Cisco Security Cloud Control: Secure Firewall Management

PDF

Cisco Security Cloud Control: Secure Firewall Management

About this content

Learn how Security Cloud Control Firewall Management unifies firewall and device management, simplifies policy consistency, supports multiple device managers, and helps reconcile configuration changes across Cisco security environments.


Get started with Security Cloud Control Firewall Management

Introduces Firewall in Security Cloud Control fundamentals and guides users through initial account setup, provisioning, and dashboard navigation.

Manage Firewall administration in Security Cloud Control Firewall Management

Guides administrators through configuring general firewall settings, managing user accounts and groups, setting up API access, and establishing logging and notification preferences.

Firewall models and software supported

Outlines the software and hardware requirements for Cisco Defense Orchestrator and guides users through the process of onboarding and managing security devices within the platform.

Onboard devices in Security Cloud Control Firewall Management

Introduces Secure Connectors technology and explains how these components establish trusted communication channels between network endpoints and centralized management systems.

Manage objects

Learn how to create, edit, compare, filter, share, override, and clean up reusable network, service, URL, and application objects used across device policies in Security Cloud Control.

About Dynamic Attributes Connector

General information about the dynamic attributes connector.

Configure the Dynamic Attributes Connector

Configure the dynamic attributes connector in Security Cloud Control.

Dynamic Firewall

After configuring an identity source and assuming you have integrated Cisco Identity Intelligence with systems like a user source and human resources systems, you can add user trust scores to user identity mappings. This information can be used by the Secure Firewall Management System in access control policies.

Use Dynamic Objects in Access Control Policies

Introduces dynamic objects for creating flexible access control policies and guides users through implementing dynamic attributes, filters, and rule conditions across network security policies.

Troubleshoot the Dynamic Attributes Connector

Provides troubleshooting guidance for common error messages, subscription issues, and certificate authority problems using both command line and graphical interface methods.

Onboard Secure Firewall ASA devices

Guides users through the process of adding Adaptive Security Appliance devices to the management platform, including high availability configurations, multi-context setups, and bulk onboarding procedures.

Configure Secure Firewall ASA

Learn how to configure ASA devices in Security Cloud Control Firewall Management, including interfaces, system settings, routing, policies, certificates, VPN, file management, and configuration deployment tasks.

Secure Firewall ASA Security Policy Management

Learn how to manage ASA security policies in Security Cloud Control Firewall Management.

Monitor Secure Firewall ASA Events

Introduces Cisco Security Analytics and Logging Software as a Service for Adaptive Security Appliance devices and guides through implementation methods for cloud-based logging and event analysis.

Monitor device health metrics

Learn how Security Cloud Control effectively monitors the performance of your ASA devices. Monitor device health metrics to review status, performance indicators, and device conditions that help identify operational issues.

Use Cisco Secure Cloud Analytics Portal

Guides users through provisioning and configuring Stealthwatch Cloud Portal, including sensor deployment, health monitoring, alert management, and integration with Cisco Defense Orchestrator for comprehensive network analytics.

Upgrade Secure Firewall ASA

Learn how to upgrade Secure Firewall ASA and ASDM images in Security Cloud Control Firewall Management for single devices, multiple devices, high availability pairs, and custom image repositories.

Troubleshoot Secure Firewall ASA

Learn how to troubleshoot Secure Firewall ASA issues in Security Cloud Control, including reconnect failures, certificate errors, CLI diagnostics, Remote Access VPN, real-time logging, packet tracer, advisories, and large configurations.

Onboard a Firewall Threat Defense Device

Guides through the complete device onboarding process for cloud-delivered Firewall Management Center, covering registration methods, virtual deployments, and troubleshooting procedures.

Migrate Threat Defense to Cloud-Delivered Firewall Management Center

Guides administrators through the complete process of migrating on-premises Management Center managed Firewall Threat Defense devices to Security Cloud Control, including prerequisites, supported features, and troubleshooting procedures.

Configure Cloud-Delivered Firewall Management Center-Managed Secure Firewall Threat Defense

Guides users through accessing and requesting Cloud-Delivered Firewall Management Center services within Cisco Defense Orchestrator for managing Secure Firewall Threat Defense deployments.

Introduction to AgenticOps insights

Introduces artificial intelligence operations insights for firewall optimization, covering capacity monitoring, policy analysis, compliance tracking, and automated recommendations for enhanced network security performance.

Introduction to Agent Workforce

Introduces AI-powered agents that automate firewall troubleshooting, traffic analysis, and site-to-site Virtual Private Network issue resolution to streamline network operations.

Monitor Cloud-Delivered Firewall Management Center-Managed Threat Defense Device Events

Explains how to implement and configure Security Analytics and Logging Software as a Service for cloud-delivered Firewall Management Center environments, covering event transmission methods and integration requirements.

FTD Dashboard

Analyze and Remediate Security Policy Anomalies with Policy Analyzer and Optimizer

Introduces the Policy Analyzer and Optimizer tool for security policy management and guides users through setup, configuration, and analysis of firewall policies and Network Address Translation rules.

Integrate Catalyst SD-WAN Manager with Security Cloud Control

Guides the integration process between Catalyst SD-WAN and Secure Cloud Control, including topology requirements, firewall management capabilities, and end-to-end implementation procedures.

Onboard Catalyst SD-WAN Manager

Guides the process of integrating Catalyst SD-WAN into Secure Cloud Control and explains role-based access control alignment and next-generation firewall management capabilities.

