Activation - NGFW - Cloud-Native Application Protection Platform – Cisco Activation as a Service

Onboarding

Steps:

Implement

Steps

Step 1: Navigate CNAPP dashboard
- Task 1: Navigate through the various tabs of the CNAPP dashboard
- Link
Step 2: Onboard one or more cloud accounts
- Task 2: Onboard one or more cloud accounts (AWS, Azure, GCP, OCI, and/or Kubernetes)
- Link
- Login Here
Step 3: Learn about the CNAPP Attack Path Analysis tool and its remediation capabilities
- Task 3: Register for a virtual event, available on Cisco Community
- Register
Step 4: Plan to use scopes for effective user account management
- Task 4: Access and manage the scopes in the Panoptica console
- Link
- Login Here

Use

Steps:

Step 1: Leverage the Attack Path Analysis tool to identify and prioritize potential security threats
- Task 1: Navigate to the Attack Path Analysis tab on the dashboard
- Link
- Log in
Step 2: Implement dynamic remediation/mitigation with ready-made code for DevOps
- Task 2: Plan to remediate any attack paths that have occurred recently
- Link
- Log in
Step 3: Leverage CNAPP for your cloud vulnerability management
- Task 3: Navigate to the Vulnerability Management page
- Link
- Log in
Step 4: Learn how to use CNAPP for effective Posture Management
- Task 4: Navigate to the Posture Management page
- Link
- Log in

Engage

Steps

Step 1: Explore your Cloud Inventory dashboard to gain insights into your assets and resources
- Task 1: Navigate to the Cloud Inventory page
- Link
- Log in
Step 2: Perform a root cause analysis to identify and address the fundamental causes of issues within the system
- Task 2: Navigate to the Root Cause Analysis Page
- Link
- Log in
Step 3: Plan for integrating with external third-party ticketing and alerting systems
- Task 3: Integrate with the ticketing system (JIRA or ServiceNow) to automate and streamline the creation of tickets for incident management
- Link
- Jira Document
- ServiceNow Document
- Task 4: Configure the solution to send alerts to a communication channel (Slack, Microsoft Teams, AWS S3 Bucket, or Webex).
- Link

Adopt

Steps

Step 1: Ensure you connect CNAPP to your Continuous Integration/Continuous Deployment (CI/CD) pipeline for enhanced security integration
- Task 1: Navigate to the Continuous Integration/Continuous Deployment (CI/CD) page
- Link
- Log in
Step 2: To onboard your API Security, navigate to the CNAPP dashboard and follow the onboarding process
- Task 2: Deploy the API Security Controller in your cluster and install a plugin in your API gateway to attach Trace Sources
- Link
- Log in
Step 3: Learn more about the many additional CNAPP capabilities, including the Compliance Framework and External Attack Surface.
- Task 3: Create Compliance Framework to monitor standard requirements such as: Center for Internet Security (CIS), Payment Card Industry Data Security Standard (PCI-DSS ), Health Insurance Portability and Accountability Act (HIPPA), General Data Protection Regulation (GDPR ), Service Organization Control 2 (SOC2)
- Link
- Log in
- Task 4: Leverage the External Attack Surface tool within CNAPP to proactively identify vulnerabilities and potential entry points that attackers could exploit
- Link
- Log in