Install an SEC Using Your VM Image

The Secure Event Connector (SEC) forwards events from ASA and FTD to the Cisco cloud so that you can view them in the Event Logging page and investigate them with Secure Cloud Analytics, depending on your licensing.

You can install more than one Secure Event Connector (SEC) on your tenant and direct events from your ASAs and FDM-managed devices to any of the SECs you install. Having multiple SECs allows you to have SECs installed in different regions and distribute the work of sending events to the Cisco cloud.

Installing multiple SECs using your own VM image is a three part process. You must perform each of these steps:

  1. Install a CDO Connector to Support an SEC Using Your VM Image

  2. Additional Configuration for SDCs and CDO Connectors Installed on a VM You Created

  3. Install the Secure Event Connector

Note

Using a CDO VM image for the CDO Connector is the easiest, most accurate, and preferred method of installing a CDO connector. If you want to use that method, see Installing an SEC Using a CDO Image.

What to do next:

Continue to Install a CDO Connector to Support an SEC Using Your VM Image