The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
These are the new Firewall features deployed in Security Cloud Control in 2026.
Manage and automate Security Cloud Control Firewall Management using a simple CLI and Cisco Ansible collection. Built in AI skills help coding agents find the right commands and modules, validate inputs, handle authentication safely, and verify results. This makes Firewall Management workflows faster, safer, and easier to automate.
For more information, see Automation tools and AI agents.
Software Upgrade Planner now separates bugs into Impacting bugs and Other bugs on the device details page. Impacting bugs are identified as affecting the selected device and its environment. This helps you focus on the bugs most relevant to the device when reviewing software upgrade options.
For more information, see Manage software upgrades.
Security Cloud Control released an update to the Cloud-Delivered Firewall Management Center. Read the Release Notes for Cloud-Delivered Firewall Management Center for more information.
Policy Analyzer and Optimizer now provides visibility into Network Address Translation (NAT) policy anomalies for Firewall Threat Defense devices managed by Cloud-Delivered Firewall Management Center or On-Premises Firewall Management Center. This feature enables users to identify shadowed and redundant NAT rules, analyze anomaly details, and generate comprehensive PDF reports for audit and compliance.
For more information, see Network Address Translation policy analysis.
Capacity and Trend Analyzerhelps you proactively monitor infrastructure health by analyzing CPU, memory, throughput, and connection trends. Use anomaly detection and predictive forecasting to identify potential capacity risks, receive alerts for threshold breaches, and plan for future resource demands.
For more information, see Capacity and Trend Analyzer.
AgenticOps now supports Firewall Threat Defense devices managed by an On-Premises Firewall Management Center integrated with Cisco Security Cloud. This support extends AgenticOps features, including Capacity and Trend Analyzer, Software Upgrade Planner, Best Practices and Recommendations, and Feature Adoption, to your on-prem managed devices.
For information about supported versions of the On-Premises Firewall Management Center, see AgenticOps Support for On-Prem Firewall Management Center
Software Upgrade Planner now provides remediation guidance with AI-generated summaries for security vulnerabilities and bugs, helping you understand root causes, available workarounds, and remediation guidance. It also highlights active threat campaigns affecting your devices and links to Cisco Talos Intelligence resources for additional context, enabling you to make more informed upgrade decisions.
For more information, see About software upgrade insights.
The Security Analytics and Logging (SaaS) service status monitoring option in the Event Logging page provides you with direct visibility into Security Analytics and Logging (SaaS) service availability from Security Cloud Control. You can monitor service availability, verify whether managed Firewall Threat Defense devices are sending events, and check the last received event details to identify possible ingestion delays or disruptions faster.
For more information, refer to Monitor Security Analytics and Logging (SaaS) service availability.
Security Cloud Control released an update to the Cloud-Delivered Firewall Management Center. Refer to the Release Notes for Cloud-Delivered Firewall Management Center for more information.
You can now bulk upgrade ASAs across multiple tenants in addition to performing bulk upgrades for Cloud-Delivered Firewall Management Center-managed Secure Firewall Threat Defense devices.
For more information, see About Multitenant Device Upgrades in MSSP Portal.
The new Cloud Deployment feature streamlines the configuration of Firewall Threat Defense Virtual (FTDv) and Multicloud Defense across Amazon Web Services (AWS), Azure, and Google Cloud Platform (GCP). Additionally, Oracle Cloud Infrastructure (OCI) is supported in this release by Multicloud Defense gateway only. This guided configuration tool helps you select and launch the optimal enforcement point for your specific use case, ensuring high performance and scalable network security in complex multicloud environments. With its simplified, step-by-step setup, Cloud Deployment lets you define account settings, traffic flows, and architectural requirements with ease.
For more information, see Cloud Deployment.
Security Cloud Control released an update to the Cloud-Delivered Firewall Management Center. Refer to the Release Notes for Cloud-Delivered Firewall Management Center for more information.
Key capabilities include:
Centralized management: Seamlessly manage multiple customer organizations within one portal.
Comprehensive monitoring: Monitor device health, configurations, and connectivity status across all managed environments.
Bulk upgrades: Perform upgrades on Secure Firewall Threat Defense devices managed by the Cloud-delivered Firewall Management Center (cdFMC) across all tenants.
Enhanced visibility: Access detailed, consolidated information for all managed firewall organizations.
What this means for you:
Access: Use the new portal directly from security.cisco.com.
Legacy Portal Retirement: The previous MSP portal will be retired soon.
Support: Going forward, support will be provided exclusively for the integrated Security Cloud Control platform.
For more information, see Overview of Security Cloud Control Firewall Management for Managed Service Providers.
Security Cloud Control released an update to the Cloud-Delivered Firewall Management Center. Refer to the Release Notes for Cloud-Delivered Firewall Management Center for more information.
Smart Licensing Dashboard has been introduced in Cisco Secure Firewall. This dashboard offers a unified view of license usage, license types, and compliance status, helping you ensure that your devices are licensed and remain compliant. This feature is currently available in limited release. To request access to this limited release feature, please contact your account team or Cisco representative.
For more information, see Overview of Smart Licensing Dashboard.
Smart Licensing Dashboard has been introduced in the MSSP Portal for Cisco Secure Firewall. This dashboard offers a unified view of license usage, license types, and compliance status, helping you ensure that your devices are licensed and remain compliant. This feature is currently available in limited release. To request access to this limited release feature, please contact your account team or Cisco representative.
For more information, see Overview of Smart Licensing Dashboard.
Smart Licensing Dashboard has been introduced in Cisco Secure Firewall. This dashboard offers a unified view of license usage, license types, and compliance status, helping you ensure that your devices are licensed and remain compliant. This feature is currently available in limited release. To request access to this limited release feature, please contact your account team or Cisco representative.
For more information, see Overview of Smart Licensing Dashboard.
AIOps now features Application Insights, which uses ThousandEyes Internet Insights to proactively detect cloud application outages. It shows affected applications, impacted domains, outage duration, and affected regions for the monitored applications.
For more information, see Detect Application Outages.
With the new upgrades view in the MSSP portal, you can now bulk upgrade Secure Firewall Threat Defense devices managed by Cloud-Delivered Firewall Management Center (cdFMC) across multiple tenants.
For more information, see About Multitenant Device Upgrades in MSSP Portal.
Feedback