CX Cloud Idea Exchange

Advisories do not compare affected software versions of a security advisory with the ones used in the environment. A recent example is CVE-2024-6387, which just affects IOS XE 17.14, and is fixed in 17.15.1 Devices running IOS XE 17.9.x are flagged as potentially affected, but clearly cannot be affected at all. The platform (which we pay for) should reduce manual work, not just present the same things differently. The expectation is that the manual work to compare security advisories with the environment is no longer needed, especially for such basic things like software versions. This is the promise of the service, where it currently lacks real benefit. I even expect it to verify if I am using affected features in my environment based on the information DNAC/CCC has. I also would like to see that acknowledgements made in the CX portal are automatically reflected in the Security Advisories section of DNAC/CCC and vice versa. I was told in SR 697979885 that the current state is not a bug, but that everything works as designed, and asked to share my feedback in this portal. ... View more

There is no notification either on the Catalyst Center or on mail if the CX Cloud Agent is unreachable or goes down. You can only come to know of this when you open your CX Cloud instance and check the "Data Sources". It will be helpful if a proactive notification can be sent to the admin/user if the CX Cloud Agent becomes unreachable or is not sending telemetry to CX Cloud. ... View more

At CX Cloud > My Portfolio, the Customer is able to check a lot of good info related to their Contract: It would be awesome if there was a Global tab with "Global Parameters", for example: A Customer with Cisco ISE 2.7 P10 would have the possibility to click on the Global tab and check: . How many Customer (in percentage) are using ISE 3.3 Patch 2 (the Suggested Release) . The TOP 3 TAC Cases related do ISE 3.3 . The TOP 1 ISE version used Globally (for example ISE 3.2 Patch 5) This way the Customer would have the possibility not only to compare "his Parameters" with "Global Parameters" (to better understand "his gaps" in comparison to the rest of the World), but also to better prepare for future upgrades via the TOP 3 TAC Cases related to the Suggested Release. Any possibility to integrate such feature in roadmap ?   ... View more

Method to mark advisories as closed/completed and add comments/notes When looking at the "critical security advisories" for a device within CX cloud, it would be beneficial to have a method to mark them as closed/completed, or to add a comment. If you have remediation activities scheduled, perhaps a date/time field could be included so that if you go beyond the planned date, an alert will be received indicating that action should be taken. ... View more

Currently CX Cloud does not show renewed support contract details until after the existing contract expires. This makes using CX cloud as a single database / source of truth a bit deceiving. As soon as the contract is renewed - I would like to see the renewed expiry date and not the current date that the existing contract is about to expire. Or at a minimum show the existing contract expiry date and the new extended date. ... View more

It would be very helpful to have some sort of progress/status bar for Diagnostic Scans. Currently, when you run a scan, you have no idea how long it will take. ... View more

Hello  As a solutions provider that has deployed several hundred CSPCs (Cisco Smart Collectors) since 2012 we struggle badly to keep up with customer demands and modern times as Cisco does not supply an option for AWS, Azure or G-Cloud hosting only legacy bare metal and ESXi methods, my understanding is its the same for CX Agent which is not encouraging to build a practice around. Will Cisco release a version of CX Agent for public cloud hosting in FY24, if not why not? Kind regards Ali ... View more

Allow access to a longer history (1 year or more) of closed TAC cases ... View more

I would like to see all information within the license tab with the same information that I see in the smart account ... View more

As a user, I'd like to see all of my contracts when I log in, not just those covered under Success Tracks. Therefore, I'd want the default Success Tracks filter removed. ... View more

Add device filter functionality to enable users to filter and select devices rather than browsing through the pages while scheduling the scan. The existing process allows to filter DNAC center but not the devices Path:- Admin settings > Data collection > New Scheduled Scan ... View more

When I access a device for evaluation, I'd like to know if we had multiple cases opened on that device, or even be able to reopen an case that was closed unresolved on that device if necessary. ... View more

Under normal circumstances, allowing the inventory collection to run on a set schedule is fine, it would be nice to be able to do so manually. If, for example, you add numerous devices into DNAC, and would like to see that inventory within CX Cloud, you may not want to wait until your scheduled collection. (in the meantime, you can just modify your schedule to scan earlier. Having a manual collect would be more convenient.) ... View more

Hi Team, For myself, I would like to see an option to be able to view the web page in a dark version This is because the webpage contains a lot of white pieces, and it may be more eye-friendly to have a dark theme ... View more

Send e-mail notification for expiring licenses within the next 3 months ... View more

It would provide a fast way to get back to the Home screen without hovering and clicking refresh on "My Portfolio" ... View more

I can see a list of Advisories and in the Affected Assets there is a link to affected devices  per Advisory. When I click on that link, I can get another link to Affected Assets or Potentially Affected. After clicking there, I can export the list. But I'm missing a possiblity to export a single report showing for each  vulneraiblity which devices are affected and which devices are potentially affected. And vice versa: A single report showing for each device which vulnerabilities are affecting it and which are potentially affecting.     ... View more

Hello, We have hit issue with upgrade of CX Agent, we are trying to simulate couple of scenarios like there is no data source from CX Agent - DNAC or seed file, and per TAC it is not possible to perform upgrade of CX Agent to latest version without any source of data for collection. Right now version of agent is 2.2.0 and latest is 2.2.7 and we cannot upgrade to latest without data source. It can be done via workaround with "dummy" seed file, but you will hit issue that right now there is no possible way how to change seed file without TAC - https://community.cisco.com/t5/cx-cloud-idea-exchange/update-of-seed-file-and-ip-range/idi-p/5011071 Thanks, Pavel ... View more

Under the menu CXC > Admin Center > Data Sources, we can see the number of reachable and unreachable devices when you are using "Seed File" for CXC Agent. It will be goo to also showing the number of reachable and unreachable devices when you are using DNAC as the Data Source. The same goes for "Intersight" and "Webex" as data source. ... View more