Onboard Catalyst SD-WAN Manager to Security Cloud Control

Use this procedure to onboard Catalyst SD-WAN Manager to Security Cloud Control platform.

Note	After you onboard Catalyst SD-WAN Manager to Security Cloud Control, security operations (management of policies, objects, and profiles) can be carried out only from Security Cloud Control. The version control feature is not supported in Security Cloud Control.

Before you begin

You must have Smart Account Administrator or Virtual Account Administrator privileges on a virtual account linked to a controller profile containing the information of the organization you want to onboard.

For more information about Smart Account and Virtual Account, see Access the Cisco Catalyst SD-WAN Portal.
You must have the Organization Name of your Catalyst SD-WAN Manager because it will be required during onboarding.
1. Log in to your Catalyst SD-WAN Manager.
2. Choose Administration > Settings > System > Organization Name.
  
  The Organization Name field contains a unique identifier that establishes secure control connections within the SD-WAN environment.
Enable Service Access Authorization to ensure the onboarding process completes successfully.
1. Log in to your Catalyst SD-WAN Manager.
2. Choose Administration > Settings > Cloud Services.
3. Enable Cloud Services, Analytics, and Service Access Authorization.

Note	All Secure Router devices managed by Catalyst SD-WAN Manager are onboarded to Security Cloud Control regardless of their Device Status.

Step 1	In the left pane, choose Administration > Integrations > Catalyst SD-WAN.
Step 2	Click the icon at the top-right corner of the Catalyst SD-WAN tab.
Step 3	Alternatively, you can use the Get started with Security Cloud Control interface to onboard Catalyst SD-WAN Manager. In the top menu, click . Click the Manage firewalls tab. Click Onboard on the Catalyst SD-WAN tile.
Step 4	From the Select Organization drop-down list, choose an organization. The list of organizations displayed in the drop-down depends on the region where Security Cloud Control is deployed.
Step 5	In the Create label field, enter the desired label and click Connect. After you onboard the device to Security Cloud Control, the system applies labels. You can use these labels to group devices and filter them on the Security Devices page.
Step 6	Verify the details on the Catalyst SD-WAN Manager you are onboarding, and then click Close. In the Services page, the Catalyst SD-WAN displays the onboarded manager.

After a successful onboarding, these details are displayed in Security Cloud Control:

All security objects, security profiles, and NGFW policies. The system displays these imported policies in Policies > WAN Branch Edge.
Secure Router devices and their running configuration.

In the Management pane, click Devices to see the onboarded Secure Router devices.