Not too long ago, we’ve seen numerous exercise and bulletins round multicloud safety – notably community safety (or the expanded view – safe cloud networking). We’ve got been on this recreation longer than most rivals. And our expertise has uniquely positioned us to resolve buyer’s multicloud challenges higher. In buyer conversations, we’ve got noticed three statements that get thrown round so much available in the market. Most often, with out actually contemplating the client implications, and the impression they’ve on the necessities for an answer. Briefly, they’re:
- You can’t safe what you can’t see
- Community and safety have to return collectively
- All safety should be multicloud (however what does that really imply?)
#1 You Can’t Safe What You Can’t See – However Safety Stays the Purpose
That is apparent on its face. However the corollary is that seeing an issue and never having the ability to do something about it could be the worst factor ever. First, it ought to be straightforward – visibility shouldn’t require deployment of infrastructure. Second, visibility right here helps us obtain an end result – specifically, securing cloud workloads by placing defenses in place. In different phrases, see an issue, repair an issue – all in the identical answer. Moreover, after we discuss securing issues we see, even the act of deciding what coverage to make use of requires us to higher perceive all issues cloud. Within the cloud, workloads are tagged (partially as a result of bodily location and IP addresses are neither static, nor managed by you). Cloud safety options not solely should eat cloud native tags and attributes at enterprise scale, but additionally deal with them as first-class coverage objects.
#2 Networking and Safety Must Come Collectively – Else Safety is All the time Behind
After numerous hours of conversations with prospects, the frequent ache level expressed was how they wrestle with securing workloads within the cloud rapidly and at scale. The basis of the issue wasn’t due to organizational construction or lack of effectivity. The truth is, their cloud networking and safety stacks weren’t working collectively.
First, with the dynamic nature of the cloud, networking and safety controls should have the ability to work with each other to robotically adapt and evolve as environments change to make sure defenses stay in place. Second, safety and networking coming collectively implies that directors shouldn’t should go a number of locations to handle coverage (safety) and enforcement infrastructure (arguably, networking). But, legacy distributors recurrently try to power match datacenter merchandise into the cloud. The cloud will not be your datacenter, and power becoming applied sciences in an atmosphere the place they may wrestle to maintain tempo and scale with dynamic environments is an inferior method. One of the best method is to centrally handle multicloud coverage and infrastructure whereas incorporating distributed enforcement factors. This lets you handle your cloud environments globally whereas concurrently imposing safety coverage regionally. Our method follows this finest observe utilizing a Software program as-a-Service (SaaS) controller (not VM-based) with in-account (or in-datacenter) Platform as-a-Service (PaaS) enforcement.
#3 All Safety Have to be Multicloud – Which is Totally different Than Working in A number of Clouds
Over the previous few years, legacy distributors have claimed their safety home equipment run in all clouds. However operating a number of level safety instruments in cloud environments doesn’t imply their method is an answer to fixing multicloud issues. From the client perspective, a multicloud answer begins with a single coverage (coverage for an app, not an equipment) that may be carried out throughout all clouds, private and non-private, by means of a single, scalable service. As finest observe, the service ought to handle each infrastructure in addition to coverage, bringing networking and safety collectively whereas giving organizations the visibility they should place safety controls strategically and precisely. You get the thought, configuring particular person insurance policies on particular person gadgets, throughout particular person clouds doesn’t resolve multicloud issues. Writing a coverage as soon as and distributing it throughout the clouds from a single location does.
The Implications for Enterprises – Necessities are Altering for the Higher
The multicloud world is ever evolving and organizations are repeatedly adjusting analysis necessities to adequately shield their cloud workloads. We’ve got heard from quite a few prospects that visibility into their community, bringing networking and safety collectively, and fixing multicloud issues with a real multicloud answer are prime of thoughts standards of their decision-making course of.
To study extra about how Cisco helps organizations overcome the three onerous truths of multicloud safety, go to www.cisco.com/go/multicloud-defense.
We’d love to listen to what you suppose. Ask a Query, Remark Under, and Keep Linked with Cisco Safe on social!
Cisco Safe Social Channels
Share:
