Explains how to implement and configure Security Analytics and Logging Software as a Service for cloud-delivered Firewall Management Center environments, covering event transmission methods and integration requirements.
View events from Threat Defense devices that are managed by Cloud-Delivered Firewall Management Center in Security Cloud Control.
Security Analytics and Logging for Firewall Threat Defense
Explains how Security Analytics and Logging captures Firewall Threat Defense events from Cloud-Delivered Firewall Management Center-managed devices and makes them available for filtering and review in Security Cloud Control.
SAL (SaaS) for Cloud-Delivered Firewall Management Center-managed devices
Explains how to set up Security Analytics and Logging for Cloud-Delivered Firewall Management Center-managed Threat Defense devices using direct cloud event delivery or syslog.
Requirements and guidelines
Outlines requirements for sending Threat Defense events to Security Analytics and Logging, including supported versions, cloud regions, subscriptions, ingest planning, and connectivity.
How Firewall Threat Defense events are displayed in Security Cloud Control using a direct connection
Describes how Threat Defense events sent through a direct cloud connection become available for monitoring and analysis in Security Cloud Control.
Send Cloud-Delivered Firewall Management Center-Managed Event Logs to SAL (SaaS) Using a Direct Connection
Configure Cloud-Delivered Firewall Management Center-Managed -managed event logs to send directly to Security Analytics and Logging (SaaS), including enabling Cisco Cloud Events and choosing which event types to send.
Send Cloud-Delivered Firewall Management Center-Managed Events to SAL (SaaS) Using Syslog
Configure Cloud-Delivered Firewall Management Center-managed devices to send intrusion, file, malware, and connection events directly to Security Analytics and Logging.
Enable individual threat defense devices to send events to SAL (SaaS) using a direct connection
Configure individual Threat Defense devices managed by Cloud-Delivered Firewall Management Center to enable or disable direct event delivery to SAL (SaaS).
View AI Defense Events in Security Cloud Control
Configure AI Defense event viewing in Security Cloud Control after enabling AI Defense and cloud event logging for supported Threat Defense devices.