topic Re: Cisco Security Manager - worthwhile software? in Cloud Security

Cisco Security Manager - worthwhile software?

katenecon58 — Sat, 23 Jan 2021 05:20:37 GMT

Company has HA 5525 ASAs and a large wireless network with Prime. Monitoring is not so good; Solarwinds that is poorly licensed and configured. A number of times issues have gone unknown for a while because we do not have a good alerting system. Could CSM be a solution for the security side of things?

Re: Cisco Security Manager - worthwhile software?

balaji.bandi — Sat, 23 Jan 2021 09:38:31 GMT

CSM will help you retain Logs for historical logs you want to view, ASA itself going end of Life soon or later, is it worth investing on CSM at this stage, this is business call.

https://www.cisco.com/c/en/us/td/docs/security/security_management/cisco_security_manager/security_manager/4-7/user/guide/CSMUserGuide/evntchap.html#152083

Personally - I setup an SYSLOG Server and offload all the logs from ASA to SYSLOG Server - there are many tools available for how you can view the logs ( you can use Graylog) free and open source. which can be used for any other logs to store not only ASA.

not sure is this make sense for your requirement? feedback if that not meet your requirements to consider other options.

Re: Cisco Security Manager - worthwhile software?

ToucanzooX — Sat, 23 Jan 2021 15:17:06 GMT

In my opinion CSM has had its day and I rarely see any customers using it now. The times I have seen it there were challenges with getting the software and licensing.

I agree with your comment that offload the logging. I have configured a syslog server on CentOS so many times for this very purpose.

Maybe you should look at CDO.

Re: Cisco Security Manager - worthwhile software?

Marvin Rhoads — Thu, 28 Jan 2021 11:38:49 GMT

Cisco Defense Orchestrator (CDO) with Cisco Security Analytics and Logging (SAL) is a good option. It can manage your ASAs as well as Firepower appliances with FTD. It doesn't do Firepower service modules and a few more advanced features, but otherwise it is very simple to use and adds a lot of utility.

Re: Cisco Security Manager - worthwhile software?

ameliascotts80938 — Tue, 16 Mar 2021 06:00:30 GMT

Cisco Security Manager helps to enable consistent policy enforcement and rapid troubleshooting of security events, offering summarized reports across the security deployment. Using its centralized interface, organizations can scale efficiently and manage a wide range of Cisco security devices with improved visibility.

Re: Cisco Security Manager - worthwhile software?

AlexTomatos34833 — Thu, 25 Mar 2021 07:11:16 GMT

Thanks for the link "https ://www.cisco.com/c/en/us/td/docs/security/security_management/cisco_security_manager/security_manager/4-7/user/guide/CSMUserGuide/evntchap.html#152083", it is really interesting