What is the Cisco Secure Firewall framework?

The Cisco Secure Firewall framework segments the broader Cisco firewall framework across Cisco Firepower Threat Defense (FTD), Cisco ASA, and Cisco Defense Orchestrator (CDO). The broader licensing framework segments across Threat (intrusion prevention, file analysis, security intelligence), Malware (advanced malware protection), URL Filtering, and Cisco Secure Client (formerly AnyConnect).

What is Cisco Secure Endpoint?

Cisco Secure Endpoint (formerly AMP for Endpoints) is the load bearing Cisco endpoint detection and response framework. The framework segments across Essentials (baseline detection), Advantage (Orbital advanced search, threat hunting, extended detection and response), and Premier (managed threat response via Cisco Secure Managed Detection and Response).

What is Cisco Umbrella SIG?

Cisco Umbrella SIG (Secure Internet Gateway) is the broader Cisco cloud delivered security framework. SIG Essentials anchors cloud delivered firewall, secure web gateway, and CASB. SIG Advantage adds data loss prevention (DLP), remote browser isolation (RBI), and zero trust network access (ZTNA).

What is Cisco Duo Premier?

Cisco Duo Premier (formerly Duo Beyond) is the broader Cisco multi factor authentication framework with trusted endpoints, Duo Network Gateway, and VPN replacement capabilities. Duo segments across Free, Essentials (MFA), Advantage (device trust, SSO, policy), and Premier.

What is the Cisco Secure Choice Enterprise Agreement?

The Cisco Secure Choice EA is the top down Cisco security commitment framework. The framework anchors against multi year minimum commitment, Cisco Secure Choice EA discount tier (typically twenty to forty percent against Cisco list price), the True Forward framework (cannot reduce, can only add), and the Cisco Secure Choice EA renewal framework.

Cisco Security Licensing Guide | Redress Compliance

The Cisco security licensing framework is the load bearing Cisco security framework, anchoring the broader Cisco security framework against the broader Cisco product framework. The framework segments the broader Cisco security framework across the Cisco Secure Firewall framework (Firepower, ASA, FTD), the Cisco Secure Endpoint framework (formerly AMP for Endpoints), the Cisco Umbrella framework (formerly OpenDNS), the Cisco Duo framework, the Cisco SecureX framework, the Cisco Talos framework, the Cisco Secure Email framework (formerly Email Security Appliance), the Cisco Secure Web framework (formerly Web Security Appliance), the Cisco Identity Services Engine (ISE) framework, the Cisco Secure Network Analytics framework (formerly Stealthwatch), and the bespoke Cisco security framework at upper customer scale. This guide sets out the buyer side framework for Cisco security licensing, the Cisco Secure Choice Enterprise Agreement framework, the Duo edition framework, the Umbrella package framework, the buyer side moves, and how to anchor against the broader Cisco renewal cycle. Read the related Cisco services practice, the Cisco ELA guide, the Cisco Smart Licensing guide, and the Cisco Meraki licensing guide.

The Cisco Secure Firewall framework

The Cisco Secure Firewall framework segments the broader Cisco firewall framework across the Cisco Firepower Threat Defense (FTD) framework, the Cisco ASA framework, and the Cisco Defense Orchestrator (CDO) framework. The broader Cisco Secure Firewall licensing framework segments across the Threat license framework (intrusion prevention, file analysis, security intelligence), the Malware license framework (advanced malware protection), the URL Filtering license framework, and the Cisco Secure Client (formerly AnyConnect) license framework. The broader buyer side framework typically anchors against the bundle framework (Threat plus Malware plus URL plus AnyConnect), which typically delivers material commercial leverage at the broader Cisco renewal cycle. Read the related Cisco Firepower licensing guide.

The Cisco Secure Endpoint framework

Cisco Secure Endpoint (formerly AMP for Endpoints) is the load bearing Cisco endpoint detection and response framework. The framework segments across the Cisco Secure Endpoint Essentials framework, the Cisco Secure Endpoint Advantage framework, and the Cisco Secure Endpoint Premier framework. Essentials anchors the broader baseline detection framework. Advantage adds the broader Orbital advanced search framework, the broader threat hunting framework, and the broader extended detection and response framework. Premier adds the broader managed threat response framework (Cisco Secure Managed Detection and Response). The broader buyer side framework typically anchors against actual deployed endpoint count, against actual user count, and against actual Cisco Secure Choice Enterprise Agreement framework. Read the related Cisco Secure Endpoint comparison.

