Security Cloud Control Data Sheet

 

Organizations face a critical challenge today: Attackers are exploiting the weakest links in their networks, such as unsecured users, devices, and workloads. This threat landscape is complicated by the shift from traditional data centers to a distributed environment, where protecting dispersed data across multiple touchpoints becomes complex.

To address these threats, many organizations resort to using multiple security tools, leading to siloed teams, tech stacks, and management systems that hinder effective security. This fragmented approach results in unnecessary costs, longer deployment times, inconsistent security, and critical gaps.

Without a centralized platform, gaining a holistic view of security is challenging. Manual identification of misconfigurations is error-prone and can lead to breaches. There is a lack of skills, time, and resources to fully utilize security features and maximize ROI. Resolving access or policy issues is lengthy due to diverse security products. Admins spend excessive time crafting similar policies across different platforms. Operational issues are often addressed reactively, leading to downtime and suboptimal performance. Non-actionable alerts and overwhelming data cause analysis paralysis and hinder decision-making, with a missing sense of urgency.

A unified security platform aims to alleviate these issues by providing a comprehensive view of the security landscape, enabling consistent policy enforcement, simplifying troubleshooting, and offering actionable insights with the help of AI.

To meet the unique needs of various organizations and support diverse network firewall configurations, the focus is on three core objectives: simplifying operations, enhancing security, and improving clarity. We aim to streamline security management processes, strengthen defenses with advanced Zero Trust and vulnerability protection, and offer clear, actionable insights through AI-driven intelligence.

Security Cloud control design principles - simple, efficient, and effective management.

Security Cloud Control

Security Cloud Control is a new, AI-native management solution to unify the security cloud, proactively surface actionable insights and automate resolution across hybrid environments. It is a modern micro-app architecture with consistent UI experience, common services, and a data bus that connects the configuration, logs, and alerts across the security cloud. AI is baked in from the start, going beyond AI assistants to proactively optimize policy, configuration, and to find and troubleshoot issues. It is designed to help teams get the most of out their Cisco Security investment—saving time and benefiting from simpler and streamlined policies.

Security Cloud Control allows you to manage security policies and device configurations with ease across multiple Cisco and cloud-native security platforms.

Security Cloud Control centrally manages elements of policy and configuration across:

●      Cisco Multicloud Defense

●      Cisco Secure Firewall ASA, both on-premises and virtual

●      Cisco Secure Firewall Threat Defense (FTD), both on-premises and virtual

●      Cisco Meraki^™ MX

●      Cisco IOS devices

●      AWS security groups

Security Cloud Control also incorporates the cloud-delivered version of Firewall Management Center (FMC), providing a fully unified experience between on-premises and cloud-based firewall management. This expands management of policy and configuration to Cisco Secure Firewall Threat Defense (FTD), both on-premises and virtual.

Unified Dashboard - A Comprehensive view of firewall and security services

Setup is easy, fast, and frictionless, allowing customers to onboard and start managing hundreds of devices within hours. The intuitive user interface and focus on simplicity means that training requirements are minimal, with a learning curve measured in hours rather than days.

Flexibility and scale are attributes of our open API as well as being a cloud technology. Because it’s a cloud-based solution, Security Cloud Control does not require capital expenditures, rack space, or manual patching and upgrading, dramatically reducing your operational costs.

It doesn’t matter whether your organization has 5 or 5000 security devices. Security Cloud Control provides network operations teams with the ability to reduce time spent managing and maintaining security devices, enabling them to focus on what is most important to your core mission.

We are further simplifying the operations for our admins with the Firewall AI Assistant. It revolutionizes network security by tackling the complexity of firewall rule management.

Unified dashboard that enables our customers to gain a real-time, holistic perspective of their entire network and cloud security ecosystem. Customers can efficiently manage tens of thousands of security devices, coordinating multiple tenants under a centralized global administrator.

The level of visibility and management from Security Cloud Control helps on delivering the outcomes. From taking intent-based policies in one place and translating them throughout all the control points in your network to streamlining, troubleshooting and recommending policies that span multiple solutions, Cisco Security Cloud Control helps with it all.

Predictive insights with AIOps

Security Cloud Control benefits

Security Cloud Control simplifies network security management through centralized visibility, streamlined policy deployment, and real-time monitoring. It enhances operational efficiency by harmonizing security policies across multiple devices, ensuring consistent protection and rapid response to threats.

●      Simplify management: Streamline security policy and device management across your extended network.

●      Critical Security Insights: Our unified dashboard brings to light crucial security gaps in your network. It identifies misconfigured policies that could lead to breaches and provides actionable steps to fix them. It detects risky applications and URLs, ensuring you're utilizing all the security features you've purchased. It highlights vulnerable assets that need protection and logs all administrative changes across different products in one centralized location. Additionally, it prioritizes critical alerts to ensure they are addressed as top insights.

