[ad_1]
Introduction
With conventional firewalls, community safety groups are charged with the heavy lifting of deploying new options. They’re chargeable for a wide range of prices, together with licensing, equipment, associated infrastructure updates, and ongoing upkeep. From a time-value perspective, inserting firewalls additionally creates further complexity for NetOps and SecOps groups, delaying time to deployment in manufacturing environments as a consequence of design and testing required to combine the brand new firewall into the community.
To change into extra agile, organizations are more and more transferring in direction of deploying SaaS-based safety choices hosted immediately by distributors. In line with Gartner, by 2025, 30% of recent deployments of distributed branch-office firewalls will swap to firewall-as-a-service, up from lower than 10% in 2021.
Scale back administration and deployment complexity
Cisco has collaborated with AWS to simplify the way in which organizations safe their public cloud infrastructure utilizing Firewall-as-a-Service (FWaaS) the place Cisco Safe Firewall is built-in with the AWS Gateway Load Balancer (GWLB). AWS Gateway Load Balancer permits elastic scaling, improves availability, and simplifies insertion and administration of the Cisco Safe Firewall. Beginning with model 7.1 of Cisco Safe Firewall Menace Protection, we assist integration with AWS Gateway Load Balancer.
What does this imply for Cisco Safe Firewall prospects?
Merely put, expertise your firewall working for you, not the opposite means round. Cisco Safe Firewall-as-a-service on AWS allows you to merely devour our digital firewall in AWS, with out rearchitecting, deploying, or managing new infrastructure. Now, you’ll be able to simplify safety at its core by leaving the heavy lifting to us. Different advantages embody:
- Simplified safety structure – Provisioning of firewalls and management airplane infrastructure are managed by Cisco, saving time and accelerating worth.
- Versatile and scalable safety – Elastic firewall infrastructure meets demand by scaling as throughput necessities change.
- Safety that works with you – Simplified firewall insertion delivers the safety you want, with out having to rearchitect your community. Moreover, visitors routing configurations and firewall monitoring are carried out by Cisco.
- Keep agile – Say goodbye to the standard refresh cycle and keep immediately updated with the most recent firewall software program variations and IPS signatures. No {hardware} required.
- Obtain higher ROI, quick – Our OPEX-based mannequin will exhibit to your CFO that you simply’re each a know-how and enterprise companion. And also you’ll cut back upfront prices, paying for under what you want.
Clients additionally profit from assist for dynamic insurance policies for AWS tags, plus improved risk detection, simplified customization, and enhanced efficiency of our newest, industry-leading open-source IPS, Snort3.
Structure and use instances for Safe Firewall-as-a-service on AWS
Cisco Safe Firewall-as-a-service on AWS consists of:
A.) Managed Gateway Load Balancer endpoints (MGE) – MGEs reside within the buyer’s VPC/account and are chargeable for routing the visitors from the shopper’s VPC to the Cisco-managed safety VPC, the place it is going to be inspected.
B.) Gateway Load Balancer (GWLB) – GWLB resides on the Cisco managed VPC/account, that is chargeable for internet hosting the Safe Firewall equipment fleet.
Collectively, these elements convey best-in-class managed safety infrastructure for purchasers utilizing AWS.
With Cisco Safe Firewall-as-a-service on AWS, we intend to assist:
- Inspection for ingress (inbound) and egress (outbound) visitors from and to the web
- East-West (E/W) visitors between subnets (assets) inside a VPC (Intra-VPC) and between VPCs (Inter-VPC)
- Visitors between the on-premises community and buyer VPC’s, when handed over a Transit Gateway utilizing VPN.
East-West visitors
Â
Ingress and egress visitors
Â
Select between absolutely managed and partially managed Firewall-as-a-service
We acknowledge some prospects desire a absolutely managed service whereas others want to configure their very own coverage. To fulfill each, Cisco is providing {a partially} managed Firewall-as-a-service possibility as effectively. This selection supplies the shopper with a lot of the advantages of the absolutely managed service above, however with {a partially} managed setting the place Cisco continues to handle the infrastructure, however lets the shopper retain coverage administration obligations.
And if prospects want to handle and deploy their very own
Trying to handle and deploy your personal Cisco firewalls on AWS? The discharge of Cisco Safe Firewall Menace Protection 7.1 introduces GENEVE assist, integrating Cisco Safe Firewall with AWS Gateway Load Balancer, giving prospects full management of their infrastructure whereas simplifying deployment, administration, and scaling of firewalls. This integration ensures visitors to and from AWS VMs are inspected by Safe Firewall with out requiring any routing modifications. This permits quickly scalable, extremely out there safety with simplified insertion, eradicating the necessity to rearchitect your community.
Subsequent Steps
Cisco Safe Firewall-as-a-service on AWS shall be out there within the first half of 2022. Contact your Cisco gross sales consultant to enroll in a restricted preview launch.
Extra Sources
Amazon Companion Community: Cisco Options on AWS
Cisco Safe Firewall Menace Protection Digital for Public Cloud
At-a-Look: Cisco Safe Firewall
We’d love to listen to what you suppose. Ask a Query, Remark Under, and Keep Related with Cisco Safe on social!
Cisco Safe Social Channels
Share:
[ad_2]
