1. 1 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Cisco Defense Orchestrator Effective security policy management made simple Confidential – For internal and partner use only

2. 2 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Solution Simplify security policy management Strengthen security posture with consistent policy Simplify approach for enabling NGFW capabilities Single pane of glass for management across multiple Cisco devices Improve operational efficiencies Cloud-based platform for: Policy Change Management Policy Analysis and Optimization Policy Monitoring and Reporting Scalable Orchestration of Changes Supporting Cisco security products: ASA 5500-X firewalls FirePOWER Services Firepower Threat Defense OpenDNS Umbrella Customer Need Every ASA refresh where Network Ops is involved Network Ops looking for more efficient way to deploy and manage policy across many devices ASAs, NGFWs deployed in multiple locations (branch offices, remote offices) What’s in it for You? Sell more NGFW by simplifying management of FirePOWER Services/Firepower Threat Defense Cross-sell Cisco security solutions such as OpenDNS Sell more Cisco security by alleviating management burden Improve overall customer satisfaction Build reoccurring revenue with cloud- based subscription pricing model Cisco Defense Orchestrator Helps You Sell More Security Target Audience Cloud-based platform Single pane of glass across multiple Cisco security devices Key Features

3. 3 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Know your customer Network focused security buyer Threat focused security buyer

4. 4 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Know your customer Network focused security buyer Threat focused security buyer Staffed and funded for security analytics, does it today, needs more in intelligence from the network Manages primarily connectivity, needs to care about security but does not responsibility to investigate it

5. 5 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Appliances + Right Management Option Network focused security buyer Threat focused security buyer Firepower Management Center Visibility and Data Collection Threat analytics Cisco Defense Orchestrator Device Management Policy/Connectivity Management NGFW - Network as a Sensor and Enforcer

6. 6 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Qualifying QuestionsHow to address What do you use to manage your ASAs today? There are multiple ways clients can manage policy such as ASDM, CLI, CSM, and Firesight. The challenge they have its managed in a silo approach with no consistency and often not simple. CDO enables holistic policy management across platforms in a simple consistent way. Do you run any next generation services? If they don’t, why not? Many clients are concerned about additional complexity to an already very complex environment. Lets show them we can help them manage NGFW through a centralized and simple platform. How do you manage policy across your devices? Many clients currently manage them individually or through 3 rd party solutions of which are often complex. We can show they how easy it is to push policy across all their ASAs, ASA with Firepower and/or OpenDNS. How often do you make policy changes? Identify the challenge! Many clients make policy changes daily….imagine doing that across 100s of firewalls individually! Operational nightmare! Have you ever audited your policy structure? Most clients know that their environment is a mess, but they don’t have the time or resources to properly address. CDO can enable them to discover the current policy structure and address found issues…simply and consistently. Identifying Opportunities

7. 7 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Handling Client Objections For additional information refer to our FAQ doc Client Comments/Concerns How to address Great…another management platform…! CDO demonstrates Cisco’s commitment to innovation. CDO will provide the network ops team with an integrated and simple solution to manage policy across multiple platforms. This solution will evolve to continue to support more Cisco platforms for a holistic approach to policy management. I need more reporting!CDO will continue to invest in security reporting capabilities. What level of reporting do they need? Depending upon client goals, FMC might be a better long term solution. It is too new of a product for me! CDO has passed extensive customer trials starting late in 2015. Under the guidelines of an Agile methodology, the evolution of the solution is very rapid with weekly releases of which you can expect to continue well into 2017. Put my ASA configs in the Cloud? That scares me! The solution has been designed with a focus around security. Our solution is set up in a multi- tenant environment so each client is separate from others. Traffic is encrypted end to end and clients have to login via 2 Factor to authenticate to the system Can it support 2500 devicesGiven that CDO is a cloud based solution, we have tested scale over 10,000 devices. What about EMEA/APJ?Coming later in FY17