW X-Series APM-9600 Blades

FP-CRS-9600-LIC=

FP-CRS-9600-1Y

FP-CRS-9600-3Y

Cisco Qualys Sofware Utiltity

FP-QUALYS-SW-K9 Cisco FirePOWER Qualys Connector Utility for Host Input API

L-FP-QUALYS-LIC=

L-FP-QUALYS-1Y

L-FP-QUALYS-3Y

Cisco FirePOWER Control License

FP7010-CTRL-LIC= Cisco FirePOWER 7010 Control License





















Subscription SKU

FirePOWER Virtual Private Network License

FP7010-VPN-K9 Cisco FirePOWER 7010 VPN License




AMP7150-VPN-K9 Cisco FirePOWER 7150 VPN License








AMP8150-VPN-K9 Cisco FirePOWER 8150 VPN License









FP7010-VPN-K9= Cisco FirePOWER 7010 VPN License









Subscription SKU



AMP7150-VPN-K9= Cisco FirePOWER 7150 VPN License




AMP8150-VPN-K9= Cisco FirePOWER 8150 VPN License









Cisco FireSIGHT Virtual and License

FS-VMW-SW-K9 Cisco FireSIGHT Management Center,Virtual(VMWare) FSIGHT Lic

CON-SAU-VMW

Cisco FireSIGHT Software Version

SF-FS5.2-K9 Cisco FireSIGHT Management Center Software v5.2

SF-FS5.3-K9 Cisco FireSIGHT Management Center Software v5.3

SF-FS5.3.1-K9 Cisco FireSIGHT Management Center Software v5.3.1

FS750-FSIGHT-LIC= Cisco FireSIGHT Management Center 750 Software License

CON-SAU-FS750


CON-SAU-FS1500


CON-SAU-FS3500

Cisco SSL Software Version

SF-SSL3.6.3-K9 Cisco FirePOWER SSL Software v3.6.3

Cisco Talos Annual Subscription

L-FP-VRT-LIC= SNORT Subscriber Rule Set Annual Subscription

L-FP-VRT-1Y SNORT Subscriber Rule Set Annual Subscription with no support




Subscription SKU

Advanced Security Consultant

AS-SEC-CNSLT (-A, -L) Cisco Security Plan and Build Services/Cisco Security Migration Service

Cisco AMP for Endpoints See the end of this document for the table entitled “Cisco Advanced Malware Protection for Endpoints Subscription SKUs”

Snort Subscriber Rule Set: Subscription Options

Personal: This subscription type is for use in a home network environment or for educational purposes only. If

you’d like to purchase a Subscription online using a credit card, you may do so. For Personal subscription, please

go to http://www.snort.org/products to place an order. It is not available to purchase on CCW. As you approach

expiration, an automatic renewal via SNORT.org is available for credit card orders.

Business: This subscription type is for use in businesses, nonprofit organizations, colleges and universities,

government agencies, consultancies, and other venues where Snort sensors are in use in a production or lab

environment. This subscription type does not include a license to redistribute Snort Subscriber Rule Set except as

described in section 2.1 of the Rule Set license agreement. If you’d like to purchase a Rule subscription online

using a credit card, you may do so. If you cannot purchase with a credit card and must pay by invoice or if you

need a quote, please reference above Sales Contact Information on how to place an order in CCW. Unlike

SNORT.org automatic renewals, orders placed in CCW will require a manual renewal to trigger another

subscription.

For more information please visit: http://www.snort.org/products.

Cisco FirePOWER, FireSIGHT and SSL Accessories

Product Part Number Description SMARTnet SKU

Cisco FirePOWER Network Modules

FPNM-2LR-10G-BP FirePOWER 2-Port 10 Gbps LR Fiber Network Module with Bypass

CON-SNT-NM-2LR

FPNM-2LR-10G-BP= FirePOWER 2-Port 10 Gbps LR Fiber Network Module with Bypass

CON-SNT-NM-2LR

FPNM-2SR-10G-BP FirePOWER 2-Port 10 Gbps SR Fiber Network Module with Bypass

CON-SNT-NM-2SR

FPNM-2SR-10G-BP= FirePOWER 2-Port 10 Gbps SR Fiber Network Module with Bypass

CON-SNT-NM-2SR

FPNM-2SR-40G-BP FirePOWER 2-Port 40 Gbps SR Fiber Network Module with Bypass

CON-SNT-2SR-40G

FPNM-2SR-40G-BP= FirePOWER 2-Port 40 Gbps SR Fiber Network Module with Bypass

CON-SNT-2SR-40G

FPNM-4CU-1G-BP FirePOWER 4-Port 1 Gbps Copper Network Module Bypass CON-SNT-NM-4CU

