Allowing Traffic from Users and Devices on the Network

Login

Cisco Secure Access China User Guide

Cisco Secure Access China Help
- Welcome to Cisco Secure Access China
  - Sign into Secure Access China with Security Cloud Sign On
  - Find Your Organization ID
  - Determine Your Current Package
- Secure Access China Single Sign-On Authentication
  - Configure Single Sign-On Authentication
  - Troubleshoot Single Sign On Authentication
- Secure Access Regions
- Get Started
  - Begin Secure Access Onboarding Workflow
  - Step 1 – Configure Network Connections
  - Step 2 – Configure Access to Resources
  - Step 3 - Configure End User Connectivity
  - Step 4 – Configure Endpoints and Network Sources
  - Secure Access China Overview
- Quickstarts
  - Quickstart – Cisco Secure Client with Virtual Private Network
  - Quickstart – Cisco Secure Client with Internet Security
  - Quickstart – Browser with SAML Authentication
- Limitations and Range Limits
- Network Requirements for Secure Access China
- Manage Network Connections
- Manage Network Tunnel Groups
  - Device Compatibility and Network Tunnels
  - Add a Network Tunnel Group
  - View Network Tunnel Group Details
  - Edit a Network Tunnel Group
  - Delete a Network Tunnel Group
  - Supported IPsec Parameters
- Network Tunnel Configuration
  - Configure Tunnels with Catalyst SD-WAN cEdge and vEdge
  - Configure Tunnels with Cisco ISR
  - Configure Tunnels with Cisco Adaptive Security Appliance
  - Configure Tunnels with Cisco Secure Firewall
  - Configure Tunnels with Meraki MX
- Manage Users and Groups
  - View User Details
  - View Group Details
  - Provision Token for Identity Provider
  - Import Users and Groups from CSV File
  - Provision Users and Groups from Okta
  - Provision Users and Groups from Azure
- Provision Users and Groups from Active Directory
  - Prerequisites for AD Connectors
  - Connect Multiple Active Directory Domains
  - Manage AD Components
    - Add AD Components in Secure Access China
    - Manage Sites for AD Components
    - View AD Components in Secure Access China
    - Delete AD Components
  - Manage AD Connectors
    - Configure Authentication for AD Connectors
    - Configure Updates on AD Connectors
    - Connect Active Directory to Secure Access
    - Deploy LDIF Files for AD Connector
    - Change the Connector Account Password
  - AD Connector Communication Flow and Troubleshooting
- Configure Integrations with SAML Identity Providers
  - Prerequisites for SAML Authentication
  - Configure Azure AD for SAML
  - Configure Okta for SAML
  - Configure AD FS for SAML
  - Configure Duo Security for SAML
  - Configure Ping Identity for SAML
  - Configure OpenAM for SAML
  - SAML Certificate Renewal Options
  - Test SAML Identity Provider Integration
  - Delete SAML Identity Provider Integration
- Manage End-User Connectivity
- Manage DNS Servers
- Manage Remote Access Virtual Private Networks
  - FQDNs for Network Connections
  - Manage IP Pools
  - Add an IP Pool
  - Manage VPN Profiles
  - Add VPN Profiles
  - Manage Machine Tunnels
- Manage PAC Files
  - Deploy the Secure Access PAC File for Windows
  - Deploy the Secure Access PAC File for macOS
  - Customize the Secure Access PAC File
- Manage Internet Security
  - Set Up Internet Security on User Devices
  - Manage Internet Security Bypass
    - Add Destinations for Internet Security Bypass
    - Edit Destinations for Internet Security Bypass
    - Delete Destination for Internet Security Bypass
  - Configure Cisco Secure Client Settings
- Manage Resources
- Manage Registered Networks
  - Add Network Resources
  - Update a Network Resource
  - Delete a Network Resource
- Manage Internal Networks
  - Add Internal Network Resources
  - Update an Internal Network Resource
  - Delete an Internal Network Resource
- Manage Destination Lists
  - Add a Destination List
  - Upload Destinations From a File
  - Edit a Destination List
  - Download Destinations to a CSV File
  - Control Access to Custom URLs
