Cisco Secure Connect Foundation Essentials

Secure internet-access connectivity for branch and roaming users

Remote access: free trial of 10 users with client-based access.

Security: secure web gateway (proxy and inspection of web traffic URL filtering, secure malware analytics – up to 500 samples per day), cloud-access security broker (cloud application discovery, risk scoring, blocking, and cloud malware detection for two applications), Layer-3 and Layer-4 cloud firewall, and DNS-layer security.

Connectivity: private access, network access control, direct SaaS and IaaS peering, Cisco Meraki Secure SD-WAN integration, and interconnection of sites, users, and applications.

Management dashboard: simplified management and unified visibility of connectivity and security powered by Cisco Meraki.

Support: 24x7 unified SASE support access through email and phone and access to documentation portal for self-help.

Global data center availability: Foundation is now available globally in all SIG data centers. The enhanced headend capability is available in all of Europe, US, and part of Asia (Tokyo and Singapore).

Cisco Secure Connect Foundation Advantage

Data protection, advanced policy

All features included in Cisco Secure Connect Foundation Essentials, plus:

Security: Layer-7 cloud-delivered firewall + IPS, inline data-loss prevention, cloud malware detection (for all supported applications), and secure malware analytics (unlimited sandbox submissions).

Global data center availability: Foundation is now available globally in all SIG data centers. The enhanced headend capability is available in all of Europe, US, and part of Asia (Tokyo and Singapore).

Cisco Secure Connect Complete Essentials

Secure internet, remote access as-a-service, and ZTNA for hybrid users

Remote access/ZTNA: client-based access, clientless browser–based access (up to 10 applications), granular user and application-based access policy, SAML authentication, posture and contextual access control, and reporting.

Security: secure web gateway (proxy and inspection of web traffic URL filtering, secure malware analytics – up to 500 samples per day), cloud-access security broker (cloud application discovery, risk scoring, blocking, and cloud malware detection for two applications), Layer-3 and Layer-4 cloud firewall, and DNS-layer security.

Connectivity: private access, network access control, direct SaaS and IaaS peering, Cisco Meraki Secure SD-WAN integration, and interconnection of sites, users, and applications.

Management dashboard: simplified management and unified visibility of connectivity and security powered by Cisco Meraki.

Support: 24x7 unified SASE support access through email and phone and access to documentation portal for self-help.

Global data center availability: Cisco Secure Complete is now available globally, offering the full suite of unified SASE capabilities, including remote access and client as well as clientless ZTNA.

Cisco Secure Connect Complete Advantage

Data protection, advanced policy

All features included in Cisco Secure Connect Essentials, plus:

Remote access/ZTNA: Client-based access and clientless browser-based access (up to 1000 applications/resources).

Security: Layer-7 cloud-delivered firewall + IPS, inline data-loss prevention, cloud malware detection (for all supported applications), and secure malware analytics (unlimited sandbox submissions).

Global data center availability: Cisco Secure Complete is now available globally, offering the full suite of unified SASE capabilities, including remote access and client as well as clientless ZTNA.

Native Meraki SD-WAN integration

Easily connect your branch and DC/HQ/private cloud Meraki sites (configured as hubs or spokes) to Cisco Secure Connect with built-in native Meraki SD-WAN integration for securing connections to the internet, SaaS, and private applications and resources. Leveraging the AutoVPN capability of your Meraki SD-WAN appliance at your branch sites for connectivity to the SASE fabric provides increased resiliency and intelligent path selection. This also enables the organization to implement consistent access and security controls across all connected sites.

Enhanced Meraki SD-WAN cloud
head-end

Cisco Secure Connect introduces a dynamically scalable high-bandwidth headend solution for the Meraki SD-WAN integration. Leveraging Meraki’s AutoVPN solution, this enhanced cloud traffic acquisition solution dynamically scales bandwidth per connecting Meraki SD-WAN site. The current bandwidth scale per site is approximately 500 Mbps, both unidirectional and bidirectional. This solution also offers an even more simplified user experience for integration of Meraki SD-WAN with Cisco Secure Connect.

