Home
Support
Product Support
Security
Cisco Security Cloud Control
Configuration Guides

Cisco Security Cloud Control: Secure Firewall ASA Management

How do I install a Secure Event Connector?
Which connector requirements are covered?
How do firewall events reach cloud logging?

View all Saved Content

PDF

Is this content helpful?

Helpful Unhelpful

Suggestions for Improvement

Thank you for your feedback. Your response has been recorded.

Ask about this content

Cisco Security Cloud Control: Secure Firewall ASA Management

How do I install a Secure Event Connector?
Which connector requirements are covered?
How do firewall events reach cloud logging?

Expand all sections

About this content

Get started with Security Cloud Control Firewall Management

Overview of Cisco Security Cloud Control
Overview of Security Cloud Control Firewall Management
Overview of Cloud-Delivered Firewall Management Center
Provision Security Cloud Control Firewall Management
Open Security Cloud Control Firewall Management
The Firewall Management dashboard

Manage Firewall administration in Security Cloud Control Firewall Management

Configure general settings
Manage users and groups within Security Cloud Control organization
Manage API-Only users for Security Cloud Control Firewall Management
View Security Cloud Control notifications
View logging settings
Understand user roles in Security Cloud Control Firewall Management

Deploy and manage Secure Connectors for device onboarding

Introduction to Secure Connectors

Onboard devices in Security Cloud Control Firewall Management

Supported devices, software, and hardware for Security Cloud Control Firewall Management
Onboard Secure Firewall ASA
Onboard ASA device to Security Cloud Control Firewall Management
Onboard a high availability pair of ASA devices to Security Cloud Control Firewall Management
Onboard an ASA in multi-context mode to Security Cloud Control Firewall Management
Onboard multiple ASAs to Security Cloud Control Firewall Management
Create and import an ASA model to Security Cloud Control Firewall Management
Import Configuration for Offline Device Management

Configuring ASA Devices

Update ASA connection credentials in Security Cloud Control Firewall Management
ASA interface configuration
ASA system settings policy in Security Cloud Control Firewall Management
ASA routing in Security Cloud Control Firewall Management
API tokens
Manage ASA certificates
ASA file management
Managing ASAs with pre-existing High Availability configuration
Manage ASA configuration files
Configure DNS on ASA
ASA command line interface
Network Address Translation
Order of processing NAT rules
Network Address Translation wizard
Common use cases for NAT

ASA Security Policy Management

Manage security policies in Security Cloud Control Firewall Management
Manage ASA network security policy
Compare ASA network policies
Hit rates
Search and filter ASA network rules in the access list
Shadowed rules

Manage objects

Introduction to objects
Network objects
ASA trustpoint objects
Remote access VPN objects
Service objects
ASA time range objects
Troubleshooting Objects

Establish Site-to-Site VPN connection using Security Cloud Control Firewall Management

Introduction to Site-to-Site Virtual Private Network
Site-to-Site VPN concepts
Site-to-Site VPN configuration for FDM-Managed
Site-to-Site VPN Configuration for Cloud-Delivered Firewall Management Center-managed Firewall Threat Defense
Site-to-Site VPN for Secure Firewall ASA
Monitor ASA Site-to-Site Virtual Private Networks

Establish Remote Access VPN connection using Security Cloud Control Firewall Management

Introduction to Remote Access Virtual Private Network
Configure Remote Access Virtual Private Network for ASA

Managing Virtual Private Network in Security Cloud Control

Monitor Remote Access Virtual Private Network Sessions

Upgrade Secure Firewall ASA

Prerequisites for ASA and ASDM Upgrade in Security Cloud Control Firewall Management
Upgrade bulk ASA and ASDM in Security Cloud Control Firewall Management
Upgrade ASA and ASDM images on a single ASA
Upgrade ASA and ASDM images in a high availability pair
Upgrade an ASA or ASDM using your own image

Manage onboarded device settings

Changing a device's IP address in Security Cloud Control Firewall Management
Changing a device's name in Security Cloud Control Firewall Management
Export a list of devices and services
Export device configuration
External links for devices
Bulk reconnect devices to Security Cloud Control Firewall Management
Moving devices between organizations
Device certificate expiry detection
Write a device note
Delete a device from Security Cloud Control Firewall Management
Manage security devices
Back up Firewall Threat Defense devices
Manage Firewall Threat Defense devices through Security Cloud Control Firewall Management
Security devices overview
Security Cloud Control Firewall Management labels and filtering
Use Security Cloud Control Firewall Management search functionality

Use the Security Cloud Control Command Line Interface Tool

Use the Command Line Interface on a single device
Use the bulk Command Line Interface
Run a CLI macro
Export Command Line Interface results

