Home
Support
Product Support
Security
Cisco Security Cloud Control
Configuration Guides

Cisco Security Cloud Control: Secure Firewall ASA Management

Which firewall and cloud devices can I onboard and manage?
What support limits should I check before adding devices?
What is the difference between live devices and model devices?

View all Saved Content

PDF

Is this content helpful?

Helpful Unhelpful

Suggestions for Improvement

Thank you for your feedback. Your response has been recorded.

Ask about this content

Cisco Security Cloud Control: Secure Firewall ASA Management

Which firewall and cloud devices can I onboard and manage?
What support limits should I check before adding devices?
What is the difference between live devices and model devices?

Expand all sections

About this content

Get started with Security Cloud Control Firewall Management

Overview of Cisco Security Cloud Control
Overview of Security Cloud Control Firewall Management
Overview of Cloud-Delivered Firewall Management Center
Provision Security Cloud Control Firewall Management
Open Security Cloud Control Firewall Management
The Firewall Management dashboard

Manage Firewall administration in Security Cloud Control Firewall Management

Configure general settings
Manage users and groups within Security Cloud Control organization
Manage API-Only users for Security Cloud Control Firewall Management
View Security Cloud Control notifications
View logging settings
Understand user roles in Security Cloud Control Firewall Management

Deploy and manage Secure Connectors for device onboarding

Introduction to Secure Connectors

Firewall models and software supported

Manage security devices
Supported devices, software, and hardware for Security Cloud Control Firewall Management

Onboard devices in Security Cloud Control Firewall Management

Onboard Secure Firewall ASA
Onboard ASA device to Security Cloud Control Firewall Management
Onboard a high availability pair of ASA devices to Security Cloud Control Firewall Management
Secure Firewall ASA multi-context mode onboarding to Security Cloud Control Firewall Management
Onboard multiple ASAs to Security Cloud Control Firewall Management
Create and import an ASA model to Security Cloud Control Firewall Management
Configuration import for offline device management

Configuring ASA Devices

Update ASA connection credentials in Security Cloud Control Firewall Management
ASA interface configuration
ASA system settings policy in Security Cloud Control Firewall Management
ASA routing in Security Cloud Control Firewall Management
API tokens
Manage ASA certificates
ASA file management
Managing ASAs with pre-existing High Availability configuration
Manage ASA configuration files
Configure DNS on ASA
ASA command line interface
Network Address Translation
Order of processing NAT rules
Network Address Translation wizard
Common use cases for NAT

Secure Firewall ASA Security Policy Management

Manage security policies in Security Cloud Control Firewall Management
Manage ASA network security policy
Compare ASA network policies
Hit rates
Search and filter ASA network rules in the access list
Shadowed rules

Manage objects

Introduction to objects
Network objects
ASA trustpoint objects
Remote access VPN objects
Service objects
ASA time range objects
Troubleshooting Objects

Establish Site-to-Site VPN connection using Security Cloud Control Firewall Management

Introduction to Site-to-Site Virtual Private Network
Site-to-Site VPN concepts
Site-to-Site VPN configuration for FDM-Managed
Site-to-Site VPN Configuration for Cloud-Delivered Firewall Management Center-managed Firewall Threat Defense
Site-to-Site VPN for Secure Firewall ASA
Monitor ASA Site-to-Site Virtual Private Networks

Establish Remote Access VPN connection using Security Cloud Control Firewall Management

Introduction to Remote Access Virtual Private Network
Configure Remote Access Virtual Private Network for ASA

Managing Virtual Private Network in Security Cloud Control

Remote access VPN session monitoring

Upgrade Secure Firewall ASA

Upgrade ASA and ASDM images using Security Cloud Control Firewall Management
Upgrade bulk ASA and ASDM in Security Cloud Control Firewall Management
Upgrade ASA and ASDM images on a single ASA
Upgrade ASA and ASDM images in a high availability pair
Upgrade an ASA or ASDM using your own image

Manage onboarded device settings

Changing a device's IP address in Security Cloud Control Firewall Management
Changing a device's name in Security Cloud Control Firewall Management
Export a list of devices and services
Export device configuration
External links for devices
Bulk reconnect devices to Security Cloud Control Firewall Management
Moving devices between organizations
Device certificate expiry detection
Write a device note
Delete a device from Security Cloud Control Firewall Management
Back up Firewall Threat Defense devices
Manage Firewall Threat Defense devices through Security Cloud Control Firewall Management
Security devices overview
Security Cloud Control Firewall Management labels and filtering
Use Security Cloud Control Firewall Management search functionality