●      Proactive, Not Reactive: Traditionally, we've flooded you with alerts, leaving you to figure out how to mitigate issues. Now, we're shifting to a proactive approach. Using AI, we predict when your system might hit its max capacity, identify the apps causing problems, and offer solutions to avoid downtime.

●      Simplified Operations with AI: AI Assistant helps you understand policies and detect anomalies in your deployment. It can identify problematic rules, suggest necessary actions, and even write rules for you. This ensures consistent policy enforcement across your network.

●      Write Once, Apply Everywhere: You only need to create network objects (like malicious IPs or URLs) once. These can be shared across different security products, ensuring comprehensive protection across your entire network.

Consistent Policy Enforcement - Sharing Network Objects across on-prem and Cloud environments

Security Cloud Control features

Security Cloud Control strengthens your security posture by aligning policies throughout your organization. Our solution addresses the challenge of staying on top of your policies when adding security tools. This is especially helpful for organizations with geographically dispersed locations as well as hybrid network environments.

The solution eliminates the time-consuming complexity of managing policies across distributed security devices. It helps prevent inconsistencies and gaps in your security.

You can manage from anywhere with a highly secure, always available, highly reliable, and scalable multitenant cloud solution. It frees up capacity for other priorities by strengthening and maintaining security posture in less time and with fewer resources.

Simplify operations and strengthen security using AIOps: AIOps provides predictive insights and automation to empower administrators simplifying operation, enhance security posture, boost operational efficiency and reduce costs.

Eliminate misconfigurations and optimize rules for simplified operations: The Policy Analyzer and
Optimizer detects duplicate, redundant, shadowed, expired, overlapping, and mergeable rules. Apart from spotting anomalies, it delivers accurate implementation recommendations. You can download a change log and report from this service to keep your policy optimized.

Management of hybrid environments (ASA, FTD and Multicloud Defense): Streamlined workflow and integration between cloud security and on-premises/data center firewalls, you can now share objects and create VPN tunnels between Cisco Firewalls and Multicloud Defense. Static object sharing enables consistent policy outcomes across hybrid environments, eliminating administrative overhead and reducing potential for misconfiguration. Site-to-cloud VPN tunnels allow assets deployed across hybrid environments to communicate with one another via a secure connection.

Optimization for your existing platforms: Upon onboarding, Security Cloud Control will immediately be able to identify and flag common issues across firewalls that have been in production for years. After assessing and identifying all risks, you will now be able to swiftly remediate issues across all devices in bulk — bringing your devices to a consistent and more secure state. Security Cloud Control helps to correct the following issues:

●      Unused objects are objects that will never be hit and cause issues during troubleshooting as well as add to potentially unwanted questions during audits.

●      Duplicate objects are often found on a device and associate different names to the same IPs. Removing duplicate objects can improve the overall performance of the appliance.

●      Inconsistent objects are objects that get represented differently across deployed firewalls. This is typically the most important object issue from a security perspective. For example, if you had an object name “block list” and all devices are supposed to have this object with matching variables or IPs, Security Cloud Control will quickly validate this. If the object is not consistent across firewall devices, Security Cloud Control will alert you and allow you to resolve the issue in seconds.

●      Shadow rules are rules that will never be hit due to preceding rules that supersede them.

ASA-to-FTD migration: It is now easier than ever to migrate your environment from ASA to Cisco Threat Defense (FTD), thanks to Security Cloud Control’s embedded migration wizard. Manage both ASA and FTD from a single UI, enabling you to transition to NGFW in your own timeline!

Templates for consistent policy design: Using Security Cloud Control, you can now create, apply, and manage a consistent policy design across disparate devices from a single place. Our template feature allows you to create a “gold configuration” that can be replicated and customized. Once you are done, you can export and apply your standardized configuration to any new platform.

Simplified firewall OS upgrades: Often one of the most time-consuming and frustrating challenges that our customers face is maintaining the firewall OS for both features and vulnerabilities. Using Security Cloud Control, you can reduce the time it takes to perform Cisco ASA or Cisco Threat Defense (FTD) image upgrades by up to 90 percent. We take the guesswork out of planning and enable you to perform the upgrade in bulk across all your devices at once.

CLI in bulk: In addition to an intuitive web-based UI, we also provide our Command-Line Interface (CLI) users with a streamlined user experience as well. Security Cloud Control’s CLI Tool gives users the ability to perform CLI commands in bulk across many devices at once, including the ability to create user-defined macros or shortcuts for your most common commands.

Audit of changes with change log: Customers can track changes through our change log to review what change was made, when, and who performed the change. All changes made in both the Security Cloud Control UI and the CLI Tool are captured.

Remote-access VPN monitoring and management: Visibility across remote user sessions and head-end devices with a historical view over 90 days for capacity planning. Extend visibility of user traffic by leveraging Cisco Security Analytics and Logging.

