About the dynamic attributes connector
The dynamic attributes connector enables your access control policy to adapt in real time to the changes in public and private cloud workloads and business-critical software-as-a-service (SaaS) applications. It simplifies policy management by keeping rules up to date without tedious manual updates and policy deployment. Customers require policy rules to be defined based on non-network constructs such as VM name or security group, so that firewall policy is persistent even when the IP address or VLAN changes.
Supported Connectors
|
CSDAC version |
AWS |
AWS Security Groups |
AWS Service Tags |
Azure |
Azure Service Tags |
Cisco APIC |
Cisco Cyber Vision |
Cisco Multicl. Defense |
Generic text |
GitHub |
Google Cloud |
Microsoft Office 365 |
Tenable |
vCenter |
Webex |
Zoom |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Version 1.1 (on-premises) |
Yes |
No |
No |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
Yes |
No |
Yes |
No |
No |
|
Version 2.0 (on-premises) |
Yes |
No |
No |
Yes |
Yes |
No |
No |
No |
No |
No |
Yes |
Yes |
No |
Yes |
No |
No |
|
Version 2.2 (on-premises) |
Yes |
No |
No |
Yes |
Yes |
No |
No |
No |
No |
Yes |
Yes |
Yes |
No |
Yes |
No |
No |
|
Version 2.3 (on-premises) |
Yes |
No |
No |
Yes |
Yes |
No |
No |
No |
No |
Yes |
Yes |
Yes |
No |
Yes |
Yes |
Yes |
|
Version 3.0 (on-premises) |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
No |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
Yes |
Yes |
|
Version 3.1 (on-premises) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
Yes |
Yes |
|
Cloud-delivered (Security Cloud Control) |
Yes |
No |
No |
Yes |
Yes |
No |
No |
Yes |
No |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
|
Secure Firewall Management Center 7.4.1 |
Yes |
No |
No |
Yes |
Yes |
No |
No |
No |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
Yes |
Yes |
|
Secure Firewall Management Center 7.6 |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
No |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
Yes |
Yes |
|
Secure Firewall Management Center 7.7 |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
No |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
Yes |
Yes |
How Cisco secure dynamic attributes connector works
This topic discusses the architecture of the dynamic attributes connector.
The system functions by querying cloud services and providing attribute information to the secure management center.
Summary
The key components involved in this process are:
-
The system supports certain public cloud providers.
This topic discusses supported connectors (which are the connections to those providers).
-
The dynamic attributes connector is provided with Secure Firewall Management Center.
Workflow
These stages describe how the Cisco Secure Dynamic Attributes Connector processes cloud service information:
- Connectors contain the tags and containers to query. For example, typically these tags define dynamically allocated network and IP addresses for which you cannot create access control rules. Persisted feeds from the connectors are stored on the dynamic attributes connector for fast access.
- Tag information is persisted on the dynamic attributes connector where you create dynamic attributes filters that define which information is important to use in access control rules. For example, if AWS defines networks for the Accounting and Finance Departments virtual machines, you can create a dynamic attributes filter that specifies only the Finance network.
- The Secure Firewall Management Center receives those dynamic attributes filters as dynamic objects and enables you to use them in access control rules.
What’s next
Related topics
to create a new one.


)
)
to close the panel.

)

in the filters column (
to add, edit, or delete filters.

)



to copy the token to the clipboard.


).









)

Feedback