Introducing Intent-Based Policy Management for Cisco Hybrid Mesh Firewall

The increasing assault floor created by hybrid work, cloud adoption, and exterior partnerships calls for a extra unified strategy to safety. Managing firewall insurance policies on this complicated panorama usually ends in fragmented and error-prone implementations, as community operations groups battle to navigate multi-vendor environments and establish the suitable firewall units to grant safe entry. Over time, these challenges can result in inconsistent insurance policies and a scarcity of visibility, leaving groups unsure about why sure guidelines have been applied within the first place however hesitant to replace or take away them for concern of breaking manufacturing entry.

In response, Cisco is the primary hybrid mesh firewall vendor to introduce intent-based coverage administration throughout multi-vendor firewalls by Cisco Safety Cloud Management with Mesh Coverage Engine.

Program as soon as, implement in every single place

In a hybrid mesh firewall structure, organizations use Safety Cloud Management—our unified, cloud-native safety administration interface—to specify entry intent a single time which is mechanically applied throughout Cisco and third-party vendor firewalls. Cisco’s intent-based coverage administration strategy eliminates the necessity for community operators to decide which firewalls must be up to date, craft and deploy these guidelines by every firewall vendor’s administration interface, after which hope the request was appropriate to start with. Mesh Coverage Engine helps Cisco’s firewalls and third-party firewalls reminiscent of Palo Alto Networks, Fortinet, and Juniper firewalls, with extra coming sooner or later. 

Handle coverage by intent, not system

Mesh Coverage Engine is a brand new characteristic of Safety Cloud Management which redefines how insurance policies are created and managed. The conventional strategy for granting entry locations lots of overhead on the community operator: first validate the request truly has all the suitable guidelines, then determine which firewalls to replace, then lastly add the principles, whereas being unaware if current guidelines already grant a few of different entry and do the deployment. With Mesh Coverage Engine, the community operator merely expresses the entry intent (utility A to utility B on the particular ports and protocols) throughout the consumer interface or by the API. Mesh Coverage Engine handles the willpower of what system ought to get what coverage, then deploys it. 

This strategy allows safety groups to log into Safety Cloud Management to shortly perceive what entry functions have and believe that altering or revoking that entry gained’t influence different functions or have unintended penalties. Utilizing an intent-based strategy allows true community entry coverage lifecycle administration—from new utility deployment to eventual deprecation and revoking of community entry. 

Implement coverage in minutes, not weeks

As soon as a corporation’s community topology is mapped to Safety Cloud Management, full with a unified view of firewalls, connections, and paths, they will use Mesh Coverage Engine to unlock important effectivity features:

Deploy insurance policies mechanically: New or up to date Layer 3/4 (L3/L4) insurance policies will be created and utilized to the applicable firewalls inside minutes. This can be a stark distinction to conventional processes that may take weeks and sometimes require back-and-forth with the appliance proprietor.

Keep away from rip-and-replace: The engine helps a hybrid mesh firewall structure by effortlessly integrating new units, together with third-party firewalls, with out requiring an entire overhaul of current infrastructure enabling you to make use of Cisco firewalls in your segmentation technique with out having to interchange the whole lot.

Enhance segmentation: By specializing in intent, the engine removes as much as 80% of redundant guidelines and 35% of objects, simplifying coverage administration, enhancing adaptability, and enhancing community segmentation to stop unauthorized entry.

Finish hearth drills: With streamlined guidelines and enhanced automation, groups can redirect their vitality from reactive, last-minute changes to extra strategic, forward-looking duties.

The longer term of coverage administration  

By persevering with to paved the way in intent-based coverage administration by Safety Cloud Management, Cisco ensures that its Hybrid Mesh Firewall structure not solely protects your functions wherever they reside, but additionally delivers a unified, clever, and scalable strategy to coverage administration throughout safety instruments that meets you the place you might be in your firewalling journey.  Cisco Hybrid Mesh Firewall continues to broaden what’s potential in firewall coverage administration, empowering organizations to maneuver quicker, keep safe, and preserve readability in an ever-changing IT panorama.

See how Mesh Coverage Engine may also help you undertake Cisco Hybrid Mesh Firewall extra simply. Register for a hybrid mesh firewall design clinic.

We’d love to listen to what you suppose! Ask a query and keep linked with Cisco Safety on social media.

Cisco Safety Social Media

LinkedInFacebookInstagramX