AgenticOps for On-Premises Firewall Management Center

AgenticOps supports Firewall Threat Defense devices managed by an On-Premises Firewall Management Center that is integrated with Cisco Security Cloud and onboarded to AgenticOps. Support for individual AgenticOps features depends on the On-Premises Firewall Management Center software version.

Note	Currently, On-Premises Firewall Management Center registered through Secure Device Connector (SDC) are not supported.


AgenticOps feature	Supported On-Premises Firewall Management Center versions
Capacity and Trend Analyzer	10.0.0+
Policy Analyzer and Optimizer	7.4.0+
Software Upgrade Planner	7.4.0+
Best Practices and Recommendations	10.0.0+
Feature Adoption	10.0.0+
Application Insights (ThousandEyes)	7.6.0+
User Risks Insights	10.0.0+
Policy Analyzer and Optimizer - Network Address Translation	7.6 +
Policy Analyzer and Optimizer - Access Control Policy	7.2.0 +

After onboarding, supported On-Premises Firewall Management Center- managed devices are available throughout AgenticOps, including the Summary page, AgenticOps Insights, and supported feature dashboards.

Configure required egress for On-Premises Firewall Management Center

To use AgenticOps capabilities with On-Premises Firewall Management Center, allow outbound HTTPS access from the On-Premises Firewall Management Center to the required destinations.

Allow access to Amazon S3 URLs matching this pattern: *-ai-ops-data-migration.s3.*.amazonaws.com
Depending on your On-Premises Firewall Management Center version, you may also need to allow access to Grafana:
- Hostname: *.grafana.net
- Path: /api/prom/push


On-Premises Firewall Management Center version	Amazon S3 egress	Additional Grafana egress
10.0.0	Required	Not required
10.1.0	Required	Required

Note	Amazon S3 access remains required when the additional Grafana destination is needed. This matrix applies to the AgenticOps capabilities described in the support reference. Other AgenticOps features may have separate version requirements.