Cisco Secure Access Features
Monitoring (6)
Load Balancing
Monitors traffic and distribute resources and scales infrastructure workloads to match traffic.
Continuous Analysis
Constantly monitors traffic and activity. Detects anomalies in functionality, user accessibility, traffic flows, and tampering.
Intrusion Prevention
Enforces security paramaters to prevent unauthorized access.
Intrusion Detection
Detects unauthorized access and use of privileged systems.
Intrusion Detection System
Identify and alert about security breaches by third parties
Intrusion Prevention System
System that monitors network traffic to prevent malicious activity.
Artificial Intelligence - Secure Access Service Edge (SASE) (3)
Predictive Capabilities
Uses predictive analytics to anticipate emerging threats.
Real-Time Threat Detection
Utilizes AI algorithms to identify anomolies and block access to malicious sites.
Automation
Automates common workflows and remediation tasks.
Artificial Intelligence -Secure Service Edge (SSE) (3)
Automation
Automates common workflows and remediation tasks.
Predictive Capabilities
Uses predictive analytics to anticipate emerging threats.
Real-Time Threat Detection
Utilizes AI algorithms to identify anomolies and block access to malicious sites.
Agentic AI - Secure Service Edge (SSE) (4)
Decision Making
Makes informed choices based on available data and objectives.
Autonomous Task Execution
Capability to perform complex tasks without constant human input.
Cross-system Integration
Works across multiple software systems or databases.
Proactive Assistance
Anticipates needs and offers suggestions without prompting.
Agentic AI - Secure Access Service Edge (SASE) Platforms (4)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Cross-system Integration
Works across multiple software systems or databases
Proactive Assistance
Anticipates needs and offers suggestions without prompting
Decision Making
Makes informed choices based on available data and objectives
Administration (19)
Whitelisting
The ability to green light a specific Domain or system to bypass the scanning process.
Policy Enforcement
Abilities to set DNS protection policy control standards including whitelisting, blacklisting, and application access.
Incident Reports
Produces reports detailing suspicious activity and anomalies related to networks and endpoints.
Domain Categorization
Allows administrators to group users and devices based on IP, Endpoint, or role.
Multi-Network Management
Allows centralized administration and control of DNS protection and policies across multiple networks.
Content Delivery
Caching of static or dynamic content at distributed PoPs for faster load times.
Dashboard & Reporting
Reporting and analytics that report on activity and program effectiveness.
Alerting
Identifies and alerts administrators of threats, issues, incidents and requests related to website security.
Policy Management
Provides network security features to customize network access rules, workflows, and compliance requirements.
Logging and Reporting
Captures logs for all firewall functions, storing information, incidents, and activity for user reference and analysis.
Application Gateway
Application-level proxy that applies security mechanisms to connect clients to applications while concealing client network and computers.
Concurrent Sessions
Determines the number of connections a firewall is able to track and facilitate securely.
Uptime Reporting
Track the availability time for a designated network or website over a given period of time
Web Traffic Reporting
Collect and analyze traffic data about website visitors
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Access Management
Control and manage access to company resources
Incident Management
Manage and track all disruptions and incidents
Audit Management
Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws
Remote Monitoring & Management
Remotely monitor and manage client networks, endpoints, systems, and devices via locally installed applications
Agentic AI - Firewall Software (3)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Adaptive Learning
Improves performance based on feedback and experience
AI/Machine Learning
Software program that continuously adjusts its behavior based on observed data
Identity Management (3)
-
Adaptive Access Control
Provides a risk-based approcach to determining trust within the network.
Identity Scoring
Calculates risk based on user behavior, permissions, and requests.
-
User Monitoring
Monitors users attempting unauthorized access to databases, applicaitons, and othe network components.
Additional Functionality (41)
Spam Blocker
Filters used to determine different types of malware threats
Alerts/Escalation
System alerts about the need to escalate an issue or request
Role-Based Permissions
Set & manage permission levels based on user roles and restrict access to only authorized individuals
Network Monitoring
Tracks and makes accessible data on the health of servers and other network components.
Visual Analytics
Interact with data visualization elements, such as charts and graphs, to drill down into data
Customizable Reports
Alter the layout and content of reports
Real-Time Analytics
Analyze and gain insights into data in real-time
Reporting & Statistics
Collection, analysis, and representation of numerical data and generation of reports to understand various patterns
Anti Spam
Techniques to prevent and filter unwanted or unsolicited email spam from reaching a user's inbox
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Real-Time Monitoring
Active monitoring of systems, applications, or networks
Real-Time Notifications
Notifications that are delivered to users as soon as an event occurs
Activity Tracking
Track and document all activities across devices, networks, and other systems
Hardware Integration
Hardware components included as part of the software system
Summary Reports
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Real-Time Data
Receive data and information in real time
Server Monitoring
Continuously scan servers on a designated network to monitor health and search for any irregularities or failures
Two-Factor Authentication
Extra layer of security that requires not only a password and username but also something specific to that user
Log Access
Collection, search, and analysis of access logs and audit logs
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Multi-Location
Manage and support multiple locations
SSL Security
Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access
Behavior Tracking
Track visitors'/audience's responses across web pages and other optimized content
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
API
Application programming interface that allows for integration with other systems/databases
Event Logs
A chronological record of actions or occurrences within a network, software, or process
Vulnerability Scanning
Discover patch statuses and vulnerabilities
Risk Alerts
Notifying as a warning or reminder of a potential or imminent hazard
Single Sign On
Allow users to access multiple services after entering their login credentials once
Dashboard Creation
Creation and customization of dashboards
Monitoring
Observe and track the demand, usage, progress or quality of a system, product, or user
SQL Injections
Protect against code driven website security attack techniques
Load Balancing
Process of distributing a set of tasks over a set of resources, with the aim of making their overall processing more efficient
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Vulnerability Scanning
Discover patch statuses and vulnerabilities
Threat Response
Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm
API
Application programming interface that allows for integration with other systems/databases
Log Management
Collects and aggregates data from various systems within the IT environment
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Artificial Intelligence - Firewall (1)
AI Firewall
Utilizes AI to monitor network traffic, identify anomalies, and block attacks.
