View source for Cisco Cloudcenter and UCS Director

{{Infobox company
| name             = Cisco Cloudcenter and UCS Director
| logo             = [[File:320px-Cisco logo blue 2016.png|200px]]
| caption          = 
| type             = 
| traded_as        = 
| genre            = <!-- Only used with media and publishing companies -->
| fate             = 
| predecessor      = 
| successor        = 
| foundation       = <!-- {{Start date|YYYY|MM|DD}} -->
| founder          = Sandy Lerner, Leonard Bosack
| defunct          = <!-- {{End date|YYYY|MM|DD}} -->
| location_city    = San Jose, California
| location_country = United States
| location         = 
| locations        = 
| area_served      = Worldwide
| key_people       = Chuck Robbins (CEO)
| industry         = Cloud computing, Web services
| products         = [[Software as a service|SaaS]]
| services         = 
| revenue          = $13.6 billion (2023, Q2)<ref name="CiscoReports20">{{cite web |url=https://investor.cisco.com/news/news-details/2023/CISCO-REPORTS-SECOND-QUARTER-EARNINGS/default.aspx |title=Cisco Reports Second Quarter Earnings |publisher=Cisco Systems, Inc |date=15 February 2023 |accessdate=01 August 2023}}</ref>
| operating_income = 
| net_income       = 
| aum              = <!-- Only used with financial services companies -->
| assets           = 
| equity           = 
| owner            = 
| num_employees    = 
| parent           = 
| divisions        = 
| subsid           = 
| homepage         = [https://www.cisco.com/c/en/us/support/cloud-systems-management/cloudcenter/series.html CloudCenter] and [https://www.cisco.com/c/en/us/products/servers-unified-computing/ucs-director/index.html USC Director]
| footnotes        = 
| intl             = 
}}

'''Cisco Cloudcenter''' and '''UCS Director''' are hybrid and multicloud software solutions provided by Ciscos Systems, Inc., a multinational technology conglomerate. While not providing public cloud services, Cisco acts as the "Switzerland of the cloud" by providing management, security, analytics, and advanced networking cloud solutions and services.<ref name="ButlerHowCisco17">{{cite web |url=https://www.networkworld.com/article/3174944/how-cisco-wants-to-become-the-switzerland-of-the-cloud.html |title=How Cisco wants to become the Switzerland of the cloud |author=Butler, B. |work=NetworkWorld |date=27 February 2017 |accessdate=01 August 2023}}</ref> Cisco CloudCenter and UCS Director are representative of that approach.

Cisco describes Cisco CloudCenter as a "software solution [that] helps you modernize and automate your data center or add public cloud application deployment to your service offering."<ref name="CiscoCloudCenter">{{cite web |url=https://www.cisco.com/c/en/us/products/cloud-systems-management/cloudcenter/index.html |archiveurl=https://web.archive.org/web/20210415162756/https://www.cisco.com/c/en/us/products/cloud-systems-management/cloudcenter/index.html |title=Cisco CloudCenter (formerly CliQr) |publisher=Cisco |archivedate=15 April 2021 |accessdate=01 August 2023}}</ref> USC Director is described as "a heterogeneous platform for private cloud infrastructure as a service (IaaS) ... [that] supports a variety of hypervisors along with Cisco and third-party servers, network, storage, converged and hyperconverged infrastructure across bare-metal and virtualized environments."<ref name="CiscoUCSDirector">{{cite web |url=https://www.cisco.com/c/en/us/products/servers-unified-computing/ucs-director/index.html |title=Cisco UCS Director |publisher=Cisco |accessdate=01 August 2023}}</ref> These solutions support the Alibaba, Amazon, Google, IBM, Microsoft, and (presumably, with the acquisition of VMware vCloud Air<ref name="OVHCompletes17">{{cite web |url=https://www.ovh.com/world/news/press/cp2456.ovh_completes_acquisition_of_vmwares_vcloud_air_business |archiveurl=https://web.archive.org/web/20190320060231/https://www.ovh.com/world/news/press/cp2456.ovh_completes_acquisition_of_vmwares_vcloud_air_business |title=OVH Completes Acquisition of VMware’s vCloud Air Business |work=OVH News |publisher=OVHcloud |date=08 May 2017 |archivedate=20 March 2019 |accessdate=01 August 2023}}</ref>) OVHcloud public clouds.<ref name="CiscoCCSuiteGlance">{{cite web |url=https://www.cisco.com/c/dam/en/us/products/collateral/cloud-systems-management/cloudcenter-suite/at-a-glance-c45-741883.pdf |archiveurl=https://web.archive.org/web/20201030181821/https://www.cisco.com/c/dam/en/us/products/collateral/cloud-systems-management/cloudcenter-suite/at-a-glance-c45-741883.pdf |format=PDF |title=Cisco CloudCenter Suite |publisher=Cisco |date=2019 |archivedate=30 October 2020 |accessdate=01 August 2023}}</ref>

