Simplify Security with SAFE

This overview of Secure Architecture for Everyone (SAFE) will show you how to map security capabilities to threats.

Overview

Easy-to-use security reference architecture

Secure Architecture for Everyone (SAFE) can help you simplify your security strategy and deployment. This Cisco security reference architecture features easy-to-use visual icons that help you design a secure infrastructure for the edge, branch, data center, campus, cloud, and WAN. The framework encompasses operational domains such as management, security intelligence, compliance, segmentation, threat defense, and secure services.

SAFE solutions have been deployed, tested, and validated at Cisco and provide guidance, best practices, and configuration steps.

Why complicate your security network design? Keep it simple with SAFE.

The SAFE Key

The SAFE Key organizes security by using two core concepts: Places in the Network (PINs) and Secure Domains.

PINs reference examples of locations that are found in networks and the infrastructure needed to create them:

  • Data center
  • Branch
  • Campus
  • WAN
  • Internet edge
  • Cloud

Secure Domains are operational areas used to protect these locations. They are security concepts that traverse an entire network:

  • Management
  • Security intelligence
  • Compliance
  • Segmentation
  • Threat defense
  • Secure services

How SAFE works

This Interactive SAFE Poster shows you how the model works to protect your network.

The latest in thought leadership

The SAFE blog brings you best practices in network security architecture and design.

How to use SAFE

Cisco and our Partners can help you align your business and security priorities with a SAFE Workshop.

Security Guide Title Security Other Links Security Guide Type Security Products Included
SAFE Overview Guide (HTML) (PDF)   Architecture Guide, SAFE  
Cisco Zero Trust Architecture Guide (HTML) (PDF)   Architecture Guide, Zero Trust  
Zero Trust Frameworks Architecture Guide (HTML) (PDF)   Architecture Guide, Zero Trust  
Cisco Secure Access Service Edge (SASE) and Security Service Edge (SSE) Architecture Guide (HTML) (PDF)   Architecture Guide, SASE/SSE  
Cisco Telemetry Architecture Guide (HTML) (PDF)   Architecture Guide, XDR  
Trusted Internet Connections (TIC) 3.0 Architecture Guide (HTML) (PDF)   Architecture Guide, TIC  
SAFE Secure Branch Architecture Guide (HTML) (PDF)   Architecture Guide, Branch, SAFE  
SAFE Secure Campus Architecture Guide (HTML) (PDF)   Architecture Guide, Campus, SAFE  
SAFE Secure Cloud Architecture Guide (HTML) (PDF)   Architecture Guide, Cloud, Application Security, SAFE  
SAFE Secure Data Center Architecture Guide (HTML) (PDF)   Architecture Guide, Data Center, SAFE  
SAFE Secure Edge Architecture Guide (HTML) (PDF)   Architecture Guide, Edge, SAFE  
SAFE Secure Internet Architecture Guide (HTML) (PDF)   Architecture Guide, Internet, SAFE  
Cisco Zero Trust: User and Device Security Design Guide (HTML) (PDF)   Design Guide, Zero Trust Duo, Duo Network Gateway, Meraki, Umbrella, Secure Client, Secure Endpoint, SecureX, Orbital
Cisco Zero Trust: Network and Cloud Security Design Guide (HTML) (PDF)   Design Guide, Zero Trust, Secure Campus, Secure Branch Catalyst, Identity Services Engine, Secure Firewall, Secure Network Analytics, Telemety Broker
SAFE Certificate Management Design Guide (HTML) (PDF)   Operations, Design Guide, Management Identity Services Engine, pxGrid, Secure Firewall, Secure Network Analytics
Secure Data Center – Cisco ACI, Secure Firewall, and Secure ADC Design Guide (HTML) (PDF) Secure Data Center – Cisco ACI, Secure Firewall, and Secure ADC Design Guide (GitHub) Design Guide, Data Center ACI, Secure Firewall, Secure Application Delivery Controller, Radware
SAFE Secure Data Center Design Guide (PDF) SAFE Secure Data Center Design Guide (GitHub) Design Guide, Data Center ACI, Secure Firewall, Secure Workload, Secure Network Analytics, Secure Endpoint, Identity Services Engine, Platform Exchange Grid (pxGrid)
Cisco SASE with Cisco Secure Connect Design Guide (HTML) (PDF)   Design Guide, SASE/SSE Cisco Secure Connect, Meraki MX, Catalyst 8000 Edge Platform, Duo, ThousandEyes, SecureX
Cisco Secure Access Service Edge (SASE) with Viptela SD-WAN Design Guide (HTML) (PDF)   Design Guide, SASE/SSE Viptela SD-WAN, Umbrella, Duo, Secure Firewall, Secure Endpoint, Secure Malware Analytics, ThousandEyes, SecureX
Cisco Secure Access Service Edge (SASE) with Meraki SD-WAN Design Guide (HTML) (PDF)   Design Guide, SASE/SSE Meraki SD-WAN, Umbrella, Duo, Secure Firewall, Secure Endpoint, Secure Malware Analytics, ThousandEyes, SecureX
Umbrella Design Guide (PDF)   Design Guide, SASE/SSE Viptela SD-WAN, Umbrella, Duo, Secure Firewall, Secure Malware Analytics, SecureX
Cisco Breach Defense Design Guide (HTML) (PDF) Breach Defense Technologies v1 (dCloud) Design Guide, Breach Defense, Ransomware, XDR Umbrella, Secure Email Cloud Mailbox, Duo, Secure Endpoint, Secure Malware Analytics, Secure Network Analytics, SecureX, Talos
Securing Cloud-Native Applications - Azure Design Guide (HTML) (PDF) Securing Cloud-Native Applications - Azure Design Guide (GitHub) Design Guide, Cloud, Application Security, Azure Duo, Secure Cloud Analytics, Secure Workload, Radware Kubernetes Web Application Firewall (WAF)
Securing Cloud-Native Applications - AWS Design Guide (HTML) (PDF)