Generative AI (6)
AI Text Summarization
Condenses long documents or text into a brief summary.
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
AI Text Summarization
Condenses long documents or text into a brief summary.
AI Text Generation
Allows users to generate text based on a text prompt.
AI Text Summarization
Condenses long documents or text into a brief summary.
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Functionality (9)
Virtual Private Network (VPN)
Provides a virtualized network for client network to mask identity, location, and other sensitive information.
Antivirus
Provides malware protection capabilities in addition to traditional firewall barrier technology.
URL Filtering
Provides access control tools to categorize and block traffic and match traffic to firewall policies.
Availability
Deploys firewall(s) configured in sync to prevent network failure and provide business continuity.
IP Filtering
Control or restrict network traffic based on the source and destination of IP addresses, protocols and ports.
Content Filtering
Control or restrict access to web content or applications
DNS Lookups
Associate information from various domains to identify associated parties and threats.
Threat Intelligence
Develops domain reputation by gathering contextual information related to web-based threats.
Advanced Traffic Filtering
Allows DNS routing to resolve requests across HTTP or HTTPs requests and/or covers IPv4 and IPv6 protocols.
Threat Protection (5)
Firewall
Protects websites and web applications from a variety of attacks and malware threats.
DDoS Protection
Protects against distributed denial of service (DDoS) attacks.
Anomaly/Malware Detection
Automatically identify and flag unusual behaviors and malicious software
Malware Removal
Facilitates the remediation of website and web application malware.
Endpoint Protection
Protect users working remotely and provide secure environments for personal devices to access company programs
Components - Secure Service Edge (SSE) (4)
-
Secure Web Gateway (SWG)
Prevents unauthorized web domains from entering a network and protects against web-based threats.
Firewall as a Service
Provides cloud-based firewall protection.
-
Zero Trust Network Access (ZTNA)
Enforces zero trust access rules.
Cloud Access Security Broker (CASB)
Enforces security requirements and secures connections with cloud resources.
Components - Secure Access Service Edge (SASE) (5)
-
Zero Trust Network Access (ZTNA)
Enforces zero trust access rules.
Wide Area Network (WAN)
Integrates wide area network (WAN) capabilities, such as SD-WAN.
Cloud Access Security Broker (CASB)
Enforces security requirements and secures connections with cloud resources.
Secure Web Gateway (SWG)
Prevents unauthorized web domains from entering a network and protects against web-based threats.
Firewall as a Service
Provides cloud-based firewall protection.
Protection (6)
Quarantine
Blocks malicious website or destination, redirecting the user to a secure page
Continuous Monitoring
Monitors 24/7 to detect anomalies in functionality, user accessibility, traffic flows, and tampering.
Off-Network Protection
Supports agent-based DNS protection with individual endpoint devices on any network.
Guest Network Protection
Allows DNS filtering and protection for guest WiFi networks.
BYOD Protection
Supports bring-your-own-device (BYOD) users, supporting DNS protection across any device connected to a network or equipped with an agent.
Native DNS over HTTPS (DoH)
“DoH” is a protocol that facilitates DNS resolution via HTTPS. Native DoH functionality facilitates DNS over DoH using local agents to manage DNS requests, extending DoH beyond a single browser or network.
Network Management (4)
-
Network Segmentation
Allows administrative control over network components, mapping, and segmentation.
Network Mapping
Allows visual display of networks segmented components and their connected resources.
-
Security Analytics
Utilizes behavioral analysis to improve security procedures and documentation.
-
API/Integrations
Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.
Risk Analysis (4)
Blacklist and Whitelist
Tracking recipient tagging of domains for blacklists and whitelists.
Vulnerability Assessment
Analyzes your existing website and network to outline access points that can be easily compromised.
Security Auditing
Analyzes data associated with web traffic and site performance to provide vulnerability insights and best practices.
Web-Application Security
Identify and respond to security threats to web applications
Security (4)
Security Automation
Allows administrative control over automated security tasks.
-
Application Security
Protects application access and data. Prompts additional authentication for suspicious users.
Workload Protection
Protects computing resources across a network. Prompts additional authentication for suspicious users.
-
Data Protection
Protects informatin stored on premises and in the cloud. Prompts additional authentication for suspicious users.
