Cisco Cyber Vision New UI Administration Guide, Release 5.6.0

PDF

Cisco Cyber Vision New UI Administration Guide, Release 5.6.0

CV SRA

Updated: September 8, 2026

Want to summarize with AI?

Log in

Introduces Cyber Vision Secure Remote Access (CV SRA), which provides secure remote connectivity to OT assets using ZTNA gateway functionality embedded in Cisco industrial switches and routers.

CV SRA provides secure, scalable remote access to operational technology (OT) assets by embedding Zero Trust Network Access (ZTNA) gateway functionality directly into Cisco industrial switches and routers, enabling centralized management, strict authentication, and flexible access methods.

  • Embeds ZTNA gateway functionality directly into Cisco industrial switches and routers.

  • Enables centralized management and strict authentication through a cloud portal trust broker.

  • Offers flexible access methods, including clientless and agent-based ZTNA for differing operational needs.

    Figure 1. CV SRA operations
    CV SRA operations in industrial network

Key features and capabilities of CV SRA

CV SRA simplifies remote access deployment, eliminates dedicated hardware, and removes the need for complex firewall rules. It centralizes management and enforces zero trust security using a cloud portal as a ZTNA trust broker. Access is strictly authenticated and adaptively granted based on identity, context, and time, with assets hidden from discovery and IP addresses never exposed in the iDMZ.

Key CV SRA features include:

  • Simplified Deployment: Remote access is enabled as a software feature on existing Cisco industrial equipment.

  • Elimination of Hardware: No need for dedicated point hardware solutions.

  • No Complex Firewalls: Removes the need for complex iDMZ firewall rules.

  • Strict Authentication: Remote personnel must authenticate through the cloud portal before access is allowed.

  • Adaptive Trust: Access is granted based on identity, context, and time, ensuring a default deny posture.

  • Enhanced Protection: Assets are hidden from discovery, lateral movement is prevented, and IP addresses are not exposed in the IDMZ.

For example, operations teams can use CV SRA to configure equipment such as traffic signal controllers, in-vehicle dispatch systems, cameras, and other systems deployed in the field and connected using Cisco industrial routers.

CV SRA Plus

CV SRA Plus is a premium advanced tier designed for users who need capabilities beyond a standard browser window, such as running engineering software or transferring large files.

  • Requires installation of a lightweight client application on the user's computer (currently Windows supported).

  • Establishes a direct, secure data tunnel similar to a specialized, granular VPN.

  • Enables use of native engineering tools and applications as if directly connected to the remote machine.

Key features of CV SRA Plus

CV SRA Plus offers deeper flexibility for equipment that requires more than a simple browser session.

  • Lightweight Client: Requires a small application to be installed on the user's computer (currently Windows supported).

  • Secure Tunneling: Creates a direct, secure data tunnel that acts like a specialized, granular VPN.

  • Native Application Support: Operates at the network layer, allowing use of native engineering tools and diagnostic apps as if directly connected to the machine.