Have an account?

  •   Personalized content
  •   Your products and support

Need an account?

Create an account

Cisco Security Analytics and Logging

Raising the bar on network security

Cisco Security Analytics and Logging improves network visibility so you can quickly detect threats in real time and remediate incidents with confidence and at scale. Gain insights from behavioral analytics and get actionable security intelligence to help make your security team more efficient. Enable your network teams now with the power of security analytics.

Available now for Cisco Defense Orchestrator managed NGFW devices.

Why choose Cisco Security Analytics and Logging?

It's simple

Aggregate intelligence by analyzing real-time NGFW events and network telemetry. 

It's intelligent

Accelerate, simplify, and increase the accuracy of policy decisions. 

It's effective

Get complete network visibility and accelerate threat detection.


Simplify security management

Greatly reduce false positives with high-fidelity alerts supported by underlying observations.

Harmonize policy management

Monitor networks and modify policy by deploying behavioral-based analytics on firewall logs and network telemetry.

Enhance threat detection

Detect internal and external threats by proactively monitoring the behavior of the network using advanced analytics.

Meet compliance mandates

Easily monitor your organization for compliance with industry regulations such as the PCI standard, HIPAA, and FISMA.

Save time and work smarter with Cisco Defense Orchestrator

Aggregate and centralize intelligence

Logs are stored securely in the cloud and are accessible and searchable from Cisco Defense Orchestrator.

Identify and enrich high-fidelity alerts

Prioritized threat alerts help enable you to focus on what matters most.

Integrated tools

Cisco's integrated security tools share and correlate data automatically to help you see and stop threats.


Monitor networks and modify policy by deploying behavioral-based analytics.

How we apply machine learning?

Cisco Security Analytics and Logging, powered by Stealthwatch Cloud, uses ML to analyze massive amounts of network data so you can take action on severe threats immediately.

Recommended resources

Security Analytics and Logging: Supercharging FirePower with Stealthwatch

Read our blog to learn how you can simplify security policy management for faster threat detection.

A bridge to the future of the firewall

Cisco is making security policy decisions simpler and more effective. Learn about our latest innovations from Senior Vice President of Product, Jeff Reed.

Related security solutions and products

Cisco Defense Orchestrator

Consistently manage policies across your Cisco security products to keep your organization protected against the latest threats.

Cisco Stealthwatch Cloud

Outsmart emerging threats and improve incident response across the distributed network with industry-leading machine learning and behavioral modeling.

Next-Generation Firewalls

Prevent breaches, get deep visibility to detect and stop threats fast, and automate your network and security operations to save time and work smarter.

Get started with Logging Volume Estimator

Estimate the daily combined event rate for all devices on your network.


Data Sheets and Literature