End-to-End Network Intelligence and Control

In today´s complex networking environment, firewall administrators must often choose between enabling the access required for optimal employee productivity, and the degree of security needed to protect the business. Most firewalls fail to provide sufficient visibility to make intelligent security decisions, leaving organizations hesitant to adopt new devices, applications, and mobility use cases that could prove beneficial to business but may threaten network security.

Cisco ASA CX Context-Aware Security solves these problems with context-aware capabilities for exceptional visibility and control - so your enterprise can take advantage of new applications and devices without compromising security.

End-to-End Network Intelligence

Unlike other "next-generation" firewalls, Cisco ASA CX keeps pace with rapidly evolving security needs by offering end-to-end network intelligence. It uses the SecureX framework to combine context from local traffic with in-depth global network context through:

• Cisco TrustSec
• Cisco AnyConnect Secure Mobility for unique mobile client insight
• Cisco Security Intelligence Operation (SIO) for near-real-time threat information and proactive protection

Safely Enable Devices

While existing next-generation firewalls provide application and user identification capabilities, they lack the full context awareness to safely enable devices and applications, without compromising network security. In contrast, Cisco ASA CX allows administrators to finally say "yes" to devices and applications while ensuring protection and control. It provides deep insights and the ability to develop security policies based on

• Specific users, applications, and sites visited, rather than just IP addresses
• Detailed information on the type, location, and security posture of mobile devices, before they can access the network
• Enhanced, specific visibility into who and what is connecting to the network, as well as their location

Granular Control

Organizations can also use Cisco ASA CX to enforce individual- and group-based policies that enable access to specific components of an application, while disabling others. Cisco ASA CX recognizes over 1000 applications and more than 75,000 micro-applications to provide granular control. It can also block port- and protocol-hopping applications such as Skype and other peer-to-peer applications, for more effective security, while writing fewer policies.

Featured Content

Cisco ASA CX Delivers Context-Aware Security

Cisco ASA CX Context-Aware Security Data Sheet

Cisco ASA CX Context-Aware Security Q&A