FPNM-4CU-1G-BP= FirePOWER 4-Port 1 Gbps Copper Network Module Bypass CON-SNT-NM-4CU

FPNM-4CU-1G-NBP FirePOWER 4-Port 1Gbps Copper Network Module with Non-Bypass

CON-SNT-NM-4CU-NBP

FPNM-4CU-1G-NBP= FirePOWER 4-Port 1Gbps Copper Network Module with Non-Bypass

CON-SNT-NM-4CU-NBP

FPNM-4LR-10G-NBP FirePOWER 4-Port 10Gbps LR FI Network Module with Non-Bypass

CON-SNT-NM-4LR

FPNM-4LR-10G-NBP= FirePOWER 4-Port 10Gbps LR FI Network Module with Non-Bypass

CON-SNT-NM-4LR

FPNM-4SR-10G-NBP FirePOWER 4-Port 10Gbps SR FI Network Module with Non-Bypass

CON-SNT-NM-4SR

http://www.snort.org/vrt/buy-a-subscription

http://www.snort.org/vrt/buy-a-subscription




FPNM-4SR-10G-NBP= FirePOWER 4-Port 10Gbps SR FI Network Module with Non-Bypass

CON-SNT-NM-4SR

FPNM-4SX-1G-BP FirePOWER 4-Port 1 Gbps SX Fiber Network Module with Bypass

CON-SNT-NM-4SX

FPNM-4SX-1G-BP= FirePOWER 4-Port 1 Gbps SX Fiber Network Module with Bypass

CON-SNT-NM-4SX

FPNM-4SX-1G-NBP FirePOWER 4-Port 1Gbps SX FI Network Module with Non-Bypass

CON-SNT-NM-4SX-NBP

FPNM-4SX-1G-NBP= FirePOWER 4-Port 1Gbps SX FI Network Module with Non-Bypass

CON-SNT-NM-4SX-NBP

Cisco FirePOWER Switch

FP-NMSB-40G= Cisco FirePOWER 40G Switch Module to support 40Gbps Net Mods

CON-SNT-NM-40G

Cisco FirePOWER Malware Storage SSD

FP8100-SSD480= Cisco FirePOWER Malware Storage, 1U 8100 Series, SSD 480GB

CON-SNT-FP8100-SSD

FP8200-SSD480= Cisco FirePOWER Malware Storage,8200 & 8300 Series,SSD 480GB

CON-SNT-FP8200-SSD

Cisco SSL Network Modules

FPNM-SSL-2LR-10G FirePOWER SSL 2-Port 10Gbps LR FI Network Module with Bypass

CON-SNT-S2LR-10G

FPNM-SSL-2LR-10G= FirePOWER SSL 2-Port 10Gbps LR FI Network Module with Bypass

CON-SNT-S2LR-10G

FPNM-SSL-2SR-10G FirePOWER SSL 2-Port 10Gbps SR FI Network Module with Bypass

CON-SNT-SNM-2SR

FPNM-SSL-2SR-10G= FirePOWER SSL 2-Port 10Gbps SR FI Network Module with Bypass

CON-SNT-SNM-2SR

FPNM-SSL-4CU-1G FirePOWER SSL 4-Port 1Gbps Copper Network Module Bypass

CON-SNT-SNM-4CU

FPNM-SSL-4CU-1G= FirePOWER SSL 4-Port 1Gbps Copper Network Module Bypass

CON-SNT-SNM-4CU

FPNM-SSL-4SX-1G FirePOWER SSL 4-Port 1Gbps SX FI Network Module with Bypass

CON-SNT-SNM-4SX

FPNM-SSL-4SX-1G= FirePOWER SSL 4-Port 1Gbps SX FI Network Module with Bypass

CON-SNT-SNM-4SX

Cisco FirePOWER Rack and Cable

FP7000-RACK Cisco FirePOWER Appliances - Rack Kit (Tray)

