Techaisle Analyst Insights

Today's cybersecurity landscape is a complex maze, with a multitude of vendors contributing to a convoluted and intricate security stack. The evolution of security from traditional perimeter defenses around private data centers to a distributed network of branch offices, remote workers, and IoT devices has necessitated a radical shift in security strategies, with a focus on enforcement points across the network. At its core, security is a data challenge, where the sheer volume of data often hinders the identification of actionable insights, leading to an imbalanced signal-to-noise ratio and the prevalent issue of alert fatigue. Effective data connection across control points is crucial to transform low-level alerts into critical insights that demand immediate action.

Under the visionary leadership of Jeetu Patel, Executive Vice President and General Manager of Security and Collaboration, Cisco's security product portfolio has undergone a transformative evolution. This radical re-envisioning of security paradigms has significantly refined Cisco's security cloud solutions, streamlining the adoption process for an integrated security platform. In response to the complexities of distributed environments, Cisco introduced 'Hypershield,' a pioneering expansion of the hyper-distributed architecture concept tailored to meet the demands of hyper-distributed security. The strategic acquisition of Splunk has further fortified Cisco's capabilities, enabling it to manage the signal-to-noise ratio effectively. Leveraging Splunk's advanced data analytics, Cisco aims to mitigate alert fatigue by converting many low-level events into meaningful, actionable insights.

The Birth of the Cisco Security Cloud Platform

In June 2022, Cisco introduced the Cisco Security Cloud Platform at the RSA Conference, a visionary solution designed to streamline the complexity of managing disparate security tools. This platform offers a unified experience, ensuring secure connections for users and devices to applications and data, irrespective of location.

The platform's emphasis on openness provides a comprehensive suite for threat prevention, detection, response, and remediation at scale. At its core is a powerful firewall, enhanced with AI for superior analysis. Identity management is flawlessly integrated, allowing every Cisco security product to leverage AI-driven insights and user authentication.

Cisco addressed the challenge customers faced with the vast array of security products—approximately 30 products with over 1,000 variations—by significantly simplifying its portfolio. Customers now have a choice of three intuitive suites: User Protection, Cloud Protection, and Breach Protection. These suites are not merely bundled; they are fully integrated, facilitating seamless communication and improved functionality, making security management far more straightforward and efficient.

Tackling Hyper-Distributed Security with Cisco Hypershield

As an industry analyst, I am convinced that Cisco's recent strides in security innovation are nothing short of impressive. The 2023 launch of Cisco Multi-cloud Defense, Cisco XDR, Cisco Secure Access, and advanced firewall functionalities marked a year of significant progress. The introduction of Cisco AI Assistant was a testament to its commitment to continuous innovation. In 2024, Cisco took a giant leap by introducing Hypershield, a sophisticated, AI-enhanced, cloud-native security system set to redefine cybersecurity.

According to data from Techaisle, it is projected that the global IT expenditure of small and medium-sized businesses (SMBs) will escalate to a staggering US$1.35 trillion by 2024. Furthermore, this spending is anticipated to experience a compound annual growth rate (CAGR) of 5.7%, extending through 2028. Cisco is making a significant push into the SMB market, a segment where it has enjoyed steady growth. In fiscal year 2023, which concluded in July, the SMB segment was Cisco’s top-performing customer category for a third consecutive year. Cisco sees this segment as a $25 billion addressable market opportunity, captured with mid to high-tier SMBs transitioning to cloud and SaaS solutions. Notably, about 20% of Cisco’s SMB business comes from new customers every year, underscoring this segment's critical role in expanding Cisco’s reach and reflecting on the growing demand for technology amongst SMBs.

Cisco’s go-to-market in the SMB segment is partner-led, catalyzed with continuous partner-focused programs, initiatives, and marketing investments to foster robust relationships. According to the latest research by Techaisle, a significant majority of SMBs, 87%, depend on their partners for technology solutions. Furthermore, these SMBs channel nearly 89% of their IT expenditure through these partners. Cisco is, therefore, continuously enhancing its engagement with partners, revamping its marketing strategies, and adapting to the changing needs of its customers. A vital part of this strategy is the focus on the new “Scale” go-to-market initiative, aligned to engaging SMB customers and Partners in this space, as unveiled at the company’s sales kickoff meeting in August. This model offers partners and customers enhanced sales and marketing support, ensuring that SMBs receive expert advice in crucial care-about areas such as cybersecurity or hybrid work.

