Item: Cisco Cyber Vision
Rating: 9
Author: Steffen Bodensohn

Overall Satisfaction with Cisco Cyber Vision

Use Cases and Deployment Scope

It's about, first of all finding out which kind of devices are inside of the OT networks in the production networks, but we also want to connect the staff to our identity service engine with PXgrid. So we want to integrate the OT guys and the IT can better interact and work together. That's why we want to use this tool.

Pros and Cons

Pros

Well, the product for example, shows vulnerabilities from different devices. It might be a server in the production, but it might also be a PLC or something like that. So we see the east west traffic with this tool. And so for example, our security guys, they can check if there are any defense mechanisms inside of the network that we can do to support the security inside of the production. Because when you have a production, you sometimes have old devices you cannot update for certain reasons. So you need to find another way to protect these devices, especially when everything is interconnecting more and more. For example, data needs to be analyzed in the cloud and so you need to connect these old devices in some ways secure to this network and that's where the product helps us.

Cons

I cannot really answer this question because we use this tool since a half year and to be honest, I'm pretty satisfied with this product. Probably an improvement is that only one Cyber Vision Center is possible as far as I know and probably would be great to have a redundancy in the Cyber Vision Center.

Return on Investment

I don't really see a negative impact. Just a positive impact. Because you get the insights all positive. Because I mean of course someone has to take care about this product, but this is like every tool and every product you use, someone has to take care about that, but the benefits is definitely there.

Visibility

Absolutely, because now you see everything that's happening that's not in the classic IT and now you can take care of the things that's going on there and help the automation engineers, not the IT engineers, but the automation engineers to increase visibility and the visibility of the network. Especially there are new governance regulations like NIST two and it helps us very much to support this new governance regulations that will come.

Simplicity

I wouldn't say it's real time, so it's more reactive because we check out what's going on and you see a picture. We can analyze it in a original perspective, but of course you're right. Our idea is to, for example, create a baseline of what is normal and then in real time with cyber vision we would be possible to see a violation of the baseline and then instantly react on that. But that is the big picture we have in the future.

Scalability

Because I think you can scale it very good. You can monitor lots of devices, but it has some limitations especially in, that's why I don't give it a 10, especially in the visibility. So when you have a map, you're limited to the amount of connections and devices to display on a map and it would be great to see there more devices inside of the map.

Alternatives Considered

We had a brief look on another tool, but at the end of the day we really focused lots of Cisco Cyber Vision because we see the synergy effect because you can deploy all the sensors, like I said before on the Cisco Catalyst Switches itself as a Docker container and that's really a big benefit. And there is no other tool I'm aware of that you are able to do this? Yeah, we are a small team with just a couple of people. We need to work very efficient and this helps us to be very efficient.

Key Insights

Do you think Cisco Cyber Vision delivers good value for the price?

Not sure

Are you happy with Cisco Cyber Vision's feature set?

Yes

Did Cisco Cyber Vision live up to sales and marketing promises?

Yes

Did implementation of Cisco Cyber Vision go as expected?

Would you buy Cisco Cyber Vision again?

Yes

Likelihood to Recommend

Where it's well suited? So like I said, so when you don't have any insights inside of your network, inside of your production especially, this is where you can really use this product because it's great because you cannot do some active discovery. You need to do passive discovery, you can deploy it on a Cisco Switches so you don't need some extra devices or do some remote fan to send this traffic to some central controller. You have everything on the edge and I think this is a great benefit of Cisco Cyber Vision.

Comments

Please log in to join the conversation

Cisco Cyber Vision Review