Secure Access Resource Repository

[Guided Resource Moderator]

This repository is a collection of documents, guides, videos, etc. that will help you optimize your network with Cisco Secure Access. This guide is organized by the following stages: Get started, Working with Cisco Secure Access, Custom rules and policies, Adopt with advanced features, Additional documentation, and Support.

Get started: Plan and prepare for your Secure Access deployment by learning about the provisioning process and setting up your Secure Access dashboard.

Cisco Security provisioning and administration documentation and guides:

• Get started guide for new customers of Security Cloud Control
• Security Cloud Control getting started guide for existing customers
• Security provisioning and administration portal
• Managing organizations
• Claim a subscription
• Activate a product instance
• Role-based access control
• Identity provider integration
• Secure Access status portal (subscribe)
• Secure Access license types (please review licensing to ensure your licensing tier qualifies for the below features)

Secure Access documentation, guides and on-demand webinars:

• Get started with Secure Access on-demand webinars
• Secure Access sign in
• Add new users
• Cisco Secure Access Experience Insights value sheet
• Cisco Secure Access Experience Insights demo
• Cisco ThousandEyes portal login
  • Password reset
• Configure Experience Insights

Cisco Secure Internet Access	Cisco Secure Private Access
Install Secure Access root certificate	Manage private documentation resources
Manage DNS and DNS servers	Add a private resource group
	Provision users and groups
	Configure SAML integrations (ZTA)

Work with Secure Access: Configure your Secure Access by selecting and completing the implementation method that best fits your desired deployment outcomes and organizational priorities.

Cisco Secure Internet Access	Cisco Secure Private Access
Roaming clients (preferred method): Manage Internet Security Cisco Secure Client deployed with the Umbrella Roaming Security module Configure DNS and web security settings	Connect your private applications: Establish a tunnel Manage resource connectors and connector groups (ZTA only)
RAVPN: Add VPN profiles Authentication, authorization, and accounting Traffic steering (split tunnel) Cisco Secure Client configuration	Establish end-user connectivity: RAVPN (easiest method) Manage virtual private networks Authentication, authorization, and accounting Traffic steering (split tunnel) Manage virtual private networks on Cisco Secure Client
IPsec tunnel: Establish a tunnel Manage internal networks	ZTA Configure identity providers for SAML authentication Manage resource connectors and connector groups Assign private resources to a connector group Deploy Cisco Secure Client Zero Trust Access Complete ZTA clientless (browser based) configuration (SSH and RDP require an Advantage license)
Network protection: Deploy virtual appliances (DNS only) Manage PAC files (SWG only)	IPsec tunnels Network tunnel configuration
ZTA: Configure identity providers for SAML authentication Deploy Cisco Secure Client Zero Trust Access Zero Trust Access to internet destinations Manage resource connectors and connector groups

Custom rules and policies: Cisco Secure Internet Access rules allow you to specify how user traffic to internet destinations should be managed.

Cisco Secure Internet Access	Cisco Secure Private Access
Default rule data Select sources Destinations Procedure Edit the order of rules in your Access policy	Default rule data Edit rule defaults and global settings Select sources Destinations Edit the order of rules in your Access policy

Adopt with advanced features: Learn more about advanced Secure Access features. Features are broken down by license type.

Cisco Secure Internet Access	Cisco Secure Private Access
SWG: Enable the SWG full proxy Add a security profile for internet access Add a Do Not Decrypt list Advanced application controls Manage threat categories Manage file inspection and file analysis Manage file type controls Enable file type controls Enable SafeSearch Manage tenant control profiles Manage notification pages Data loss prevention (DLP) Create a data classification Manage the data loss prevention policy Add a SaaS API rule to the data loss prevention policy Add an AI guardrails rule to the DLP Policy Remote browser isolation (RBI) About isolated destinations Activity search View and customize the activity search report View Firewall events in Activity Search report View Web events in Activity Search report View Zero Trust events in Activity Search report Schedule an Activity Search report	Manage security profile for private access: Add a security profile for private access Manage file inspection and file analysis for private access rules Manage file type controls Manage global settings for access rules
Manage RAVPN posture profiles	Intrusion Prevention System: Manage IPS profiles
Intrusion prevention system: Default settings for internet access rules (tunnel-based and RAVPN deployments) Manage IPS profiles	Data loss prevention policy: Add a real time rule to the data loss prevention policy
Cloud Malware protection: Manage Cloud Malware protection Cloud Malware report	RAVPN: Manage RAVPN posture profiles VPN advanced settings
SaaS API: Add a SaaS API rule to the Data Loss Prevention Policy	ZTA: Manage ZTA posture profiles ZTA mobile devices
Integrations: Chrome Enterprise browser integration (available only for Secure Access advantage) ISE integration Catalyst SD-WAN integration
Manage iOS devices
Manage Android devices
Protection for unmanaged devices
Chromebook clients

Additional documentation: Configuration guides, troubleshooting and more.

• Secure Access configuration guides
• Secure Access maintain and operate
• Secure Access troubleshooting

Meraki SD-WAN with Secure Access:

• Meraki SD-WAN Secure Access design guide
• Cisco Secure Access Meraki SD-WAN configuration guide
• Meraki primary and secondary IPsec VPN tunnels with tunnel monitoring (health check)

• Configure Secure Access for RA-VPNaaS posture assessment with ISE

Experience Insights (ThousandEyes integration):

• Deploy Cisco ThousandEyes module via Microsoft Intune
• Install Endpoint agents for Windows via group policy

Support: Find help when you need to manage your Cisco Secure Access deployment.

• Secure Access login page
• Secure Access documentation
• Secure Access product announcements (subscribe)
• Secure Access software release notes (subscribe)
• Secure Access status portal (subscribe)
• How to add a Cisco service contract to Cisco.com account              
  • Video
• How to open a TAC case for Secure Access
• Cisco TAC support assistant
  • TAC support demo
• Secure Access webinars
• Secure Access discussion forum