1. Management Solution for Cisco NG Advanced Security Services
IPSec & virtual Firewall
Management solution
October 2007

2. Dorado Software: Redcell Management SW
A certified Cisco Technology development Partner
Develop specialized product packages that address Cisco-specific IT infrastructure features as part of the Redcell Security Services Management Solution

3. Redcell Security Services Management Overview - Cisco Edition -
Enhance Cisco’s network based security and managed security solutions by providing a scalable and easy to use GUI based provisioning and monitoring system.
Provide an easy to use, graphical based, heterogeneous network and service management system
Perform centralized configuration management
Flow-through automated provisioning, decrease service activation time and decrease errors associated with manual tasks
12x06
12x16
12x10
12x04
Cisco XR SPA-IPSEC

4. Redcell Security Services Management – Cisco Edition -
Manage XR-12K based vFW services on MSB and IPsec services on VPN SPA
Provides scalable and easy to use GUI based provisioning and monitoring system
Overall management of the MSB
Overall management of the VPN SPA
Management of VRF-Aware Service Interface (VASI)
Management of vFW
Management of IPsec and GRE
Management of Service Policies

5. vFW Services Management Solution - Detailed
Detailed Discovery and Asset Management of Cisco XR device
Topology (logical & geographical) of all discovered devices
Device level configuration (FW, VASI, Blade HA)
Fault Management
Performance Management (vFW MIB support)
Advanced configuration of Cisco XR-12K Multi-Service Blade (MSB)
Discovery of the MSB (Context, Resource classes, Interfaces, ACLs, HA)
Inventory (Physical & Logical) of the MSB
Centralized Service Allocation and Provisioning for Service / Security policies
ACLs
NAT / PAT
Inspections
Upgrade & Patch
Firmware / Software
Security Patches
Change Management
Firewall context and ACL changes
12x06
12x16
12x10
12x04

6. vFW Services Management Solution - Workflow
Discovery – Bring all the target devices under management by Redcell
(Optional) – Create network objects for use in Redcell Service Policies
(Optional) – Create VASI for use within the vFW
Create the vFW service, which creates the context. This includes fault tolerance configuration, FMI assignment, Resource Class configuration, and interface configuration
Create (multiple) Service Policies for use with the context. This includes ACLs, NAT/PAT (via multimatch), management policies, and inspection (FTP/HTTP) policies

7. Typical Deployment at the PoP
Access network
Transit / Distribution
Core
Peering
PoP XB P P PE XB I XB PE CE PE PE XB P
CRS-12000 P
CRS-1
vFW NAT PE
XR-12000
SP CORE
FW Services are provided at the customer facing interface
Stateful FW Intra-chassis HA support
Service Configuration & Network Management by Dorado Software – Redcell solution
Dorado Software

8. IPSec Services Management Solution - Detailed
Detailed Discovery and Asset Management of Cisco XR device
Topology (logical & geographical) of all discovered devices
Device level configuration
Fault Management
Performance Management (IPSec MIB support)
Advanced configuration of Cisco XR IPSec VPN SPA
Discovery of the IPSec VPN SPA (ISAKMP, IPSec, PKI, Failover, ACL, Service Tunnel)
Inventory (Physical & Logical) of the IPSec VPN SPA
Service Allocation and Provisioning for IPSec / ISAKMP VPNs
Including IPSec + GRE tunnels
Remote Access / EZ-VPN
Upgrade & Patch
Firmware / Software
Security Patches
Change Management
IPSec + GRE service interfaces
ISAKMP configuration
12x06
12x16
12x10
12x04
Cisco XR SPA-IPSEC

9. IPSec Services Management Solution - Workflow
Discovery – Bring all the target devices under management by Redcell
(Optional) Create Service templates for use in the service
Configure (multiple) IPSec customer sites as the service endpoints
Provision the IPSec (or IPSec / GRE) service
Cisco XR SPA-IPSEC

10. Redcell Lifecycle Management Features – Cisco Edition -
Redcell offers complete
lifecycle management
Visibility;
Configuration file back-up and restoration;
Software (OS) release management;
Comprehensive logging & auditing;
Service & device health monitoring;
Change detection & remediation;
Event management & automation;
Graphical service, network, and device topology;
Service provisioning; and
Comprehensive reporting on everything! 10

11. Redcell Lifecycle Management Features – Cisco Edition -
Deep Discovery and Resynchronization
Discover entire environment many different ways including via subnet, IP range, IP address or host name. Deep discovery all H/W, S/W, physical, and logical subcomponents.
Inventory View
Single database and Graphical User Interface (GUI) of complete device assets for consistent IPsec and Firewall service configuration and activation
Equipment Group Management
Create static, dynamic, nested, and mixed groups for applying one-to-many changes to disparate network devices and group reporting
Discrete Configuration
Real-time discrete configuration of devices via GUI
Active Configuration
Graphical scripting / command-based configuration
Configuration File Management
Device configuration file backup, restore, view, edit, delete and compare. Template-based creation and management of full or partial, configlet, configuration files. 11

12. Redcell Lifecycle Management Features – Cisco Edition -
Device Asset Topology
Hierarchical visual mapping with alarm propagation. Visualize interrelationships of managed systems and underlying infrastructure down to the interconnect level.
Task/ Job Scheduler
Perform functions and tasks at scheduled times and intervals
Audit Trail
Record all actions – system, user, device
Monitoring
Performance monitoring (SNMP data collection & graphing, primarily used for thresholding), event/alarm monitoring (syslog/SNMP traps), and service monitoring (correlates SNP and Syslog events to defined services for service monitoring , as service-affecting alarms)
Reporting
Flexible template-based inventory reporting by device, subcomponent, and service. Exportable to .csv, html, .pdf formats
User Security Management
Multi-level security for individual user and group administration
OSS interface
Web services/SOAP (XML) and SNMP trap forwarding 12

13. Hardware Requirements – Cisco Edition -
Application Server
Solaris SunFire V240 with Dual 1.34 GHz CPU
Windows Pentium 4, 3.2 GHz CPU
2 GB RAM / 20 GB available disk space
Mediation Server
2 GB RAM / 10 GB available disk space
Database Server (Oracle)
Solaris SunFire V440 with Quad GHz CPU
4 GB RAM / 20 GB available disk space

14. Clustered Server High Availability
Deployment Options
– Cisco Edition -
Clustered Server High Availability

15. Contacts Redcell Security Services Management – Cisco Edition - link
For additional information please contact