Transcription

Cisco Enterprise Agreement Ordering Guide for Security SuitesOrdering GuideCisco Internal and Partner ConfidentialCisco Enterprise Agreement Ordering Guidefor Security Suites 1 2017 2017CiscoCiscoand/orand/orits affiliates.its affiliates.All rightsAll rightsreserved.reserved.

Cisco Enterprise Agreement Ordering Guide for Security SuitesOrdering GuideCisco Internal and Partner ConfidentialContents1. Introduction31.1. Purpose of This Guide31.2. Audience31.3. Scope32. Solution Overview32.1. Cisco Enterprise Agreement for Security Email Security Suite42.2. Cisco Enterprise Agreement for Security –Cloud and Web Security Suite52.3. Cisco Enterprise Agreement for Security –Policy and Visibility Suite62.4. Cisco Enterprise Agreement for Security –Security Essentials Suite73. Quoting Process84. Ordering Process95. Additional Resources92 2017 Cisco and/or its affiliates. All rights reserved.

Cisco Enterprise Agreement Ordering Guide for Security SuitesOrdering GuideCisco Internal and Partner Confidential1. IntroductionFigure 1. Summary of Available Suites – Qualified Licenses1.1. Purpose of This GuideThis Ordering Guide is designed to help Cisco’s account teams andqualified Cisco partners order the various suites for the Cisco EnterpriseAgreement for security. This guide does not change the terms of anyagreements you have with Cisco.Specifically, this guide will help you: Understand the products in the Cisco Enterprise Agreement forsecurity suites and identify the right ones for your customers Validate the right quantities and types of part numbers are purchasedto reduce the risk Walk you through the quoting and booking process1.2. AudienceThe intended audience for this ordering guide is Cisco sales teamsand partners who have been approved to sell the Cisco EnterpriseAgreement for Security. Partners must be eligible to sell the Cisco EAand have accepted the Cisco EA Terms.Qualified Licenses Single Suite MinimumSecurityEssentialsCloudand WebSecurityPolicy andVisibilityEmailSecurityNGFW/NGIPSAnd ISRWSA/UmbrellaStealthwatchEmail Security(On-Premises and Cloud)IPS, AMP, URL on Cisco Firepower 9300/4100 ASA Cisco Firepower 7/8K Cisco UCS Express on ISRAMP for Endpoints AMP for Endpoints2. Solution OverviewThe Cisco Enterprise Agreement for security enables customers tosimply procure and flexibly deploy infrastructure software across theirorganization. The solution is available in multiple software suites: Email Security Suite Cloud and Web Security Suite Policy and Visibility Suite Security Essentials SuiteA summary of the available suites is provided in Figures 1 and 2.3 2017 Cisco and/or its affiliates. All rights reserved. Flow Rate License Cloud LicenseCloudlock ESA AMP Graymail SMA CES AMP GraymailISE Cloudlock GOLD SupportCisco AnyConnect ISE Apex ISE Plus ISE Apex ISE Plus Base Cisco AnyConnect ApexFigure 2. Summary of Available Suites – Optional LicensesOptional LicensesSecurityEssentialsCloudand WebSecurityPolicy andVisibilityEmailSecurityAdvanced ThreatWSA/UmbrellaStealthwatchEmail Security(On-Premises and Cloud)1.3. ScopeThis ordering guide provides information about pricing, packaging andordering for the Cisco Enterprise Agreement for security. Umbrella Platform GOLDSupport Umbrella Insights GOLDSupport WSA Premium AMP SMA AMP on ESA AMP on CES AMP on WSAThreat Grid Threat GridAMP Virtual Private CloudCisco Defense Orchestrator Cisco Defense Orchestratorfor NGFW/NGIPS/FTD Umbrella Platinum Support WSA McAfee Web Advanced Reporting SLN on ISR 4K Stealthwatch endpointsThreat GridThreat Grid Threat GridCloudlock Cloudlock ADD-ONAMP Virtual Private CloudCDO CDO on UMBRELLACWS CWS (2 year in FY17, 1 yearin FY18 only if ordered withUmbrella) ESA/CES IMS ESA/CES McAfee Threat GridISE ISE Device AdminAMP Virtual Private Cloud

