Cisco FireSIGHT Management Center Security management

Gain total visibility into everything on your network, including physical and virtual hosts, operating systems, applications, services, protocols, users, geolocation information, content, network behavior, network attacks, and malware with the Cisco FireSIGHT Management Center. This security management console (Figure 1) is the centralized point of event and policy management for your intrusion prevention security operations. It allows you to automatically aggregate and correlate information generated by Cisco’s next-generation firewall, Cisco® ASA with FirePOWER™Services, and by Cisco’s next-generation Intrusion Prevention System (NGIPS), Cisco FirePOWER NGIPS. The Cisco FireSIGHT Management Center centrally manages network security and operational functions, including event monitoring, analysis, incident prioritization, and reporting, so that you can better protect your business. It also reduces your costs by streamlining operations and automating many commonly recurring security analysis and management tasks.

Cisco FireSIGHT Management Center discovers real-time information about changing network resources and operations to provide you with a full contextual basis for making informed decisions (see Table 1). In addition to providing a wide breadth of intelligence, the Cisco FireSIGHT Management Center delivers a fine level of detail, including:

- Trends and high-level statistics: Helps managers and executives understand security posture at a moment in time as well as how it’s changing, for better or worse.
- Event detail, compliance, and forensics: Provides an understanding of what happened during a security event to improve defenses, support breach containment efforts, and aid in legal enforcement actions.
- Workflows: Easily exports data to support responses to an event, improving response management.