The Cisco
Secure Access
difference

Discover how Cisco strengthens
your security resilience

Discover how Cisco strengthens your security resilience

Network-agnostic, single-vendor solution for consistent policy, zero-trust access, and a high-performance experience.

Industry analysts typically define security service edge as the consolidation of multiple security capabilities in a single, cloud-delivered service that includes secure web gateway (SWG), cloud access security broker (CASB), zero trust network access (ZTNA), and cloud firewall. Cisco provides much more. In addition to those capabilities, Cisco Secure Access secures your workforce with a more complete and robust set of capabilities that cut complexity, increase flexibility, and provide security resilience in a multicloud world.

We do this in two ways.

1

Looking beyond traditional SSE: Why stop there with a handful of capabilities? How much simpler and safer would security be if you could also deliver pervasive threat intelligence, end-to-end visibility, and even more from one security cloud platform? Our SSE endeavors to be comprehensive for true convergence. In addition to the core SSE capabilities above, Cisco Secure Access provides remote browser isolation (RBI), DNS layer security, cloud malware detection, and more.

Cisco Secure Access provides:

Secure private access: Securely protects all private apps, including non-standard ones that may use alternate ports/protocols, be multichannel, peer-to-peer, etc. Leverages seamlessly delivered Zero Trust Network Access (ZTNA) and VPNaaS for the broadest private application access.
Secure internet access: Secures internet access and controls public SaaS applications / cloud service usage across networks, branch offices, and roaming users.
Unified console: Defines policy for any user to any app to simplify the process of building security policies and drives consistency in policy definition — all in a single console.
App connectors: Provides secure connectivity and simplifies administrative tasks in establishing connectivity to private applications.
Full proxy/SWG: Provides deep, granular control of web traffic, including flexible policies for selective decryption of encrypted traffic.
Data loss prevention (DLP): Analyzes sensitive data both inline in real-time via SWG proxy and out-of-band via restful API to provide visibility and control to guard against sensitive data leaving your organization.

Cloud access security broker (CASB): Exposes shadow IT by providing the ability to detect and report on cloud applications in use across your environment to better manage cloud adoption, risk reduction, and the ability to restrict or block apps.
Firewall-as-a-Service (FWaaS): Blocks more by seeing more with deep visibility and control for traffic across all ports and protocols for increased security efficacy.
DNS-layer security: Blocks internet requests to malicious and unwanted destinations before a connection is even established — stopping threats over any port or protocol before they reach your network or endpoints.
Remote browser isolation (RBI): Isolates web traffic from the user device and the threat, so that users can safely access risky websites.
Secure malware analytics: Combines advanced sandboxing with threat intelligence in one unified solution to protect organizations from malware.
Cloud malware detection: Detects and removes malware from cloud-based applications and ensures that apps remain malware-free.

2

The Cisco Talos threat intelligence organization is an elite group of security experts devoted to providing superior protection for our customers, products, and services via:

Delivering trust and expertise at scale:

Threat data collection: Enormous scale and reach for inputs. 2.1 million+ malware samples processed daily.

2.1 M+

Threat analysis: Rapid speed of correlation and detection. 200+ new vulnerabilities discovered annually.

200+

Threat defense: Global distribution and protection. 400 billion security events every day.