Cisco Live Protect: Rapid, Non-Disruptive Security for Enterprise Networks
Cisco Live Protect offers a temporary solution for mitigating security vulnerabilities in network devices using compensating controls and EBPF technology, allowing for quick deployment without device reloading, with full availability expected by 2026.
MAIN POINTS FROM TRANSCRIPT
- Network devices are often neglected in security due to difficult patching and limited maintenance windows.
- Cisco Live Protect uses compensating controls, called Shields, for temporary vulnerability mitigation.
- EBPF technology and Tetragon agent enable granular security policies without device reloading.
- Cisco Live Protect is available for NX-OS, with iOS XE support expected by 2026.
TAKEAWAYS
- Compensating controls provide temporary security solutions until permanent fixes are available.
- EBPF allows for quick, granular policy deployment, enhancing device security.
- Monitor mode offers a non-intrusive way to test and observe security policies.
- Cisco Live Protect aims to reduce downtime by eliminating the need for device reloading during updates.