Get Started with prerequisites and network requirements for pre-defined deployment types. The table of network requirements contain recommneded componnsntes, ports and protocols, sources, and destinations.
You must create a Secure Access Organization. Follow the guide here for more information. Once you have created an organization, re recommend the following immediate steps:
Create a Secure Access Organization
Follow the guide to create a new Secure Access Organization.
View Organization Details
In the Security Cloud Control platform menu, select your organization from the organization picker list. In the organization menu, select to view this information:
-
Organization name.
-
Organization ID.
-
Cloud Region.
Claim a subscription
An administrator uses a claim code to claim the subscription for the organization. For more information, see Determine Your Current Package. If you encounter a feature here that you do not have access to, contact your sales representative for more information about your current package. For more information, see Cisco Secure Access Packages and Claim a Subscription.
Manage Registered Networks
A Registered Network resource represents a single public static or dynamic IP address, or a range of IP addresses. Cisco Secure Access supports both IPv4 and IPv6 for static IP addresses and only IPv4 for dynamic IP addresses. In Secure Access, all traffic originating from the public IP space is identified as coming from that network. The public IP space or IP range defines the scope of the network resource.
A Registered Network resource represents a single public static or dynamic IP address, or a range of IP addresses. Cisco Secure Access supports both IPv4 and IPv6 for static IP addresses and only IPv4 for dynamic IP addresses. In Secure Access, all traffic originating from the public IP space is identified as coming from that network. The public IP space or IP range defines the scope of the network resource.
Point DNS to Cisco Secure Access
Configure your DNS to direct traffic from your network to the Cisco Secure Access global network. When a request to resolve a hostname on the internet is made from a network pointed at our DNS addresses, Secure Access applies the security settings configured in your policy rules. To have Secure Access protect your networks, you need to explicitly change the DNS settings in your operating system or hardware firewall or router to Secure Access's name server IP addresses and turn off the automatic DNS servers provided by your ISP. Secure Access supports both IPv4 and IPv6 addresses. For more information, refer to Point DNS to Secure Access and Configure Windows server to Secure Access DNS. Make sure Cisco Secure Access Root Certificate is installed.
Validate DNS Protection
Use Secure Access reports to monitor usage, identify blocked requests and sources, and track trends to improve threat detection and response. For more information on different types of reporting refer to Available Reports.
Getting Started
Review how to get started with onboarding a device to Secure Access with the intent of focusing on DNS.
Prerequisites and Network Requirements
Review the required networking, port, and service configurations or settings. These must be commuted prior to onboarding your device to a Secure access organization.