Join the guided tour outside the Security Operations Center, where we’ll discuss real time network traffic of the RSA Conference, as seen in the NetWitness platform. Engineers will be using Cisco Security Cloud in the SOC, comprised of Cisco Breach Protection Suite, User Protection Suite, Cloud Protection Suite and Secure Firewall. Incidents are investigated with Threat Intelligence, provided by Cisco Talos, partners Recorded Future, alphaMountain, Pulsedive and community sources. 

Outside the SOC, you will receive a security briefing and have time for Q&A with Cisco and NetWitness engineers. An Expo Pass is all that is required to join the tour. 

RSA Conference

Advanced registration is highly recommended. Below are the available tour times. Please fill out the RSAC SOC Tour Request Form to request your spot. SOC Tours Offered Mon-Thurs: 

Tuesday, May 7




Wednesday, May 8



• 5:00pm

Thursday, May 9



Please meet at the Cisco SOC Dashboard, in between north and south hall, ten minutes before your tour time, where a Cisco team member will escort the group to the SOC. 

Also, plan to attend the official out briefing on the security observations, at the session EXPOSURE: The 5th Annual RSAC SOC Report, 9 May 2024, 1:30PM – 50 Minutes, Moscone West. (Full Conference pass required) 

Splunk, a Cisco Company will be utilized as a SIEM in the RSAC SOC. With Cisco and Splunk together, you’ll soon be able to use data in new ways, such as the integrations of Cisco Firewall logs with Splunk, combined with the metadata and intelligence of NetWitness NDR, for visibility and investigations with Cisco XDR.

We’d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Security on social!

Cisco Security Social Channels



Jessica Bair

Director, Cisco Secure Strategic Alliances

Advanced Threat Solutions