I liked this; took a lot of notes and your breakdown on the Cisco Zero Trust 'guiding' principles. The Airport Analogy makes perfect sense. My mind wants to explode when you detail data center 'Asses the app context - map application and workload communication, and analyze app behavior'. So in my mind a big challenge would be taking a legacy / traditional IP addressing networks to this Zero Trust Network Access, deploying Cisco NAC, Cisco ISE, Cisco DNA, etc BUT ALSO trying to map application behavior in this environment. You touched on this briefly but I had to stop the video and think about that one element and statement; this could be a tremendous undertaking trying to map all the applications, checkpoints, SYSTEM to SYSTEM communications, APP to APP communications......and so on and so on.... Very Interesting!
You certainly need something with intelligence to understand application to application, system to system, and user to application / system. Check out Cisco Secure Workload and application dependency mappings. I am doing a Cisco Live Lab on that topic. Risk reduction and micro-seg.
I liked this; took a lot of notes and your breakdown on the Cisco Zero Trust 'guiding' principles. The Airport Analogy makes perfect sense. My mind wants to explode when you detail data center 'Asses the app context - map application and workload communication, and analyze app behavior'. So in my mind a big challenge would be taking a legacy / traditional IP addressing networks to this Zero Trust Network Access, deploying Cisco NAC, Cisco ISE, Cisco DNA, etc BUT ALSO trying to map application behavior in this environment. You touched on this briefly but I had to stop the video and think about that one element and statement; this could be a tremendous undertaking trying to map all the applications, checkpoints, SYSTEM to SYSTEM communications, APP to APP communications......and so on and so on.... Very Interesting!
You certainly need something with intelligence to understand application to application, system to system, and user to application / system. Check out Cisco Secure Workload and application dependency mappings. I am doing a Cisco Live Lab on that topic. Risk reduction and micro-seg.
Jason, great job! I loved the Airport Analogy.
Thanks JP!
Nice work Jason !
Cheers Brother!