Cisco TrustSec

About Cisco TrustSec

You need to segment your network to protect critical business assets. However, traditional approaches are complex. Cisco TrustSec software-defined segmentation is simpler to enable than VLAN-based segmentation. The policy is defined through security groups. It is open through IETF, available within OpenDaylight, and supported on third-party and Cisco platforms. Segment devices without redesigning the network. Easily manage access to enterprise resources. Restrict lateral movement of threats with micro-segmentation. Scale fast and enforce policies consistently across the network. Streamline security policy management across domains. Use Cisco ISE to manage TrustSec security group tags and share information with other group-based policy schemes. Forrester Consulting conducted an analysis of customers using TrustSec software-defined segmentation in production networks. The findings: TrustSec reduced operational costs by 80 percent and enabled policy changes 98 percent faster.