Summary of the content on the page No. 1
Supplement and Release Notes for
CiscoWorks Security Information
Management Solution (SIMS) 3.4.1
OL-11757-01
Revised October 31, 2006
This document provides Cisco-specific information to supplement the
CiscoWorks Security Information Management Solution (SIMS) 3.4.1
documentation, developed by netForensics, Inc. This document contains:
• Acknowledgements, page 2
• Important Information About This Update, page 2
• Product Availability Change Notice, page 6
• Documentation Roadmap, page 6
• Obtai
Summary of the content on the page No. 2
Acknowledgements • Obtaining Additional Publications and Information, page 18 • CiscoWorks SIMS Licensing and Registration, page 19 Acknowledgements CiscoWorks SIMS is the netForensics, Inc., Security Information Management Solution. This product is offered to Cisco Systems customers in cooperation with netForensics, Inc. Important Information About This Update Caution If you use a CiscoWorks SIMS version earlier than 3.4, you must upgrade to version 3.4 before you try to install the CiscoWork
Summary of the content on the page No. 3
Important Information About This Update • nFX OSP Reports Guide • nFX OSP Vulnerability Correlation Administration Guide See Documentation Roadmap, page 6 for detailed information. Agents in This Update This update includes new and changed agents. To learn more, see these topics: • Changed Terminology, page 3 • New and Replaced Agents, page 3 • Updated Agents, page 4 • Agent Installation Notes, page 5 Changed Terminology The 3.3 Consolidated Agent from CiscoWorks SIMS 3.3 has been renamed. Its
Summary of the content on the page No. 4
Important Information About This Update Note nF Agent for Unix OS replaces the following two agents: • nF Agent for HP Unix • nF Agent for IBM AIX OS Updated Agents Agent Installation (October 2006) includes updates to the following agents: • nF Agent for Sidewinder • nF Agent for Dragon Sensor • nF Agent for Sourcefire EStreamer • nF Agent for Real Secure ISS Site Protector • nF Agent for Real Secure Desktop Protector • nF Agent for Arbor Peakflow X • nF Agent for Cisco Secure IPS • nF Agent
Summary of the content on the page No. 5
Important Information About This Update Agent Installation Notes The version of CiscoWorks SIMS that you have determines whether, how, and when you use Agent Installation (October 2006). For detailed information, see nFAgentReleaseNotes(October2006).Cisco.pdf. Version Notes 3.4.1 You already have the software that this update contains. 3.4 You must apply Point Update 58405 from the Agent Installation (October 2006) CD-ROM before you install any of the agents included in this release: • nFSIM-3
Summary of the content on the page No. 6
Product Availability Change Notice Product Availability Change Notice Note • Although certain earlier releases of CiscoWorks SIMS provided a Starter Kit option, CiscoWorks SIMS 3.4.1 does not. Instead, you can purchase the CiscoWorks SIMS Enterprise Lite software, which provides additional software components. See Additional License Restrictions, page 20. • Registered CiscoWorks SIMS Starter Kit customers will receive a Starter Kit upgrade to CiscoWorks SIMS 3.4.1. See Additional License Restr
Summary of the content on the page No. 7
Documentation Roadmap Table 1 Sequence to Read Core CiscoWorks SIMS Documentation PDF Filename Document Title; Description and Intended Audience; Part Number Supplement and Release Notes for CiscoWorks Security Information 1. nfsupp341.pdf Management Solution 3.4.1 (this document) All users; describes Cisco-specific registration, licensing, product, features, known problems, and other information to supplement the documentation written by netForensics, Inc. OL-11757-01 X X CiscoWorks SIMS Vers
Summary of the content on the page No. 8
Documentation Roadmap Table 1 Sequence to Read Core CiscoWorks SIMS Documentation (continued) PDF Filename Document Title; Description and Intended Audience; Part Number nFX OSP Deployment Planning and Implementation Guide 5. nFX_OSP_DeplPlanIm Version 3.4 plGuide.Cisco.pdf All users; describes CiscoWorks SIMS (nFX OSP) architecture, components, use cases, options, and requirements, and provides case studies. OL-10758-01 X X nFX OSP Unix and Windows Installation Guide 6. nFX_OSP_InstallGuide R
Summary of the content on the page No. 9
Documentation Roadmap Table 1 Sequence to Read Core CiscoWorks SIMS Documentation (continued) PDF Filename Document Title; Description and Intended Audience; Part Number nFX OSP User’s Guide 8. nFX_OSP_UsersGuide. Version 3.4.1 Cisco.pdf Network security professionals and general users; describes how to use CiscoWorks SIMS (nFX OSP) to view and analyze security information in a computer network. OL-11532-01 X X nFX OSP Advanced User’s Guide 9. nFX_OSP_AdvancedU Version 3.4 sersGuide.Cisco.pdf
Summary of the content on the page No. 10
Documentation Roadmap Table 1 Sequence to Read Core CiscoWorks SIMS Documentation (continued) PDF Filename Document Title; Description and Intended Audience; Part Number nFX OSP Rule Based Correlation Administration Guide 12. nFX_OSP_RBC_Admi Version 3.4 nistrationGuide.Cisco.p df All users. OL-10761-01 X X Logging Requirements and RBC Tuning Guide 13. nFX_OSP_ Version 3.4 RBC_LoggingTuningG uide.cisco.pdf Network security professionals, system and network administrators; provides details abou
