Cisco Security Cloud Control: Secure Firewall Management

PDF

Cisco Security Cloud Control: Secure Firewall Management

View Security Cloud Control notifications

Updated: October 16, 2026

Want to summarize with AI?

Log in

Configure how to view, search, dismiss, and review Security Cloud Control notifications for device events, alerts, and reports.

This task helps you manage and monitor notifications to stay informed about device events, alerts, and reports in your Security Cloud Control Firewall Management tenant.

The notifications system provides visibility into the most recent alerts that have occurred or affected the devices that you onboarded to your tenant. The settings that you choose on the Notification Settings page determine the notification types that appear in Security Cloud Control Firewall Management.

The notifications drop-down page is grouped into three tabs: Overview, All, and Dismissed.

Procedure

  1. Click the notifications icon The notifications system interface shows the recent alerts and events related to onboarded devices, organized into Overview, All, and Dismissed tabs for easy access. to view the most recent alerts.

    The Overview tab displays a combination of the most recent high-priority alerts and events to which you are subscribed. High priority events are the following:

    • Deployment Failed

    • Backup Failed

    • Upgrade Failed

    • Migrate FTD to Cloud-Delivered Firewall Management Center Failed

    • Device went offline

    • Device HA state changed

    • Device certificates expiring

  2. To view all notifications regardless of priority, click the All tab.

    This tab displays all notifications, including email subscription notifications and all high-priority items.

  3. To view dismissed notifications, click the Dismissed tab.

    This tab displays notifications that you dismissed. You can dismiss individual notifications by clicking the "x" of the notification.

    Opting to Dismiss notifications from the drop-down menu dismisses notifications from both the "Overview" and "All" tabs. They will remain in the Dismiss tab for 30 days, after which they will be removed from Security Cloud Control.

  4. To search for specific notifications, use the search bar at the top of the drop-down to query for key words or alerts.

    When viewing the notifications drop-down window, for any of the tabs mentioned above, you can use the search bar to filter notifications.

  5. To configure notification preferences, click Notification Settings in the Notifications window or select UserID > User Preferences from the upper right corner of the dashboard.

    View your personal preferences in the Notification Preferences page. From this page you can configure the "Notify Me in Security Cloud Control When" alerts and enable email notifications to receive any of the alerts. See Notification Preferences.

You can now effectively manage and monitor all notifications in your Security Cloud Control Firewall Management tenant, including viewing high-priority alerts, searching for specific notifications, dismissing unwanted alerts, and configuring your notification preferences.

User notification preferences

User notification preferences are customizable alert settings that

  • control which notifications users receive from Security Cloud Control Firewall Management based on device events and workflow activities

  • allow personal customization without affecting other tenant users, and

  • provide real-time updates without requiring deployment.

Notification preference configuration

Security Cloud Control Firewall Management generates notifications whenever a device linked to your tenant encounters a specific event. This includes actions taken by the device, expiring or expired device certificates, or the start, completion, or failure of a report generation task. By default, these notifications are enabled and visible to all users associated with the tenant, regardless of their role. You have the option to customize your personal notification preferences to display only the alerts that interest you. These preferences are unique to you and do not impact other users connected to the tenant.

Note

Changes made to the notifications listed below are automatically updated in real time and do not require deployment.

Device workflow alerts include:

  • Deployments - This action is applicable to Security Cloud Control and Cloud-Delivered Firewall Management Center, and does not include integration instances for SSH or IOS devices.

  • Backups - This action is only applicable for FDM-managed devices.

  • Upgrades - This action is only applicable for ASA and FDM-managed devices.

  • Migrate Firewall Threat Defense to cloud - This action is applicable when changing the Firewall Threat Defense device manager from Firewall Management Center to Security Cloud Control.

Device event alerts include:

  • Went offline - Applies to all devices associated with your tenant.

  • Back online - Applies to all the devices associated with your tenant.

  • Conflict detected - Applies to all the devices associated with your tenant.

  • HA state changed - Indicates the device within an HA or failover pair, the current state, and the state it changed from. This action applies to all HA and failover configurations associated with your tenant.

  • Site-to-Site session disconnected - Applies to all site-to-site VPN configurations configured in your tenant.

Event search report alerts include:

  • Report generation started: Notifies you when a report generation task starts. This applies to both immediate and scheduled search reports.

  • Report generation completed: Notifies you when a report generation task ends. This applies to both immediate and scheduled search reports.

  • Report generation failed: Notifies you when a report generation task fails. This applies to both immediate and scheduled search reports. Check the parameters or query and try again.

Application insights alerts include:

  • Application available: Notifies you when a monitored application becomes available.

  • Application unavailable: Notifies you when a monitored application becomes unavailable.

Cisco Secure Dynamic Attributes Connector alerts enable notifications about the health of all dynamic attributes connectors in your organization. Check the All Dynamic Attributes Connector health notifications check box to enable notifications about the health of all dynamic attributes connectors in your organization.

These notifications alert you early in the workflow about unhealthy connector resources. A notification message includes the state of the resource (Error or Recovered) and diagnostic details if it is an error or unhealthy.

You can also configure notifications through e-mail, as well as webhook endpoints including Cisco Webex, Microsoft Teams, and Slack to receive notifications within those applications.

To configure direct notifications:

  1. Click Platform Management > Firewall Notification Settings.

  2. On the Firewall Notifications Settings page, click Add Now under the Service Integrations pane.

  3. In the Add Service Integrations slide-in pane, enter the name of the service, select the messaging service from the drop-down list, enter the resulting URL, and choose the type of alerts you wish to receive.

  4. Click Save.

By default, all notification types are enabled. To stop receiving a notification type, clear that notification and click Save.

Enable the Email notifications toggle button to receive email for the alerts that you select.

By default, Use Security Cloud Control notification settings above is selected. When this option is selected, email notifications match the same notifications and events that you selected in the Notify Me in Security Cloud Control When sections.

If you want email notifications for only some alerts, clear Use Security Cloud Control notification settings above, select the alert types that you want to receive by email, and then click Save.