Techaisle Blog

In an era where cyberattacks are increasingly sophisticated and identity remains the prime target, Cisco’s recent unveiling of Duo Identity and Access Management (IAM) marks a pivotal moment in cybersecurity. This new "security-first" IAM solution, building on Duo’s trusted multi-factor authentication (MFA) capabilities, is designed to combat modern AI-driven identity threats while preserving user productivity. Far more than just an incremental update, Duo IAM represents Cisco’s strategic commitment to transforming how organizations, from the smallest businesses to the largest enterprises, secure their digital identities and foster true cyber resiliency.

The Escalating "Identity Crisis" and Duo IAM's Timely Arrival

The cybersecurity landscape is grappling with what Cisco President and Chief Product Officer Jeetu Patel aptly terms an "identity crisis." Attackers are no longer merely "hacking in"; they are "logging in" using compromised credentials, a tactic accounting for a staggering 60% of Cisco Talos Incident Response cases in 2024. This alarming trend underscores a critical weakness in traditional IAM solutions, which, according to Cisco, have often failed to prioritize security as a foundational element. Cisco's response to this crisis is Duo IAM, a comp

RSA Conference continues to be the epicenter for cybersecurity innovation, and this year, Cisco made significant waves with a series of announcements that underscore its commitment to delivering an integrated security platform. Moving beyond disparate point solutions, Cisco’s vision focuses on empowering customers with better security outcomes, reduced operational complexities, and optimized costs. This blog post dives into the key announcements from Cisco at RSAC, highlighting their advantages and what sets Cisco apart in an increasingly crowded security landscape.

The Core Vision: An Integrated Security Platform

At the heart of Cisco's announcements lies a fundamental belief that the cybersecurity industry is undergoing rapid transformation, particularly with the rise of AI-based workloads. Recognizing the novel security challenges these advancements introduce, Cisco has been strategically focusing on converging individual security solutions and infrastructure domains into a cohesive platform. As Tom Gillis, Senior Vice President and General Manager, Cisco Infrastructure & Security, eloquently stated, the goal is to enable customers to achieve superior security with lower operating and capital expenses. This platform approach is not just about bundling products; it's about deep integration that allows for enhanced visibility, coordinated enforcement, and streamlined management.

Securing the AI Revolution: AI Defense and Beyond

One of the most pertinent announcements revolves around security for AI. Cisco has now made its capabilities for securing both the development and usage of AI applications generally available. This isn't merely about monitoring AI; it involves fine-grained controls for validating AI models and securing the use of 3^rd party SaaS applications like ChatGPT and DeepSeek. For organizations developing their own AI-powered applications, Cisco offers the ability to enforce crucial guardrails.

The significant advantage is that this robust AI security is enforced on existing Cisco infrastructure, eliminating the need to deploy new, standalone solutions. The telemetry gathered from AI security measures seamlessly feeds into Splunk and provides enhanced visibility within Cisco XDR. This integration ensures a holistic view of the security posture, encompassing traditional threats and emerging AI-related risks.

Furthermore, Cisco acknowledges that securing AI requires an ecosystem approach. This is evidenced by its brand-new product and go-to-market partnership with ServiceNow. This collaboration aims to hydrate ServiceNow's AI risk and governance portfolio with Cisco's security intelligence, providing joint customers with comprehensive value as they increasingly adopt AI. This partnership spans visibility into application usage and model vulnerabilities to real-time protection and incident triage. By working closely with leaders in adjacent domains, Cisco is differentiating itself by offering a more comprehensive and integrated solution for managing AI risks.

The Distributed Future of Security: Hybrid Mesh Firewall

Cisco is betting big on a future where security enforcement is distributed, moving beyond the limitations of traditional perimeter-based firewalls. Its hybrid mesh firewall initiative embodies this vision, fusing security into the very fabric of network connectivity. This approach extends across physical and virtual firewalls and modern workload environments like VMs and containers, leveraging technologies such as Secure Workload, Isovalent Enterprise Platform for Cilium (with eBPF), and Hypershield. The key advantage here is the fungibility of enforcement – customers can apply consistent security policies across diverse environments without the need for a disruptive "rip and replace". Licensing is designed to be flexible, with customers using a pool of tokens that can be applied to different enforcement points as their needs evolve.

A groundbreaking component of this strategy is the introduction of new smart switches where every switch port functions as a layer 4 stateful line-rate firewall. This radical integration simplifies network architecture, reduces operational overhead, and addresses challenges like space and cooling. This is a unique offering in the market, showcasing Cisco's ability to deeply embed security within its core networking infrastructure.

Recognizing that customers often have heterogeneous environments, Cisco's hybrid mesh firewall will also support the security policy management of third-party firewalls. While initially focusing on layer three and layer four policy groups for segmentation, this capability allows for centralized policy management through Security Cloud Control. Support includes major vendors like Fortinet, Palo Alto, Juniper, and Checkpoint. This demonstrates Cisco’s commitment to providing value even in multi-vendor environments, moving towards a unified security posture management.