Use the Security Cloud Control Command Line Interface Tool (CLI)

Use the Command Line Interface on a single device
Use the bulk Command Line Interface
Run a CLI macro
Export Command Line Interface results

Monitor and report change logs, workflows, and jobs

Change logs in Security Cloud Control
Change log entries after deploying to an ASA
Change log entries after reading changes from an ASA
View change log differences
Change request management
Export the change log
Jobs monitoring in Security Cloud Control
Monitor workflows in Security Cloud Control

Manage onboarded device settings

Changing a device's IP address in Security Cloud Control Firewall Management
Changing a device's name in Security Cloud Control Firewall Management
Export a list of devices and services
Export device configuration
External links for devices
Bulk reconnect devices to Security Cloud Control Firewall Management
Moving devices between organizations
Device certificate expiry detection
Write a device note
Delete a device from Security Cloud Control Firewall Management
Back up Firewall Threat Defense devices
Manage Firewall Threat Defense devices through Security Cloud Control Firewall Management
Security devices overview
Security Cloud Control Firewall Management labels and filtering
Use Security Cloud Control Firewall Management search functionality

Manage ASA device configuration

Manage device configuration
Read, discard, and deploy configuration changes
Synchronizing configurations between Security Cloud Control and device

Secure Event Connectors

Secure event connectors
Secure event connector installation
Secure event connector removal
Finding your device's TCP, UDP, and NSEL port used for secure logging analytics (SaaS)

Events in Security Cloud Control

About Security Analytics and Logging (SaaS) in Security Cloud Control
Event types in Security Cloud Control
Deprovisioning Cisco Security Analytics and Logging (SaaS)

Security Analytics and Logging Licenses

Security Analytics and Logging licenses

Monitor Secure Firewall ASA Events

About Security Analytics and Logging (SAL SaaS) for ASA devices
Implement secure logging analytics (SaaS) for ASA devices
Send ASA syslog events to the Cisco Cloud using a Security Cloud Control macro
Requirement: send ASA syslog events to the Cisco cloud using the command line interface
NetFlow secure event logging (NSEL) for ASA devices
Parsed ASA syslog events

View Events in Security Cloud Control Firewall Management

View live events
View historical events
Customize the events view
Show and hide columns on the event logging page
Change the time zone for the event timestamps
Create and save customizable event filters
Event logging page search and filter functionality
Event attributes in security analytics and logging

Monitor device health metrics

About device health metrics
Bulk opt in or opt out of device health metrics
View the device health metrics dashboard
Troubleshooting device health metrics

Use Cisco Secure Cloud Analytics Portal

Provision a Cisco secure cloud analytics portal
Review sensor health and Security Cloud Control integration status in Secure Cloud Analytics
Cisco secure cloud analytics sensor deployment for total network analytics and reporting
Cisco Secure Cloud Analytics alerts from Security Cloud Control
Cisco secure cloud analytics and dynamic entity modeling
Alerts based on firewall events
Modify alert priorities

Securely Connecting Customers to the Cisco Secure Internet Gateway (SIG)

Managing Umbrella with Security Cloud Control
Configure an Umbrella Organization

Terraform

About Terraform

Troubleshooting

Troubleshoot a Secure Firewall ASA device
Troubleshoot a Secure Device Connector
Troubleshoot a Secure Event Connector
Troubleshoot Security Cloud Control
Device connectivity states

FAQ and support

Security Cloud Control
FAQ about onboarding devices to Security Cloud Control
Device types
Security
Troubleshooting
Terminologies and definitions used in Zero-Touch Provisioning
Policy optimization
Connectivity
About Data Interfaces
How Security Cloud Control processes personal information
Contact Security Cloud Control support

Cisco Security Cloud Control: Secure Firewall ASA Management

Firewall models and software supported

Updated: August 31, 2026

Find supported devices, software versions, hardware, and management constraints for Security Cloud Control Firewall Management, including ASA, Threat Defense, Meraki, IOS, Umbrella, AWS, SD-WAN, and management center integrations.

Manage security devices

Learn how to manage security devices in Security Cloud Control Firewall Management.

Supported devices, software, and hardware for Security Cloud Control Firewall Management

An overview of devices supported by Security Cloud Control Firewall Management.

Need help?

Open a support case

(Requires a Cisco Service Contract)

Bias-free language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.