Configure Next-Generation Firewall Capabilities of Catalyst SD-WAN Manager

Outlines the creation and management of Next-Generation Firewall security policies for Catalyst SD-WAN environments, including policy association and deployment procedures.

Monitor Catalyst SD-WAN Events

Onboard an On-Premises Firewall Management Center

Guides users through the process of adding a Firepower Management Center to Cisco Defense Orchestrator and explains how to remove it when necessary.

Configure On-Premises Firewall Management Center-Managed Threat Defense Devices

This chapter guides users through configuring, managing, and deploying changes to On-Premises Firewall Management Center devices using Security Cloud Control, including viewing, updating, and removing managed resources.

Onboard an Umbrella Organization

Guides users through the complete process of setting up and configuring a new Umbrella organization within the management platform.

Configure an Umbrella Organization

Learn how to configure an Umbrella organization for ASA devices, including ASA integration with Cisco Umbrella and secure internet gateway use cases.

Onboard Cisco Meraki MX devices

Learn how to onboard Cisco Meraki MX devices and templates by preparing API access, retrieving the Meraki API key, and adding networks or configuration templates to Security Cloud Control.

Configure Cisco Meraki

Onboard AWS VPC

Learn how to onboard AWS VPCs to Security Cloud Control Firewall Management.

Configure AWS VPC

Onboard Cisco IOS Devices

Learn how to onboard live Cisco IOS devices and model configurations in Security Cloud Control, including SSH requirements, Secure Device Connector selection, credentials, cipher support, imports, and downloads.

Configure Cisco IOS

Onboard an SSH Device

Learn how to onboard network devices with Generic SSH access to Security Cloud Control, review supported platforms, use Secure Device Connector prerequisites, and delete onboarded SSH devices.

Configure SSH Devices

Establish Site-to-Site VPN connection using Security Cloud Control Firewall Management

Learn how to create and monitor site-to-site VPN tunnels between Secure Firewall ASAs, including IPSec and IKE settings, tunnel connectivity, and issue review.

Establish Remote Access VPN connection using Security Cloud Control Firewall Management

Learn how to create remote access VPN configurations on Secure Firewall ASA devices, including Secure Client package use, connectivity, monitoring, and session disconnect actions.

Configure Firewall for Universal Zero Trust Network Access

Universal Zero Trust Network Access solution comprises Secure Firewall and Secure Access to provide secure access to private resources. Secure Firewall manages Firewall Threat Defense through a Firewall Management Center. Configure uZTNA on a Firewall Threat Defense device and associate private resources to enable traffic inspection and secure access to the resources.

Manage device configuration

Guides users through detecting, reviewing, and deploying configuration changes across network devices while maintaining synchronization between the management platform and individual devices.

Manage onboarded device settings

Learn how to find devices, objects, and policies in Security Cloud Control Firewall Management using inventory views, labels, filters, page search, and global search.

Use the Security Cloud Control Command Line Interface Tool (CLI)

Guides users through executing command line operations on individual devices and in bulk, including running macros and exporting command results.

Manage CLI Templates

Guides users through creating, editing, and managing ASA CLI templates for automating device configuration tasks.

Migrate Firewalls with the Migration Tool in Security Cloud Control

Guides users through migrating various firewall platforms including Secure Firewall ASA, Check Point, Fortinet, and Palo Alto Networks to Cisco security solutions using the integrated migration tool.

Events in Security Cloud Control

Learn how to view and analyze security events in Security Cloud Control, including event types, filtering, event details, and investigation workflows.

Security Analytics and Logging Licenses

Outlines the licensing requirements and event storage capabilities for Secure Logging Analytics Software as a Service deployments.

Secure Event Connectors

Guides users through the installation and configuration of Secure Event Connectors and provides instructions for removal and port identification for secure logging analytics.

Monitor Catalyst SD-WAN Events

View Events in Security Cloud Control Firewall Management

Guides users through viewing, customizing, and filtering live and historical security events within the analytics and logging interface.

Integrate Security Cloud Control with Splunk

Splunk HEC Forwarding in Security Cloud Control sends selected firewall events to Splunk over HTTPS for SIEM monitoring, log retention, compliance, and advanced security analytics. Use this feature to filter event data by device and event type, improve threat visibility, reduce noise, and support dashboards, reporting, and automated response workflows.

Use Cisco Secure Cloud Analytics Portal

Guides users through provisioning and configuring Stealthwatch Cloud Portal, including sensor deployment, health monitoring, alert management, and integration with Cisco Defense Orchestrator for comprehensive network analytics.

Monitor Remote Access Virtual Private Network Sessions from Secure Firewall ASA and Firewall Threat Defense

Provides tools and methods for monitoring Remote Access Virtual Private Network sessions to track user activity and ensure secure connectivity.

Monitor and report change logs, workflows, and jobs

Provides comprehensive monitoring capabilities for tracking configuration changes, managing change requests, and generating reports across ASA and FTD devices.

Smart Licensing Dashboard

Introduces the Smart Licensing Dashboard interface and guides users through viewing and interpreting licensing information and status within the platform.

Troubleshooting

FAQ and support

Security and Internet Access

Outlines the security requirements and internet access specifications needed for proper system deployment and operation.

Terraform

Learn how to automate the setup and management of your Security Cloud Control organization using Terraform providers and modules.

Open Source and 3rd Party License Attribution

An overview of Cisco Open Source and 3rd Party License Attribution, including the license notices for third-party components used in Security Cloud Control.