Home
Support
Product Support
Security
Cisco Security Cloud Control
Configuration Guides

Cisco Security Cloud Control: Network Devices with Generic SSH Access Management

Releases

Management
Management

Which firewall and cloud devices can I onboard and manage?
What support limits should I check before adding devices?
What is the difference between live devices and model devices?

View all Saved Content

PDF

Is this content helpful?

Helpful Unhelpful

Suggestions for Improvement

Thank you for your feedback. Your response has been recorded.

Ask about this content

Cisco Security Cloud Control: Network Devices with Generic SSH Access Management

Which firewall and cloud devices can I onboard and manage?
What support limits should I check before adding devices?
What is the difference between live devices and model devices?

Expand all sections

About this content

Introduction

Overview of Security Cloud Control Firewall Management
Managing SSH Devices with Security Cloud Control
Security Cloud Control Firewall Management dashboard

Configure Basic Settings

Overview of Security Cloud Control Firewall Management

Manage Firewall administration in Security Cloud Control Firewall Management

Configure general settings
Manage users and groups within Security Cloud Control organization
Manage API-Only users for Security Cloud Control Firewall Management
View Security Cloud Control notifications
View logging settings
Understand user roles in Security Cloud Control Firewall Management

Deploy and manage Secure Connectors for device onboarding

Introduction to Secure Connectors

Onboard devices in Security Cloud Control Firewall Management

Supported devices, software, and hardware for Security Cloud Control Firewall Management
Onboard an SSH Device

Manage onboarded device settings

Changing a device's IP address in Security Cloud Control Firewall Management
Changing a device's name in Security Cloud Control Firewall Management
Export a list of devices and services
Export device configuration
External links for devices
Bulk reconnect devices to Security Cloud Control Firewall Management
Moving devices between organizations
Device certificate expiry detection
Write a device note
Manage security devices
Back up Firewall Threat Defense devices
Manage Firewall Threat Defense devices through Security Cloud Control Firewall Management
Security devices overview
Security Cloud Control Firewall Management labels and filtering
Use Security Cloud Control Firewall Management search functionality

Manage Device Configuration

Read, discard, and deploy configuration changes
Synchronizing configurations between Security Cloud Control and device
Synchronizing configurations between Security Cloud Control and device

Monitor and report change logs, workflows, and jobs

Manage change logs in Security Cloud Control
View change log differences
Change request management
Export the change log
Monitor jobs in Security Cloud Control
Monitor workflows in Security Cloud Control

Terraform

About Terraform

Troubleshooting

Troubleshoot a Secure Device Connector
Troubleshoot Security Cloud Control
Device connectivity states

FAQ and Support

Security Cloud Control
FAQ about onboarding devices to Security Cloud Control
Device types
Security
Troubleshooting
How do I transfer a Firewall Threat Defense device to a new or existing Security Cloud Control organization?
Terminologies and definitions used in Zero-Touch Provisioning
Policy optimization
Connectivity
About Data Interfaces
How Security Cloud Control processes personal information
Contact Security Cloud Control support

Cisco Security Cloud Control: Network Devices with Generic SSH Access Management

Onboard an SSH Device

Updated: July 11, 2026

Want to summarize with AI?

On this page

Delete a device from Security Cloud Control Firewall Management

Use the Security Cloud Control Command Line Interface Tool

View a Device's Configuration File

Learn how to onboard an SSH device to Security Cloud Control using an on-premises Secure Device Connector, supported SSH ciphers, device credentials, fingerprint verification, and optional configuration commands.

You can use the username and password of a highly privileged user stored on the SSH device to onboard the device.

Onboard an SSH Device

Before you begin

Before you begin, make sure you have met these prerequisites:

Ensure that the ciphers your Cisco SSH device supports are supported by Security Cloud Control. At this time, Security Cloud Control supports a limited set of ciphers for onboarding Cisco SSH devices. The supported ciphers are: aes128-ctr, aes192-ctr, aes256-ctr, aes128-gcm, aes128-gcm@openssh.com, aes256-gcm, aes256-gcm@openssh.com. To determine the ciphers your server supports, log in to your SDC and run this command: ssh -vv <ip_address>.
You must have an on-premises Secure Device Connector (SDC) in your network to onboard a Cisco IOS device.

See About Secure Device Connector for a discussion of SDCs and links to deployment scenarios.
Before you onboard your device, review Connect to Security Cloud Control using Secure Device Device Connector.

Procedure

	1.	In the left pane, click Security Devices.
	2.	Click the blue plus button to onboard a device.
	3.	Click the Integrations tile. If it is grayed-out, it means you do not have an active Secure Device Connector deployed in your network and used by your Security Cloud Control tenant.
	4.	Click the About Secure Device Connector button and select the SDC in your network that this device will communicate with. The default SDC is displayed but you can change it by clicking the SDC name.
	5.	Give the device a name.
	6.	In the Integrations drop-down menu, select Generic SSH.
	7.	Enter the device's location as either the FDQN or IPv4 address. The default SSH port is 22.
	8.	Click Go. Security Cloud Control locates the device and prepares to integrate the configuration.
	9.	Download the SSH fingerprint and save locally. If you've never connected to this device through SSH before, this fingerprint allows you to confirm the device.
	10.	Enter the Username and Password login credentials for the device you are onboarding. Security Cloud Control cannot successfully read the existing configuration without the correct login information.
	11.	(Optional) Enter the Enable Password if you've previously configured one for this device.
	12.	(Optional) Select a Configuration Command from the drop-down menu, or enter a custom command in the textbox. This command will be used as the configuration for the device; if OOB is enabled, Security Cloud Control checks for changes and you can view the current value of this in the Configuration page. Note that you can change this command once the device is successfully onboarded to Security Cloud Control.
	13.	Click Connect. Note If the login credentials were incorrect, you will be prompted to review the connection details. Here you can re-enter the login information. If you exit the review without correcting the credentials, the device has an integration instance in the Security Devices page but the device is not onboarded or synchronized.
	14.	(Optional) Add labels to this device.
	15.	Click Continue.
	16.	The device onboards to Security Cloud Control. Click Finish.
	17.	Return to the Security Devices page. After the device has been successfully onboarded, you will see that the Configuration Status is "Synced" and the Connectivity state is "Online." Note Once a device is onboarded, you can change the configuration command to be executed. You can use a custom command or create a macro.
	18.	(Optional) If you want you can write a note about the device by typing it in the device's Notes page. See Device Notes for more information.

Delete a device from Security Cloud Control Firewall Management

Follow these steps to delete a device from Security Cloud Control Firewall Management:

Procedure

	1.	Choose Security Devices.
	2.	Select the device you want to delete.
	3.	Click Remove in the Device Actions pane.
	4.	To confirm device removal, click OK. To keep the device onboarded, click Cancel.

Use the Security Cloud Control Command Line Interface Tool

You can use the Security Cloud Control command line interface (CLI) for managing or troubleshooting many device types.

For more information, see .

View a Device's Configuration File

For devices that store the entire configuration in a single configuration file, you can view the configuration file using Security Cloud Control.

Procedure

	1.	In the left pane, click Security Devices.
	2.	Click the Devices tab to locate the device or the Templates tab to locate the model device.
	3.	Click the device type tab for a device type.
	4.	Select the device or model whose configuration it is you want to view.
	5.	In the Management pane on the right, click Configuration. The full configuration file is displayed.

Need help?

Open a support case

(Requires a Cisco Service Contract)

Bias-free language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.