In November 2020, Cisco announced the end-of-sale and end-of-life of Cisco CloudCenter. The software would no longer be sold as of May 7, 2021, and existing contracts running on Cisco CloudCenter could extend or renew the service until August 3, 2023. Last date of support for CloudCenter is May 31, 2024, when it will officially become obsolete.<ref name="CiscoCloudCenterEoL21">{{cite web |url=https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/cloudcenter/eos-eol-notice-c51-744447.html |title=End-of-Sale and End-of-Life Announcement for the Cisco CloudCenter |publisher=Cisco Systems, Inc |date=16 July 2021 |accessdate=01 August 2023}}</ref> {{As of|August 2023}}, UCS Director still appears to be actively developed and sold.


==Provider research==
'''NOTE''': Due to the end-of-life announcement of CloudCenter<ref name="CiscoCloudCenterEoL21" />, much of the following material is no longer relevant. However, it is still left here for historical purposes. It has been slightly modified to take into account the end-of-life status.

This section uses public information to provide some answers to the 18 questions posed in Chapter 6 of the wiki-based guide ''[[LII:Choosing and Implementing a Cloud-based Service for Your Laboratory|Choosing and Implementing a Cloud-based Service for Your Laboratory]]''. In some cases, public information could not be found, and a recommendation to further discuss the question with the cloud service provider (CSP) is made. Additionally, as a provider of cloud-based software solutions for hybrid and multicloud management, some of the questions from Chapter 5 may not be relevant, as they are not providing public cloud services but software as a service (SaaS) (or local installs) of cloud management software.


1. '''What experience do you have working with laboratory customers in our specific industry?'''

It's not clear what [[Laboratory|laboratories]], if any, have adopted Cisco CloudCenter or UCS Director. A Cisco representative is likely to be able to supply examples of laboratories that use or have used these SaaS cloud options.


2. '''Can your solution readily integrate with our other systems and business processes, making it easier for our end users to perform their tasks?'''

Per Cisco's CloudCenter Suite architecture document, "Cisco CloudCenter is built to integrate with and extend a wide range of other data center and cloud management platforms and tools that are found in the typical IT enterprise."<ref name="CiscoCloudArch17">{{cite web |url=https://www.cisco.com/c/dam/en/us/products/collateral/cloud-systems-management/cloudcenter/white-paper-c11-737224.pdf |archiveurl=https://web.archive.org/web/20210423212205/https://www.cisco.com/c/dam/en/us/products/collateral/cloud-systems-management/cloudcenter/white-paper-c11-737224.pdf |format=PDF |title=Cisco CloudCenter Solution: Architecture Overview |publisher=Cisco |date=2017 |archivedate=23 April 2021 |accessdate=01 August 2023}}</ref> The document then goes on to discuss content integration, platform integration, tool integration, and cloud integration<ref name="CiscoCloudArch17" />; read the white paper to learn more. As for UCS Director, it acts as a tool "to operationally integrate the bare-metal and virtual data center infrastructure stack to address complex, time-consuming, manual, and compartmentalized management processes."<ref name="A&TCiscoUCS">{{cite web |url=https://www.atnetworks.com/Products/overview/M010354449 |title=Cisco - Cisco UCS Director CUIC Offerings |publisher=A&T Networks |accessdate=01 August 2023}}</ref> These tools' inherent purposes are to help integrate your on-premises with public and private cloud offerings.


3. '''What is the average total historical downtime for the service(s) we're interested in?'''

There doesn't appear to be an uptime status tracker for CloudCenter and UCS Director. According to Cisco's trust center document for CloudCenter, they used to have an uptime status page at http://status.cloudcenter.cisco.com/<ref name="CiscoCloudTrust19">{{cite web |url=https://www.cisco.com/c/dam/en/us/products/collateral/cloud-systems-management/cloudcenter-suite/cc-suite-saas-trust-center.pdf |format=PDF |title=Cisco CloudCenter Suite Trust Center |publisher=Cisco |date=2019 |accessdate=01 August 2023}}</ref>, but that URL is no longer functional, due to the end-of-life state of the product.<ref name="CiscoCloudCenterEoL21" />


4. '''Do we receive comprehensive downtime support in the case of downtime?'''

