Cisco Secure Access Help

PDF

Cisco Secure Access Help

About this content

Provides instructions on how to configure and manage Cisco Secure Access for secure connectivity, identity-based access, and threat protection. It covers onboarding, platform administration, policy and security controls, monitoring, reporting, integrations, and troubleshooting.


Introduction to Secure Access

Provides an overview of Introduction to Secure Access, including Welcome to Cisco Secure Access, Sign into Secure Access with Security Cloud Sign On, and Find Your Organization ID. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Secure Access Dashboards

Provides an overview of Secure Access Dashboards, including Secure Access Overview Dashboard, Service Analytics Dashboard, and Security Insights Dashboard. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Cisco Assistant for Secure Access

Provides an overview of Cisco Assistant for Secure Access, including Get Started with the Cisco Assistant, Add Rules with the Cisco Assistant, and Find Documented Answers with the Cisco Assistant. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Regions

Provides an overview of Regions in Cisco Secure Access, including Secure Access Regions. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Network Requirements

Provides an overview of Network Requirements in Cisco Secure Access, including Network Requirements for Secure Access, DNS requirements, and Secure Client requirements. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Secure Access Onboarding

Provides an overview of Secure Access Onboarding, including Get Started, Secure Access Onboarding Workflow, and Hybrid Private Access Workflow. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Basic Network Setup

Provides an overview of Basic Network Setup in Cisco Secure Access, including FQDNs for Network Connections, Manage Registered Networks, and Clear Your DNS Cache. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Accounts

Provides an overview of Accounts in Cisco Secure Access, including Accounts Overview and Hide Sources with De-identification. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Network Infrastructure

Provides an overview of Network Infrastructure in Cisco Secure Access, including Manage Network Devices, Secure Access NAT as a Service, and Network Connections. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Network Tunnels by Device

Provides an overview of Network Tunnels by Device in Cisco Secure Access, including Best Practices for Configuring Network Tunnels by Device, Configure Tunnels with Cisco Catalyst SD-WAN, and Configure Automatic Tunnels with Catalyst SD-WAN. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

DNS and DDNS Servers

Provides an overview of DNS and DDNS Servers in Cisco Secure Access, including Manage DNS and DDNS Servers, Manage DNS Servers, and Map DNS Servers to Regions. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Resource Connectors and Connector Groups

Provides an overview of Resource Connectors and Connector Groups in Cisco Secure Access, including Manage Resource Connectors and Connector Groups and Maintain and Monitor Resource Connectors and Connector Groups. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Roaming Devices

Provides an overview of Roaming Devices in Cisco Secure Access, including Manage Roaming Devices, View Internet Security Settings for Roaming Devices, and Edit Internet Security Settings for Roaming Devices. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Private Resources

Provides an overview of Private Resources in Cisco Secure Access, including Manage Private Resources. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Connections to Private Destinations

Provides an overview of Connections to Private Destinations in Cisco Secure Access, including Manage Connections to Private Destinations, Manage Branch Connections, and Allow SSH and RDP Access to Private Resources. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Network and Service Objects

Provides an overview of Network and Service Objects in Cisco Secure Access, including Get Started with Network and Service Objects, Manage Network Objects and Groups, and Manage Service Objects and Groups. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Manage API Keys

Provides an overview of Manage API Keys in Cisco Secure Access, including Manage API Keys, About Secure Access API Keys, and About Key Admin API Keys. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Users, Groups, and Endpoint Devices

Provides an overview of Users, Groups, and Endpoint Devices in Cisco Secure Access, including Manage Users, Groups, and Endpoint Devices, Unenroll Devices for Client-Based Zero Trust Access, and Disconnect Remote Access VPN Sessions. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

User Directories and Device Management

Provides an overview of User Directories and Device Management in Cisco Secure Access, including Manage User Directories and Device Management, Configure User Directory Integrations, and Manage Cloud Identity Providers. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Advanced User Configuration Settings

