Security Analytics and Logging for Catalyst SD-WAN

Security Analytics and Logging for Catalyst SD-WAN is a security management solution that

  • integrates advanced firewall and security features directly into the SD-WAN fabric

  • enables centralized policy enforcement and secure cloud access through Direct Internet Access (DIA) and Direct Cloud Access (DCA)

  • provides centralized monitoring and analysis of connection events when devices are onboarded to Security Cloud Control, and

  • supports threat hunting and comprehensive security management across distributed networks.

Security capabilities

The Secure Router integrates firewall capabilities into its architecture, ensuring robust security across distributed networks.

  • Catalyst SD-WAN integrates security features directly into the SD-WAN fabric, enabling secure Direct Internet Access (DIA) and Direct Cloud Access (DCA).

  • It includes next-generation firewall, integrated intrusion prevention capabilities, and URL filtering.

  • The Catalyst SD-WAN platform enables you to enforce centralized policies for all users, extending enterprise VPN architectures into your private cloud.

Onboard Catalyst SD-WAN Manager to Security Cloud Control to manage the security capabilities of managed devices.

  • Onboarded Catalyst SD-WAN devices send connection events to Security Analytics and Logging for storage in the cloud data store.

  • Security Analytics and Logging enables you to view connection events from all Catalyst SD-WAN devices in one centralized location—the Event Logging page in Security Cloud Control.

  • On the Event Logging page, you can view, filter, and search for events to perform threat hunting and analyze security rules triggered in your network.