Security Portfolio Guide

Enterprise Agreement Security Portfolio Guide

Cisco Secure is the industry’s most complete open platform, securing your organization’s resilience across multiple domains.

If it's connected, it's protected. The platform advantage provided by Cisco® security helps you see more and do more across your entire operational footprint, leaving you confident that you can face the challenges ahead and come out on top of any incident.

Moreover, securing everything from end to end doesn't mean bottlenecks and throttles. Instead, users get the same experience at home or on the road that they would at the office, with security working for them, instead of being a hindrance. The Cisco Enterprise Agreement is your path to lower costs, reduced complexity, and greatly improved efficacy, with the flexibility to grow as needed.


The Cisco Enterprise Agreement (EA) comprises five portfolios that encompass our software and services suites. These include Networking Infrastructure, Applications Infrastructure, Collaboration, Security, and Services. An EA offers you more than just a service agreement or buying program; it brings you the power and breadth of our entire software and services portfolio under a single, simplified agreement. It gives you easy access to the Cisco technologies you need to scale rapidly and accelerate at the speed of business. Not only does an EA simplify purchasing, it also offers you a future-ready software subscription strategy that delivers greater value, agility, and flexibility for your organization.

  • One agreement

    The Cisco EA is designed to cover your entire organization. When you purchase through an EA, the EA Program Terms will apply from your initial purchase to any future purchases you make within the term of the agreement. With Cisco’s EA management platform, you can manage your Cisco EA from one place with complete visibility and granular control.

  • Easier expansion

    The Cisco EA makes it easy to invest in the technology to support accelerated business transformation when you need it. Add additional software and services to your existing contract without another enterprise-wide commitment. It includes flexible commitment levels and lower spending minimums so you can respond to business changes rapidly.

  • Comprehensive solutions

    Organizations can combine suites from the five portfolios available in a Cisco EA to create a custom solution to address business needs. Complementing the bespoke ability customers have to meet their needs, Cisco offers solutions specifically designed to address the network security threats customers face today.

  • Exceptional value

    The Cisco EA delivers preferred pricing that rewards increased commitment with invaluable benefits, including pricing incentives, financial predictability, and investment protection. Maximize your investment with access to exclusive offers such as multisuite discounts.

  • Simple membership

    Get all the benefits of the Cisco EA for as little as $100,000 Total Contract Value (TCV). The Cisco EA makes it easy to invest in technology when you need it.

Experience simpler and more effective security

Despite the number of security solutions available today, cyberthreats remain as prevalent as ever. Security needs to be simplified and easier to use so you can move faster to protect your organization. Cisco security solutions, known as Cisco Secure, take an integrated platform approach to radically simplify your security. They apply intelligence to anticipate the changing needs of your business and provide the protection you need everywhere, so you can work anywhere. Our broad portfolio of security solutions includes leading solutions that protect organizations at the user, device, network, and application/data levels. Included with every Cisco Secure product license is SecureX, a cloud-native, built-in platform that connects our Cisco Secure portfolio and your infrastructure. It allows you to radically reduce dwell time and human-powered tasks.

At the same time, the way you buy security must be easier and more flexible. The new Cisco EA makes it easy to get a holistic security portfolio with a single contract, standardized across your entire enterprise and with a higher level of comprehensive support. The new EA also makes it easier to take advantage of Cisco Secure when you enroll for one of the other Cisco solution portfolios covered, including Networking Infrastructure, Collaboration, and Applications Infrastructure.

EA makes it possible to combine portfolios in ways that support cross-architectural solutions. For example, a Secure Access Service Edge (SASE) implementation might incorporate offerings from the Networking Infrastructure, Security, and Services portfolios. Or a hybrid work initiative could bring parts of all five Cisco portfolios together to create an integrated solution.


Cisco Secure solutions

Under the new EA, the Cisco Secure portfolio offers the following solutions:

  • Zero Trust
  • Cloud and Networking Security
  • Secure Platform and Response
  • Secure Hybrid Work
  • Ransomware Defense
Zero Trust

Traditional security approaches assume that anything inside the corporate network can be trusted. This assumption no longer holds true, due to the move to hybrid work, BYOD (bring your own device), IoT, cloud adoption, increased collaboration, and a focus on business resiliency. The Cisco Zero Trust suites, available in the new EA, provide a comprehensive approach to securing all access across your applications and environment. Secure access for any user, device, and location by establishing trust, enforcing trust-based access, and verifying trust continuously.

  • Cisco Duo

    The first step toward a complete zero-trust security model starts with a secure workforce. Cisco Duo verifies user identity and device health every time a user attempts to log in, helping ensure trusted access to your applications. It helps establish user and device trust, provides visibility into devices, and enables secure access to all applications.

