Protect your data center. Your data center is critical to the success of your business. Cisco Secure Data Center™ solution gives you integrated protection and dynamic, intelligent control to defend against today’s sophisticated attacks. Confidence to compete—security becomes a growth engine for new business opportunities. Advanced threat protection—get the latest intelligence and integrated defense for better security. Comprehensive coverage—get protection across virtual, physical, cloud, and SDN architectures. Security intelligence—industry—leading analysis keeps you informed and protected. Microsegmentation and cloud security—bring visibility and control to cloud and virtual workloads with Cisco’s Adaptive Security Virtual Appliance™ (ASAv) and Next—Generation Virtual Firewall (NGFWv). Threat mitigation—gain visibility and rapid detection with Cisco™ threat—focused Next—Generation Firewalls (NGFWs). Cisco™ Next—Generation Intrusion Prevention System (NGIPS) and Advanced Malware Protection (AMP) offer contextual awareness and retrospective security. Deep visibility—go beyond conventional threat detection with the Cisco Stealthwatch™ system. Harness the power of NetFlow for advanced network visibility, analytics, and protection.

Software—defined segmentation—use Cisco TrustSec™ technology, found in Cisco™ switches, routers, and wireless devices to simplify provisioning, accelerate security operations, and consistently enforce policy. Software—defined segmentation You need to segment your network to protect critical business assets. But traditional approaches are complex. Cisco TrustSec™ software—defined segmentation is simpler to enable than VLAN—based segmentation. Policy is defined through security groups. It is open through IETF, available within OpenDaylight™, and supported on third—party and Cisco platforms. Reduce risks—segment users, devices, and applications without redesigning the network. Easily manage access to enterprise resources. Restrict the lateral movement of threats with microsegmentation. Enable rapid threat containment (RTC) to isolate attacks. Apply policies across the network—scale fast and enforce policies consistently across the network. Streamline security policy management across domains. Use Cisco ISE™ to manage TrustSec security group tags and share information with other group—based policy schemes.

Next–Generation Intrusion Prevention System

Network security for the threats you face. Get better protection against today’s sophisticated attacks. Stop more threats, gain more insight into your environment, and protect your digital business initiatives. Cisco Firepower Next—Generation IPS (NGIPS) threat appliances combine superior visibility, embedded security intelligence, automated analysis, and industry—leading threat effectiveness. Real—time contextual awareness—if you can’t see it, you can’t protect it. Gain deep insight into your network devices, applications, users, operating systems, files, and more. Use this information to better understand network behavior, identify out—of—compliance situations, and evaluate intrusion events. Advanced threat protection—address known and unknown threats through fully integrated advanced malware protection (AMP) and sandboxing solutions. Rapidly detect, block, contain, and remediate advanced threats. Cisco™ median time to detection (MTTD) is an industry—leading 13 hours. Advanced threat protection—address known and unknown threats through fully integrated advanced malware protection (AMP) and sandboxing solutions. Rapidly detect, block, contain, and remediate advanced threats. Cisco™ median time to detection (MTTD) is an industry—leading 13 hours.

Next–Generation Firewalls

Advanced defenses for advanced attacks. Block more threats and quickly mitigate those that do breach your defenses with the industry’s first threat—focused NGFW. Cisco Firepower™ NGFW appliances combine Cisco’s™ proven network firewall with the industry’s most effective next—gen IPS and advanced malware protection. All so you can get more visibility, be more flexible, save more, and protect better. Attackers have days, months, or even longer to lay solid foundations for attacks and devise innovative ways to maximize the impact. Defenders must reduce attackers’ time to operate. See how adversaries remain active and undetected, and the challenges defenders must overcome to undermine attackers’ success. Beat sophisticated cyber attacks with a superior security appliance. Cisco offers the industry’s first threat—focused next—generation firewall (NGFW), the Cisco ASA 5500—X™ series firewalls. Superior multilayered protection—stay more secure. This NGFW has earned the highest security effectiveness scores in third—party testing for both NGIPS and AMP, blocking 99.4% and 99.2% of threats, respectively. Get visibility into and control over activity across your network.

Features And Benefits

correlate threat events with the intended target’s vulnerabilities to prioritize the threats that matter most. Analyze your network vulnerabilities to identify needed security policies. Associate users with Cisco™ intrusion events to speed investigations. High—performance appliances—Cisco Firepower™ (4100 Series and 9000 Series) and Cisco FirePOWER™ (7000 Series and 8000 Series) appliances are purpose—built to provide the right throughput, modular design, and carrier—class scalability. They incorporate a low—latency, single—pass design and include fail—to—wire interfaces. Cisco Stealthwatch™ uses NetFlow™ to provide visibility across the network, data center, branch offices, and cloud. It’s advanced security analytics uncover stealthy attacks on the extended network. Stealthwatch helps you use your existing network as a security sensor and enforcer to dramatically improve your threat defense. The most dangerous threats are the ones you can’t see. Get the visibility you need to monitor your infrastructure and detect threats before damage is done. Cisco™ Stealthwatch delivers security that is simple, open, and automated for integrated threat defense and strong protection.