The Cisco Umbrella framework

Cisco Umbrella is the load bearing Cisco DNS layer security framework, anchoring the broader Cisco cloud security framework against the broader internet usage framework. The Umbrella framework segments across Umbrella DNS Essentials, Umbrella DNS Advantage, Umbrella SIG (Secure Internet Gateway) Essentials, and Umbrella SIG Advantage. DNS Essentials anchors the broader DNS layer security framework. DNS Advantage adds the broader Cisco SecureX framework, the broader threat intelligence framework, and the broader Cisco Talos integration framework. SIG Essentials adds the broader cloud delivered firewall framework, the broader secure web gateway framework, and the broader cloud access security broker (CASB) framework. SIG Advantage adds the broader data loss prevention (DLP) framework, the broader remote browser isolation (RBI) framework, and the broader zero trust network access (ZTNA) framework. The broader buyer side framework typically anchors against actual user count and against actual Cisco Secure Choice Enterprise Agreement framework. Read the related Cisco Umbrella licensing guide.

The Cisco Duo framework

Cisco Duo is the load bearing Cisco multi factor authentication framework, anchoring the broader Cisco identity security framework against the broader user authentication framework. The Duo framework segments across Duo Free (limited), Duo Essentials (formerly MFA), Duo Advantage (formerly Access), and Duo Premier (formerly Beyond). Essentials anchors the broader MFA framework. Advantage adds the broader device trust framework, the broader Single Sign On framework, and the broader policy based access framework. Premier adds the broader trusted endpoints framework, the broader Duo Network Gateway framework, and the broader VPN replacement framework. The broader buyer side framework typically anchors against actual user count, against actual application count, and against actual Cisco Secure Choice Enterprise Agreement framework. Read the related Cisco Duo pricing guide.

The Cisco ISE framework

The Cisco Identity Services Engine (ISE) framework anchors the broader Cisco network access control framework, the broader Cisco TrustSec framework, the broader Cisco SD Access framework, and the broader Cisco zero trust framework. The ISE framework segments across the ISE Essentials license framework (basic device authentication and authorisation), the ISE Advantage license framework (TrustSec, profiling, posture, BYOD), the ISE Premier license framework (Threat Centric NAC, Rapid Threat Containment), and the bespoke ISE Device Admin license framework. The broader buyer side framework typically anchors against actual managed endpoint count, against actual concurrent user count, and against actual Cisco Secure Choice Enterprise Agreement framework. Read the related Cisco ISE licensing guide.

The Cisco Secure Choice EA framework

The Cisco Secure Choice Enterprise Agreement framework reframes the broader Cisco security framework from per product licensing to a top down EA commitment. The framework typically anchors against a multi year minimum commitment, a Cisco Secure Choice EA discount tier framework, the broader Cisco True Forward framework, and the broader Cisco Secure Choice EA renewal framework.

The broader buyer side framework typically anchors against five Cisco Secure Choice EA control points.

Actual Cisco security framework. Anchor against actual user count.
Term framework. Typically three or five year.
True Forward framework. Cannot reduce, can only add.
Discount tier framework. Typically twenty to forty percent against the broader Cisco list price framework.
Renewal framework. Typically delivers material commercial leverage at the broader Cisco renewal cycle.

Read the related Cisco ELA guide, the Cisco Secure Choice EA renewal framework, and the Cisco ELA true up guide.

The buyer side moves

The eleven move buyer side framework anchors the broader Cisco security renewal cycle.

Anchor the actual Cisco security framework. Hold against the actual customer Cisco security deployment framework.
Anchor the count frameworks. Actual user count framework, actual endpoint count framework, and actual application count framework.
Anchor the Cisco Secure Choice EA framework. Hold against the broader Cisco renewal cycle.
Anchor the True Forward framework. Hold against the broader Cisco Secure Choice EA framework.
Anchor the Cisco Secure Firewall bundle framework. Threat plus Malware plus URL plus AnyConnect against the broader Cisco firewall framework.
Anchor the Cisco Umbrella SIG framework. Hold against the broader cloud security framework.
Anchor the Cisco Duo edition framework. Hold against the broader user count framework.
Anchor the Cisco Secure Endpoint edition framework. Hold against the broader endpoint count framework.
Anchor the Cisco ISE edition framework. Hold against the broader network access framework.
Anchor the Cisco SmartNet framework. Hold against the broader Cisco hardware lifecycle framework.
Anchor the Cisco SWSS framework. Hold against the broader Cisco software support framework.

Read the related Cisco SmartNet renewal negotiation and the related Cisco EA renewal strategy.

How we engage

Redress engages on the broader Cisco security framework across three engagement frameworks.

Cisco security assessment framework. Anchors against the broader actual customer Cisco security framework, the broader actual customer Cisco user count framework, the broader actual customer Cisco endpoint count framework, and the broader actual customer Cisco Secure Choice EA framework.
Cisco security negotiation framework. Anchors against the broader Cisco Secure Choice EA renewal cycle, the broader Cisco SmartNet framework, the broader Cisco SWSS framework, and the broader buyer side framework.
Cisco Vendor Shield framework. Anchors against the broader always on multi vendor framework.

Read the related Vendor Shield and the Renewal Program.

Redress is independent. Buyer side. Industry Recognized. Five hundred plus enterprise software engagements. $2B+ in client spend under advisory. Eleven vendor practices. One hundred percent buyer side. Read the related About Us page, the management team page, the locations page, and the contact page.