Cisco Multicloud Defense User Guide

PDF

Cisco Multicloud Defense User Guide

Management

Updated: July 8, 2026

Want to summarize with AI?

Manage your Multicloud Defense account by creating and deleting API keys, application tags, and custom tags. Configure alert services and rules to send alerts to third-party endpoints, optimizing alert opportunities within the dashboard.

View and manage the overall status of the cloud service providers affiliated with your account.

Management

Learn about using Multicloud Defense administration settings to review and manage the cloud service providers and resources associated with your account.

Alert Profiles

Learn about using Alert Profiles in Multicloud Defense to define which events create alerts and where notifications are sent. Configure both alerts and services to support complete notification coverage.

API Keys

Account Level Settings

System

Metering

API Keys

Navigate to Systems and Accounts > Account > API Keys to view this page.

Search

Use the search bar to seek or filter the list of API keys with key words. You must use at least three characters for the search to qualify.

API Key Table and Actions

This table lists all the API keys that are created by Multicloud Defense components for your cloud service providers. View the role, key ID, the date the key was added to Multicloud Defense, and the date the key expires.

From here you can create or delete API keys. Note that these keys are generated by Multicloud Defense and not related to the keys your cloud service provider might create to maintain communication. Continue reading for more information.

Create an API Key in Multicloud Defense

Delete an API Key from Multicloud Defense

Create an API Key in Multicloud Defense

Use the following procedure to create an API Key:

Procedure

	1.	Navigate to Systems and Accounts > Account > API Keys.
	2.	Click Create API Key.
	3.	Enter a unique Name.
	4.	Confirm the Email Address that Multicloud Defense automatically generates. You cannot change this option.
	5.	Use the drop-down menu to select one of the key roles: admin_read_only - This role restricts interactions so you cannot modify or action anything, and can only “view” the available data. admin_read_rw - This role allows you to read and modify available data.
	6.	Enter an appropriate value for API Key Lifetime (days). The deafult value is 365 days.
	7.	Click Save.

Delete an API Key from Multicloud Defense

Use the following procedure to delete a API Key:

Procedure

	1.	Navigate to Systems and Accounts > Account > API Keys.
	2.	Select the API Key from the table and check the box so it is highlighted.
	3.	Click Delete.
	4.	Confirm you want to delete the key and click Yes. The key is immediately removed from Multicloud Defense.

Account Level Settings

This page displays some of the tags used in Multicloud Defense, including application tags and custom tags. Continue reading for more information.

Application Tags

Custom Tags

Application Tags

The application tag is a string of characters and is used as one of the classification criteria for the automatic classification of processes or threads. Tagging allows you to group apps based on your unique requirements so that you can search for apps and find vulnerabilities. Note that not all cloud service providers support the use of application tags.

Note

You can only create one appication tag at a time. If you need to create a new tag, you must delete the existing tag and then create a new application tag.

Create an Application Tag

Edit an Application Tag

Delete an Application Tag

Create an Application Tag

Use the following procedure to create an application tag. Note that these tags are for internal use only and may not be recognized or available from your cloud ervice provider's interface.

Procedure

	1.	Navigate to Systems and Accounts > Account > Account.
	2.	In the Application Tag table, click Create.
	3.	The type of application tag is `APPLICATION_TAG_KEYS` by default.
	4.	Enter a brief Description of the tag. This can help identify or differentiate between other tags that might have a similar name or concept.
	5.	Enter at least one Value. Hit `Enter` after each value to create more than one. Note that these values are case sensitive.
	6.	Click Save. The tag is created and available in the table.

Edit an Application Tag

Use the following procedure to edit an existing application tag that has been created in Multicloud Defense. You cannot use this procedure to modify tags that were created in your cloud service provider's interface.

