Cisco Security Cloud Control: Secure Firewall Device Management

PDF

Cisco Security Cloud Control: Secure Firewall Device Management

Implementing Secure Logging Analytics (SaaS) for FDM-Managed Devices

Want to summarize with AI?

Log in

Learn how to prepare to implement Secure Logging Analytics (SaaS) for FDM-managed devices, including tenant access, SDC and SEC readiness, outbound connectivity, licensing, data plan, and two-factor authentication requirements.


Before you Begin

  • Review About Secure Analytics and Logging (SaaS) for FDM-Managed Devices to learn about:

    • How events are sent to the Cisco cloud

    • Applications in the solution

    • Licenses you need

    • Data plan you need

  • You have contacted your managed service provider or Security Cloud Control Sales representative and you have a Security Cloud Control tenant.

  • If you have installed an SDC for your tenant, ensure your SDC status is Active and has recorded a recent heartbeat.

  • You can install more than one SEC for your tenant and you can send events from any Firewall Device Manager to any one SEC onboarded to your tenant.

  • If you are sending events directly to the Cisco cloud from the Firewall Device Manager , you have opened up outbound access on port 443 on the management interface.

New Security Cloud Control Customer Workflow to Implement Secure Logging Analytics (Saas) and Send Events through the Secure Event Connector to the Cisco Cloud

  1. Configure your FDM-managed device to Send events generated by rules and policies to the Secure Event Connector .

  2. Confirm events are visible in Security Cloud Control . From the navigation bar, select Events & Logs > Events > Event Logging . Click the Live tab to view live events.

New Security Cloud Control Customer Workflow to Implement Secure Logging Analytics (SaaS) and Send Events Directly to the Cisco Cloud

  1. Configure your FDM-managed device to send events directly to the Cisco cloud .

  2. Confirm events are visible in Security Cloud Control . From the navigation bar, select Events & Logs > Events > Event Logging . Click the Live tab to view live events.

Existing Security Cloud Control Customer Workflow to Implement Secure Logging Analytics (SaaS) and Send Events through the Secure Event Connector to the Cisco Cloud

  1. Send events generated by rules and policies to the Secure Event Connector .

  2. Confirm events are visible in Security Cloud Control . From the navigation bar, select Events & Logs > Events > Event Logging . Click the Live tab to view live events.

Existing Security Cloud Control Customer Workflow to Implement Secure Logging Analytics (SaaS) and Send Events Directly to the Cisco Cloud

  1. Configure your FDM-managed device to send events directly to the Cisco cloud .

  2. Confirm events are visible in Security Cloud Control . From the navigation bar, select Events & Logs > Events > Event Logging . Click the Live tab to view live events.

Secure Analytics and Logging (SaaS) Workflows

Troubleshooting Using Security and Analytics Logging Events describes using the events generated from Secure Logging Analytics (SaaS) to determine why a user can't access a network resource.