Monitor and report change logs, workflows, and jobs

Manage change logs in Security Cloud Control
Change log entries after deploying to an ASA
Change log entries after reading changes from an ASA
View change log differences
Change request management
Export the change log
Monitor jobs in Security Cloud Control
Monitor workflows in Security Cloud Control

Manage onboarded device settings

Changing a device's IP address in Security Cloud Control Firewall Management
Changing a device's name in Security Cloud Control Firewall Management
Export a list of devices and services
Export device configuration
External links for devices
Bulk reconnect devices to Security Cloud Control Firewall Management
Moving devices between organizations
Device certificate expiry detection
Write a device note
Delete a device from Security Cloud Control Firewall Management
Manage security devices
Back up Firewall Threat Defense devices
Manage Firewall Threat Defense devices through Security Cloud Control Firewall Management
Security devices overview
Security Cloud Control Firewall Management labels and filtering
Use Security Cloud Control Firewall Management search functionality

Manage ASA device configuration

Manage device configuration
Read, discard, and deploy configuration changes
Synchronizing configurations between Security Cloud Control and device

Secure Event Connectors

About Secure Event Connectors
Installing Secure Event Connectors
Remove the Secure Event Connector
Finding your device's TCP, UDP, and NSEL port used for Secure Logging Analytics (SaaS)

Events in Security Cloud Control

About Security Analytics and Logging (SaaS) in Security Cloud Control
Event types in Security Cloud Control
Deprovisioning Cisco Security Analytics and Logging (SaaS)

Security Analytics and Logging Licenses

Security Analytics and Logging licenses

Monitor Secure Firewall ASA Events

About Security Analytics and Logging (SAL SaaS) for ASA devices
Implementing Secure Logging Analytics (SaaS) for ASA devices
Send ASA syslog events to the Cisco Cloud using a Security Cloud Control Macro
Send ASA syslog events to the Cisco Cloud using the command line interface
NetFlow Secure Event Logging (NSEL) for ASA devices
Parsed ASA syslog events

View Events in Security Cloud Control Firewall Management

View live events
View historical events
Customize the events view
Show and hide columns on the event logging page
Change the time zone for the event timestamps
Customizable event filters
Search and filter events using the event logging page
Event attributes in Security Analytics and Logging

Monitor device health metrics

About device health metrics
Bulk opt in or opt out of device health metrics
View the device health metrics dashboard
Troubleshooting device health metrics

Use Cisco Secure Cloud Analytics Portal

Provision a Cisco Secure Cloud Analytics portal
Review sensor health and Security Cloud Control integration status in Secure Cloud Analytics
Cisco Secure Cloud Analytics sensor deployment for total network analytics and reporting
View Cisco Secure Cloud Analytics alerts from Security Cloud Control
Cisco Secure Cloud Analytics and dynamic entity modeling
Working with alerts based on Firewall events
Modifying alert priorities

Securely Connecting Customers to the Cisco Secure Internet Gateway (SIG)

Managing Umbrella with Security Cloud Control
Configure an Umbrella Organization

Terraform

About Terraform

Troubleshooting

Troubleshoot a Secure Firewall ASA device
Troubleshoot a Secure Device Connector
Troubleshoot a Secure Event Connector
Troubleshoot Security Cloud Control
Device connectivity states

FAQ and support

Security Cloud Control
FAQ about onboarding devices to Security Cloud Control
Device types
Security
Troubleshooting
Terminologies and definitions used in Zero-Touch Provisioning
Policy optimization
Connectivity
About Data Interfaces
How Security Cloud Control processes personal information
Contact Security Cloud Control support

Cisco Security Cloud Control: Secure Firewall ASA Management

Secure Event Connectors

Updated: July 17, 2026

Install and configure Secure Event Connectors so firewall events can reach Security Cloud Control logging and analytics services.

This chapter provides information about secure event connectors.

About Secure Event Connectors

An overview of Secure Event Connectors for ASA devices, including SEC destinations, ports, severity levels, custom event lists, and cloud event delivery.

Installing Secure Event Connectors

An overview of installing Secure Event Connectors, including SEC destinations, ports, severity levels, custom event lists, and cloud event delivery.

Remove the Secure Event Connector

Learn how to remove the Secure Event Connector, including SEC destinations, ports, severity levels, custom event lists, and cloud event delivery.

Finding your device's TCP, UDP, and NSEL port used for Secure Logging Analytics (SaaS)

Learn how to finding your device's TCP, UDP, and NSEL port used for secure logging analytics (SaaS) for ASA devices, including SEC destinations, ports, severity levels, custom event lists, and cloud event delivery.

Need help?

Open a support case

(Requires a Cisco Service Contract)

Bias-free language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.