Cisco Enterprise Agreement Ordering Guide for Security SuitesOrdering GuideCisco Internal and Partner ConfidentialNew features may be added over time as part of ongoing innovation.2.1. Cisco Enterprise Agreement for Security - Email Security SuiteThe Cisco Email Security Suite comprises on-premises and cloud email security subscription licenses (Table 1). These include the Premium,Advanced Malware Protection (AMP), Graymail Safe-Unsubscribe (GSU) and Security Management Appliances (SMA) licenses for the CiscoEmail Security Appliance (ESA). It also includes the Premium, AMP, and GSU licenses for Cloud Email Security (CES). This suite also includesEmail Intelligent Multi-Scan, McAfee Anti-virus, Cisco AMP Threat Grid and Cisco AMP Virtual Private Cloud that are available as optional add-ons.Additional features may be added over time as part of ongoing innovation.Table 1.Email Security Suite LicensesSuite NameProductFeature DescriptionEmail Security SuiteEmail Security ApplianceCisco ESA Premium Software Bundle (AS, AV, OF, DLP, ENC) LicenseCisco ESA Advanced Malware Protection LicenseCisco ESA Graymail Safe-Unsubscribe LicenseCisco SMA Centralized Email Management Reporting LicenseCloud Email SecurityCisco Cloud Email Security Premium LicenseCisco Cloud Email Security AMP Add-onCisco CES Graymail Safe-Unsubscribe LicenseAMP Threat GridCisco AMP Threat Grid Daily Submissions LicenseCisco AMP Threat Grid Private Tagging LicenseCisco AMP Threat Grid File PacksCisco AMP Threat Grid Threat Feeds LicenseAMP Virtual Private Cloud4 2017 Cisco and/or its affiliates. All rights reserved.Cisco AMP virtual Private Cloud Service Subscription

Cisco Enterprise Agreement Ordering Guide for Security SuitesOrdering GuideCisco Internal and Partner Confidential2.2. Cisco Enterprise Agreement for Security – Cloud and Web Security SuiteThe Cisco Cloud and Web Security Suite comprises subscription licenses for Cisco Web Security Appliance (WSA), Cisco Umbrella, and CiscoCloudlock. It also includes optional licenses for Cisco AMP Threat Grid, Cisco AMP Virtual Private Cloud, Cisco Defense Orchestrator for Umbrella,and Cisco Cloud Web Security. (See Table 2.)New features may be added over time as part of ongoing innovation.Table 2.Cloud and Web Security Suite LicensesSuite NameProductFeature DescriptionCloud and Web SecuritySuiteWeb Security ApplianceCisco Web Premium Software Bundle (WREP, WUC, AMAL) LicensesCisco WSA Advanced Malware Protection LicenseCisco SMA Centralized Web Management Reporting LicenseCisco Web Anti-Virus McAfee License KeyCisco Web Security Advanced Reporting LicenseUmbrellaCisco Umbrella Insights Gold SupportCisco Umbrella Platform Gold SupportCisco Umbrella Platinum SupportCloudlockCisco Cloudlock 1-7 Apps License for Commercial CustomersCisco Cloudlock 1-7 Apps License for Federal CustomersCisco Cloudlock Add-ons for Commercial CustomersCisco Cloudlock Add-ons for Federal Customers5 2017 Cisco and/or its affiliates. All rights reserved.

