Cisco Security from the Network Outward

Katherine Blough
  • 0.0 (0)
  • Technology

What if your network infrastructure could help defend itself against cyberattacks—even before a software vulnerability is permanently patched? In the premiere episode of Cisco Security from the Network Outward, we explore how eBPF, Tetragon, and Cisco Live Protect are changing the way we think about protecting network infrastructure. We'll break down how eBPF enables programmable capabilities within the Linux kernel, how Tetragon uses those capabilities for runtime security and observability, and how Cisco Live Protect brings targeted vulnerability mitigation to supported Cisco Smart Switches. In this episode, you'll discover: eBPF explained: What it is, how it works, and why it's becoming an important technology in modern cybersecurity. Inside Tetragon: How runtime observability and enforcement help identify and control potentially malicious behavior. Cisco Live Protect: How CVE-specific Shields can help mitigate supported vulnerabilities while organizations prepare permanent software updates. Monitor versus Enforce: Why observing suspicious behavior is different from actively blocking it. The bigger picture: How these technologies fit into Cisco's evolving approach to integrating security directly into network infrastructure. Whether you're a network engineer, cybersecurity professional, solutions architect, or Cisco partner, this episode provides a practical foundation for understanding how security is moving deeper into the network. Coming up next: We'll take a closer look at what actually happens when an attacker attempts to exploit a vulnerability protected by a Cisco Live Protect Shield. Cisco Security from the Network Outward is an independent educational podcast and is not affiliated with or endorsed by Cisco Systems.

Episodes

  1. 15h ago

    Episode 4: Cisco Hypershield — Distributed Security Enforcement, DPUs, and the Evolution of Network Security

    What if security enforcement could move beyond traditional firewalls and become an integral part of the infrastructure protecting your applications and workloads? In this episode of Cisco Security from the Network Outward, we explore Cisco Hypershield, a distributed security architecture designed to bring protection closer to the workloads and infrastructure that need it. We'll break down how Hypershield uses technologies such as eBPF, hardware acceleration, and Data Processing Units (DPUs) to enable distributed security enforcement across supported environments. In this episode, we'll explore: Cisco Hypershield explained: What it is and how it differs from traditional firewall architectures. Distributed security enforcement: Why bringing security closer to workloads can improve protection and scalability. eBPF and DPUs: How software programmability and specialized hardware support modern security architectures. AI-assisted security operations: How automation can help organizations manage policies and respond to emerging threats. Security without disruption: How supported deployment models can help validate security changes before enforcement. The bigger picture: How Hypershield complements Cisco Secure Workload, Secure Firewall, and other enterprise security technologies. Whether you're a network engineer, cybersecurity professional, solutions architect, or Cisco partner, this episode provides a practical introduction to the technologies and architectural concepts behind Cisco Hypershield. Coming up next: Inside the Cisco Smart Switch—exploring Silicon One, IOS XE, eBPF, and Cisco Live Protect. Cisco Security from the Network Outward is an independent educational podcast and is not affiliated with or endorsed by Cisco Systems.

  2. 1d ago

    Episode 3 · Cisco Secure Workload: Understanding Microsegmentation and Stopping Lateral Movement

    What happens after an attacker gains access to your network? How do you prevent a single compromised system from becoming a much larger security incident? In this episode of Cisco Security from the Network Outward, we explore Cisco Secure Workload and the critical role of microsegmentation in protecting modern enterprise applications. We'll examine how Secure Workload helps organizations understand application dependencies, visualize communication between workloads, and implement granular security policies that limit unnecessary connectivity and reduce opportunities for lateral movement. In this episode, we'll explore: Microsegmentation explained: Why traditional network segmentation isn't always enough to protect today's distributed applications. Application dependency mapping: How Cisco Secure Workload provides visibility into east-west traffic and workload communication. Zero Trust and least privilege: How contextual security policies help restrict communication to what applications actually need. Stopping lateral movement: How microsegmentation can help contain threats when a workload is compromised. From visibility to enforcement: Why understanding application behavior is essential before deploying restrictive policies. Real-world applications: How microsegmentation can help protect critical enterprise systems, including ERP, MES, and manufacturing environments. Whether you're a network engineer, cybersecurity professional, solutions architect, or Cisco partner, this episode provides a practical foundation for understanding how workload-level security strengthens an organization's overall cybersecurity architecture. Coming up next: Cisco Hypershield—exploring distributed security enforcement, DPUs, and the evolution of network security. Cisco Security from the Network Outward is an independent educational podcast and is not affiliated with or endorsed by Cisco Systems.

