In our POC we have found that Cisco does not provide Centralized Firewall Policy Manager in cloud. We have to buy appliance only.

Thanks, We are evaluating now. Your report is 2 years old and I will look to both problems in our POC.