Learn how to integrate Catalyst SD-WAN Manager with Security Cloud Control Firewall Management, including onboarding, role-based access control alignment, NGFW policy management, deboarding, and viewing intrusion and malware events.
Overview of Catalyst SD-WAN integration with Security Cloud Control Firewall Management
The integration of Security Cloud Control Firewall Management and Catalyst SD-WAN Manager enables efficient configuration, monitoring, and enforcement of security policies, advanced threat detection, log analysis, and AI-driven troubleshooting.
System topology diagram
Topology diagram illustrates the integration of Catalyst SD-WAN with Security Cloud Control Firewall Management and other cloud services. It shows the flow of information and interactions between various components.
End-to-end workflow to manage Catalyst SD-WAN Manager using Security Cloud Control
This concept explains the high-level end-to-end workflow for managing the firewall capabilities of Catalyst SD-WAN Manager using Security Cloud Control.
Minimum software requirements
This concept explains that Catalyst SD-WAN integration with Security Cloud Control Firewall Management requires Catalyst SD-WAN Manager version 20.18 or later. Secure router compatibility follows Catalyst SD-WAN Manager backward support for the previous two device releases (for example, 20.15 and 20.12 with 20.18).
Alignment of RBAC models of Security Cloud Control Firewall Management and Catalyst SD-WAN Manager
This concept explains that user roles in Catalyst SD-WAN Manager and Security Cloud Control Firewall Management operate independently, with each role defined by its specific responsibilities. However, the Role-Based Access Control (RBAC) models for both platforms are aligned to provide consistency and seamless user actions.
Onboard Catalyst SD-WAN Manager to Security Cloud Control
Learn how to onboard Catalyst SD-WAN Manager to Security Cloud Control, verify Smart or Virtual Account admin privileges, note the SD-WAN Organization Name, and enable Cloud Services, Analytics, and Service Access Authorization.
Deboard Catalyst SD-WAN Manager from Security Cloud Control
Learn how deboarding Catalyst SD-WAN Manager from Security Cloud Control automatically removes associated devices, NGFW policies, and security objects from Security Cloud Control.
How Security Cloud Control Firewall Management manages Catalyst SD-WAN NGFW capabilities
Security Cloud Control Firewall Management lets you create, modify, and delete Next-Generation Firewall (NGFW) policies, security objects, and profiles, with global search and policy group association for Catalyst SD-WAN NGFW policies. Changes are automatically saved to Catalyst SD-WAN Manager, but must be manually deployed to Secure Router devices via Catalyst SD-WAN Manager. Direct device deployment from Security Cloud Control Firewall Management is not supported.
View intrusion events
Intrusion Prevention System (IPS) dashlet highlights blocked and allowed network attacks using Cisco Talos threat intelligence. This dashboard view maps to Catalyst SD-WAN Manager Security Monitor IPS/AMP dashlets.
View malware events
View the Advanced Malware Protection (AMP) events dashlet, which shows malicious, unknown, and clean file counts over time. This dashboard view maps to Catalyst SD-WAN Manager Security Monitor IPS/AMP dashlets.
Additional resources
This concept provides the additional resources such as Catalyst SD-WAN configuration guide and policy groups configuration guide.