Use this chapter to understand Cyber Vision Secure Remote Access (CV SRA), which provides secure remote connectivity to OT assets.
CV SRA
Introduces Cyber Vision Secure Remote Access (CV SRA), which provides secure remote connectivity to OT assets using ZTNA gateway functionality embedded in Cisco industrial switches and routers.
SRA roles and permission descriptions
Describes the principal roles in CV SRA, their permissions, and available menu options.
CV SRA access methods
Describes the mechanisms available for accessing OT assets through CV SRA access methods, including both clientless and agent-based groups for secure and flexible remote access.
CV SRA dashboard
Describes the essential features and key components of the CV SRA dashboard, which provides a centralized, real-time interface for administrators to monitor and manage CV SRA efficiently.
Supported switch and router models for CV SRA
Identifies the compatible IE switch and router models for IoT OD services, specifying their software and hardware prerequisites to ensure proper deployment and support.
Cisco IoT Operations Dashboard
Streamline user and organizational management by assigning roles, grouping assets, and securing access with multi-factor authentication.
Add and manage users
Provides instructions for adding new users to your organization, assigning roles and permissions, and managing user access.
Organization statuses
Describes the possible statuses for an organization and their meanings.
Multi-factor authentication settings
Describes multi-factor authentication (MFA), a security feature requiring two or more independent verification factors, enhancing the security of IoT deployments by protecting user accounts from unauthorized access.
Network devices onboarding and CV SRA agent deployment
Guide users through onboarding supported network devices and deploying the CV SRA agent using the step-by-step configuration flow in the CV SRA User Interface.
Operational technology (OT) assets
Explains OT assets and their importance in IIoT network.
Bulk configuration cloning
Enable efficient replication of CV SRA configurations by copying assets and access methods from a source device to multiple target devices using bulk configuration clones.
Access control groups
Define and manage secure remote access for groups of SRA users to specific remote assets.
How CV SRA Plus remote access works
Describes how administrators configure CV SRA Plus access and how users install the app, connect to a remote session, and use native applications to access an OT asset.
Duo integration with CV SRA Plus
Enable automated device posture checks with Duo integration to ensure only compliant devices access critical OT assets.
Configure access methods
Set up various access methods for remote access to meet operational and security requirements.
Remote asset session requests
Describe how remote asset session requests are managed and approved within Cyber Vision Secure Remote Access (CV SRA), outlining their key attributes and responsible roles.
Remote session management and monitoring
Monitor and manage live remote sessions by viewing details, supervising activities, and terminating sessions to enhance security administration.
Remote session recordings
Explain how to configure CV SRA for remote session recordings, enabling activity capture during remote access.
Alert rules
Define alert rules to help detect unusual user activities, specify monitored behaviors, and outline how alerts are presented for action.
Alerts
Defines alerts as security notifications that categorize issues by status and severity, providing information to help you investigate and respond to security events.
View user activity in Cisco IoT Operations Dashboard
Provides instructions to view individual user activities and access privileges within the Cisco IoT Operations Dashboard, including reviewing session history, access levels, and account status.
Access expiration policy
Enforce access expiration policies to ensure only legitimate users retain CV SRA access by managing user validity and enhancing security.
Secure file transfer
Enable secure file transfer to safeguard file exchanges with integrated automatic malware checks.
Request access to a remote session
Provides instructions for requesting access to a remote session using CV SRA.
Connect to a remote session using the request access procedure
Provides instructions for establishing a remote session with an OT asset through CV SRA using the request access procedure.
Connect to a scheduled remote session
Provides instructions for connecting to a scheduled remote session or view details for upcoming or expired sessions using the CV SRA interface.
Withdraw a session request
Provides instructions to withdraw a previously submitted session access request to cancel or reschedule a remote session.
Best practices for accessing CV SRA remote sessions
Provides guidelines for accessing CV SRA remote sessions to ensure you follow approval, scheduling, and notification requirements, and to avoid disruptions or access issues.
Collect CV SRA agent logs from the IOx app
Provides instructions to collect logs from the CV SRA agent app running on a Cisco IE switch and transfer them to your local system for analysis or Cisco TAC support.
DNS resolution issues
Describes DNS resolution issues, which are network connectivity problems that prevent devices from converting domain names into IP addresses, often resulting in failures to communicate with external services.
CV SRA agent failures
Highlights CV SRA agent failures, which are system problems that prevent the CV SRA agent from starting, installing, or operating properly, and often require troubleshooting to restore normal function.
Resolve the "pending services update" state
Provides instructions to resolve issues when an organization is stuck in a “Pending Services Update” state and restore it to Active.
Resolve the "pending creation" state
Provides instructions to fix situations where an organization is stuck in a “Pending Creation” state and activate it.
Resolve the "pending removal" state
Provides instructions to complete the deletion of an organization stuck in a “Pending Removal” state.