cisco Secure Dynamic Attributes Connector User Guide
- June 16, 2024
- Cisco
Table of Contents
- cisco Secure Dynamic Attributes Connector
- Product Information
- Product Usage Instructions
- FAQ
- Cisco Dynamic Attributes Connector Release Notes
- New Features in This Release
- Issues Fixed in This Release
- New and Updated Documentation
- Online Support Resources
- Read User Manual Online (PDF format)
- Download This Manual (PDF format)
cisco Secure Dynamic Attributes Connector
Product Information
Specifications
- Product Name: Cisco Secure Dynamic Attributes Connector
- Release Notes Version: 2.3
- Release Date: 2023-12-01
New Features in This Release
This release of Cisco Secure Dynamic Attributes Connector includes the following new features:
- Migration from DockerHub to Amazon ECR: The Docker images for the Cisco Secure Dynamic Attributes Connector are being migrated from Docker Hub to Amazon Elastic Container Registry (Amazon ECR). To use the new field packages, you must allow access through your firewall or proxy to the following URLs:
- URL 1
- URL 2
- URL 3
- Support for docker-compose 2.0: The Cisco Secure Dynamic Attributes Connector now supports docker-compose 2.0.
List of Supported Connectors
The Cisco Secure Dynamic Attributes Connector supports the following connectors:
- Connector 1
- Connector 2
- Connector 3
Issues Fixed in This Release
This release of Cisco Secure Dynamic Attributes Connector fixes the following issues:
Bug ID | Headline |
---|---|
CSCwh89890 | Fix for CVE-2023-44487 – HTTP/2 Rapid Reset |
CSCwh92405 | Resolved an issue with the no_proxy configuration setting |
New and Updated Documentation
The following Firepower documentation was updated or is newly available for this release:
- Documentation 1
- Documentation 2
- Documentation 3
Contact Cisco
For further assistance or inquiries, please contact Cisco:
Contact Information: [Contact Information]
Product Usage Instructions
Step 1: Firewall and Proxy Configuration
In order to use the Cisco Secure Dynamic Attributes Connector, you need to
allow access through your firewall or proxy to the following URLs:
- URL 1
- URL 2
- URL 3
Step 2: Installation and Setup
Follow the steps below to install and set up the Cisco Secure Dynamic
Attributes Connector:
- Step 1: Download the latest version of the connector from the Cisco website.
- Step 2: Install the connector on your virtual machine or server.
- Step 3: Configure the connector by providing necessary credentials and settings.
Step 3: Connector Configuration
After the installation and setup, you need to configure the connector by
performing the following steps:
- Step 1: Open the connector configuration file.
- Step 2: Modify the necessary settings such as connector type, authentication details, and connector-specific configurations.
- Step 3: Save the configuration file.
Step 4: Starting the Connector
Once the configuration is complete, you can start the CiscoSecure Dynamic
Attributes Connector by executing the following command:
[Command to start the connector]
Step 5: Troubleshooting
If you encounter any issues during the installation, setup, or usage of the
Cisco Secure Dynamic Attributes Connector, refer to the product documentation
or contact Cisco support for assistance.
FAQ
-
Q: What are the supported connectors?
A: The Cisco Secure Dynamic Attributes Connector supports Connector 1, Connector 2, and Connector 3. -
Q: How can I download the latest version of the connector?
A: You can download the latest version of the connector from the Cisco website. -
Q: What should I do if the connector fails to start?
A: Make sure that you have properly sized your virtual machines and that they meet the system requirements. Improper sizing can cause the dynamic attributes connector to fail or not start.
Cisco Dynamic Attributes Connector Release Notes
Thank you for choosing Firepower. These are the Cisco Secure Dynamic Attributes Connector Release Notes.
New Features in This Release
Migration from DockerHub to Amazon ECR
Docker images for the Cisco Secure Dynamic Attributes Connector are being
migrated from Docker Hub to Amazon Elastic Container Registry (Amazon ECR).
To use the new field packages, you must allow access through your firewall or
proxy to all of the following URLs:
-
https://public.ecr.aws
To download individual field packages, search the Amazon ECR gallery for muster
Support for docker-compose 2.0
We now support docker-compose 2.0.