FP7000-RACK= Cisco FirePOWER Appliances - Rack Kit (Tray)

FP-NMSB-CABLE= Cisco FirePOWER Stacking Module Cables

Cisco FirePOWER Power Supply

FP-PWR-BRICK= Cisco FirePOWER Power Brick for 7000 Series

FP-PWR-AC-450W= Cisco FirePOWER 450W AC Power Supply


FS-PWR-AC-650W= Cisco FireSIGHT 650W AC Power Supply



FP-PWR-DC-650W Cisco FirePOWER 650W DC Power Supply

FP-PWR-DC-650W= Cisco FirePOWER 650W DC Power Supply








Cisco FireSIGHT Power Supply

FS4K-PWR-AC-650W= Cisco FireSIGHT AC Power Supply 650W

FS4K-PWR-DC-930W Cisco FireSIGHT DC Power Supply 930W

FS4K-PWR-DC-930W= Cisco FireSIGHT DC Power Supply 930W

Cisco FireSIGHT Storage

FS4K-SSD-960G Cisco FireSIGHT 960GB SSD Drive

FS4K-SSD-960G= Cisco FireSIGHT 960GB SSD Drive

Cisco SFPs (Small Form Modules)

GLC-T 1000BASE-T SFP

GLC-SX-MMD 1000BASE-SX SFP transceiver module, MMF, 850nm, DOM

GLC-LH-SMD 1000BASE-LX/LH SFP transceiver module, MMF/SMF, 1310nm, DOM

GLC-T= 1000BASE-T SFP

GLC-SX-MMD= 1000BASE-SX SFP transceiver module, MMF, 850nm, DOM

GLC-LH-SMD= 1000BASE-LX/LH SFP transceiver module, MMF/SMF, 1310nm, DOM

Cisco Advanced Malware Protection for Endpoints Subscription SKUs

Part Number Subscription SKU Description

FP-AMP-LIC= FP-AMP-1Y-S1 Cisco Advanced Malware Protection 1YR, 50-99 Nodes



FP-AMP-LIC= FP-AMP-1Y-S4 Cisco Advanced Malware Protection 1YR, 1K-4999 Nodes








FP-AMP-LIC= FP-AMP-1Y-S12 Cisco Advanced Malware Protection 1YR, 25000+ Nodes












FP-AMP-LIC= FP-AMP-3Y-S12 Cisco Advanced Malware Protection 3YR, 25000+ Nodes


Cisco Advanced Malware Protection for Networks Subscription SKUs


FP7010-AMP-LIC= FP7010-AMP-1Y Cisco AMP for FirePOWER 7010 1YR Service Subscription







































Cisco URL Filtering for FirePOWER Service Subscription SKUs


FP7010-URL-LIC= FP7010-URL-1Y Cisco FirePOWER 7010 URL Filtering 1YR Service Subscription







































Cisco IPS and Apps for FirePOWER Bundle Service Subscription SKUs


FP7010-TA-LIC= FP7010-TA-1Y Cisco FirePOWER 7010 IPS and Apps 1YR Service Subscription







































Cisco IPS, Apps and URL for FirePOWER Bundle Service Subscription SKUs


FP7010-TAC-LIC= FP7010-TAC-1Y Cisco FirePOWER 7010 IPS, Apps and URL 1YR Service Subs







































Cisco IPS, Apps and AMP for FirePOWER Bundle Service Subscription SKUs


AMP7150-TAM-LIC= AMP7150-TAM-1Y Cisco FirePOWER 7150 IPS, Apps and AMP 1YR Service Subs

FP7010-TAM-LIC= FP7010-TAM-1Y Cisco FirePOWER 7010 IPS, Apps and AMP 1YR Service Subs










































Cisco IPS, Apps, AMP and URL for FirePOWER Bundle Service Subscription SKUs


AMP7150-TAMC-LIC= AMP7150-TAMC-1Y Cisco FirePOWER 7150 IPS, Apps, AMP and URL 1YR Service Subs

