About the Cisco Secure Dynamic Attributes Connector
The Cisco Secure Dynamic Attributes Connector enables you to use service tags and categories from various cloud service platforms in Secure Firewall Management Center (CDO) access control rules.
Supported connectors
We currently support:
CSDAC version/platform |
AWS |
Generic text |
GitHub |
Google Cloud |
Azure |
Azure Service Tags |
Microsoft Office 365 |
vCenter |
Webex |
Zoom |
---|---|---|---|---|---|---|---|---|---|---|
Version 1.1 (on-premises) |
Yes |
No |
No |
No |
Yes |
Yes |
Yes |
Yes |
No |
No |
Version 2.0 (on-premises) |
Yes |
No |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
No |
Version 2.2 (on-premises) |
Yes |
No |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
No |
Cloud-delivered (Cisco Defense Orchestrator) |
Yes |
No |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
Yes |
Secure Firewall Management Center 7.4 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
More information about connectors:
-
Amazon Web Services (AWS)
For more information, see a resource like Tagging AWS resources on the Amazon documentation site.
See Amazon Web Services Connector—About User Permissions and Imported Data.
-
GitHub
For more information, see Create a GitHub Connector.
-
Google Cloud
For more information, see Setting Up Your Environment in the Google Cloud documentation.
-
Microsoft Azure
For more information, see this page on the Azure documentation site.
See Azure Connector—About User Permissions and Imported Data.
-
Microsoft Azure service tags
For more information, see a resource like Virtual network service tags on Microsoft TechNet.
-
Office 365 IP addresses
For more information, see Office 365 URLs and IP address ranges on docs.microsoft.com.
-
Webex IP addresses
For more information, see Create a Webex Connector.
-
Zoom IP addresses
For more information, see Create a Zoom Connector.
How It Works
Network constructs such as IP address are not reliable in virtual, cloud and container environments due to the dynamic nature of the workloads and the inevitability of IP address overlap. Customers require policy rules to be defined based on non-network constructs such as VM name or security group, so that firewall policy is persistent even when the IP address or VLAN changes.
The following figure shows how the system functions at a high level.
-
The system supports certain public cloud providers.
This topic discusses supported connectors (which are the connections to those providers).
-
The dynamic attributes connector is provided with CDO; it includes a Cloud-delivered Firewall Management Center and you can connect to an On-Prem Firewall Management Center using either the Secure Device Connector or SecureX.
For more information about the Secure Device Connector, see Secure Device Connector (SDC).
For more information about SecureX, see Onboard an On-Prem Firewall Management Center with SecureX.
-
The adapter defined by the dynamic attributes connector receives those dynamic attributes filters as dynamic objects and enables you to use them in access control rules.
You can create the following types of adapters:
-
On-Prem Firewall Management Center for an on-premises device.
This type of device might be managed by Cisco Defense Orchestrator (CDO) or it might be a standalone.
-
Cloud-delivered Firewall Management Center for devices managed by CDO.
-
History for the Cisco Secure Dynamic Attributes Connector
Feature |
Minimum Management Center |
Minimum Threat Defense |
Details |
---|---|---|---|
Cisco Secure Dynamic Attributes Connector |
January 18, 2023 |
7.4.0 |
This feature is introduced. The Cisco Secure Dynamic Attributes Connector is now included in the Secure Firewall Management Center. You can use the dynamic attributes connector to get IP addresses from cloud-based platforms such as Microsoft Azure in access control rules without having to deploy to managed devices. More information:
New/modified screen: |
History for the Cisco Secure Dynamic Attributes Connector
Feature |
Min. Mgmt Center |
Min. Secure Firewall Management Center |
Details |
---|---|---|---|
Cisco Secure Dynamic Attributes Connector |
7.4.0 |
Additional connectors are supported. For more information, see How It Works. |
|
Any |
7.3.0 |
This feature is introduced. The Cisco Secure Dynamic Attributes Connector is now included in the Secure Firewall Management Center. You can use the dynamic attributes connector to get IP addresses from cloud-based platforms such as Microsoft Azure in access control rules without having to deploy to managed devices. More information:
New/modified screen: |