It's not clear if there are support tiers or plans for CloudCenter and UCS Director. You'll have to discuss support plans and provided support during downtime with a Cisco representative.


5. '''Where are your servers located, and how is data securely transferred to and from those servers?'''

The Cisco CloudCenter Suite Privacy Data Sheet indicates "datacenters are currently located in the following countries: United States, Germany, and Ireland." They add that "customer information is stored in the data center closest to the Customer's location as provided during the ordering process."<ref name="CiscoTrustPortal">{{cite web |url=https://trustportal.cisco.com/c/r/ctp/trust-portal.html |title=Cisco CloudCenter Suite Privacy Data Sheet |work=Trust Portal |publisher=Cisco |accessdate=01 August 2023}}</ref> You'll have to discuss this with a Cisco representative. Cisco documentation does add a little insight into secure data transfers using its solutions. The CloudCenter architecture document notes that CloudCenter "[[Encryption|encrypts]] data at rest and in motion and offers a range of critical management, authentication, and authorization features that don’t just secure the Cisco CloudCenter solution, but also the clouds to which it connects."<ref name="CiscoCloudArch17" /> Other security measures include SAML 2.0 support, LDAP and Active Directory support, randomly generated REST API keys, and more.<ref name="CiscoCloudArch17" /> It's not clear what data transfer security measures are in place for UCS Director. Consult with a Cisco representative to learn more.


6. '''Who will have access to our data (including subcontractors), and what credentials, certifications, and compliance training do they have?'''

It's not fully clear what personnel protocols Cisco follows for its SaaS solutions. However, the trust center document for CloudCenter notes that "[a]ll employees are required to undergo annual security training and must comply with Cisco’s Global Personal Data Protection and Privacy Policy and binding corporate rules."<ref name="CiscoCloudTrust19" /> They add, in regards to third-parties, that "our team performs due diligence reviews of each third party's information security program, privacy practices, confidentiality commitments and puts appropriate contractual terms in place to ensure that the processing will meet the high standards required by our team, and applicable laws."<ref name="CiscoCloudTrust19" /> Cisco's brochure on the [https://www.cisco.com/c/dam/en_us/about/doing_business/trust-center/docs/cisco-secure-development-lifecycle.pdf product life cycle] at Cisco may also prove useful. For more about this topic, discuss it with a Cisco representative.


7. '''Will our sensitive and regulated data be stored on a machine dedicated to complying with the necessary regulations?'''

Cisco doesn't clearly state what compliance standards are in place for those servers in the U.S., Germany, and Ireland. You'll have to have a discussion about this with a Cisco representative.


8. '''How segregated is our cloud data from another customer's, i.e., will lapses of security of another customer's cloud affect our cloud? (It typically won't, but asking the question will hopefully prompt the provider to better explain how your data is segregated.)'''

In a [https://www.cisco.com/c/dam/en/us/products/collateral/cloud-systems-management/cloudcenter/white-paper-c11-737223.pdf 2016 white paper], Cisco describes in-depth the concept of multitenancy and tenant isolation in regards to CloudCenter. However, it's not clear if there is a bare-metal option for users of CloudCenter or UCS Director. You'll have to have a discussion with a representative to learn more about their SaaS servers, etc.


9. '''Do you have documented data security policies?'''

Cisco documents its security practices regarding CloudCenter in several places:

* [https://www.cisco.com/c/dam/en/us/products/collateral/cloud-systems-management/cloudcenter-suite/cc-suite-saas-trust-center.pdf Cisco CloudCenter trust center document]
* [https://web.archive.org/web/20210423212205/https://www.cisco.com/c/dam/en/us/products/collateral/cloud-systems-management/cloudcenter/white-paper-c11-737224.pdf Cisco CloudCenter architecture document]
* [https://trustportal.cisco.com/c/r/ctp/trust-portal.html#/ Cisco CloudCenter Suite Privacy Data Sheet]
* [https://www.cisco.com/c/dam/en_us/about/doing_business/trust-center/docs/cisco-secure-development-lifecycle.pdf Cisco secure development lifecycle document]
* [https://www.cisco.com/c/dam/en_us/about/doing_business/trust-center/docs/cisco-transparency-service-center-faq.pdf Cisco Transparency Service Center FAQ]

Security documentation concerning UCS Director could not be found. Discuss this with a Cisco representative.


10. '''How do you test your platform's security?'''