FP7010-TAMC-LIC= FP7010-TAMC-1Y Cisco FirePOWER 7010 IPS, Apps, AMP and URL 1YR Service Subs










































Appendix B: Example Sourcefire vs. Cisco Quote

The below comparison is a sample quote between a legacy Sourcefire and equivalent Cisco product. The purpose

of this comparison is to show how a sample product is quoted before the integration, and what the same product

looks like after the integration. For a complete PID mapping guide, please go to the Legacy Sourcefire to Cisco

Part Number Mapping Tool. (Note: Only product PID (including partial PID) mappings are available in the PID

Mapping Tool. Legacy service support SKUs are NOT available in the Legacy Sourcefire to Cisco Part Number

Mapping Tool. Always remember to use the Product PID when searching for the equivalent Cisco PID.)

Existing Sourcefire Quotation

Line Part# Item Description Qty Ordered

1 3D7010-IPS-C08-000 SF 3D7010, IPS License, AC Power, 1U, 8 Port Copper 2

S-3D7010-IPS-C08-000-P Support SF 3D7010, IPS License, AC Power, 1U, 8 Port Copper Platinum 3 Year(s)





4 3D7110-IPS-C08-000 SF 3D7110, IPS License, 8 Port copper 2

S-3D7110-IPS-C08-000-P Support SF 3D7110, IPS License, 8 Port copper Platinum 3 Year(s)


S-3D7110-IPS-C08-000-P Support SF 3D7110, IPS License, 8 Port copper Platinum 3 Year(s)


S-3D7120-IPS-C08-000-G Support SF 3D7120, IPS License, 8 Port copper Gold 3 Year(s)

7 DC1500-FS-BNDL-0 Defense Center 1500 Bundle with FireSight License 3

S-DC1500-FS-BNDL-0-P Support Defense Center 1500 Bundle with FireSight License Platinum 3 Year(s)

New Configuration via CCW

Line Part#

(HW, SW, and Services)

Item Description Qty Ordered

1.0 FP7010-BUN Cisco FirePOWER 7010 Chassis and Subscription Bundle 1

1.1 FP7010-K9 Cisco FirePOWER 7010 Chassis 1U 8 Port Copper 4


Duration: 36 month(s)

4

1.1.1 CAB-AC AC Power Cord (North America), C13, NEMA 5-15P, 2.1m 4

1.1.2 SF-FP5.2-K9 Cisco FirePOWER Software v5.2 4

1.1.3 FP-PWR-BRICK Cisco FirePOWER Power Brick for 7000 Series 4

1.1.4 FP7010-CTRL-LIC Cisco FirePOWER 7010 Control License 4

1.2 FP7010-TA-LIC= Cisco FirePOWER 7010 IPS and Apps Service Licenses 4

1.2.0.1 FP7010-TA-3Y Cisco FirePOWER 7010 IPS and Apps 3YR Service Subscription


4





2

http://ec2-174-129-189-250.compute-1.amazonaws.com/mappingtool/index.php

http://ec2-174-129-189-250.compute-1.amazonaws.com/mappingtool/index.php


Line Part#

(HW, SW, and Services)

Item Description Qty Ordered



2.1.3 FP-PWR-BRICK Cisco FirePOWER Power Brick for 7000 Series 2





2



3.1.0.1 CON-SNT-FP7110 SMARTNET 8X5XNBD FirePOWER FP7110 CU


4



8







4





2



4







2

5.0 FS1500-K9 Cisco FireSIGHT Management Center 1500 Chassis 1U 3

5.0.1 CON-SNT-FS1500 SMARTNET 8X5XNBD FireSIGHT FS1500


3

5.1 CAB-AC AC Power Cord (North America) C13 NEMA 5-15P 2.1m 3

5.2 SF-FS5.2-K9 Cisco FireSIGHT Management Center Software v5.2 3

5.3 FS1500-FSIGHT-LIC Cisco FireSIGHT Management Center 1500 Software License 3

5.3.0.1 CON-SAU-FS1500 SW APP SUPP + UPGR FireSIGHT 1500


3


Printed in USA C07-731666-02 11/14

Documents

MS Word Template 102504 - Amazon Web Services Toolkits/The... · Cisco Virtual Appliances ... Network modules in nine configurations to support fiber and copper with integrated fail-open