Cloud-delivered version of Firewall Management Center: Offers the same look –and feel as on-premises and virtual versions of Firewall Management Center, with:

●      Comprehensive visibility and policy control: Provides exceptional visibility into what is running in your network and cloud so you can see what needs to be protected. Using this visibility, you can create and manage firewall rules and control thousands of web and custom applications used in your environment.

●      Automated security for dynamic defense: Continually monitors how your network is changing, streamlining operations, and improving your security so you can focus on the threats that matter.

Benefits of cloud-delivered Firewall Management Center via Security cloud control.

For more information, visit the Cisco Secure Firewall Management Center (formerly Firepower Management Center) Data Sheet.

For more information on Multicloud Defense, visit Cisco Multicloud Defense.

Table 1.        Features and benefits

 

AI Assistant for Firewall Rule Creation

Security Analytics and Logging (SAL) SaaS Overview

A cloud-delivered, Software-as-a-Service (SaaS) offering with a cloud-native data store, referred to as SAL (SaaS)

SAL (SaaS) is a full-feature offering providing cloud-based and cloud-delivered log management for Next-Generation Firewalls (NGFWs) running Cisco Firepower^® Threat Defense (FTD) software, as well as devices running the Adaptive Security Appliance (ASA) software, independent of their management platform. SAL (SaaS) enables event viewing via APIs in Security Cloud Control (CDO) for firewall event logs.

Cisco Security Logging and Troubleshooting: Allows organizations to store firewall logs in the cloud and present visually in Security Cloud Control’s event viewer. Correlate historical and/or live events from your firewall platforms for troubleshooting.

 

Integrated cloud-based live logging to extend troubleshooting capabilities and provide historical visibility for audit purposes.

Required components and setup to run Cisco Security Analytics and Logging (SaaS):

Secure Event Connector: To capture Firewall Event Logs from cloud deployments, a Secure Event Connector (SEC) is needed. The SEC is a containerized application that can be installed on an on-premises or cloud Secure Device Connector (SDC), or even be set up to run in standalone mode. It receives events from Firepower Threat Defense (FTD) devices and Adaptive Security Appliance (ASA) devices and forwards them to Cisco SAL in the cloud. Installation instructions can be found here. While SEC remains the most scalable route to send logs to SAL (SaaS), firewall devices running Cisco Firepower version 6.5 or later can send event logs directly to SAL Cloud, without the need for an SEC. This capability has been found to reliably support sustained peak rates of up to 8,500 events per second (eps) per firewall device. The Cisco Firewall Management Center (FMC) version 7.0 supports this direct- to-cloud route of devices under its management through its “Integrations” settings.

Platform support matrix: Cisco security devices supported by Security Cloud Control

Cisco security devices supported by Security Cloud Control

Ordering information

Firewall management/Multi cloud defense for Security Cloud Control (SCC) requires a base subscription for tenant entitlement that covers ASA, FTD and Multicloud Defense. For Firewall customers, there will be per-device license subscription for device management entitlement. The Device License Subscription with unlimited logging subscription is available separately. Subscriptions of one, three, and five years are available.

For Multicloud Defense, the product licensing is based on the consumed amount of aggregated gateway hours across all the cloud environments. The product has two tiers available, namely, Advantage and Premier. Firewall device licenses, such as Threat, Malware, URL filtering, and support, should be purchased separately. Security Logging and Analytics can also be added for logging and troubleshooting use cases.

Firewall management/Multi cloud defense for Security Cloud Control licensing structure

Refer to Guidelines for Quoting Security Cloud control Products Ordering Guide for more information on ordering Security Cloud Control. To place an order, visit the Cisco ordering homepage.

Table 2.        Firewall Management/Multicloud defense for Security Cloud Control Xaas license for tenant entitlement

Table 3.        Firewall Management/Multicloud defense for Security Cloud Control Base License Subscription tenant entitlement: subscription of 1, 3, and 5 years available

Table 4.        SAL Saas logging and troubleshooting XaaS license for logging entitlement

Table 5.        Firewall Management for Security Cloud Control license for managing Cisco firewalls: subscription of 1, 3, and 5 years available

Table 6.        SCC Firewall Device license for managing Cisco firewalls with unlimited logging and 90 days retention: subscription of 1, 3, and 5 years available.

Table 7.        Cisco Logging and Troubleshooting with subscription of 1, 3, and 5 years available

Security Buying Programs

The offer leverages the Security Choice Enterprise Agreement buying program with the following PIDs: The mapping for Choice EA PIDs to CDO, SAL (SaaS) a-la-carte PIDs.

Table 8.         

Cisco Capital

Flexible payment solutions to help you achieve your objectives

Cisco Capital^® makes it easier to get the right technology to achieve your objectives, enable business transformation, and help you stay competitive. We can help you reduce the total cost of ownership, conserve capital, and accelerate growth. In more than 100 countries, our flexible payment solutions can help you acquire hardware, software, services, and complementary third-party equipment in easy, predictable payments. Learn more.

For more information

Cisco Defense Orchestrator, learn more.

Firewall Management Center, learn more.