Browser-based Zero-Trust Network Access (ZTNA)

Cisco Secure Connect enables least privileged access control of private applications and resources without requiring any agent or client installed on the endpoint device. Administrators can easily assign access privileges for contractors and employees only to resources they need access to, without any lateral move capability. Administrators can configure posture profiles for endpoint OS and browser type to be used in the access decision.

Client-based Zero-Trust Network Access (ZTNA)

Client ZTNA offers a feature-rich solution powered by Cisco Secure Access, providing a seamless end-user experience that connects users to private applications and resources using any port and any protocol. User access to applications and resources is instant requiring fewer steps, delivering better remote worker experiences and stronger security. Administrators can reduce the attack surface, enforce least-privilege controls, enable posture validation, and eliminate security gaps in a distributed environment.

Client-based secure remote work (VPN)

Cisco Secure Connect enables remote users to access private applications from anywhere through the Cisco Secure Connect fabric using a Cisco Secure Client. Identity-based access control is possible using SAML authentication through the customer’s IdP. Endpoint posture is also evaluated; this enables granular access control to private resources.

Secure internet access

Secure internet access provides safe access to the internet anywhere users go, even when they are off the VPN. Before the user is connected to any destination, Cisco Secure Connect acts as your secure onramp to the internet and provides the first line of defense and inspection, with hybrid protection on the edge and in the cloud. Regardless of where users are located or what they’re trying to connect to, traffic can go through the fabric first. Once the traffic gets to the cloud platform, there are different types of inspection and policy enforcement that can happen, based on the security needs of the traffic.

Cisco Secure Connect includes a secure web gateway, a cloud-delivered firewall, DNS-layer security, a cloud-access security broker, and data-loss prevention. This robust security solution receives real-time proactive threat updates from Cisco^® Talos^® intelligence, keeping your users secure while freeing your IT team from this tedious process.

User authentication

Cisco Secure Connect enables customers to bring their own identity provider (IdP) for end-user authentication to the service. Integration establishes a trust relationship with the IdP, which allows users to authenticate with their existing credentials via SAML 2.0 and synchronize any changes made in your IdP with Secure Connect via SCIM 2.0.

Meraki policy import

Cisco Secure Connect natively introduced a policy import feature that is specifically designed for those who currently have their remote workforce access company resources via remote access connections to the Meraki MX headend. If those customers are transitioning to Secure Connect remote access services, this feature will allow them to import their MX firewall policies affecting client VPN traffic to the Secure Connect cloud firewall through a guided wizard. This will help reduce the time administrators need to create and streamline their policies. Furthermore, it detects duplicates before the migration.

Unified management

Cisco Secure Connect management is handled through a single dashboard to configure, monitor, and troubleshoot the service. Configuration is simplified with guided flows and dynamic checklists. Monitoring of users and sites occurs in a single pane of glass that unifies security and connectivity indicators.

As part of consolidating network and security controls to unify and provide a single pane of glass experience, the following are some of the key updates:

Unified Cloud-Delivered Firewall (CDFW): CDFW policy control and management of all branch-internet, remote users-internet, and interconnects is now available on the Secure Connect dashboard.

Unified posture: Client-based and browser-based access posture control and management are now available on the Secure Connect dashboard.

Remote access: Remote access service can now be configured and managed directly from the Secure Connect dashboard. Remote access logs can now be exported from the Secure Connect dashboard for all analysis and monitoring.

Network interconnect

Network interconnect provides intelligent routing between sources and destinations connected to Cisco Secure Connect. Any node connected to the interconnect seamlessly gains access to any already-connected node, with access policy -enforced in a unified way across the edge and cloud from Cisco Secure Connect. This drastically reduces network complexity, providing a highly available network fabric with minimal setup and maintenance.