Securing Cloud-Native Applications - AWS Design Guide (GitHub)

Cisco Application-First Security (DevNet)

Design Guide, Cloud, Application Security, AWS Duo, Secure Cloud Analytics, Secure Workload, Radware Kubernetes Web Application Firewall (WAF)
Secure Remote Worker On-Prem Design Guide (HTML) (PDF)   Design Guide, Secure Remote Worker, Secure Hybrid Worker Secure Firewall, Secure Client, Duo, Umbrella, Secure Endpoint
Secure Remote Worker for AWS Design Guide (PDF)   Design Guide, Secure Remote Worker, Secure Hybrid Worker, AWS Secure Firewall, Secure Client, Duo, Umbrella, Secure Endpoint
Secure Remote Worker for Azure Design Guide (PDF)   Design Guide, Secure Remote Worker, Secure Hybrid Worker, Azure Secure Firewall, Secure Client, Duo, Umbrella, Secure Endpoint
Secure Remote Worker Design Guide (PDF)   Design Guide, Secure Remote Worker, Secure Hybrid Worker Secure Firewall, Secure Client, Duo, Umbrella, Secure Endpoint
Trusted Internet Connections (TIC) 3.0 Design Guide (PDF)   Design Guide, TIC Viptela SD-WAN, Secure Firewall, Secure Client, Duo, Secure Endpoint, Secure Malware Analytics, Cloudlock
Trusted Internet Connections (TIC) 3.0 Design Guide - Cisco Overlay Guidance (PDF)   Design Guide, TIC  
Secure Cloud for AWS (IaaS) Design Guide (PDF)   Design Guide, Cloud, IaaS, AWS Secure Workload, Secure Cloud Analytics, Umbrella, Secure Firewall, Radware Cloud Web Application Firewall (WAF), Duo, SecureX
Secure Cloud for Azure (IaaS) Design Guide (PDF)   Design Guide, Cloud, IaaS, Azure Secure Workload, Secure Cloud Analytics, Umbrella, Secure Firewall, Radware Cloud Web Application Firewall (WAF), Duo, SecureX
Secure Cloud for GCP (IaaS) Design Guide (HTML) (PDF) Secure Cloud for GCP (IaaS) Design Guide (GitHub) Design Guide, Cloud, GCP, IaaS Secure Workload, Secure Cloud Analytics, Duo, SecureX
  SAFE Security Architecture Toolkit for Powerpoint SAFE, Toolkit  
  SAFE Security Architecture Toolkit for Visio SAFE, Toolkit  
SAFE Security Architecture Toolkit for Lucidchart (HTML) (PDF)   SAFE, Toolkit  
Cisco SAFE Icon Library (HTML) (PDF)   SAFE, Toolkit  

Sorry, no results matched your search criteria(s). Please try again.