Provides an overview of Advanced User Configuration Settings in Cisco Secure Access, including Manage Advanced Configuration Settings, Manage IP Surrogates for User Authentication, and Manage Behaviour Analytics Configuration. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Identity Providers

Provides an overview of Identity Providers in Cisco Secure Access, including Configure Identity Providers, Provision Users and Groups from Duo, and Provision Users and Groups from Okta. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Provision Users, Groups, and Endpoint Devices from Active Directory

Provides an overview of Provision Users, Groups, and Endpoint Devices from Active Directory in Cisco Secure Access, including Provision Users, Groups, and Endpoint Devices from Active Directory, Manage AD Connectors, and Edit AD Authentication Properties. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

User Authentication Profiles

Provides an overview of User Authentication Profiles in Cisco Secure Access, including Manage User Authentication Profiles, About Single Sign-On for Users, and Edit an SSO Authentication Profile. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Integrations with Open ID Connect Identity Providers

Provides an overview of Integrations with Open ID Connect Identity Providers in Cisco Secure Access, including Configure Integrations with OIDC Identity Providers, Configure Duo for OpenID Connect, and Configure Okta for OpenID Connect. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Integrations with SAML Identity Providers

Provides an overview of Integrations with SAML Identity Providers in Cisco Secure Access, including Configure Integrations with SAML Identity Providers, Configure Microsoft Entra ID for SAML, and Configure Okta for SAML. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Access Policies

Provides an overview of Access Policies in Cisco Secure Access, including Manage the Access Policy, Manage Global Settings for Access Rules, and Rule Defaults: Default Settings for Access Rules. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Internet Access Rules

Provides an overview of Internet Access Rules in Cisco Secure Access, including Get Started With Internet Access Rules, Add an Internet Access Rule, and Geolocation Sources and Internet Rules. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Internet and SaaS Resources

Provides an overview of Internet and SaaS Resources in Cisco Secure Access, including Manage Internet and SaaS Resources, Manage Destination Lists, and Manage Application Lists. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Private Access Rules

Provides an overview of Private Access Rules in Cisco Secure Access, including Get Started With Private Access Rules, Add a Private Access Rule, and Geolocation Sources and Private Rules. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

IPS Profiles

Provides an overview of IPS Profiles in Cisco Secure Access, including Manage IPS Profiles. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Security Profiles

Provides an overview of Security Profiles in Cisco Secure Access, including Manage Security Profiles, Security Profiles for Internet Access, and Enable SafeSearch. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

App Risk Profiles

Provides an overview of App Risk Profiles in Cisco Secure Access, including Manage App Risk Profiles. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Threat Categories

Provides an overview of Threat Categories in Cisco Secure Access, including Manage Threat Categories. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Traffic Decryption

Provides an overview of Traffic Decryption in Cisco Secure Access, including Manage Traffic Decryption. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Schedules for Access Rules

Provides an overview of Schedules for Access Rules in Cisco Secure Access, including Manage Schedules. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Virtual Private Networks and Proxy Settings

Provides an overview of Virtual Private Networks and Proxy Settings in Cisco Secure Access, including Manage Virtual Private Networks, Manage Machine Tunnels, and Manage Application-Based Remote Access VPN (Per App VPN). It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Zero Trust Access

Provides an overview of Zero Trust Access in Cisco Secure Access, including Manage Client-Based Zero Trust Access in Secure Access, Traffic Steering for Zero Trust Access Client-Based Connections, and Manage User Trust Profile Zero Trust Access. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Endpoint Security

Provides an overview of Endpoint Security in Cisco Secure Access, including Manage Endpoint Security. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Virtual Appliances

Provides an overview of Virtual Appliances in Cisco Secure Access, including Get Started with Virtual Appliances, Manage VAs in Secure Access, and Deploy Virtual Appliances. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

