Migrate & modernize: Supercharging your Cisco Nexus refresh with ACI

June 9, 2021
Jeremiah Cornelius
Technical Leader for Alliances and Partners at AlgoSec
Cynthia Broderick
DC Networking, Business Development at Cisco

If you still have Cisco Nexus 7000 devices in your environment, surely you have been inundated with end-of-life warnings and next-gen messaging touting the benefits of upgrading to Nexus 9000 with Cisco ACI.

We know, modernizing your infrastructure can be a real pain, but with change also comes opportunity!

Find out in this session how to leverage your Nexus refresh to increase your efficiency and productivity, and reduce security concerns at the same time.

AlgoSec’s Jeremiah Cornelius, along with Cisco’s Cynthia Broderick, will guide you on how to:

 

Relevant Resources
Cisco algosec

Cisco & AlgoSec achieving application-driven security across your hybrid network

Your network extends into hybrid environments and may include private clouds running Cisco ACI, and on-premises devices. Managing network security policies in your multi-vendor estate is complex. Because your network is made up of multiple vendors and each part of your network estate is managed in its own silo, it is tough to get centralized management of your entire network. Making changes is a chore and validating security is difficult. Learn how to unify, consolidate, and automate your entire network security policy management across your Cisco and multi-vendor estate. In this session Roxana Diaz, Worldwide Technical Solutions Architect at Cisco, and Yonatan Klein, AlgoSec’s Director of Product, will discuss how to manage the Cisco and multi-cloud estate and how to: Capitalize on your Cisco ACI investment to take advantage of its full capabilities Bring centralized visibility, automation, and compliance monitoring into your Cisco and multi-vendor network ecosystem Get full visibility of your entire hybrid network estate, including items within the Cisco ACI security environment, as well as outside it, including Cisco firewalls and routers, as well as multi-vendor devices. Take advantage of Cisco Tetration Analytics and AlgoSec’s intelligent discovery to get a full picture of your network and application traffic and to design and provision a micro-segmentation network policy design. Unify, consolidate, and automate your network security policy management Proactively assess risk throughout your entire network, including Cisco ACI contracts, and recommend the necessary changes to eliminate misconfigurations and compliance violations

AlgoSec’s integration with Cisco ACI

In this demo you’ll can learn about the AlgoSec integration with ACI. Learn how the integration can provide joint customers with visibility, risk analysis and regulatory compliance of the ACI environment. Additionally, learn how to make policy changes to allow connectivity within the ACI

CISCO_ACI_NEXUS_RC

Modernize your network with Cisco Nexus & ACI

Modernize your network and harness the power of Nexus & Cisco ACI with AlgoSec

Watch this short video and see how you can easily modernize your infrastructure with AlgoSec and upgrading your Cisco nexus switches to ACI

Partner Solution Brief: AlgoSec and Cisco

Partner Solution Brief: AlgoSec and Cisco

AlgoSec manages network security policies throughout their lifecycle, from discovering application connectivity requirements through ongoing change management and proactive risk analysis, to secure decommissioning. Delivering complete visibility into firewalls and cloud security controls from a unified console, AlgoSec simplifies, automates and orchestrates security policy management for Cisco physical, virtual and cloud devices to accelerate application delivery while ensuring security and continuous compliance across the enterprise

Provision Application Connectivity

AlgoSec makes it easy to securely provision, maintain and decommission connectivity required by business applications. By automatically mapping application-connectivity requirements to the underlying network/cloud infrastructure, AlgoSec accelerates application delivery and minimizes outages while enforcing security and compliance across the hybrid data center/cloud environment. payroll

See and Understand Complex Network Security Policies

AlgoSec provides visibility and analysis of complex network security policies across virtual, cloud and physical environments to simplify security operations, including policy cleanup, troubleshooting, auditing and risk analysis. Security and operations teams can simply and automatically optimize the configuration of Cisco firewalls, routers and SDN solutions to ensure security and compliance.

Automate Security Policy Change

AlgoSec automates the security policy change management process and delivers hands-free policy push for Cisco Firepower and ASA firewalls, IOS routers, Layer-3 switches and Cisco ACI. By eliminating guesswork though intelligent change management workflows—from design and submission to proactive risk analysis, implementation, validation and auditing—AlgoSec helps operations and security teams save time, avoid manual errors and reduce risk.

Get the Most out of Your ACI Investment

AlgoSec’s uniform security policy management transcends legacy networks, cloud and WAN all the way to your ACI fabric, delivering full security visibility across the different estates that comprise your network. AlgoSec brings firewalls and the ACI fabric into a single-pane-of-glass for comprehensive management and automated workflow to execute and assess the impact of changes. AlgoSec enables zero-touch changes end to end by automatically creating contracts on ACI and updating security policies on firewalls in the data center and at its perimeter. Get the Most out of Your ACI Investment

Micro-Segmentation and Policy Enforcement

AlgoSec leverages Cisco Tetration as well as other data sources and sensors to discover application flows by quickly learning how application use the network. AlgoSec automatically generates whitelist policies based on discovered connectivity, and pushes them to various security constructs (firewalls, ACI contracts) to enforce east-west filtering. AlgoSec also enhances security by ensuring consistent and continuous end-to-end implementation of micro-segmentation policy across the entire network.

Ease the Migration to Firepower

With the AlgoSec solution, you can easily migrate existing firewall rule-sets to Cisco Firepower. The solution maps and cleans the existing network security policy rule-set, automatically translates the rules to Firepower, and pushes them with zero-touch to Firepower devices (via FMC). As part of the migration process AlgoSec also performs what-if risk analysis and provides full documentation of changes. Supported Cisco Products and Services
  • Cisco Firepower Management Center
  • Cisco ASA Series Firewalls (including virtual versions for Amazon Web Services, VMware, Microsoft Azure and Firepower Services)
  • Cisco PIX Security Appliance
  • Cisco Firewall Services Module (FWSM)
  • Cisco Layer-3 Switches
  • Cisco Security Manager
  • Cisco IOS, IOS-XR and Nexus Routers (5K, 7K, 9K), including ACLS and complex VRF architectures with VRF leakage
  • Cisco Application Centric Infrastructure (ACI)
  • Cisco Tetration Analytics
  • Cisco Identity Services Engine (ISE)
Key Benefits
  • Quick discovery and provision of required connectivity to accelerate application delivery and minimize
  • Zero-touch, intelligent workflows for policy changes on Cisco firewalls, routers and ACI to eliminate misconfigurations and
  • Proactive assessment of risk of change requests, routing only potentially risky changes through manual
  • Cleanup and optimization of firewall and router policies quickly and
  • Simplified, automated internal and regulatory firewall audits that reduce time and cost by as much as 80%.
  • Every security policyrule and change request tied to respective business application to prioritize policy changes and threat- mitigation based on impact to the business.

Comprehensive Support for Heterogeneous Environments

AlgoSec seamlessly integrates with all leading brands of traditional and next-generation firewalls and cloud security controls as well as SIEM solutions, routers, load balancers and web proxies, to deliver unified security policy management across any heterogeneous cloud, SDN or on-premise network. list of companies