Cisco Enterprise Agreement Ordering Guide for Security SuitesOrdering GuideCisco Internal and Partner ConfidentialSuite NameProductFeature DescriptionCloud and Web SecuritySuiteThreat GridCisco AMP Threat Grid Daily Submissions LicenseCisco AMP Threat Grid Private Tagging LicenseCisco AMP Threat Grid File PacksCisco AMP Threat Grid Threat Feeds LicenseAMP Virtual Private CloudCisco AMP virtual Private Cloud Service SubscriptionDefense Orchestrator for UmbrellaCisco Defense Orchestrator for UmbrellaCloud Web SecurityCisco Cloud Web Security Premium Bundle (Base, CTA, AMP)2.3. Cisco Enterprise Agreement for Security – Policy and Visibility SuiteThe Cisco Policy and Visibility Suite comprises subscription licenses for Cisco Stealthwatch (WSA) and Cisco Identity Services Engine (ISE).(See Table 3.)New features may be added over time as part of ongoing innovation.Table 3.Policy and Visibility Suite LicensesSuite NameProductFeature DescriptionPolicy and Visibility SuiteCisco StealthwatchCisco Stealthwatch Flow Rate LicenseCisco Stealthwatch Cloud LicenseCisco Stealthwatch Endpoint LicenseCisco Stealthwatch Learning Network License6 2017 Cisco and/or its affiliates. All rights reserved.

Cisco Enterprise Agreement Ordering Guide for Security SuitesOrdering GuideCisco Internal and Partner ConfidentialSuite NameProductFeature DescriptionPolicy and Visibility SuiteIdentity Services Engine (ISE)Cisco Identity Services Engine Base LicenseCisco Identity Services Engine Plus LicenseCisco Identity Services Engine Apex LicenseCisco ISE Device Administration License2.4. Cisco Enterprise Agreement for Security – Security Essentials SuiteThe Cisco Security Essentials Suite comprises IPS, Apps, AMP and URL subscription licenses for Cisco Next-Generation Firewall (NGFW), CiscoNext-Generation Intrusion Prevention Systems (NGIPS), Cisco Integrated Services Routers (ISR), Cisco AMP for Endpoints, Cisco AnyConnect, CiscoAMP on ESA, Cisco AMP on CES, Cisco AMP on WSA, Cisco AMP Threat Grid, Cisco AMP Virtual Private Cloud, and Cisco Defense Orchestrator.(See Table 4.)New features may be added over time as part of ongoing innovation.Table 4.7Security Essentials Suite LicensesSuite NameProductFeature DescriptionSecurity Essentials SuiteFirePOWER Services for NGFWCisco NGIPSv IPS, Apps, AMP and URL Services License forNext-Generation Firewall devicesFirePOWER Services for NGIPSCisco NGIPSv IPS, Apps, AMP and URL Services License forNext-Generation IPS devicesFirePOWER Services for ISRCisco NGIPSv IPS, Apps, AMP and URL Services License for IntegratedServices RoutersCisco AnyConnectCisco AnyConnect Apex LicenseAMP for EndpointsCisco Advanced Malware Protection Service for Endpoints License 2017 Cisco and/or its affiliates. All rights reserved.

Cisco Enterprise Agreement Ordering Guide for Security SuitesOrdering GuideCisco Internal and Partner ConfidentialSuite NameProductFeature DescriptionSecurity Essentials SuiteThreat GridCisco AMP Threat Grid Daily Submissions LicenseCisco AMP Threat Grid Private Tagging LicenseCisco AMP Threat Grid File PacksCisco AMP Threat Grid Threat Feeds LicenseAMP for ESACisco ESA Advanced Malware Protection LicenseAMP for WSACisco WSA Advanced Malware Protection LicenseAMP for CESCisco CES Advanced Malware Protection LicenseAMP Virtual Private CloudCisco AMP virtual Private Cloud Service SubscriptionCisco Defense OrchestratorCisco Defense Orchestrator for Next-Generation Firewall andNext-Generation IPS3. Quoting ProcessThe quoting and ordering process will be done in close collaborationwith your Cisco account team.The following information needs to be provided by Cisco Sales for thequoting process through the Cisco EA Legal Tool:1. Define the Enterprise Boundaries – Names of customer and customerentities that will use the suite software and subscriptions. (Customerentities must have at least 50 percent ownership by customer and rollup into customer’s consolidated financial statement.)2. Outline Deployment Strategy – Which Cisco Enterprise Agreementsuites for security Suite (s) the customer will purchase; expectednumber of years to deploy/duration of Cisco Enterprise Agreementterm (3 or 5 years); and the expected Cisco EA migration or start date.8 2017 Cisco and/or its affiliates. All rights reserved.3. Choose Cisco Enterprise Agreement suites for security – Need tounderstand which Cisco Enterprise Agreement suites for security willbe part of this agreement.4. Calculate Software Penetration – While the Cisco EA supports fullenterprise coverage, not all software suite or suite elements aremandated. The following represents the minimum requirements toprice-quote a Cisco Enterprise Agreement for security: Email Security – 100% of the user population must be covered. Cloud and Web Security – 100% of the user population must becovered. Policy and Visibility – 100% of the ISE endpoints must be covered.100% of the Stealthwatch flows must be covered.