  3. 2d ago

    Episode 2 · Inside a Live Protect Shield: What Actually Happens When an Exploit Is Attempted?

    Episode 2: Inside a Live Protect Shield — What Actually Happens When an Exploit Is Attempted? What happens when an attacker attempts to exploit a vulnerability on a Cisco Smart Switch—and a Live Protect Shield is in place? In this episode of Cisco Security from the Network Outward, we go behind the scenes of Cisco Live Protect to explore how targeted runtime security can help detect and block malicious behavior before an attacker successfully exploits a supported vulnerability. Using a hypothetical attack scenario, we'll follow an exploit attempt through the switch's software environment and examine how eBPF, Tetragon, and Cisco Live Protect work together to provide CVE-specific mitigation. In this episode, we'll explore: How a Live Protect Shield recognizes targeted exploit behavior. The difference between Monitor and Enforce modes. What happens when a Shield blocks a malicious operation. How administrators can verify Shield activity and effectiveness. The operational lifecycle of a Shield, from deployment through permanent software remediation. Why Live Protect complements traditional security controls but doesn't replace software patching. Whether you're a network engineer, cybersecurity professional, solutions architect, or Cisco partner, this episode offers a practical look at how runtime security helps protect modern network infrastructure. Coming up next: Cisco Secure Workload—understanding microsegmentation and stopping lateral movement. Cisco Security from the Network Outward is an independent educational podcast and is not affiliated with or endorsed by Cisco Systems.

  4. 3d ago

    Episode 1: eBPF, Tetragon, and Live Protect

    In the premiere episode of Cisco Security from the Network Outward, we explore how eBPF, Tetragon, and Cisco Live Protect are changing the way we think about protecting network infrastructure. We'll break down how eBPF enables programmable capabilities within the Linux kernel, how Tetragon uses those capabilities for runtime security and observability, and how Cisco Live Protect brings targeted vulnerability mitigation to supported Cisco Smart Switches.

  • 4 Episodes

About

What if your network infrastructure could help defend itself against cyberattacks—even before a software vulnerability is permanently patched? In the premiere episode of Cisco Security from the Network Outward, we explore how eBPF, Tetragon, and Cisco Live Protect are changing the way we think about protecting network infrastructure. We'll break down how eBPF enables programmable capabilities within the Linux kernel, how Tetragon uses those capabilities for runtime security and observability, and how Cisco Live Protect brings targeted vulnerability mitigation to supported Cisco Smart Switches. In this episode, you'll discover: eBPF explained: What it is, how it works, and why it's becoming an important technology in modern cybersecurity. Inside Tetragon: How runtime observability and enforcement help identify and control potentially malicious behavior. Cisco Live Protect: How CVE-specific Shields can help mitigate supported vulnerabilities while organizations prepare permanent software updates. Monitor versus Enforce: Why observing suspicious behavior is different from actively blocking it. The bigger picture: How these technologies fit into Cisco's evolving approach to integrating security directly into network infrastructure. Whether you're a network engineer, cybersecurity professional, solutions architect, or Cisco partner, this episode provides a practical foundation for understanding how security is moving deeper into the network. Coming up next: We'll take a closer look at what actually happens when an attacker attempts to exploit a vulnerability protected by a Cisco Live Protect Shield. Cisco Security from the Network Outward is an independent educational podcast and is not affiliated with or endorsed by Cisco Systems.

Information