Introducing New AIOps Capabilities

AIOps brings AI-driven intelligence to firewall management, delivering proactive insights and actionable guidance to simplify operations and strengthen security.

New capabilities include:

• AIOps Summary Dashboard: A unified view that consolidates insights, giving you a clear snapshot of your device's performance.

• Best Practices and Recommendations: Detailed assessments that highlight deviations from best practices and provide remediation guidance.

• Feature Adoption: Visibility into actively used features categorized by licenses, adoption rates across the tenant, and guidance to improve utilization.

• Software Upgrade Planner: Suggestions on the most suitable upgrade versions for Secure Firewall Threat Defense devices, including visibility into resolved bugs and security vulnerabilities, to streamline upgrade decisions.

These enhancements add to the existing capabilities such as the Policy Analyzer and Optimizer, positioning AIOps as the central hub for proactive and efficient firewall management.

Introducing Device Health Metrics for Secure Firewall ASA Devices

In this release, we have introduced the Device Health Metrics for Secure Firewall ASAdevices. The dashboard displays critical performance indicators such as CPU, memory, disk usage, fan status, and interface statistics. With this visibility, you can detect performance bottlenecks and take proactive action to maintain optimal operations.

For more information, refer to Device Health Metrics.

CLI Templates now available in Security Cloud Control

You can now manage and export CLI templates as .txt files for configuring new devices. To access CLI templates, click Administration in the left pane and choose Integrations > CLI Templates.

For more information, refer to Manage CLI Templates.

Hardware End-of-Life Filter

You can now filter devices on the Security Devices page to identify hardware that is nearing or has passed its last date of support. The detailed view also provides recommended replacement devices to assist with lifecycle planning.

For more information, refer to Security Devices.

Security Cloud Control Now Manages Catalyst SD-WAN NGFW features

Security Cloud Control now integrates with Catalyst SD-WAN Manager, enabling you to centrally manage next-generation firewall (NGFW) features, including security policies and objects managed by Catalyst SD-WAN Manager.

With Security Analytics and Logging, you gain visibility into network activity, making it easy to monitor, analyze, and respond to security events. You can also view allowed and blocked intrusion and malware events detected in your network.

For more information, refer to Managing Cisco Catalyst SD-WAN Firewall Capabilities with Security Cloud Control.

Security Cloud Control notifications in Microsoft Teams

To get Security Cloud Control notifications in Microsoft Teams, generate an incoming webhook in Teams and enter the webhook URL in Security Cloud Control (Administration > Notification Settings).

For more information, refer to Incoming Webhooks for Microsoft Teams.

Updates to Cloud-Delivered Firewall Management Center

Security Cloud Control released an update to the Cloud-Delivered Firewall Management Center. Read the Release Notes for Cloud-Delivered Firewall Management Center for more information.

Universal Zero Trust Network Access (universal ZTNA)

Security Cloud Control released the Universal Zero Trust Network Access (universal ZTNA) feature. Universal ZTNA is a comprehensive solution that provides secure access to internal network resources based on user identity, trust, and posture. It ensures that access to one application does not implicitly grant access to the entire network, as with remote access VPN. Enable universal ZTNA using Policies > Zero Trust Application. For more information, refer to Managing Firewall Threat Defense with Cloud-Delivered Firewall Management Center in Security Cloud Control.

MSSP Portal: Enhanced Pagination and Sorting of Security Devices

The Security Devices page in the MSSP portal now includes dedicated tabs for Devices, Cloud Services, Templates, and Firewall Managers. This enhancement improves page performance and streamlines pagination and filtering, enabling a more efficient management of your security assets.

For more information, refer to Security Devices Details.

Updates to Security Cloud Control Firewall Manager APIs

The Security Cloud Control Firewall Manager APIs have been updated to add multiple new API endpoints to collect and view health metrics for ASA devices and view MSSP portal inventory.

Updates to the Event Log Search Feature

The Background Search button in the Event Logging page has been renamed to Reports. The button's functionality remains the same, allowing you to perform event log searches in the background and manage generated reports.

For more information, refer to Search Historical Events in the Background.

Updates to the Cloud-Delivered Firewall Management Center Device Backups

From the next upgrade of Cloud-Delivered Firewall Management Center, only the five most recent Firewall Threat Defense backups will be retained; all older backups will be automatically deleted.