Summary of the content on the page No. 11
Obtaining Documentation Table 1 Sequence to Read Core CiscoWorks SIMS Documentation (continued) PDF Filename Document Title; Description and Intended Audience; Part Number nFX OSP Quick Connect User Guide 16. nFX_OSP_QuickConne Version 3.4 ct_UserGuide.Cisco.pd f Network security professionals and general users; provides information about Quick Connect features, architecture and configuration, describes the user interface, and provides step-by-step procedures for important tasks. OL-10978-01 X
Summary of the content on the page No. 12
Obtaining Documentation Note Cisco Systems does not sell documentation that netForensics prepares for users of nFX OSP products, also known collectively as CiscoWorks SIMS. For information on where and how a Cisco customer can obtain netForensics documentation for CiscoWorks SIMS 3.4, see Table 1 on page 7. Cisco.com You can access the most current Cisco documentation at this URL: http://www.cisco.com/techsupport You can access the Cisco website at this URL: http://www.cisco.com You can access
Summary of the content on the page No. 13
Documentation Feedback Ordering Documentation You must be a registered Cisco.com user to access Cisco Marketplace. Registered users may order Cisco documentation at the Product Documentation Store at this URL: http://www.cisco.com/go/marketplace/docstore If you do not have a user ID or password, you can register at this URL: http://tools.cisco.com/RPF/register/register.do Documentation Feedback You can provide feedback about Cisco technical documentation on the Cisco Technical Support & Docume
Summary of the content on the page No. 14
Cisco Product Security Overview To see security advisories, security notices, and security responses as they are updated in real time, you can subscribe to the Product Security Incident Response Team Really Simple Syndication (PSIRT RSS) feed. Information about how to subscribe to the PSIRT RSS feed is found at this URL: http://www.cisco.com/en/US/products/products_psirt_rss_feed.html Reporting Security Problems in Cisco Products Cisco is committed to delivering secure products. We test our pr
Summary of the content on the page No. 15
Product Alerts and Field Notices If you do not have or use PGP, contact PSIRT to find other means of encrypting the data before sending any sensitive material. Product Alerts and Field Notices Modifications to or updates about Cisco products are announced in Cisco Product Alerts and Cisco Field Notices. You can receive Cisco Product Alerts and Cisco Field Notices by using the Product Alert Tool on Cisco.com. This tool enables you to create a profile and choose those products for which you want
Summary of the content on the page No. 16
Obtaining Technical Assistance Access to all tools on the Cisco Technical Support & Documentation website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a user ID or password, you can register at this URL: http://tools.cisco.com/RPF/register/register.do Note Use the Cisco Product Identification Tool to locate your product serial number before submitting a request for service online or by phone. You can access this tool from the Cisco Technical S
Summary of the content on the page No. 17
Obtaining Technical Assistance solutions. If your issue is not resolved using the recommended resources, your service request is assigned to a Cisco engineer. The TAC Service Request Tool is located at this URL: http://www.cisco.com/techsupport/servicerequest For S1 or S2 service requests, or if you do not have Internet access, contact the Cisco TAC by telephone. (S1 or S2 service requests are those in which your production network is down or severely degraded.) Cisco engineers are assigned im
Summary of the content on the page No. 18
Obtaining Additional Publications and Information Obtaining Additional Publications and Information Information about Cisco products, technologies, and network solutions is available from various online and printed sources. • The Cisco Online Subscription Center is the website where you can sign up for a variety of Cisco e-mail newsletters and other communications. Create a profile and then select the subscriptions that you would like to receive. To visit the Cisco Online Subscription Center,
Summary of the content on the page No. 19
CiscoWorks SIMS Licensing and Registration • Networking Professionals Connection is an interactive website where networking professionals share questions, suggestions, and information about networking products and technologies with Cisco experts and other networking professionals. Join a discussion at this URL: http://www.cisco.com/discuss/networking • “What’s New in Cisco Documentation” is an online publication that provides information about the latest documentation releases for Cisco produc
Summary of the content on the page No. 20
CiscoWorks SIMS Licensing and Registration Supplemental End-User License Agreement SUPPLEMENTAL LICENSE AGREEMENT FOR CISCO SYSTEMS SECURITY MANAGEMENT SOFTWARE: CiscoWorks Security Information Management Solution Product Line IMPORTANT—READ CAREFULLY: This Supplemental License Agreement (“SLA”) contains additional limitations on the license to the Software provided to Customer under the Software License Agreement between Customer and Cisco. Capitalized terms used in this SLA and not otherwise
