Cisco Hypershield

A new security architecture that is more fabric than fence: Hypershield can be deployed in different form factors to extend security across the hybrid enterprise. The lightweight Hypershield agent can be deployed close to the workload in Linux environments and Kubernetes clusters. In addition to that, network based enforcement is offered in the form of Cisco Smart Switches and virtual machines.

Centralized intent-based policy model: No matter the form factor or location of the enforcement point, the policy being enforced is organized at a central location by the cloud-based management plane, Cisco Security Cloud Control. When a new policy is created or an old one is updated, it is compiled and intelligently placed on the appropriate enforcement points.

Kernel-level visibility and enforcement: The Hypershield agent is built on top of eBPF technology which provides a safe way to extend kernel capabilities without modifying the kernel itself or risking system stability. This allows Hypershield to gain deep visibility into workload behavior and implement fine grained security controls while ensuring applications continue to run.

Designed with AI at its core: Hypershield can automatically analyze large amounts of security data, provide intelligent recommendations and generate insights from the moment it starts observing your environment. The system helps security teams work more efficiently by automating complex analysis, decision making processes, testing and validating recommended policies in live production traffic while maintaining human oversight.