In the event that you have not downloaded the required backups to your private environment following our announcement on May 1, 2025, download the necessary backups before July 31, 2025, to ensure continuous access to your data.

See Restore a Firewall Firewall Threat Defense device for information on how to download device backups.

Updates to Cloud-Delivered Firewall Management Center

Security Cloud Control released an update to the Cloud-Delivered Firewall Management Center. Read the Release Notes for Cloud-Delivered Firewall Management Center for more information.

Enhanced Event Searching with Sample Filters

In this release, we've introduced sample filters in the Event Logging page to enhance your search experience. These filters instantly populate the search bar with common search queries. This reduces the need to manually type search queries. Simply select a sample filter and edit the search parameters to suit your specific needs.

For more information, refer to Use Sample Filters to Search Events.

Updates to Firewall Migration Tool

Security Cloud Control released an updated version of the Secure Firewall Migration Tool. The key updates include Azure firewall migration to Firewall Threat Defense, Checkpoint and Fortinet firewall migrations to Multicloud Defense, simplified policy management, and more. Refer to Cisco Secure Firewall Migration Tool Release Notes for more information.

Cisco Security Cloud Control Integrated Platform is Now Available

We are excited to announce the migration of Cisco Security Cloud Control tenants from APJ, AUS, the EU, India, and the U.S. to the Cisco Security Cloud Control integrated platform.

To access the Security Cloud Control integrated platform, go to https://security.cisco.com/ and navigate to Products > Firewall from the homepage.

Note that you can continue to access all your current firewall settings and configurations from the Firewall dashboard in the Security Cloud Control integrated platform.

Simplified Site-to-Site VPN Wizard

The Security Cloud Control now features an enhanced, consolidated wizard designed to simplify and accelerate the creation of site-to-site VPN tunnels. With this intuitive, step-by-step guided wizard, you can seamlessly configure and manage multiple VPN connections in just a few clicks. The VPN tunnel creation is supported for Secure Firewall ASA, Cloud-Delivered Firewall Management Center-managed Firewall Threat Defense, Multicloud Defense, and extranet devices, providing a centralized and streamlined approach to VPN management.

For more information, see Introduction to Site-to-Site Virtual Private Network.

New Widgets in Storage Utilization Dashboard

We've introduced new widgets to help you identify logging trends and manage storage effectively. Note that these widgets are available only if you are using the optimized version of SAL event logging.

• EPS Trends for tracking event ingest rates.

• Utilization by Event Type and Device Type Trends for monitoring storage usage patterns.

• Utilization by Device Trends, which highlights storage usage of the top devices.

For more information, see View Security Analytics and Logging Storage Usage and Event Ingest Rate.

End-of-Support announcement for Secure Firewall Threat Defense Version 7.0.x devices managed by Cloud-Delivered Firewall Management Center

Starting October 22, 2025, Cloud-Delivered Firewall Management Center will no longer support the management of Secure Firewall Threat Defense devices running Version 7.0.x. You are required to upgrade to at least Version 7.2.x (Cisco-suggested version is 7.4.2) before October 22, 2025, to ensure continued protection and access to the latest features.

From October 22, 2025, you will not be able to make or deploy changes to Secure Firewall Threat Defense devices running Version 7.0.x, except to upgrade or unregister.

For more information, see Frequently Asked Questions.

Best Practices and Recommendations in AIOps

The Best Practices and Recommendations feature runs assessments on your devices, highlights failed checks, and generates detailed reports. It recommends corrective actions to help you align with Cisco Secure Firewall best practices and enhance overall performance.

For more information, see Implement Best Practices and Recommendations.

Updates to Cloud-Delivered Firewall Management Center

Security Cloud Control released an update to the cloud-delivered Firewall Management Center. Read the Release Notes for Cloud-delivered Firewall Management Center for more information.

Updates to Firewall Migration Tool

Firewall in Security Cloud Control released an updated version of the Firewall Migration Tool. The new features include migrating configurations from Secure Firewall ASA and Palo Alto Networks firewall to Multicloud Defense.

See the Cisco Secure Firewall Migration Tool Release Notes for more information.