Blog:a Lot of Major Security Annoucements — Strangely Buried in One Big Press Release.
April 25, 2009 by Greg Ferro · 2 Comments
Cisco IPS Sensor Software Version 7.0:
Global Correlation for intrusion prevention system (IPS) harnesses the power of Cisco Security Intelligence Operations, a powerful threat-defense ecosystem, to achieve unprecedented threat-protection efficacy. Cisco turns global threat data captured from a massive footprint of security devices into dynamic updates and actionable intelligence, such as ‘reputation’ scores, and pushes that intelligence out to a business’s network security infrastructure for protective action. By incorporating Global Correlation, Cisco IPS 7.0 is up to two times as effective in stopping malicious attacks, in a shorter amount of time, than traditional signature-only IPS technologies.
Cisco ASA 5500 Series 8.2 Software:
This offering in the Cisco Adaptive Security Appliances family is designed to enhance end-to-end security for offices of all sizes, improving threat mitigation and enabling companies to more securely connect, communicate and conduct business. With a new Botnet Traffic Filter for identifying infected clients, IPS availability for small offices, and increased clientless remote-access capabilities, Cisco now offers support for the widest range of platforms, operating systems and endpoints in the industry.
Cisco ASA Botnet Traffic Filter:
The new Botnet Traffic Filter enables Cisco ASA 5500 Series appliances to more accurately identify infected clients using information from Cisco Security Intelligence Operations: — more than 1,000 threat-collection servers that receive information from more than 700,000 sensors and 500 third-party feeds. With improved threat intelligence, customers can more accurately identify infected clients and streamline their operations so that security administrators can focus on the most challenging threats.
Cisco Remote Access and VPN Enhancements:
Cisco ASA Software Release 8.2 expands remote access capabilities with next-generation tunneling and session persistence through Cisco AnyConnect Essentials for corporate and mobile users, thus covering the widest range of platforms, operating systems, and endpoints in the industry. Support for the Cisco Virtual Office solution has also been added to the Cisco ASR 1000, allowing this wide-area network aggregation platform to also act as the head-end device for Cisco Virtual Office deployments capable of supporting several thousand remote clients. The Cisco ASR 1000 also now supports GET VPN, allowing instant provisioning of security services and delivering high-performance, highly secure any-to-any connectivity for up to 10,000 Internet Protocol Security (IPsec) tunnels at up to 7 gigabits per second of throughput, enabling customers to prioritize and deliver data flows efficiently to multiple network addresses.
Cisco SAFE:
A security reference architecture that provides prescriptive validated design guides to help organizations plan, design and deploy security solutions across the network, such as campus offices, the Internet edge, branches and data centers. These blueprints provide defense-in-depth guidance and best practices for securing data and transactions as they traverse the network.”



It’s interesting to me how little marketing/nontechnical information there seems to be regarding Cisco IPS Sensor Software Version 7.0, perhaps I’m not looking in the right place, but I guess I’m still not used to the Cisco website which seems dry and difficult to navigate.
http://www.cisco.com/en/US/docs/security/ips/7.0/release/notes/18483_01.html
Cisco IPS 6 had bugs I experienced in the form of the sensors crashing often. TAC confirmed those bugs and explained IPS 7 should resolve issues in IPS 6.
it will take the marketing team at Cisco a few weeks to realise that they need to pull their fingers out and do some work. This is standard practice at Cisco so a little patience is needed.
Cisco’s Web site isn’t so bad once you get used to it. Given that Cisco really is not a single company anymore, but a collection of twenty or so business units attempting to present a single message, then you can easily think that. The IPS product is part of the Security BU, and so will be consistent (more or less) with products that come from that BU.
And, yes, IPS isn’t really a Cisco strong point. But it has improved a lot recently.