File Inspection and Analysis

Provides an overview of File Inspection and Analysis in Cisco Secure Access, including Manage File Inspection and File Analysis, Enable File Inspection, and Enable File Analysis by Cisco Secure Malware Analytics. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

File Type Controls

Provides an overview of File Type Controls in Cisco Secure Access, including Manage File Type Controls and Enable File Type Controls. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Notification Pages

Provides an overview of Notification Pages in Cisco Secure Access, including Manage Notification Pages. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Data Loss Prevention

Provides an overview of Data Loss Prevention in Cisco Secure Access, including Manage the Data Loss Prevention Policy and Add a Real Time Rule to the Data Loss Prevention Policy. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Data Classifications

Provides an overview of Data Classifications in Cisco Secure Access, including Manage Data Classifications, Create a Data Classification, and Copy and Customize a Built-In Data Classification. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Built-in Data Identifiers

Provides an overview of Built-in Data Identifiers in Cisco Secure Access, including Built-in Data Identifiers. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

AI Guardrails Data Classifications

Provides an overview of AI Guardrails Data Classifications in Cisco Secure Access, including AI Guardrails Data Classifications. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Secure ICAP

Provides an overview of Secure ICAP in Cisco Secure Access, including Manage Secure ICAP. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Requirements for Salesforce Tenants

Provides an overview of Requirements for Salesforce Tenants in Cisco Secure Access, including Requirements for Salesforce Tenants for Cloud Malware and SaaS API DLP. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

SaaS API Data Loss Prevention

Provides an overview of SaaS API Data Loss Prevention in Cisco Secure Access, including Manage SaaS API Data Loss Prevention and Enable SaaS API Data Loss Prevention for AWS Tenants. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Cloud Malware Protection

Provides an overview of Cloud Malware Protection in Cisco Secure Access, including Manage Cloud Malware Protection, Cloud Access Security Broker Protection for Google Drive and Microsoft 365, and Enable Cloud Malware Protection. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Remote Browser Isolation

Provides an overview of Remote Browser Isolation in Cisco Secure Access, including Get Started with Remote Browser Isolation, Manage Remote Browser Isolation Profiles, and Remote Browser Isolation Advanced Isolation Controls Reference. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Internet Security

Provides an overview of Internet Security in Cisco Secure Access, including Manage Internet Security. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

PAC Files

Provides an overview of PAC Files in Cisco Secure Access, including Manage PAC Files. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Certificates

Provides an overview of Certificates in Cisco Secure Access, including Manage Certificates, Certificates for Internet Decryption, and Manage Certificates for Private Resource Decryption. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Secure Access Investigate

Provides an overview of Secure Access Investigate, including Manage Secure Access Investigate, About the Investigate Domain Summary, and About WHOIS Record Information. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Client-based Zero Trust Access from Mobile Devices

Provides an overview of Client-based Zero Trust Access from Mobile Devices in Cisco Secure Access, including Get Started and Manage Client-based Zero Trust Access from Mobile Devices. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Cisco Secure Client on Windows, macOS, and Linux Devices

Provides an overview of Cisco Secure Client on Windows, macOS, and Linux Devices in Cisco Secure Access, including Get Started with Cisco Secure Client on Windows, macOS, and Linux Devices, Prerequisites, and Download Cisco Secure Client. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Zero Trust Access using Cisco Secure Client

Provides an overview of Zero Trust Access using Cisco Secure Client in Cisco Secure Access, including Manage Zero Trust Access using Cisco Secure Client. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Endpoint Data Loss Prevention using Ciso Secure Client

Provides an overview of Endpoint Data Loss Prevention using Ciso Secure Client in Cisco Secure Access, including Manage Endpoint Data Loss Prevention using Cisco Secure Client and Troubleshoot Endpoint Data Loss Prevention. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Virtual Private Networks on Cisco Secure Client

