Cisco Defense Orchestrator

Effective security management made simple

Staying on top of security is easier than ever. Cisco Defense Orchestrator helps you consistently manage policies across your Cisco security products. It is a cloud-based application that cuts through complexity to save time and keep your organization protected against the latest threats.

New from Cisco Security

Did you miss our Virtual Security Summit? Check out the replay, where we announce some major news.

Why choose Cisco Defense Orchestrator?

Simplify management

Streamline security policy and device management across your extended network.

Improve efficiency

Reduce time spent on repetitive security management tasks by up to 90 percent.

Strengthen your security

Achieve better, more consistent security without adding complexity.

Announcement: Cisco Defense Orchestrator now offers support for ASA, FTD and Meraki MX.

Key features

One security policy

Write a policy once and enforce it consistently across multiple security devices throughout your extended network. Compare, filter, edit, and create new policies, all from a centralized console.

Resolve security policy issues

Analyze your existing policies and objects across security devices to identify errors and inconsistencies. Improve your security posture and device performance by being able to easily correct them.

Faster device deployments

Deploy new devices faster by creating standard policy templates that give you consistent, effective protection across your Cisco environment. As you grow, new deployments automatically inherit the updated policies.

Easy firewall software upgrades

Speed access to security patches and new features with software image upgrades that can be completed with just a few clicks. Complete upgrades in real time or schedule them at your convenience.

Smarter configuration management

Every change made over time is continuously documented and viewable in the change log. Roll back to a last known good configuration at any time.

Cisco Defense Orchestrator customers

Community college saves time, strengthens security

"Cisco Defense Orchestrator makes firewall builds, management, visibility, and auditing infinitely easier. Things that take 10 minutes in CDO take a day or more without it."

-Mike Muzinich, Senior IT Network Administrator, Los Rios Community College District

Construction firm simplifies security management (PDF)

"Cisco Defense Orchestrator was able to automate the process of identifying any duplicate, unused, or inconsistent objects, and made it very easy to combine and remove objects. This saved us days of manual, frustrating work."

-Chris Ryan, Network Manager, Shawmut Design and Construction

Scott Bower joins us to show CDO's expanded management functionality now supporting Firepower and Meraki devices, in addition to ASA for policies, objects, and migration tasks.


Cisco's flexible new Security Choice Enterprise Agreement provides security with more simplicity, greater value, faster responses, and predictable billing.

For partners

Are you a Cisco partner?  Log in to see additional resources.

Looking for a solution from a Cisco partner? Connect with our partner ecosystem.