Cisco tests its systems in multiple ways, as stated in its secure development document<ref name="CiscoSecureDev16">{{cite web |url=https://www.cisco.com/c/dam/en_us/about/doing_business/trust-center/docs/cisco-secure-development-lifecycle.pdf |title=Secure Development Lifecycle |publisher=Cisco |date=2016 |accessdate=01 August 2023}}</ref>:

* "When modeling threats, Cisco engineers follow the flow of data through a system and identify trust boundaries and inflection points where the data might be compromised. Once potential vulnerabilities and threats are identified, mitigation strategies can be put in place to minimize the risk. Cisco’s Threat Modeling tool facilitates the process by exposing applicable threats based on the developers’ diagram of the data flow and trust boundaries."
* "Cisco SDL identifies key security checkers for Static Analysis (SA) tools to detect source code vulnerabilities in both C and Java source code. Through internal analysis, field trials, and limited business unit deployments, a set of checkers has been identified to maximize detection of security issues."
* Cisco uses vulnerability testing methods "to determine their ability to withstand probes and attacks." They also have "[d]edicated penetration testing and security risk assessment engineers ... available to further identify and resolve potential security weaknesses."

Additionally, Cisco customers are able to "access, review, and test Cisco source code and other intellectual property—including hardware, software and firmware—in a dedicated, secure facility at a Cisco site," via its Transparency Service Center.<ref name="CiscoTransp20">{{cite web |url=https://www.cisco.com/c/dam/en_us/about/doing_business/trust-center/docs/cisco-transparency-service-center-faq.pdf |format=PDF |title=Cisco Transparency Service Center FAQ |publisher=Cisco |date=2020 |accessdate=01 August 2023}}</ref>


11. '''What are your policies for security audits, intrusion detection, and intrusion reporting?'''

In their trust document for CloudCenter, Cisco states: "We are targeting ISO 27001 certification in early 2020, having undergone audits with minimal findings in calendar year 2019. We are evaluating SOC2 as a potential roadmap item."<ref name="CiscoCloudTrust19" /> You'll have to discuss where their security auditing of their solutions stands in 2021. As for intrusion detection, that same document adds<ref name="CiscoCloudTrust19" />:

<blockquote>Our security operations team is responsible for continuously monitoring the day-to-day security of the SaaS solution. From endpoints to networks, crossfunctional teams are continuously observing the operational environments for anomalous events, behaviors, and malware. As threats emerge, the focus shifts to investigating suspicious alerts, events, and incidents. We are vigilant about keeping your data and systems secure.</blockquote>


12. '''What data logging information is kept and acted upon in relation to our data?'''

Cisco states in its trust document for CloudCenter that "[o]ur Cloud Operations and TAC teams have access to SaaS infrastructure and application log data. We provide limited assistance with audit requests."<ref name="CiscoCloudTrust19" /> The Cisco CloudCenter Suite Privacy Data Sheet also indicates that its "configuration logs and Support Information are stored in the U.S. region." However, it's not clear how they act upon this log data. Discuss this with a Cisco representative.


13. '''How thorough are those logs and can we audit them on-demand?'''

It's not clear how thorough the logs are. Cisco will presumably let you audit those logs, but you'll have to verify this with a representative.


14. '''For HIPAA-eligible data (e-PHI) we may have, will you sign a business associate agreement?'''

As Cisco is providing cloud management solutions via SaaS, your sensitive data should not, in theory, be exposed to their solutions. That said, Cisco does provide an older 2014 guide with "insight into the Cisco enterprise architecture and the controls used to address [[HIPAA]] Security Rule technical safeguards."<ref name="CiscoComplianceHIPAA14">{{cite web |url=https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Compliance/HIPAA/default/ch1_HIP.html |archiveurl=https://web.archive.org/web/20150910005155/https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Compliance/HIPAA/default/ch1_HIP.html |title=Chapter: Solution Overview |work=Cisco Compliance Solution for HIPAA Security Rule Design and Implementation Guide |publisher=Cisco |date=03 March 2014 |archivedate=10 September 2015 |accessdate=01 August 2023}}</ref> However, it's not clear if a business associate agreement is required if HIPAA-eligible data doesn't touch their solution.


15. '''What happens to our data should the contract expire or be terminated?'''

