cisco Secure Dynamic Attributes Connector User Guide

cisco Secure Dynamic Attributes Connector

Product Information

Specifications

• Product Name: Cisco Secure Dynamic Attributes Connector
• Release Notes Version: 2.3
• Release Date: 2023-12-01

New Features in This Release

This release of Cisco Secure Dynamic Attributes Connector includes the following new features:

• Migration from DockerHub to Amazon ECR: The Docker images for the Cisco Secure Dynamic Attributes Connector are being migrated from Docker Hub to Amazon Elastic Container Registry (Amazon ECR). To use the new field packages, you must allow access through your firewall or proxy to the following URLs:
  • URL 1
  • URL 2
  • URL 3
• Support for docker-compose 2.0: The Cisco Secure Dynamic Attributes Connector now supports docker-compose 2.0.

List of Supported Connectors

The Cisco Secure Dynamic Attributes Connector supports the following connectors:

• Connector 1
• Connector 2
• Connector 3

Issues Fixed in This Release

This release of Cisco Secure Dynamic Attributes Connector fixes the following issues:

New and Updated Documentation

The following Firepower documentation was updated or is newly available for this release:

• Documentation 1
• Documentation 2
• Documentation 3

Contact Cisco

For further assistance or inquiries, please contact Cisco:
Contact Information: [Contact Information]

Product Usage Instructions

Step 1: Firewall and Proxy Configuration
In order to use the Cisco Secure Dynamic Attributes Connector, you need to allow access through your firewall or proxy to the following URLs:

• URL 1
• URL 2
• URL 3

Step 2: Installation and Setup
Follow the steps below to install and set up the Cisco Secure Dynamic Attributes Connector:

1. Step 1: Download the latest version of the connector from the Cisco website.
2. Step 2: Install the connector on your virtual machine or server.
3. Step 3: Configure the connector by providing necessary credentials and settings.

Step 3: Connector Configuration
After the installation and setup, you need to configure the connector by performing the following steps:

1. Step 1: Open the connector configuration file.
2. Step 2: Modify the necessary settings such as connector type, authentication details, and connector-specific configurations.
3. Step 3: Save the configuration file.

Step 4: Starting the Connector
Once the configuration is complete, you can start the CiscoSecure Dynamic Attributes Connector by executing the following command:
[Command to start the connector]

Step 5: Troubleshooting
If you encounter any issues during the installation, setup, or usage of the Cisco Secure Dynamic Attributes Connector, refer to the product documentation or contact Cisco support for assistance.

FAQ

• Q: What are the supported connectors?
  A: The Cisco Secure Dynamic Attributes Connector supports Connector 1, Connector 2, and Connector 3.

• Q: How can I download the latest version of the connector?
  A: You can download the latest version of the connector from the Cisco website.

• Q: What should I do if the connector fails to start?
  A: Make sure that you have properly sized your virtual machines and that they meet the system requirements. Improper sizing can cause the dynamic attributes connector to fail or not start.

Cisco Dynamic Attributes Connector Release Notes

Thank you for choosing Firepower. These are the Cisco Secure Dynamic Attributes Connector Release Notes.

New Features in This Release

Migration from DockerHub to Amazon ECR
Docker images for the Cisco Secure Dynamic Attributes Connector are being migrated from Docker Hub to Amazon Elastic Container Registry (Amazon ECR).
To use the new field packages, you must allow access through your firewall or proxy to all of the following URLs:

• https://public.ecr.aws
  To download individual field packages, search the Amazon ECR gallery for muster

• https://csdac-cosign.s3.us-west-1.amazonaws.com

Support for docker-compose 2.0
We now support docker-compose 2.0.

Supported Platforms

• Ubuntu 18.04 to 22.04.2
• CentOS 7 Linux
• Red Hat Enterprise Linux (RHEL) 7 or 8
• Python 3.6.x or later
• Ansible 2.9 or later

Minimum requirements for all operating systems:

• 4 CPUs
• 8GB RAM
• For new installations, 100GB available disk space

We recommend you size your virtual machines as follows:

• 50 connectors, assuming 5 filters per connector and 20,000 workloads: 4 CPUs; 8GB RAM; 100GB available disk space
• 125 connectors, assuming 5 filters per connector and 50,000 workloads: 8 CPUs, 16 GBRAM, 100GB available disk space

Note Failure to size your virtual machines properly can cause the dynamic attributes connector to fail or not to start.

If you wish to use vCenter attributes, we also require:

• vCenter 6.7
• VMware Tools must be installed on the virtual machine

Connectors supported in this version:

• Amazon Web Services (AWS)

For more information, see a resource like Tagging AWS resources on the Amazon documentation site.

• GitHub
• Google Cloud

For more information, see Setting Up Your Environment in the Google Cloud documentation.

• Microsoft Azure

For more information, see this page on the Azure documentation site.

• Microsoft Azure service tags

For more information, see a resource like Virtual network service tags on Microsoft TechNet.

• Office 365 IP addresses

For more information, see Office 365 URLs and IP address ranges on docs.microsoft.com.

• VMware categories and tags managed by vCenter and NSX-T

For more information, see a resource like vSphere Tags and Attributes in the VMware documentation site.

• Webex IP addresses
• Zoom IP addresses

List of connectors supported by the Cisco Secure Dynamic Attributes Connector.

Table 1: List of supported connectors by Cisco Secure Dynamic Attributes Connector version and platform

CSDAC

version/platform

| AWS| GitHub| Google Cloud| Azure| Azure Service Tags| Microsoft Office 365| vCenter| Webex| Zoom
---|---|---|---|---|---|---|---|---|---
Version 1.1 (on-premises)| Yes| No| No| Yes| Yes| Yes| Yes| No| No
Version 2.0 (on-premises)| Yes| No| Yes| Yes| Yes| Yes| Yes| No| No
Version 2.2 (on-premises)| Yes| Yes| Yes| Yes| Yes| Yes| Yes| No| No
Version 2.3 (on-premises)| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes

Issues Fixed in This Release

Version 2.3.0 Fixed Issues
Table 2: Version 2.3.0 Fixed Issues

New and Updated Documentation

The following Firepower documentation was updated or is newly available for this release.
Firepower Configuration Guides and Online Help

• Cisco Secure Dynamic Attributes Connector Configuration Guide
• Firepower Management Center Device Configuration Guide, Version 7.3

Online Support Resources

• Cisco provides online resources to download documentation, software, and tools, to query bugs, and to open service requests. Use these resources to install and configure Firepower software and to troubleshoot and resolve technical issues
• Cisco provides online resources to download documentation, software, and tools, to query bugs, and toopen service requests. Use these resources to install and configure Firepower software and to troubleshoot and resolve technical issues.
• https://www.cisco.com/c/en/us/support/index.html
• Cisco Bug Search Tool: https://tools.cisco.com/bugsearch/
• Cisco Notification Service: https://www.cisco.com/cisco/support/notifications.html
  Access to most tools on the Cisco Support & Download requires a Cisco.com user ID and password

Contact Cisco

If you cannot resolve an issue using the online resources listed above, contact Cisco TAC:

• Email Cisco TAC: [email protected]
• Call Cisco TAC (North America): 1.408.526.7209 or 1.800.553.2447
• Call Cisco TAC (worldwide): Cisco Worldwide Support Contacts

Cisco Secure Dynamic Attributes Connector Release Notes 2.3

Read User Manual Online (PDF format)

Download This Manual (PDF format)

Download this manual  >>