Provides an overview of Virtual Private Networks on Cisco Secure Client in Cisco Secure Access, including Manage Virtual Private Networks on Cisco Secure Client. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Internet Security on Cisco Secure Client

Provides an overview of Internet Security on Cisco Secure Client in Cisco Secure Access, including Manage Internet Security on Cisco Secure Client, Interpret Internet Security Diagnostics, and DNS Protection Status. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Endpoint Diagnostic Tool

Provides an overview of Endpoint Diagnostic Tool in Cisco Secure Access, including Client Endpoint Diagnostic Tool. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Managed iOS

Provides an overview of Managed iOS in Cisco Secure Access, including Cisco Security Connector: Secure Access Setup Guide, Meraki Registration, and Register an iOS Device Through Apple Configurator 2. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Managed Android

Provides an overview of Managed Android in Cisco Secure Access, including Secure Access Module for Cisco Secure Client (Android OS), Deploy the Android Client, and Manage Identities. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Unmanaged Mobile Devices

Provides an overview of Unmanaged Mobile Devices in Cisco Secure Access, including Unmanaged Mobile Device Protection. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Experience Insights

Provides an overview of Experience Insights in Cisco Secure Access, including About Experience Insights, Onboard Experience Insights, and Cisco AI Assistant for Experience Insights. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Logging

Provides an overview of Logging in Cisco Secure Access, including Manage Logging and Log Formats and Versioning. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Monitor with Alert Rules

Provides an overview of Monitor with Alert Rules in Cisco Secure Access, including Monitor Secure Access with Alert Rules. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Monitor with Reports

Provides an overview of Monitor with Reports in Cisco Secure Access, including Monitor Secure Access with Reports, Report Scheduling, and Report Search Window and Retention. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Activity Reports

Provides an overview of Activity Reports in Cisco Secure Access, including Activity Search Report, Security Activity Report, and Activity Volume Report. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Admin Audit Log Report

Provides an overview of Admin Audit Log Report in Cisco Secure Access, including Admin Audit Log Report. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

AI Related Reports

Provides an overview of AI Related Reports in Cisco Secure Access, including AI Supply Chain Report and AI Semantic Inspection Report. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

App Related Reports

Provides an overview of App Related Reports in Cisco Secure Access, including App Discovery Report and Third-Party Apps Report. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Cloud Malware Report

Provides an overview of Cloud Malware Report in Cisco Secure Access, including Cloud Malware Report. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Data Loss Prevention Report

Provides an overview of Data Loss Prevention Report in Cisco Secure Access, including Data Loss Prevention Report. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Data Security Posture Management Report

Provides an overview of Data Security Posture Management Report in Cisco Secure Access. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Events Report

Provides an overview of Events Report in Cisco Secure Access, including Events Report. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Network Connectivity Log

Provides an overview of Network Connectivity Log in Cisco Secure Access, including Network Connectivity Log. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Network Tunnel Group Usage Report

Provides an overview of Network Tunnel Group Usage Report in Cisco Secure Access, including Network Tunnel Group Usage. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Remote Access Log Report

Provides an overview of Remote Access Log Report in Cisco Secure Access, including About the Remote Access Log Report. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Top Categories Report

Provides an overview of Top Categories Report in Cisco Secure Access, including Top Categories Report. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Top Destinations Report

Provides an overview of Top Destinations Report in Cisco Secure Access, including Top Destinations Report. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Total Requests Report

Provides an overview of Total Requests Report in Cisco Secure Access, including Total Requests Report. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Secure Access Integrations

Provides an overview of Secure Access Integrations, including Manage Third-Party Integrations, Chrome Enterprise Browser, and Microsoft Intune Third-Party Integration. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Cisco Security for Chromebook Client

Provides an overview of Cisco Security for Chromebook Client in Cisco Secure Access, including About Cisco Security for Chromebooks, Integrate the Google Workspace Identity Service, and Deploy the Cisco Security for Chromebooks Client. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.