Protect Against Adversary-in-the-Middle with Cisco’s User Protection Suite

Protect Against Adversary-in-the-Middle with Cisco’s User Protection Suite

In the blog, Understanding & Defending Against Adversary-in-the-Middle (AiTM) Attacks, we reviewed the basics of an AiTM attack and how Duo can protect against it. To recap, in an AiTM attack, the attacker sits in between the user and the real web page and steals a user’s valid session cookies. This means that they can bypass traditional authentication controls. Talos, Cisco’s Threat Intelligence Group, reported on AiTM attacks back in 2019 as a method to…

Read More

Cisco Secure Access Wins Global Security Service Edge Customer Value Leadership Award

Cisco Secure Access Wins Global Security Service Edge Customer Value Leadership Award

It’s one thing to claim leadership in cloud security; it’s another to have that leadership acknowledged by industry experts. That’s why we’re thrilled to announce our recent recognition by Frost & Sullivan as the 2024 Customer Value Leader in the Global Security Service Edge Industry. This expert analyst award is a testament to both our commitment to innovation and our unique ability to partner with security leaders to navigate the complexity of securing cloud environments….

Read More

Helping Ivanti VPN Customers

Helping Ivanti VPN Customers

In January 2024, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a directive (with an update in February) mandating that all U.S. Federal agencies take Ivanti systems offline for remediation. Over 1,700 Ivanti systems have been compromised; affected Ivanti VPN products are Ivanti Connect Secure (formerly Pulse Secure) and Ivanti Policy Secure gateways. The vulnerabilities include CVE-2023-46805, CVE-2024-21887, CVE-2024-21888 and CVE-2024-21893. Cisco is helping customers move from Ivanti to Cisco Secure Access in order…

Read More

The Real Deal About ZTNA and Zero Trust Access

The Real Deal About ZTNA and Zero Trust Access

ZTNA hasn’t delivered on the full promise of zero trust Zero Trust has been all the rage for several years; it states, “never trust, always verify” and assumes every attempt to access the network or an application could be a threat. For the last several years, zero trust network access (ZTNA) has become the common term to describe this type of approach for securing remote users as they access private applications. While I applaud the…

Read More

ESG Survey results reinforce the multi-faceted benefits of SSE

ESG Survey results reinforce the multi-faceted benefits of SSE

When it comes to protecting a hybrid workforce, while simultaneously safeguarding internal resources from external threats, cloud-delivered security with Security Service Edge (SSE) is seen as the preferred method. Enterprise Strategy Group (ESG) recently conducted a study of IT and security practitioners, evaluating their views on a number of topics regarding SSE solutions. Respondents were asked for their views on security complexity, user frustration, remote/hybrid work challenges, and their take on the expectations vs. reality…

Read More

Bridging the IT Skills Gap Through SASE: A Path to Radical Simplification and Transformation

Bridging the IT Skills Gap Through SASE: A Path to Radical Simplification and Transformation

Imagine a world where IT isn’t a labyrinth of complexity but instead a streamlined highway to innovation. That world isn’t a pipe dream—it’s a SASE-enabled reality. As we navigate the complexities of a constantly evolving digital world, a telling remark from a customer onstage with me at Cisco Live in June lingers: “We don’t have time to manage management tools.” This sentiment is universal, cutting across sectors and organizations. An overwhelming 82% of U.S. businesses,…

Read More

Cisco Security + Partners = Greater Together

Cisco Security + Partners = Greater Together

It’s hard to believe that Cisco Partner Summit 2023 is right around the corner in Miami Beach, Florida on November 6th – 9th. Yes, you read that correctly. For the first time since 2017, we’re in a new location—lovely Miami Beach. It’s shaping up to be a great event, and I’m thrilled to get the opportunity to meet with many of our security partners onsite. The theme for this year is “Greater Together,” which really…

Read More