Activation - DUO/Zero Trust - Secure Private Access – Cisco Activation as a Service

Onboarding

Steps:

Step 1: Learn about Cisco Secure Access
- Task 1: View the Secure Access page on Cisco.com
- Link
Step 2: Get started with Cisco Secure Access
- Task 2: Log in to the Cisco Secure Access dashboard
- Log in
- Link
- Task 3: Determine your current licensing package
- Link
- Task 4: Define additional users and their roles
- Link

Implement

Steps

Step 1: Configure Infrastructure
- Task 1: Configure Internet Protocol Security (IPsec) tunnel to the datacenter for accessing private applications
- Link
- Task 2: Configure private network space (IP addresses)
- Link
Step 2: Provision Users and Groups
- Task 3: Use one of the supported provisioning methods to provision users
- Link
Step 3: Configure Single Sign-On authentication
- Task 4: Choose an authentication method
- Link
- Task 5: Cisco Security Cloud Sign On Identity Provider
- Link
- Task 6: Configure SAML Metadata XML configuration
- Link
Step 4: Configure DNS servers
- Task 7: Configure DNS Servers to access customer's private applications
- Link
Step 5: Configure private resources
- Task 8: Define and configure your private resources for your users
- Link
Step 6: Configure Access Controls
- Task 9: Configure rules defaults and global settings
- Link
Step 7: Configure End User connectivity
- Task 10: Define options for remote user access
- Link
- Task 11: Configure authentication for VPN (Virtual Private Networks)
- Link
Step 8: Deploy Cisco Secure Access Root Certificate
- Task 12: Download Cisco Secure Access Root certificate
- Link
- Task 13: Deploy Root Certificate to end user devices
- Link

Use

Steps: 3 Steps / 13Tasks

Step 1: Observe Secure Access Traffic
- Task 1: Confirm there is traffic flowing onto the dashboard
- Link
Step 2: Deploy Secure Client to additional users
- Task 2: Increase the number of clientless users or connect additional private applications
- Link
Step 3: Monitor Secure Access reports
- Task 12: Review the pre-defined reports such as Security Overview, Security Activity, Activity Search, etc.
- Link

Engage

Steps

Step 1: Continue to connect to Secure Access
- Task 1: Deploy Secure Client to additional users or connect additional branches to increase daily average number of users
- Link
Step 2: Validate rule efficacy
- Task 2: Validate intended access to private resources
- Link
Step 3: Configure Virtual Private Networks (VPN) profiles
- Task 3: Configure authentication for VPN (Virtual Private Networks)
- Link
Step 4: Configure Posture profiles
- Task 4: Create client-based Zero-Trust posture profiles
- Link
- Task 5: Create browser-based zero-trust posture profiles
- Link

Adopt

Steps

Step 1: Increase user traffic
- Task 1: Increase the number of private applications to increase daily average traffic per user for Cisco Secure Access
- Link
Step 2: Monitor Secure Access reports
- Task 2: Review predefined Secure Access reports
- Link
Step 3: Configure Data Loss Prevention policy
- Task 3: Add rules to the Data Loss Prevention policy
- Link
Step 4: Manage Intrusion Prevention Profiles
- Task 3: Configure custom IPS profile for private access
- Link