Home
Support
Product Support
Security
Cisco Security Cloud Control
Configuration Guides

Cisco Security Cloud Control: On-Premises Firewall Management Center Integration

How do I enable Policy Analyzer and Optimizer?
How do I analyze access control policy issues?
How do I analyze and report NAT policy issues?

View all Saved Content

PDF

Is this content helpful?

Helpful Unhelpful

Suggestions for Improvement

Thank you for your feedback. Your response has been recorded.

Ask about this content

Cisco Security Cloud Control: On-Premises Firewall Management Center Integration

How do I enable Policy Analyzer and Optimizer?
How do I analyze access control policy issues?
How do I analyze and report NAT policy issues?

Expand all sections

About this content

Introduction

Overview of Security Cloud Control Firewall Management
Manage On-Premises Firewall Management Center with Security Cloud Control
Security Cloud Control Firewall Management dashboard

Configure basic settings

Overview of Security Cloud Control Firewall Management

Manage Firewall administration in Security Cloud Control Firewall Management

Configure general settings
Manage users and groups within Security Cloud Control organization
Manage API-Only users for Security Cloud Control Firewall Management
View Security Cloud Control notifications
View logging settings
Understand user roles in Security Cloud Control Firewall Management

Deploy and manage Secure Connectors for device onboarding

Introduction to Secure Connectors

Onboard devices in Security Cloud Control Firewall Management

Supported devices, software, and hardware for Security Cloud Control Firewall Management
Onboard an On-Premises Firewall Management Center to Security Cloud Control Firewall Management
Remove an On-Premises Firewall Management Center from Security Cloud Control

Manage onboarded device settings

Changing a device's IP address in Security Cloud Control Firewall Management
Changing a device's name in Security Cloud Control Firewall Management
Export a list of devices and services
Export device configuration
External links for devices
Bulk reconnect devices to Security Cloud Control Firewall Management
Moving devices between organizations
Device certificate expiry detection
Write a device note
Delete a device from Security Cloud Control Firewall Management
Manage security devices
Back up Firewall Threat Defense devices
Manage Firewall Threat Defense devices through Security Cloud Control Firewall Management
Security devices overview
Security Cloud Control Firewall Management labels and filtering
Use Security Cloud Control Firewall Management search functionality

Configuring On-Premises Firewall Management Center Devices

View onboarded On-Premises Firewall Management Center
Troubleshoot cloud region synchronization issue in On-Premises Firewall Management Center high availability
Discover and manage On-Premises Firewall Management Center network objects
Object filters

Policy Analyzer and Optimizer

About Policy Analyzer and Optimizer
Prerequisites to use Policy Analyzer and Optimizer
Enable Policy Analyzer and Optimizer for Security Cloud Control-managed On-Premises Firewall Management Center
Policy Analyzer and Optimizer licensing requirements
Open Policy Analyzer and Optimizer and select a data source
Search and filter policies in Policy Analyzer and Optimizer
Access control policy analysis and optimization
Troubleshooting Policy Analyzer and Optimizer
Frequently Asked Questions About Policy Analyzer and Optimizer

Manage Device Configuration

Read, discard, and deploy configuration changes
Synchronizing configurations between Security Cloud Control and device

Monitor and report change logs, workflows, and jobs

Manage change logs in Security Cloud Control
View change log differences
Change request management
Export the change log
Monitor workflows in Security Cloud Control

Integrating Security Cloud Control with Cisco Security Cloud Sign On

Merge Your Security Cloud Control and Cisco XDR Tenant Accounts

Terraform

About Terraform

Troubleshooting

Troubleshoot a Secure Device Connector
Troubleshoot Security Cloud Control
Device connectivity states

FAQ and Support

Security Cloud Control
FAQ about onboarding devices to Security Cloud Control
Device types
Security
Troubleshooting
How do I transfer a Firewall Threat Defense device to a new or existing Security Cloud Control organization?
Terminologies and definitions used in Zero-Touch Provisioning
Policy optimization
Connectivity
About Data Interfaces
How Security Cloud Control processes personal information
Contact Security Cloud Control support

Cisco Security Cloud Control: On-Premises Firewall Management Center Integration

Troubleshooting Policy Analyzer and Optimizer

Updated: July 12, 2026

Want to summarize with AI?

On this page

Policy Analyzer and Optimizer Does Not Analyze Policies

Policy Analyzer and Optimizer Does Not Fetch Policies

Learn how to troubleshoot Policy Analyzer and Optimizer when policies do not analyze or appear.

Read the following sections to troubleshoot any issues with the Policy Analyzer and Optimizer:

Policy Analyzer and Optimizer Does Not Analyze Policies

If you notice that Policy Analyzer and Optimizer is not analyzing policies despite clicking Analyze Policy, try the following:

Procedure

	1.	Navigate Administration > Integrations > Firewall Management Center.
	2.	Select the On-Premises Firewall Management Center or Cloud-Delivered FMC for which the policy analysis is not happening and choose Workflows under Actions on the right pane.
	3.	If you see that the latest workflow's Current State shows up as Error, expand the workflow and scroll to the last action whose END STATE is ERROR.
	4.	Click Error Message under the RESULT column to see a detailed error message or click Stack Trace to see the series of exceptions that occurred, which caused the error.
	5.	Resolve the error or contact Cisco TAC for assistance.

Policy Analyzer and Optimizer Does Not Fetch Policies

If policies on your On-Premises Firewall Management Center are not displayed on the Policy Analyzer and Optimizer page on Security Cloud Control, do the following:

Procedure

	1.	On the On-Premises Firewall Management Center, navigate Integration > Cisco Security Cloud.
	2.	Ensure that the Enable Policy Analyzer and Optimizer checkbox is checked.
	3.	(Optional) In the left navigation pane of your Security Cloud Control tenant, navigate Administration > Integrations > Firewall Management Center, and ensure that the On-Premises Firewall Management Center is active and reachable.

Need help?

Open a support case

(Requires a Cisco Service Contract)

Bias-free language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.