Cisco ASA SAL Integration Prerequisites
An engineer needs to configure cloud logging on Cisco ASA with SAL integration. Which parameter must be considered for this configuration?
Community Votes
100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
This question tests the prerequisite steps for enabling SAL, specifically the dependency on CDO onboarding rather than just network connectivity or version compatibility.
Configuring Security Analytics and Logging (SAL) on Cisco ASA requires the device to be onboarded to Cisco Defense Orchestrator (CDO). This process establishes the necessary management plane for cloud logging integration.
Many candidates choose Option A, assuming regional restrictions are the primary configuration hurdle, but the fundamental requirement is establishing the device identity in CDO first.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
The correct answer is C because Cisco Security Analytics and Logging (SAL) relies on a centralized management hierarchy. Before any syslog events can be sent to the cloud, the ASA must be onboarded to Cisco Defense Orchestrator (CDO). The official documentation states that you must "Onboard ASA Device to CDO" as a preliminary step to configure the connection parameters.Why the Other Options Are Wrong
Option A is incorrect because while regional constraints exist, they are not the primary configuration parameter for establishing the link; the device must simply be assigned to a region during onboarding. Option B is false because specific ASA IOS-XE versions and FTD versions are required, not all CSM versions. Option D is misleading as storage is managed by the service provider, not dynamically allocated by the engineer at the device level.Community Comment Notes
Community feedback strongly supports C, with users citing the 'Before you Begin' section of the implementation guide which explicitly lists onboarding to CDO as the first mandatory step. One user noted, "Be sure to review 'Before you Begin' above to make sure your environment is properly configured," reinforcing that technical configuration follows administrative onboarding.Official Reference
Exam Strategy
Always check for management plane prerequisites before diving into data plane configurations. For cloud-integrated security services like SAL, identify if onboarding to a central orchestrator (like CDO) is required.
Frequently Asked Questions
Why is onboarding to CDO required for SAL?
CDO acts as the central management plane that authenticates the ASA and configures the secure tunnel to the SAL cloud.
Can I send logs without CDO onboarding?
No, the ASA must be registered and managed via CDO to establish the authorized connection for Security Analytics and Logging.