  • Cisco Identity Services Engine (ISE)

    Cisco Identity Services Engine (ISE) is the key component in zero-trust security for the workplace. It provides a dynamic and automated approach to policy enforcement that simplifies the delivery of highly secure network access control. ISE also enables software-defined access and automates network segmentation within IT and OT environments.

  • Cisco Secure Workload

    Cisco Secure Workload makes it possible to achieve the security required for today's heterogeneous multicloud environment. You can protect workloads across any cloud, application, and workload—anywhere. It helps automate and implement a secure zero-trust model for microsegmentation based on application behavior and telemetry. And it proactively detects and remediates indicators of compromise to reduce the impact to your business.

Cloud and Networking Security

Organizations must manage security in the cloud and across the network to deliver the services that customers and employees demand. With the Cisco Cloud and Networking Security suites, available in the new EA, you can shield users against threats anywhere. You can secure their data and applications in the cloud and create a secure infrastructure for devices, applications, and users to work in a secure manner. These technologies are critical components of a SASE solution.

  • Cisco Umbrella

    Before a connection is ever established, Cisco Umbrella® uses the internet’s infrastructure to enforce security and block malicious activity. It delivers security from the cloud, so there is no hardware to install and no software to manually update. Umbrella helps you reduce overhead and time spent on management, and it provides effective and reliable security that boasts 100% uptime.

  • Cisco Secure Firewall

    Cisco Secure Firewall is the foundation for the industry's most complete and open security platform. Its world-class security controls defend networks against increasingly sophisticated threats. Its simplified security management offers visibility across distributed and hybrid networks. And it integrates powerful threat prevention capabilities into your existing network infrastructure, making the network a logical extension of your firewall solution.

  • Cisco Secure Web Appliance

    Advanced threats can be lurking anywhere, even on legitimate websites. Cisco Secure Web Appliance offers superior defense against internet-based threats by automatically blocking risky sites and testing unknown sites before allowing users to click on them. It uses Transport Layer Security (TLS) 1.3 and high-performance capabilities to protect your organization and keep your users safe.

  • Cisco Cloudlock

    Cisco Cloudlock® is a cloud-native Cloud Access Security Broker (CASB) that helps you move to the cloud safely. Its simple, open, and automated approach uses APIs to manage the risks in your cloud app ecosystem. Cloudlock protects your cloud users, data, and applications while meeting compliance regulations.

Secure Platform and Response

This solution, which effectively defends against modern threats, depends on gaining a comprehensive picture across all control points. The Cisco Secure Platform and Response suites, available in the new EA, helps security teams work more efficiently, faster, and more collaboratively. It does this by simplifying integration, improving visibility, sharing intelligence, and automating workflows across endpoints, cloud, network, and applications. These technologies are foundational for building an extended detection and response solution.

  • Cisco Secure Email

    Cisco Secure Email provides extended visibility into threats in email from everywhere, with robust search and remediation capabilities to stop malicious attacks. It keeps your data safe with data loss prevention and encryption safeguard information and protects outgoing email, helping you comply with government and industry regulations.

  • Cisco Secure Endpoint

    Cisco Secure Endpoint offers cloud-delivered endpoint protection and advanced endpoint detection and response across multidomain control points. You can stop breaches and block malware, then rapidly detect, contain, and remediate advanced threats that evade front-line defenses.

  • Cisco Secure Network and Cloud Analytics

    With Cisco Secure Network Analytics and Cisco Secure Cloud Analytics, you can take advantage of insights from industry-leading machine learning and behavioral modeling to outsmart emerging threats to your digital business. Secure Network Analytics gives you visibility into network users, helps you detect and respond quickly to advanced threats, and lets you protect critical data through smarter network segmentation.

Secure Hybrid Work

Secure Hybrid Work unifies security and protection at scale, making it easy to verify user identity, verify and control user access, enable secure access, and defend workers everywhere at any time from anywhere. It also prevents email targeted threats and automates tasks within an integrated platform to help accelerate your business success with security that works together.

Ransomware Defense

Ransomware penetrates organizations in multiple ways, so fighting it requires a multifront strategy. Cisco protects against ransomware with an integrated platform approach across a breadth of critical control points backed by best-in-class threat intelligence and research from Talos®.

Eligibility requirements

To make EA more accessible, we’ve lowered its minimum eligibility requirements by reducing the required commitment across an organization as follows:

Term minimum: 3- and 5-year terms
Contract value: $100,000 net at program level, after discount and pre-installed base credits at program level

Fully committed suite Partially committed suite
Suite threshold is set by the customer’s selected tier. See the Cisco Enterprise Agreement 3.0 Program Guide for more information on Security portfolio tiers. No TCV minimum requirement. Some minimum unit quantities may be required.
Customers receive all EA benefits for committed suites. Limited benefits for partially committed suites.

