Cisco Cyber Vision New UI Administration Guide, Release 5.6.0

PDF

Cisco Cyber Vision New UI Administration Guide, Release 5.6.0

CV SRA access methods

Want to summarize with AI?

Log in

Describes the mechanisms available for accessing OT assets through CV SRA access methods, including both clientless and agent-based groups for secure and flexible remote access.


CV SRA access methods are categorized connection mechanisms that allow users to interact with OT assets, supporting various protocols and use cases for efficient remote asset control.

  • Two main groups: Group A (clientless) and Group B (agent-based).

  • Group A enables access through supported web browsers without local client installation.

  • Group B uses the SRA Plus App, a lightweight VPN client, for secure communications on Windows 10+ systems.

Types and characteristics of CV SRA access methods

CV SRA solutions provide two main groups of access methods, each supporting specific protocols and use cases to control remote assets efficiently.

  • Group A (Clientless): SSH, RDP, VNC, Web App, Telnet—access from a supported web browser for quick, browser-based access.

  • Group B (Agent-based): SRA Plus application—requires installation for advanced, secure communications.

Comparison of CV SRA access method groups:

Table 1. CV SRA access method groups comparison

Group

Approach

Methods

A

Clientless

SSH, RDP, VNC, Web App, Telnet

B

Agent-based

SRA Plus application (lightweight VPN client for secure channel on Windows 10+)


CV SRA access methods and their characteristics

The following table provides an overview of the supported CV SRA access methods.

Table 2. CV SRA access methods overview

Access method

Description

Key requirements

Security notes

SSH

Secure Shell Protocol for remote command-line administration. Lets users access, control, and modify remote servers over the internet.

Username and password or key authentication.

All communication is encrypted; secure alternative to Telnet.

RDP

Microsoft Remote Desktop Protocol provides remote display and input for Windows-based applications.

Username and password. If left blank, user prompted at login.

Encrypted session; prompts for credentials if fields are left blank.

VNC

Virtual Network Computing enables screen sharing and remote control across multiple operating systems (default port: 5900).

Password required; prompted if left blank.

Session is not encrypted by default; prompt for credentials increases security.

Web App

Application software accessed through a web browser over HTTP/HTTPS. Web servers handle client requests and serve content.

Network connection and browser.

Uses HTTP or HTTPS; HTTPS recommended for secure data exchange.

Telnet

Provides two-way text-based remote sessions using TCP/IP.

Port number must be specified; username/password not required.

Communication is unencrypted. Not recommended for sensitive operations.

SRA Plus

Application that allows remote access using IP-based protocols (TCP, UDP, or ICMP), enabling file transfers and secure channels.

SRA Plus App installed (Windows 10+).

Operates as a lightweight VPN client to create a secure communication channel.