{"id":"FR2304757473A","name":"Cisco Security Cloud for Government","provider":"Cisco Systems Inc.","providerSlug":"cisco-systems-inc","status":"FedRAMP Authorized","impact":"High","authType":"Agency","authDate":"2026-08-06","serviceModel":["SaaS"],"deployment":"Government Community Cloud","businessFunctions":[""],"assessor":"Coalfire Systems, Inc.","assessorId":"138514","smallBusiness":false,"website":"http://www.cisco.com/go/secure-access-gov","description":"Cisco Security Cloud for Government provides cloud-based security solutions with multiple component products.\r\n\r\n \r\n\r\n\r\n\r\nCisco Umbrella for Government \r\n\r\nCisco Umbrella for Government delivers advanced, cloud-native cybersecurity, ensuring protection and compliance for government agencies to support their mission. It significantly uplevels government cybersecurity, offering comprehensive protection that meets the unique needs of government agencies. Cisco Umbrella for Government provides a comprehensive security suite with DNS-layer security and Secure Internet Gateway (SIG) capabilities, such as secure web gateway (SWG) , cloud-delivered firewall and intrusion prevention (Snort IPS), cloud access security broker (CASB), and data loss prevention (DLP), and integration with CISA Protective DNS. The feature set is comparable to the Cisco Umbrella product in use by over 30,000 Enterprise customers. Cisco Secure Access for Government includes more robust SSE capabilities than Cisco Umbrella for Government. Agencies looking for ZTNA and a high-performance architecture should choose Secure Access for Government.\r\n\r\n \r\n\r\n\r\n\r\nCisco Secure Access for Government\r\n\r\nCisco Secure Access for Government is a comprehensive Security Service Edge solution grounded in Zero Trust, that empowers Federal, State, and Local agencies to secure their workforce and data, simplify operations, and advance their mission with confidence. Its adaptive security capabilities, powered by Cisco Talos and AI, enable real-time threat detection, behavioral analysis, and predictive defense—ensuring proactive protection of your people and data against evolving cyber risks. With a comprehensive zero trust approach and a unique unified client, users gain seamless, secure access to critical applications across devices and locations—without compromising usability or performance. When paired with Catalyst® SD-WAN, Cisco Secure Access for Government delivers a holistic SASE solution. Enhanced integration with Catalyst SD-WAN will be available in 2026.\r\n\r\nKey capabilities include:\r\n\r\nA single platform for IT teams that centralizes management, streamlines policy enforcement, and reduces overhead. AI-driven automation accelerates response times and reduces human error, which integrates with  solutions like Duo and Cisco SD-WAN will enable a compliant, Zero Trust architecture tailored for public sector needs.\r\nCloud-native and continuously updated, Cisco Secure Access removes hardware complexity and scales effortlessly to meet the demands of dynamic government environments. The result: stronger security, improved user experience, and simplified operations—all built to protect the mission and serve the public. \r\nSecure Access for Government includes the following: Secure Internet Access (SIA) and Secure Private Access (SPA). Both products have Essentials and Advantage SKUs.\r\nOffers robust protection against modern-day cyber threats through Zero Trust Network Access, DNS security, Secure Web Gateway (SWG), Data Loss Prevention (DLP), Cloud-Delivered Firewall (FWaaS), Cloud Access Security Broker (CASB), VPN as-a-Service (VPNaaS), Advanced Malware Protection, and Talos® Threat Intelligence capabilities.\r\nExtends DNS security with an Integration with the Cybersecurity and Infrastructure Security Agency (CISA’s) Protective DNS (PDNS).\r\n \r\n\r\n\r\n\r\nCisco Security Cloud Control\r\n\r\nCisco Security Cloud Control is a security platform that allows you to manage your security products and achieve security outcomes from a single integrated interface. Integrating security products in the platform is a streamlined experience. Within Security Cloud Control, user and group management occurs at the platform level. Roles are assigned to these users and groups to define their privileges for administering Security Cloud Control and the integrated products. Navigation between products and tools is intuitive and standardized with a common platform menu and toolbar for all integrated products.\r\n\r\n\r\n\r\n\r\nCisco Security Cloud Control - Firewall Management for Government \r\n\r\nCisco Security Cloud Control - Firewall Management for Government delivers cloud-native firewall policy and device management through a unified management plane accessible through an intuitive web-based console. It enables centralized, scalable, and secure orchestration of Cisco next-generation firewalls (NGFWs) — including ASA and Secure Firewall Threat Defense (FTD) devices — across hybrid, cloud, and on-premises environments. With real-time visibility into traffic and threats, automated policy and object updates, and zero-touch provisioning for remote deployments - Security Cloud Control Firewall Management for Government reduces operational complexity for IT teams while strengthening cyber resilience and enabling secure modernization across mission-critical infrastructure. This product will now also include AIOps features like Policy Analyzer & Optimizer, Feature adoption, and a summary dashboard for customers to ensuring faster and accurate anomaly detection using Artificial Intelligence. A SAL Eventing License Utilization Dashboard will also be available to the customers.\r\n\r\n \r\n\r\n\r\n\r\nCisco Multicloud Defense for Government \r\n\r\nCisco Multicloud Defense for Government is designed to provide consistent, automated protection across multicloud environments, including AWS, Azure, GCP, and OCI. It integrates network security with multicloud networking, offering multi-directional protection to stop inbound attacks, prevent lateral movement, and block data exfiltration. With its centralized SaaS control plane, Cisco Multicloud Defense simplifies security management, enabling organizations to create and enforce unified security policies across all cloud environments in real-time. By leveraging advanced features such as dynamic policy management, continuous asset discovery, and automation, Cisco Multicloud Defense empowers organizations to reduce complexity, enhance operational efficiency, and maintain robust security across their multi-cloud infrastructure.\r\n\r\n \r\n\r\n\r\n\r\nCisco Secure Email Threat Defense for Government\r\n\r\nCisco Secure Email Threat Defense for Government exemplifies our ongoing commitment to delivering trusted, government-grade email security for agencies, contractors, and organizations handling regulated or sensitive data. Secure Email Threat Defense, a cloud-scale advanced email security layer, harnesses AI powered detections to provide comprehensive protection against advanced email threats, integrated as an API-based supplemental control or with the addition of new pre-delivery inline gateway protection.\r\n\r\nBeyond the governance and compliance benefits, Cisco Secure Email Threat Defense for Government delivers a set of advanced protection capabilities that align directly with real-world email threat risks — especially for organizations that are particularly sensitive to BEC, phishing, QR Code/Quishing Detection, brand impersonation, or high-risk personnel.\r\n\r\n \r\n\r\n\r\n\r\nDuo Federal\r\n\r\nDuo’s Federal Editions can verify the identity of users with secure and easy to use two-factor authentication methods that helps public sector entities satisfy NIST 800-63-3 and 53/63/171 authentication requirements. In addition to verifying users’ identities, Duo’s solution checks the security health of every device authenticating into the environment, at the time of access. Admins can use Duo to enforce stricter device and application access policies, such as blocking login requests based on location or anonymous networks. Duo ensures only trusted users and devices can access protected applications. This complete security solution prevents modern attackers that often target multiple areas - including credential theft and the exploitation of known software vulnerabilities affecting outdated software versions.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Cisco%20Logo.png","inMarketplace":true,"agencies":["22-042","22-018","22-068"],"reuseCount":2,"leverages":[],"leveragedBy":[],"timeline":[{"date":"2026-06-12","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2026-06-12","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2026-08-06","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Coalfire Systems, Inc."},"sponsor":"22-018","trustCenterCheck":null}