Procedure

	1.	Navigate to Systems and Accounts > Account > Account.
	2.	In the Application Tag table, locate the application tag you want to edit and check its box on the left so it is highlighted.
	3.	Click Edit.
	4.	Modify the following parameters: Description - You can edit or delete the description. Tag Values - You can add or remove tags here.
	5.	Click Save. Alternatively, you can cancel at any time without saving changes.

Delete an Application Tag

Use the following procedure to delete an existing application tag:

Procedure

	1.	Navigate to Systems and Accounts > Account > Account.
	2.	In the Application Tag table, locate the application tag you want to edit and check its box on the left so it is highlighted.
	3.	Click Delete.
	4.	Confirm you want to delete the application tag and click Yes.

Custom Tags

Custom tags are simple pieces of data that provide details about an item and make it easy to locate related items that have the same tag. You can use a tag to easily identify or differentiate an object, policy, rule, and more.

Create a Custom Tag

Edit a Custom Tag

Delete a Custom Tag

Create a Custom Tag

Use the following procedure to create a custom tag in Multicloud Defense. Note that these tags are for internal use only and may not be recognized or available from your cloud ervice provider's interface.

Procedure

	1.	Navigate to Systems and Accounts > Account > Account.
	2.	In the Custom Tag table, click Create.
	3.	Enter the Value of the tag. This can help identify or differentiate between other tags that might have a similar name or concept
	4.	Enter at least one Value.
	5.	Click Save. The tag is created and available in the table.

Edit a Custom Tag

Use the following procedure to modify an existing custom tag:

Procedure

	1.	Navigate to Systems and Accounts > Account > Account.
	2.	In the Custom Tag table, locate the application tag you want to edit and check its box on the left so it is highlighted.
	3.	Click Edit.
	4.	Modify the following parameters: Key. Values.
	5.	Click Save. Alternatively, you can cancel at any time without saving changes.

Delete a Custom Tag

Use the following procedure to delete an existing custom tag:

Procedure

	1.	Navigate to Systems and Accounts > Account > Account.
	2.	In the Custom Tag table, locate the application tag you want to edit and check its box on the left so it is highlighted.
	3.	Click Delete.
	4.	Confirm you want to delete the application tag and click Yes.

System

The System page is a historical document that catalogues at least a year's worth of updates. You can use these details for general knowledge, locating the correct Release Notes version, and when you contact Cisco Support for product help. The following information collections are displayed here:

Component

This section displays the current versions for both the Multicloud Defense Controller and the user interface. Note that you cannot force an update or rollback to a previous version from this page.

Gateway Images

The gateway images table denotes when your Multicloud Defense Gateway was upgraded, which version of the gateway was in place and for how long, and what time zone the gateway is established in.

Talos/Network Intrusion

This table displays all the updates from Cisco's Talos Intelligence Group. These updates are pushed to Cisco products separate from a normal product software release.

Web Protection

This table displays all the Web Application Firewall (WAF) core and trustwave rule updates against the latest Web application vulnerabilities and threats.

Metering

The Metering page displays graphs of usage, both for the overall useage of Multicloud Defense and the gateway instances created for your cloud service providers.

Filters

Use the filters located at the top of the page to determine the data displayed in the page. You can change this view by selecting the month and year. You can use these filter settings to generate a usage report.

Generate a Usage Report

You can generate a usage report for either of the two options from this page. Navigate to System and Accounts > System Settings > Metering and expand the Download drop-down option in the Filter section of the page to select either usage or instances. The file is downloaded locally as an .csv file. Use the filtering options to determine the timespan the report should generate from.

Usage Records

The Usage Records table details the number of accounts associated with your tenant, how many hours the accounts were interacted with, and on what days of the month selected in the Filter section. You can determine from the usage/month ratio what days were the most active.

Instance Records

The instance Records table displays the following instance statistics:

Account Name.
Account type by cloud service provider.
Instance ID.
Instance Type.
Availablilty zone.
Gateway.
Started - When the gateway instance was created.
Ended - When the gateway instance expired or was terminated.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.