Cisco Security Vision

Cisco Security Vision

The Cisco SASE vision is based on the 3Cs principle, Connect, Control, and Converge. The idea is to provide flexible connectivity, identity, and, end-to-end segmentation and policy enforcement through a single solution with visibility for any user and application over any network or cloud infrastructure.

Here is what Cisco SASE provides for the users:

• User Identity: You can control application access based on the user identity.
• Devices: You can connect your branch sites with a wide range of devices and enable your remote workers to connect from their workstations from any place.
• Services: You can limit access and usage only to defined services.

Connect with Cisco SD-WAN

You can use two available Cisco SD-WAN solutions:

• Cisco SD-WAN powered by Meraki: It gives you the control to build a Cisco SASE solution according to current requirements and easily adapts to future requirements (network security and endpoint management converges to one platform, most simply). The platform takes the complexity out of every step of the enterprise Cisco SASE journey with open APIs for seamless integration across technologies and third-party systems.
• Cisco SD-WAN powered by Viptela: It provides a secure, programmable, open, and scalable cloud architecture. By using the vManage console, you can quickly establish a Cisco SD-WAN overlay fabric to connect data centers, branches, campuses, and colocation facilities. Also, you can improve network speed, security, and efficiency.

The advantage of staying with a single vendor: these particular products often have tight integrations as they move towards a Cisco SASE offering.

Cisco SD-WAN overlay management: you can use dedicated management software and build auto tunnels to the Cisco Umbrella SIG platform.

The Cisco SD-WAN overlay can manage traffic sent to the SIG: the SIG platform will manage the traffic security policies.

Connect with Cisco AnyConnect

Cisco AnyConnect is a security endpoint agent that provides users with simple, highly secure access to the internet or the enterprise network from any device, at any time, in any location while protecting the organization. Cisco AnyConnect provides security services such as remote access, posture enforcement, web security features, and roaming protection. 

The Cisco AnyConnect agent enables users to access on-premises corporate resources by connecting to VPN concentrators at the Data Center perimeter. The agent also enables users to use local internet breakouts and access both the internet and cloud hosted SaaS applications through the Cisco Umbrella SIG.

Control with Cisco Umbrella

Cisco Umbrella unifies firewall, secure web gateway, DNS, and CASB functionality in one single integrated cloud-native platform. Umbrella as a micro-services-based architecture with dozens of points of presence around the world provides the scale and reliability required to secure remote workforce and branch networks.

The Cisco Umbrella security platform provides VPN connectivity to corporate sites, such as Data Centers or branch sites, as well as remote workers from anywhere at any time. The Cisco Umbrella provides a native Cisco Umbrella agent but also supports the Cisco AnyConnect.