Learn how to onboard Catalyst SD-WAN Manager to Security Cloud Control, align RBAC models, manage NGFW capabilities, view intrusion and malware events, and deboard the integration.
This chapter explains how Catalyst SD-WAN Manager is onboarded to Security Cloud Control
Onboard Catalyst SD-WAN Manager to Security Cloud Control
Learn how to onboard Catalyst SD-WAN Manager to Security Cloud Control, verify Smart or Virtual Account admin privileges, note the SD-WAN Organization Name, and enable Cloud Services, Analytics, and Service Access Authorization.
Deboard Catalyst SD-WAN Manager from Security Cloud Control
Learn how deboarding Catalyst SD-WAN Manager from Security Cloud Control automatically removes associated devices, NGFW policies, and security objects from Security Cloud Control.
Alignment of RBAC models of Security Cloud Control Firewall Management and Catalyst SD-WAN Manager
This concept explains that user roles in Catalyst SD-WAN Manager and Security Cloud Control Firewall Management operate independently, with each role defined by its specific responsibilities. However, the Role-Based Access Control (RBAC) models for both platforms are aligned to provide consistency and seamless user actions.
How Security Cloud Control Firewall Management manages Catalyst SD-WAN NGFW capabilities
Security Cloud Control Firewall Management lets you create, modify, and delete Next-Generation Firewall (NGFW) policies, security objects, and profiles, with global search and policy group association for Catalyst SD-WAN NGFW policies. Changes are automatically saved to Catalyst SD-WAN Manager, but must be manually deployed to Secure Router devices via Catalyst SD-WAN Manager. Direct device deployment from Security Cloud Control Firewall Management is not supported.
View intrusion events
Intrusion Prevention System (IPS) dashlet highlights blocked and allowed network attacks using Cisco Talos threat intelligence. This dashboard view maps to Catalyst SD-WAN Manager Security Monitor IPS/AMP dashlets.
View malware events
View the Advanced Malware Protection (AMP) events dashlet, which shows malicious, unknown, and clean file counts over time. This dashboard view maps to Catalyst SD-WAN Manager Security Monitor IPS/AMP dashlets.