| 15.1 |  | PIX Security Appliance Management Tools |
| 15.1.3 |  | Cisco Secure Policy Manager |

| Cisco Security Policy Manager (CSPM) runs on Windows 2000 Server and is a management tool for Cisco routers and PIX Security Appliances. With CSPM, administrators can define, distribute, enforce, and audit network-wide security policies from a central location. CSPM streamlines the management of complicated network security elements.

With the CSPM graphical user interface (GUI), administrators can visually define high-level security policies for multiple PIX Security Appliances and VPN gateways. When created, these policies can be distributed from a central location, eliminating costly and time-consuming device-by-device security administration with the CLI or PDM. In addition, CSPM provides system-auditing functions such as event notification and a Web-based reporting system.

CSPM replaces the PIX Security Appliance configuration completely. It provides the following firewall management capabilities:

- Defines the interface settings—Specifies the perimeter name and number, interface type, name, IP address, and number, and the network name and IP address.
- Defines device characteristics—Specifies timeouts, and enables Flood Guard and logging.
- Defines access rules—Manages information flow on Context-based Access Control (CBAC) enabled routers by adding commands generated from policy statements.
- Converts policy into firewall configuration—Converts policy statements into commands that are inserted into an existing configuration for a router-based firewall. It completely replaces the configuration of a PIX Security Appliance.
- Manages local and remote devices—Manages devices over the network.