  - Wildcards in Destination Lists
  - Add Punycode Domain Name to Destination List
  - Troubleshoot Destination Lists
- Manage AAA Servers
- Manage Application Lists
  - Add an Application List
  - Application Categories
  - Delete an Application List
- Manage Content Category Lists
  - Available Content Categories
  - Add a Content Category List
  - Request a Category for an Uncategorized Destination
  - Dispute a Content Category
  - View Content Categories in Reports
- Manage Tenant Control Profiles
  - Add a Tenant Controls Profile
  - Control Cloud Access to Dropbox
  - Control Cloud Access to Google G Suite
  - Control Cloud Access to Microsoft 365
  - Control Cloud Access to Slack
  - Use Tenant Controls in Access Rules
  - Review Tenant Controls Through Reports
- Manage Roaming Devices
  - View Internet Security Settings for Roaming Devices
  - Edit Internet Security Settings for Roaming Devices
  - Delete a Roaming Device
- Manage Private Resources
  - Add a Private Resource
  - Add a Private Resource Group
- Manage Connections to Private Destinations
  - Manage Branch Connections
- Manage the Access Policy
  - About the Access Policy
  - Show Additional Data on Your Access Rules
  - Edit the Order of the Rules in Your Access Policy
  - Rule Defaults: Default Settings for Access Rules
  - Global Settings for Access Rules
  - Edit Rule Defaults and Global Settings
  - Edit the Default Access Rules
- Get Started With Internet Access Rules
  - Components for Internet Access Rules
  - Default Settings for Internet Access Rules
  - Add an Internet Access Rule
  - About Configuring Sources in Internet Access Rules
  - About Configuring Destinations in Internet Access Rules
  - Advanced Application Controls
  - Global Settings for Internet Access Rules
  - Troubleshoot Internet Access Rules
- Get Started With Private Access Rules
  - Components for Private Access Rules
  - Default Settings for Private Access Rules
  - Add a Private Access Rule
  - About Configuring Sources in Private Access Rules
  - About Configuring Destinations in Private Access Rules
  - About Endpoint Requirements in Access Rules
  - Allowing Traffic from Users and Devices on the Network
  - Global Settings for Private Access Rules
  - Troubleshoot Private Access Rules
- Manage Endpoint Security
  - Endpoint Attributes
- Manage VPN Connection Posture Profile
  - Add a VPN Connection Posture Profile
- Manage IPS Profiles
- Manage Web Profiles
  - Add a Web Profile
- Enable SafeSearch
- Manage Threat Categories
  - Threat Category Descriptions
  - Add a Threat Category List
  - Dispute a Threat Categorization
- Manage File Inspection
  - Enable File Inspection
  - Test File Inspection
  - Monitor File Inspection Activity
  - Troubleshoot and Monitor File Inspection
- Manage File Type Controls
  - Enable File Type Controls
  - File Types to Block
  - Review File Type Controls Through Reports
- Manage Notification Pages
  - Preview Notification Pages
  - Create Custom Block and Warn Pages
  - Allow Users to Contact an Administrator
- Manage Traffic Decryption
  - Important Information About Do Not Decrypt Lists
  - Add a Do Not Decrypt List for Web Profiles
- Manage Certificates
  - Certificates for Internet Decryption
  - Install the Cisco Secure Access Root Certificate
  - Add Customer CA Signed Root Certificate
  - View the Cisco Trusted Root Store
  - Manage Certificates for Private Resource Decryption
  - Certificates for Private Resource Decryption
  - Certificates for SAML Authentication
  - Manage SAML Certificates for Service Providers
  - Manage SAML Certificates for Identity Providers
  - VPN Certificates for User and Device Authentication
  - Manage CA Certificates for VPN Connections
- Manage the Data Loss Prevention Policy
  - Add a Real Time Rule to the Data Loss Prevention Policy
  - Understand Exclusions in a Real Time Rule
  - Supported Applications
  - Discovery Scan
  - Edit a Data Loss Prevention Rule