Popular add-ons and available services

Common add-ons, services, and support for security

One of the primary benefits of the new EA is that it makes it easier to quickly bring into your environment a broad array of technologies from across Cisco portfolios. Some common areas include:

  • Networking Infrastructure portfolio offerings

    The close, intertwined relationship between security and networking often leads Cisco security customers to take advantage of solutions from our networking portfolio, such as Cisco Digital Network Architecture (Cisco DNA), Cisco Meraki® ,and cloud networking.

  • Services portfolio offerings

    Cisco Customer Experience (CX) has a portfolio of end-to-end services that provide world-class expert guidance and digital intelligence to help our customers drive business outcomes faster. Our Solution Support provides centralized support across more than 30 solutions and more than 250 products. Our Security Services offers organizations the technical expertise needed to implement, optimize, and manage their security.

Available portfolios

Easy access to other Cisco subscription portfolios

Now that the new EA brings all Cisco portfolios under one agreement, it’s easier for you to access the full complement of technologies and innovations that your environment needs and be able to respond to the dynamic changes in your industry.

Networking Infrastructure portfolio

As a worldwide leader in networking, Cisco's Networking Infrastructure portfolio serves the broadest range of networking needs across industries and segments. Our networking solutions help you quickly adapt to change and simplify and scale operations, while also protecting against service degradation and threats.

Plus the new Cisco EA brings together our industry-leading Cisco DNA software, Meraki, and data center offerings with other Cisco capabilities to supercharge your business. Your organization can more easily and effectively implement critical cross-technology solutions, such as security and services. And you can dynamically adjust and adapt your networking infrastructure so you can keep pace with your network’s expanding and evolving demands.

Application Infrastructure portfolio

From hybrid cloud architectures to application experiences, enterprise-wide full-stack observability to low-code workflow design, Cisco’s broad portfolio of applications can address your most pressing technology requirements and help your business meet its strategic objectives.

The new Cisco EA makes it simpler to get the applications your business needs today, and helps you adjust with agility as your needs shift. It also simplifies and speeds up your organization’s ability to deploy other critical Cisco portfolio solutions, such as combining with collaboration tools for hybrid work or leveraging networking technologies for more efficient data center operations.

Collaboration portfolio

Webex Suite, available in the new EA, delivers the calling, meeting, messaging, and events tools you need to bring people together easily and help them to work together productively. At the same time, it helps you meet increasingly complex security and compliance requirements, which are key to keeping your information safe and secure.

The new Cisco EA makes it easy to get a holistic collaboration enrollment with a single contract, standardized across your entire enterprise and with a higher level of comprehensive support. The new EA also makes it easier to take advantage of Cisco collaboration solutions when you enroll for one of the other Cisco solution portfolios covered by the EA, including Networking Infrastructure and Applications Infrastructure.

Services portfolio

Customers like you have told us they feel pressure to defend investments and ROI, that a skills gap is slowing transformation, and that IT projects are more complex than ever before, increasing risk.

We designed Cisco Success Tracks to provide you with a more tailored approach to removing the roadblocks of today’s most critical technology challenges with the agility to navigate change. Success Tracks is a suite of success services connecting you to the right expertise, insights, learning, and support at the right time to accelerate success.

The Services portfolio, featuring Success Tracks, can help you get more value from your Cisco Enterprise Agreement. Simplify contract management by pairing the Services portfolio with one or more software portfolios, and you converge software and support for both software and hardware into one agreement, one renewal date, and one set of terms.

Financial benefits

Financial benefits of the new EA

In addition to delivering on technology and business needs, the new EA offers financial benefits designed for the needs of enterprises. The following are a few examples:

Financial flexibility

As with technology, financing increasingly needs to be more dynamic. The new EA delivers new levels of flexibility for financing, such as flexible terms and volume ramp options.

Financial predictability with True Forward

The financial predictability of True Forward makes the EA stand out from other agreements. Unlike other enterprise license agreements that require you to true up every year, the new EA doesn’t retroactively charge for a year’s extra usage if it stays within 15 percent of the initial order. This saves you from potentially having a large, unexpected bill at your contract anniversary—as frequently happens with other vendors. Instead, we work with you to update your next year’s contract to bring it closer in line with your actual usage.

Read the True Forward FAQ

Cisco Capital

Cisco Capital® provides flexible payment solutions that support your business needs. You can adjust in the moment to avoid technology obsolescence and quickly adapt to shifting market dynamics.

Get more information on Cisco Capital