Cisco Enterprise Agreement Ordering Guide for Security SuitesOrdering GuideCisco Internal and Partner Confidential Security Essentials – 100% of the network appliances must becovered. 100% of the endpoints and 100% of the user populationneed to be covered. For product specific minimum ordering thresholds, please referencethe Cisco Enterprise Agreement for security ordering rules.5. Gather Enterprise Device Counts – Accurate device count is thebasis of ELA pricing. For the chosen suites, device counts will needto be provided in the Cisco EA Legal Tool. If obtaining device countproves to be a challenge, Cisco can query available records toprovide a device count profile for review.6. Obtain BU approval of the End User Information Form from theCisco EA Legal Tool – The Cisco account team and the Cisco EALicensing Executive/BDM should work with the customer and/orpartner to enter the Cisco EA parameters above (Customer, Legalaffiliates, term, suite(s) selected, device counts, etc.) into the CiscoEA Legal Tool.7. Bill of Materials (BOM) and Deal Support Automation (DSA)submission process – The final price quote will be converted intoa Cisco EA-compliant BOM by CPS. No BOMs will be created for aCisco EA opportunity that has not been approved in the Cisco EA.No BOMs may be shared externally (e.g., with partners or customers)without DSA approval and a BU-approved BOM.8. The Cisco account team will provide the customer and/or partnerwith the appropriate BOM to be ordered through Cisco Commerceper the above step.4. Ordering ProcessIn order to have a valid order, the partner must have an approved MyDeal Manager (MDM) request to purchase Cisco EA. This MDM approvalnumber must be referenced in the order placed to Cisco. In addition,the partner (if indirect) or customer (if direct) must provide Cisco with acompleted and signed End User Information Form(s) prior to placing anCisco EA order.The ELA suite part numbers and quantities must be placed throughCisco Commerce (CCW) using the standard Cisco ordering process.The Customer Partner Services (CPS) team is responsible forconstructing the BOM. If Adoption Services or Advanced Services SKUsare required, they must be quoted through the Advanced ServicesPricing Tools (ASPT) and ordered through the Cisco Service ContractCenter.5. Additional ResourcesFor further assistance, please contact your Cisco account teammanager or send an email to the Software Operations Help Desk: Americas: [email protected] Europe, Middle East, Africa, and Russia: [email protected] Asia Pacific: sw-ops-help[email protected] 2017 Cisco and/or its affiliates. All rights reserved. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks,go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Ciscoand any other company. (1110R)C07-738750-01 05/17

Cloud and Web Security – 100% of the user population must be covered. Policy and Visibility – 100% of the ISE endpoints must be covered. 100% of the Stealthwatch flows must be covered. Cisco Enterprise Agreement Ordering Guide for Security Suites Ordering Guide Cisco Internal and Partner ConfidentialFile Size: 566KBPage Count: 9Explore furtherCisco Umbrella Packages - Cisco Umbrellaumbrella.cisco.comSolved: advanced phishing protection - Cisco Communitycommunity.cisco.comCisco Email and Web Security Ordering Guidecommunity.cisco.comHow do I find my Cisco Contract Number? - Ciscowww.cisco.comCCNA 200-301: Official Cert Guidecdn.ttgtmedia.comRecommended to you b