The cybersecurity landscape is a relentless storm. For Small and Medium Businesses (SMBs) and Midmarket enterprises, navigating this storm is becoming increasingly complex. Limited resources, widening attack surfaces due to digital transformation, and a sheer volume of sophisticated threats create a challenging environment. Historically, many businesses adopted a "best-of-breed" approach, selecting individual point solutions for specific security tasks – a firewall here, an endpoint protection tool there, perhaps a separate email security gateway. While logical on the surface, this strategy is showing its age and limitations.

New Techaisle survey data (Techaisle SMB & Midmarket Security Adoption Trends) reveal a significant and growing trend: a clear shift in preference towards end-to-end security platforms, particularly as businesses scale. While the smallest companies still lean towards point solutions, the momentum across the broader SMB and Midmarket segments is undeniably moving towards integrated platforms. This shift isn't arbitrary; it's a strategic response to the operational realities and escalating security demands these businesses face.

This post delves into the Techaisle data, explores the compelling reasons driving this platform preference, and highlights how leading vendors, such as Palo Alto Networks and Cisco, are addressing this need with their evolving platform strategies.

Decoding the Data: A Clear Trend Emerges

The Techaisle SMB & Midmarket survey data paints a nuanced picture, directly correlating company size with security solution preference:

• The Smallest Businesses (1-9 employees): These micro-businesses exhibit the strongest preference for task-specific, best-of-breed solutions, with 56% favoring this approach, compared to 44% who prefer end-to-end platforms. This often reflects simpler IT environments, potentially tighter budgets favoring incremental purchases, and perhaps a perceived ease of managing distinct, single-function tools when the overall infrastructure is limited.
• The Growth Transition (10-99 employees): As companies enter the core small business segment, the preference for point solutions remains dominant, peaking at 74% for the 50-99 employee bracket. However, the foothold for platforms is strengthening, indicating that even at this size, the complexities prompting platform consideration are beginning to surface for over a quarter of businesses.
• The Midmarket Shift (100-999 employees): This segment marks a significant inflection point. While core midmarket (100-999 employees overall) still shows a majority (62%) leaning towards point solutions, the preference for end-to-end platforms rises substantially to 38%. Within this, the preference for platforms increases steadily with size, ranging from 32% for 100-249 to 40% for 250-499 and 42% for 500-999. The demands of managing a more complex infrastructure are clearly pushing businesses towards integration.
• Upper Midmarket & Beyond (1000+ employees): Here, the preference decisively tips towards platforms. In the 1000-2499 employee range, 46% prefer platforms, rising to 52% (a majority) for the 2500-4999 bracket. Aggregated, the Upper Midmarket (1000-4999) sees 49% favoring platforms. For these larger organizations, the benefits of integration, visibility, and centralized management become paramount.
• Overall View: While the overall SMB segment (1-999 employees) technically shows a 65% preference for point solutions due to the weight of the smaller company brackets, the Midmarket segment (100-4999 employees) demonstrates a much stronger inclination towards platforms, nearing parity and showing a clear preference in the upper tiers.

The overarching narrative is clear: as organizations grow in size and complexity, the perceived value and practical necessity of an integrated security platform increase significantly.

Why the Pivot to Platforms? Drivers of the Shift

Rodney Clark, SVP of Partnerships and Small & Medium Business, Cisco, and Elisabeth De Dobbeleer, SVP of Cisco Partner Program, Cisco are on a mission. At the recently concluded Cisco Partner Summit 2024, Cisco unveiled its new partner program, the Cisco 360 Partner Program, which aims to redefine how partner value is recognized and rewarded. This program fosters shared success, enhances partner profitability, and simplifies the partner experience. Cisco is streamlining its partner structure by transitioning from four roles (Integrator, Provider, Advisor, and Developer) to two main tiers: Cisco Partner and Cisco Preferred Partner. This change is not due to a lack of recognition of partners' diverse roles or a disregard for the ecosystem. On the contrary, Cisco is enhancing its focus on the ecosystem, acknowledging that partners can fulfill multiple roles. This simplified structure allows partners to achieve the Preferred Partner status through a value index that recognizes metrics spanning various business models.

Cisco currently boasts a best-in-industry partner program, recognized for its strong market presence, trust, and reliability. However, the program's complexity and operational challenges are hindering its effectiveness. The multifaceted benefits, while encouraging partner adoption, can take time to manage and track. As Cisco looks to evolve its partner program, it focuses on simplifying the process and shifting towards outcome-based metrics. By focusing on profitability and operational efficiency, Cisco aims to ease the transition for partners and ensure a smooth evolution of the program.