Cisco Cyber Vision part numbers for OT visibility

What Cisco Cyber Vision does

Cisco Cyber Vision gives visibility into industrial control systems and other operational technology (OT). Sensors in the industrial network profile traffic and report to a Cyber Vision Center, which builds a live inventory of programmable logic controllers, I/O devices, remote terminal units, drives, human-machine interfaces and other equipment, and tracks process data, changes to assets and anomalies. With the Advantage tier and intrusion detection it can also detect known and emerging threats to the control system.

For the product itself, see Cisco Cyber Vision (opens in a new tab) on our Cisco security site. This page covers the part numbers and the ways to buy them.

How Cisco Cyber Vision licensing works

Cyber Vision Center is licensed per monitored endpoint in two tiers, with the Advantage tier including everything in Essentials:

• Terms: Essentials and Advantage are term subscriptions, typically for 1, 3, 5 or 7 years. Renewing keeps the features and product support; if a licence expires, the Center shows an alert until new licences are registered.
• Intrusion detection rules: each Center or sensor with the IDS service turned on uses a Talos subscriber rules licence. CV-IDS-CNTR covers IDS on the Center (hardware or virtual). The sensor licences name the sensor hardware they run on, so we confirm those codes at quote.
• Trial: a new Center starts in a 90-day evaluation mode with every feature available, after which a licence must be registered.
• Where licences are held: in your Cisco Smart Account, through Cisco Smart Software Manager. Networks with no internet connection can use an on-premises Smart Software Manager satellite or a specific licence reservation.

The sensors themselves and the industrial switches and routers that host them are hardware, quoted separately. Ask us and we will match the IDS licence to each sensor.

Cisco Cyber Vision part numbers

Current Cyber Vision codes from Cisco's own notices and licensing guide. Order CV-E or CV-A in the number of endpoints you monitor, and an IDS rules licence for each Center or sensor running intrusion detection. Sensor IDS codes name the sensor hardware, and the MSLA code is confirmed at quote.

Part numbers from Cisco EOL15234, Cyber Vision subscription PIDs for on-premises installation (updated 1 December 2023) (opens in a new tab); Cisco Cyber Vision Center Licenses (updated 25 September 2024) (opens in a new tab); Cisco Cyber Vision Data Sheet, ordering information (updated 14 April 2026) (opens in a new tab), checked 2026-11-08. Add the licences you need to your basket and request a quote: we confirm the right part numbers, quantities and terms when we quote.

Buying Cyber Vision monthly through the MSLA

Cyber Vision is also available under Cisco's Managed Services License Agreement (MSLA), a post-paid model where the provider holds the licences and pays for what is used at the end of each monthly billing cycle. The Center is switched to utility mode; registration works the same way as for annual licences.

Cisco's MSLA product terms for Cyber Vision (opens in a new tab) bill on what is monitored, not on the number of Centers:

• Endpoints: Essentials and Advantage are charged on the average number of endpoints monitored over the month (each day's peak, added up and divided by 30), in volume bands
• IDS devices: charged per sensor device type on the same daily-peak average
• One Center per customer: a Center serves one customer, although a customer may have several Centers

Forever Systems buys Cisco security mainly through Cisco's MSP programme (Secure MSP Center) and the MSLA, so OT visibility can be billed monthly on what you actually monitor, with terms confirmed at quote. An annual term suits a site whose asset count is stable.

Replaced banded Cyber Vision part numbers

Cyber Vision used to be sold in endpoint bands, with a separate code for each band size. Cisco ended sale of the banded on-premises codes on 1 December 2023 (EOL15234 (opens in a new tab)) and replaced them with one code per tier, ordered in the number of endpoints you need:

Existing banded subscriptions keep their support until 31 December 2028, Cisco's last date of support, but they could not be renewed or added to after 1 December 2023. Renewals and additions move to CV-E or CV-A. The old codes cannot be ordered, so they have no basket buttons.

Cyber Vision with segmentation and firewalls

Visibility is usually the first step in securing an industrial network; the next is controlling which devices can talk to each other. Cyber Vision's Advantage integrations feed what it learns into other controls:

• Cisco ISE: device identities shared over pxGrid for network access policy. See Cisco ISE part numbers.
• Cisco Secure Firewall: host attributes for firewall policy between the IT and OT networks. See Cisco Secure Firewall part numbers.
• Agentless OT segmentation: for controlling traffic to OT and IoT devices that cannot run agents, see Zero Networks OT and IoT segmentation.

For other network and OT security products we supply, see firewall software.

How we help

Tell us how many sites and industrial networks you want to monitor, roughly how many OT assets each has, whether you need intrusion detection, and whether you would rather pay on a term or monthly on usage. We recommend the tier, estimate the endpoint count, match an IDS licence to each sensor and quote the term that suits your renewals.

Add CV-E or CV-A and any IDS codes to your basket and send it, or describe your sites, and we reply with a quote showing each part number, quantity and term. Contact us to get started.