Skip to content
Skip to search
Skip to footer

Cisco Security Cloud Control: Secure Firewall Management

Expand all sections

About this content

Introduction

Get started with Security Cloud Control Firewall Management

Configure basic settings

Manage Firewall administration in Security Cloud Control Firewall Management

Firewall models and software supported

Onboard devices in Security Cloud Control Firewall Management

Introduction to Secure Connectors

Manage objects

Dynamic Attributes Connector

About Dynamic Attributes Connector

About the Dynamic Attributes Connector

Configure the Dynamic Attributes Connector

Dynamic firewall

Use Dynamic Objects in Access Control Policies

Troubleshoot the Dynamic Attributes Connector

Manage Secure Firewall ASA

Onboard Secure Firewall ASA devices

Configure Secure Firewall ASA

Secure Firewall ASA Security Policy Management

Monitor Secure Firewall ASA Events

Monitor device health metrics

Use Cisco Secure Cloud Analytics Portal

Upgrade Secure Firewall ASA

Troubleshoot Secure Firewall ASA

Troubleshoot a Secure Firewall ASA device

Manage Secure Firewall Threat Defense with Cloud-Delivered Firewall Management Center

Onboard a Firewall Threat Defense Device

Migrate Threat Defense to Cloud-Delivered Firewall Management Center

Configure Cloud-Delivered Firewall Management Center-Managed Secure Firewall Threat Defense

Introduction to AgenticOps insights

Introduction to Agent Workforce

Monitor Cloud-Delivered Firewall Management Center-Managed Threat Defense Device Events

FTD Dashboard

Analyze and Remediate Security Policy Anomalies with Policy Analyzer and Optimizer

Manage Catalyst SD-WAN Manager Firewall Capabilities

Integrate Catalyst SD-WAN Manager with Security Cloud Control

Onboard Catalyst SD-WAN Manager

Configure Next-Generation Firewall Capabilities of Catalyst SD-WAN Manager

Monitor Catalyst SD-WAN Events

Manage On-Premises Firewall Management Center

Onboard an On-Premises Firewall Management Center

Configure On-Premises Firewall Management Center-Managed Threat Defense Devices

Manage Cisco Umbrella

Onboard an Umbrella Organization

Onboarding an Umbrella organization

Configure an Umbrella Organization

Manage Cisco Meraki

Onboard Cisco Meraki MX devices

Onboard Cisco Meraki MX devices

Configure Cisco Meraki

Manage AWS VPC

Onboard AWS VPC

Configure AWS VPC

Manage Cisco IOS

Onboard Cisco IOS Devices

Onboard a Cisco IOS Device

Configure Cisco IOS

Manage Network Devices with Generic SSH Access

Onboard an SSH Device

Onboard an SSH Device

Configure SSH Devices

Managing SSH Devices with Security Cloud Control

Establish Secure Connections

Establish Site-to-Site VPN connection using Security Cloud Control Firewall Management

Establish Remote Access VPN connection using Security Cloud Control Firewall Management

Configure Firewall for Universal Zero Trust Network Access

Device Operations

Manage device configuration

Manage onboarded device settings

Use the Security Cloud Control Command Line Interface Tool (CLI)

Manage CLI Templates

Migrate Firewalls with the Migration Tool in Security Cloud Control

Monitor and Analyze

Events in Security Cloud Control

Security Analytics and Logging Licenses

Security Analytics and Logging licenses

Secure Event Connectors

Monitor Catalyst SD-WAN Events

View Events in Security Cloud Control Firewall Management

Use Cisco Secure Cloud Analytics Portal

Monitor Remote Access Virtual Private Network Sessions from Secure Firewall ASA and Firewall Threat Defense

Remote access VPN session monitoring

Monitor and report change logs, workflows, and jobs

Smart Licensing Dashboard

Troubleshoot

Troubleshooting

FAQ and support

Appendix

Security and Internet Access

Terraform

About Terraform

Open Source and 3rd Party License Attribution

Open source and third-party license in SDC

Cisco Security Cloud Control: Secure Firewall Management

Open Policy Analyzer and Optimizer and select a data source

Updated: September 24, 2026

Want to summarize with AI?

You can open Policy Analyzer and Optimizer from Security Cloud Control Firewall Management or cross-launch from supported On-Premises Firewall Management Center policy pages.

You can open Policy Analyzer and Optimizer from Security Cloud Control Firewall Management or cross-launch from supported On-Premises Firewall Management Center policy pages.

Follow these steps to open Policy Analyzer and Optimizer and select a data source:

Procedure

In the Security Cloud Control Firewall Management left pane, choose Administration > Integrations > Firewall Management Center.
Select Cloud-Delivered FMC or an On-Premises Firewall Management Center.
Click Policy Analyzer and Optimizer under System.

Note

Alternatively, choose Insights & Reports > Policy Analyzer and Optimizer.
Use the data source selector at the top of the Policy Analyzer and Optimizer page to choose the Cloud-Delivered Firewall Management Center or On-Premises Firewall Management Center whose policies you want to review.
Choose the Access Control tab depending on the policy type that you want to analyze.

Note

If the selected data source is not enabled for AgenticOps, the Network address translation tab shows a message indicating that the NAT Policy Analyzer and Optimizer require AgenticOps for the selected data source. However, you can still utilize the access control Policy Analyzer and Optimizer if the access control prerequisites are met.

Sync and analysis behavior

Policy Analyzer and Optimizer displays policy metadata, including analysis status, last modified time, and last analyzed time. Last modified reflects changes made to the policy in the management center that manages it. Last analyzed reflects the analysis run that produced the current Policy Analyzer and Optimizer summary.

Use Sync with FMC to fetch the latest access control and NAT policy inventories and modified timestamps from the management center. Each Policy Analyzer and Optimizer tab shows the sync success or failure status for the policy type on that tab. If a policy was modified after the last analysis, the displayed analysis can be out of date until you run analysis again or a scheduled analysis runs.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.