The Cisco Universal Cloud Services Agreement states<ref name="CiscoUniversal16">{{cite web |url=https://www.cisco.com/c/dam/en_us/about/doing_business/legal/docs/universal-cloud-services-agreement.pdf |format=PDF |title=Cisco Universal Cloud Services Agreement |publisher=Cisco |date=2016 |accessdate=01 August 2023}}</ref>:

<blockquote>If this Agreement is terminated for any reason:
a. Cisco will make your stored Content available to you for a reasonable period of time (subject to the AUP);
b. You will pay the fees for the SaaS provided up to the effective date of termination.</blockquote>

It's not clear what "a reasonable period of time" is. Consult with a Cisco representative to learn more.


16. '''What happens to our data should you go out of business or suffer a catastrophic event?'''

It's not publicly clear how Cisco would handle your data should they go out of business; consult with a representative about this topic. As for catastrophic events, in its Cisco CloudCenter Suite Privacy Data Sheet, the company notes "[i]f disaster recovery is needed, Customer information is restored within the region" in regards to its designated data center locations.<ref name="CiscoTrustPortal" /> Little else is said, and more clarification may be required of a representative.


17. '''Can we use your interface to extract our data when we want, and in what format will it be?'''

It's not clear how and when information can be extracted from either SaaS-based Cisco solution. Discuss this with a representative.


18. '''Are your support services native or outsourced/offshored?'''

It is unclear if support personnel are local to the customer or if support is outsourced to another business and country. Discuss this with a Cisco representative.

==Managed security services==
Customers of Cisco Cloudcenter and UCS Director may also want to consider the managed security services (MSS) provided by Cisco. Those services appear to primarily be offered by its Active Threat Analytics team, which is advertised as combining "people, intelligence, analysis, and technology to provide you with end-to-end security monitoring, threat detection, and incident response."<ref name="CiscoMSS">{{cite web |url=https://www.cisco.com/site/us/en/products/security/services/index.html |title=Services for Security |publisher=Cisco |accessdate=01 August 2023}}</ref> The primary services touted are managed detection and response, active threat analytics, and related incident response. This includes<ref name="CiscoMSS" />:

* '''Managed detection and response''': cloud monitoring; threat intelligence analysis; data-driven investigation; and security orchestration, automation, and response (SOAR)-based incident response
* '''Active threat analytics''': policy management, device monitoring, architecture management, incident analysis, device support, and detailed reporting

Cisco is listed in the top 70 of managed security service provider lists for multiple entities.<ref name="MSSPCyber20">{{cite web |url=https://www.msspalert.com/top250/list-2022/19/ |title=Top 250 MSSPs for 2022: Companies 70 to 61 |work=Top 250 MSSPs: Cybersecurity Company List and Research for 2020 |publisher=MSSP Alert |date=September 2022 |accessdate=01 August 2023}}</ref><ref name="CDMMSSPs21">{{cite web |url=https://www.cyberdefensemagazine.com/top-100-managed-security-service-providers-mssps/ |title=Top 100 Managed Security Service Providers (MSSPs) |work=Cyber Defense Magazine |publisher=Cyber Defense Media Group |date=18 February 2021 |accessdate=01 August 2023}}</ref>


==Additional information==

===Documentation and other media===
* [https://www.cisco.com/c/dam/en_us/about/doing_business/trust-center/docs/cisco-secure-development-lifecycle.pdf Cisco development and auditing practices]
* [https://web.archive.org/web/20201030181821/https://www.cisco.com/c/dam/en/us/products/collateral/cloud-systems-management/cloudcenter-suite/at-a-glance-c45-741883.pdf Cisco CloudCenter Suite at a glance]
* [https://web.archive.org/web/20210423212205/https://www.cisco.com/c/dam/en/us/products/collateral/cloud-systems-management/cloudcenter/white-paper-c11-737224.pdf Cisco CloudCenter Suite architecture overview]
* [https://www.cisco.com/c/dam/en/us/products/collateral/cloud-systems-management/cloudcenter/white-paper-c11-737223.pdf Cisco CloudCenter Suite multitenancy white paper]
* [https://www.cisco.com/c/dam/en/us/products/collateral/cloud-systems-management/cloudcenter-suite/cc-suite-saas-trust-center.pdf Cisco CloudCenter Suite trust document]
* [https://www.cisco.com/c/dam/en/us/products/collateral/servers-unified-computing/ucs-director/at-a-glance-c45-740657.pdf Cisco UCS Director at a glance]
* [https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-director/administration-guide/6-7/cisco-ucs-director-administration-67/cisco-ucs-director-administration-67_chapter_010.html Cisco UCS Director administration guide]

===External links===
* [https://www.cisco.com/c/en/us/about/trust-center.html Cisco trust center]

==References==
{{Reflist|colwidth=30em}}