Operation Simplicity​

Workload Enforcement in Azure Connectors

This feature introduces the ability to monitor user login events within the Microsoft Entra ID (formerly Azure Active Directory) domain. A new configuration option enables sign-in logs during the setup of an Identity Connector for Microsoft Entra ID. By activating this feature, users benefit from the improved accuracy of user identity details in the inventory from the near real-time ingestion of IP address-to-user mappings.

This enhancement streamlines workflows with precise and timely user identity data, enabling more effective monitoring and troubleshooting of login activities.

For more information, see Microsoft Entra ID Connector.

User Identity Reporting for Windows Workloads

This feature enables the software agents to report logged-in user details for Windows workloads, providing clusters with accurate IP address-to-user mappings. Administrators can activate this feature through Report Users in the Agent Configuration Profile setting. After installing the agent on an Active Directory (AD) server and configuring the CswAgent service to run under a domain administrator Service Logon Account, it will report IP address-to-user mappings for all machines that have joined the domain even if the agent is not installed on those specific machines.

This capability enhances visibility into user activity across the network, streamlining workflows for monitoring, troubleshooting, and ensuring compliance.

For more information, see Agent Config Profile.

Azure One-Click Setup for Connector Onboarding

Azure One-Click is a helper script that is designed to simplify the setup of required applications and roles for connector onboarding. The script can be executed interactively or run using default values. For more information, see https://github.com/CiscoDevNet/secure-workload-connectors/tree/main/azure/iam.

Backup and Restore Network Security Groups (NSG) using the Azure Connector

Azure connector now includes the capability to back up the security groups in Azure that are affected during segmentation. Backup of security groups happen automatically when the segmentation button is enabled. You can restore them after the segmentation button is disabled. Also only the network security groups that are modified by Cisco Secure Workload will be restored to their original state when segmentation was enabled for that virtual network.

Selective Workload Enforcement with Azure Connectors

Azure connectors now provide the capability to selectively enforce specific workloads or a group of workloads instead of the entire virtual network. To select workloads, users must configure a config intent with the intended profile and inventory filter in the cloud workloads page. This filter defines the workloads for which Secure Workload will manage or apply the network security groups. To ensure selective policy enforcement:

• Enable the segmentation option for all virtual networks containing the workloads.

• Define the corresponding intents in the cloud workloads page.

• Disable segmentation at the VNet level that will deactivate all segmentation, regardless of the defined configuration intents.

During upgrade, any Azure connectors with VNet with enforcement enabled will automatically be migrated to the new workflow by the creation of a VPC-wide inventory filter and agentless config intent that runs on enforcement for the vPC. Therefore, after migration, enforcement will continue to be configured for the VPCs as before.

For more information, see Selective Workload Enforcement using the Azure Connector.

Enhanced User Experience

Japanese Localization for Cisco Secure Workload UI

The Cisco Secure Workload application now supports Japanese localization, improving accessibility for Japanese users. When a browser's default language is set to Japanese, the web UI and context-sensitive help are automatically displayed in Japanese.

AI Engine for Policy Optimization

The AI engine in Secure Workload now introduces automated scanning of flows within primary workspaces to generate policy suggestions. This feature addresses the challenge of maintaining up-to-date workload policies:

• Proactively identifies gaps by continuously analyzing flows to detect potential gaps or areas for improvement in segmentation policies, ensuring alignment with security best practices.

• By automating the policy suggestion process, users can save significant time and effort that would otherwise be spent on manual reviews and updates.

• The AI engine enhances a security posture that ensures workload policies remain current, reducing vulnerabilities and improving the overall security framework.

For more information, see AI Policy Statistics.