Supported Platforms
- Ubuntu 18.04 to 22.04.2
- CentOS 7 Linux
- Red Hat Enterprise Linux (RHEL) 7 or 8
- Python 3.6.x or later
- Ansible 2.9 or later
Minimum requirements for all operating systems:
- 4 CPUs
- 8GB RAM
- For new installations, 100GB available disk space
We recommend you size your virtual machines as follows:
- 50 connectors, assuming 5 filters per connector and 20,000 workloads: 4 CPUs; 8GB RAM; 100GB available disk space
- 125 connectors, assuming 5 filters per connector and 50,000 workloads: 8 CPUs, 16 GBRAM, 100GB available disk space
Note Failure to size your virtual machines properly can cause the dynamic attributes connector to fail or not to start.
If you wish to use vCenter attributes, we also require:
- vCenter 6.7
- VMware Tools must be installed on the virtual machine
Connectors supported in this version:
- Amazon Web Services (AWS)
For more information, see a resource like Tagging AWS resources on the Amazon documentation site.
- GitHub
- Google Cloud
For more information, see Setting Up Your Environment in the Google Cloud documentation.
- Microsoft Azure
For more information, see this page on the Azure documentation site.
- Microsoft Azure service tags
For more information, see a resource like Virtual network service tags on Microsoft TechNet.
- Office 365 IP addresses
For more information, see Office 365 URLs and IP address ranges on docs.microsoft.com.
- VMware categories and tags managed by vCenter and NSX-T
For more information, see a resource like vSphere Tags and Attributes in the VMware documentation site.
- Webex IP addresses
- Zoom IP addresses
List of connectors supported by the Cisco Secure Dynamic Attributes Connector.
Table 1: List of supported connectors by Cisco Secure Dynamic Attributes Connector version and platform
CSDAC
version/platform
| AWS| GitHub| Google Cloud| Azure| Azure
Service Tags| Microsoft Office 365| vCenter| Webex|
Zoom
---|---|---|---|---|---|---|---|---|---
Version 1.1 (on-premises)| Yes| No| No| Yes| Yes| Yes| Yes| No| No
Version 2.0 (on-premises)| Yes| No| Yes| Yes| Yes| Yes| Yes| No| No
Version 2.2 (on-premises)| Yes| Yes| Yes| Yes| Yes| Yes| Yes| No| No
Version 2.3 (on-premises)| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes
Issues Fixed in This Release
Version 2.3.0 Fixed Issues
Table 2: Version 2.3.0 Fixed Issues
Bug ID | Headline |
---|---|
CSCwh89890 | Fix for CVE-2023-44487 – HTTP/2 Rapid Reset. |
CSCwh92405 | Resolved an issue with the no_proxy configuration setting. |
New and Updated Documentation
The following Firepower documentation was updated or is newly available for
this release.
Firepower Configuration Guides and Online Help
- Cisco Secure Dynamic Attributes Connector Configuration Guide
- Firepower Management Center Device Configuration Guide, Version 7.3
Online Support Resources
- Cisco provides online resources to download documentation, software, and tools, to query bugs, and to open service requests. Use these resources to install and configure Firepower software and to troubleshoot and resolve technical issues
- Cisco provides online resources to download documentation, software, and tools, to query bugs, and toopen service requests. Use these resources to install and configure Firepower software and to troubleshoot and resolve technical issues.
- https://www.cisco.com/c/en/us/support/index.html
- Cisco Bug Search Tool: https://tools.cisco.com/bugsearch/
- Cisco Notification Service: https://www.cisco.com/cisco/support/notifications.html
Access to most tools on the Cisco Support & Download requires a Cisco.com user ID and password
Contact Cisco
If you cannot resolve an issue using the online resources listed above, contact Cisco TAC:
- Email Cisco TAC: tac@cisco.com
- Call Cisco TAC (North America): 1.408.526.7209 or 1.800.553.2447
- Call Cisco TAC (worldwide): Cisco Worldwide Support Contacts
Cisco Secure Dynamic Attributes Connector Release Notes 2.3
Read User Manual Online (PDF format)
Read User Manual Online (PDF format) >>