Cisco Multicloud Defense vs. Cisco TrustSec

For WAF functionality and delivery of websites, It's very well suited for traditional firewalling, if you're doing that already, it can be quite difficult to rearchitect everything around this product. So an example of that would be if, like us, you came from a datacenter style architecture within your cloud environment and you are trying to move to a more cloud-fronted architecture. Probably the best way to put it is that can be quite difficult, but once you've deployed, it gets easier operationally. So to kind of reverse engineer everything and then do everything again can be quite tedious in some ways. But that will be specific to people depending on where they're coming from with it.

Incentivized

• Control access to critical enterprise resources by business role, device type, and location, so policy changes can be made without redesigning the network.
• Easily manage access control and segmentation while maintaining compliance.
• Create and manage policies in an easy-to-use matrix.
• Reduce the need for costly network re-architecture by automating firewall rules and access control list (ACL) administration.

Incentivized

• DLP monitoring - key item for us which helps to view if anything which should leave our environment our or even between each part of network between/inside specific clouds
• Segmentation of subnet, basic but helpful to isolate each host into their own part of single subnet and connect them, including all visibility features which are offered by Cisco defense systems
• Allow/deny rules helps us to block, monitor and logs traffic passing in each direction of our environment

Incentivized

• Reduce operational expenses by simplifying network segmentation and defining security groups based on business roles, not IP addresses.
• Limit the impact of a data breach by quickly isolating and containing threats using technology already in your network.

Incentivized

• The ability to see traffic flowing and identify malicious traffic is amazing.
• The ease of setting up the connections of the cloud platforms is perfect.
• Dynamic based security policies allow for better protection.
• I don't have any detailed examples of improvement so instead I highlighted a couple of aspects that make the solution amazing.

Incentivized

• Help and solutions if needed, support

Incentivized

If it maintains its current direction it will be very disruptive in the cloud security space

Incentivized

Ease of Use

Incentivized

As of yet I havent logged a TAC case - It will be interesting to see how it is supported as a new product in the medium term

Incentivized

Cisco Multicloud Defense, Crowd Strike Falcon, and Arctic Wolf Cloud Posture Security Management System as a service SAAS platforms are very comparable platforms. Unfortunately for Croud Strike, they had a mishap recently that caused major downtime for many companies worldwide. I do not think that you would have to worry about this happening with Cisco Multicloud Defense.

Incentivized

• The insight that it provides allows us to move away from other tools and just utilize the Cisco Multicloud Defense.
• Insights into data usage provides tangible analytics.
• Ease of management and use allows for less in-depth and specialized training.

Incentivized

• Reduction in IT operational costs

Incentivized