  - Delete a Data Loss Prevention Rule
  - Enable or Disable a Data Loss Prevention Rule
  - Supported File and Form Types
  - Best Practices for the Data Loss Protection Policy
- Manage Data Classifications
  - Add a Data Classification
  - Copy and Customize a Built-In Data Classification
  - Delete or Edit a Classification
  - Create an Exact Data Match Identifier
  - Index Data for an EDM
  - Exact Data Match Field Types
  - Create an Indexed Document Match Identifier
- Built-in Data Identifiers
  - Copy and Customize a Data Identifier
  - Create a Custom Dictionary
  - Custom Regular Expression Patterns
  - Individual Data Identifiers
- Manage Logging
  - Enable Logging
  - Enable Logging to Your Own S3 Bucket
  - Enable Logging to a Cisco-managed S3 Bucket
  - Stop Logging
  - Delete Logs
  - Log Formats and Versioning
    - Admin Audit Log Formats
    - Cloud Firewall Log Formats
    - Data Loss Prevention (DLP) Log Formats
    - IPS Log Formats
    - Remote Access VPN Log Formats
    - Web Log Formats
- Manage API Keys
  - Add Secure Access API Keys
  - Add KeyAdmin API Keys
- Manage Accounts
  - Add a New Account
  - Edit Account Settings
  - Delete an Account
  - Hide Sources with De-identification
Cisco Secure Client
- Get Started with Cisco Secure Client on Windows and macOS
  - Prerequisites
  - Download Cisco Secure Client
  - Download the OrgInfo.json File
  - Manual Installation of Cisco Secure Client (Windows and macOS)
  - Mass Deployment Overview
  - Mass Deployment (Windows)
    - Automated Installation (Windows)
  - Multi Deployment Support
    - Manage Device Deployment
  - Customize Windows Installation of Cisco Secure Client
  - Mass Deployment (macOS)
    - Automated Installation (macOS)
  - Customize macOS Installation of Cisco Secure Client
  - VPN Headend Deployment
  - Secure Firewall Management Center and Secure Firewall Threat Defense
  - Meraki Systems Manager (SM) Deployment
  - Migration from Umbrella Roaming Client
  - Install the Root Certificate for All Browsers
  - Cloud Management
  - Additional References
  - Remote Monitoring and Management Deployment Tutorials
- Manage Internet Security on Cisco Secure Client
  - Download the OrgInfo.json File
  - Umbrella Roaming Security Module Requirements
  - Domain Management
  - Interpret Internet Security Diagnostics
  - Customize Windows Installation of Cisco Secure Client
  - Customize macOS Installation of Cisco Secure Client
- Manage Virtual Private Networks on Cisco Secure Client
  - Download the Virtual Private Network XML Profile
  - CA Certificates for VPN Connections
Reports
- Monitor Secure Access China with Reports
  - Export Report Data to CSV
  - Bookmark and Share Reports
  - Report Retention
  - Schedule a Report
  - Update a Scheduled Report
  - Report Scheduling
- Remote Access Log Report
  - View the Remote Access Log Report
- Activity Search Report
  - View the Activity Search Report
  - View Activity Search Report Actions
  - Schedule an Activity Search Report
  - Use Search and Advanced Search
- Security Activity Report
  - View Activity and Details by Filters
  - View Activity and Details by Event Type or Security Category
  - View an Event's Details
  - Search for Security Activity
- Total Requests Report
- Activity Volume Report
- App Discovery Report
  - View the App Discovery Report
  - View the Highest Risk Apps
  - Review Apps in the Apps Grid
  - View App Details
  - Change App Details
  - Control Apps
  - Control Advanced Apps
  - View Traffic Data Through SWG Service
- Top Destinations Report
  - Destination Details
- Top Categories Report
  - Category Details
- Data Loss Prevention Report
- Admin Audit Log Report
  - Export Admin Audit Log Report to an S3 Bucket

Cisco Secure Access China Help Get Started With Private Access Rules Allowing Traffic from Users and Devices on the Network

Last updated: Mar 06, 2026

Previous topic About Endpoint Requirements in Access Rules Next topic Global Settings for Private Access Rules