Best practices and recommendations

Best practices and recommendations are a security assessment mechanism that

  • enhances your organization's security posture with AgenticOps by identifying deviations from Cisco Secure Firewall best practices

  • runs assessments on your devices, generates reports, and receives insights that guide you toward optimal performance, and

  • addresses trending issues, incorporates industry best practices, and enhances the reliability of recommendations through input from Cisco's Technical Assistance Center (TAC) and Customer Experience (CX) teams.

Assessment and recommendation features

Best practices and recommendations include these key components:

  • Assessment: Evaluates your firewall configuration across multiple categories. Each check determines alignment with Cisco Secure Firewall best practices. The report summarizes the total number of checks performed. It categorizes the results as Passed or Requires review.

    Checks that require review indicate deviations that could impact firewall efficiency and security. Each failed check presents an opportunity for improvement. Addressing these checks contributes directly to optimizing firewall performance.

  • Recommendation: Provides specific recommendations to address identified issues, ensuring optimal firewall performance. These include detailed information such as the nature of the problem, symptoms, impact, and required actions.

Implement these recommendations to resolve issues, align with best practices, and optimize firewall performance.

Key features

Feature

Description

Automated assessments

Runs periodic evaluations of firewall devices against Cisco best practices.

Checks summary

Displays how many checks passed and highlights those requiring review.

Trend visualization

Shows the number of checks over time, helping you compare passed and failed checks across assessment cycles.

Device reports

Provides device-specific results and percentage of improvement potential.

Review category and check control

Enable or disable review categories or individual checks for future assessments.