The concept of “digital transformation” has become a staple in corporate discussions over the years. While some may write it off as a fad, many, particularly SMBs, understand its importance. For these businesses, digital transformation involves adopting digital technologies to streamline operations, improve customer relationships, and position themselves as agile and innovative entities in their respective fields. Techaisle data reveals that 71% of SMBs are investing in digital transformation, and 37% have a holistic digital strategy. SMBs, once perceived as technologically behind, are actively embracing cloud solutions to meet their IT requirements. These technologies have become crucial to their digital transformation journey, enabling them to automate various operational aspects and gain a competitive advantage through essential business process automation tools, orchestration, and integration or advanced offerings like custom AI and analytics applications hosted on cloud platforms.

As the market becomes flooded with specialized security solutions, an important question arises: Who can effectively integrate and manage all these different solutions? Cisco is making changes to position itself as a leading contender. As a comprehensive solution provider, Cisco can fill gaps in the cybersecurity landscape and ensure a cohesive approach to security, especially cloud security. It is building and integrating its portfolio of offerings, for example, XDR, Umbrella, Duo, Talos, many others, and now Armorblox.

As threats evolve, security efforts have shifted from solely preventing incidents to investigating them quickly and anticipating future risks. With IT environments now comprising interconnected networks, communication tools, mobile devices, cloud applications, and more, security is a top priority. Techaisle data shows that security is an IT priority for 74% of small businesses, 85% of SMBs, and 100% of midmarket firms. Endpoint security is already relatively widely adopted by SMBs. In addition, security suppliers have made headway in gaining customers for mobile hardware and access control security services. While Endpoint Detection and Response (EDR) tools are helpful, their capabilities are limited to detecting and responding to threats on endpoints and servers. Prevention remains the best approach to security, but detection is essential.

Cisco’s new XDR technology presents exciting opportunities for business growth by leveraging its vast network infrastructure and customer data to tackle security challenges. To strengthen its position in the security industry, Cisco is streamlining its go-to-market strategy and investing in partnerships to unify its cybersecurity offerings. Its partner growth strategy includes upgrading firewalls and refreshing products for existing customers, offering competitive pricing and margins to win new business, and introducing new partner offers for Security Operations Centers, such as Managed Detection and Response using Cisco XDR.

Cyberattacks targeting small and medium-sized businesses (SMBs) have increased, particularly ransomware and DDoS attacks. Implementing multi-factor authentication (MFA) safeguards employee identities and credentials. However, only 16% of SMBs and 25% of midmarket firms use MFA enterprise-wide. Similarly, only 13% of SMBs and 16% of midmarket firms have adopted single sign-on. However, the intent to adopt is significantly higher. Cisco offers MFA and single-sign-on (SSO) through its Duo offering, introducing innovations such as passwordless and risk-based authentication and Verified Duo Push. In addition, Duo has made security more accessible by integrating its Duo Trusted Endpoints capability into all service tiers, allowing users to restrict access only from corporate-managed devices or devices registered with Duo. This helps prevent unauthorized access attempts from unknown devices. In the advanced tiers, users can also assess the devices’ health before granting access and block risky or non-compliant devices, such as those running out-of-date software.

Securing endpoints and servers is essential for organizations, but cybercriminals are finding ways to bypass these measures through covert attacks. Instead of directly targeting high-value assets in data centers, they gain access through laptops and move laterally through the network. As a result, relying solely on an EDR solution or a firewall is not enough to detect and prevent cyberattacks. To fully protect IT infrastructure, it’s necessary to integrate prevention, detection, and response technologies into a single solution. This is where Extended Detection and Response (XDR) comes in, providing a comprehensive approach to security.

XDR builds upon the concept of EDR and expands its scope. It goes beyond the endpoint and server by integrating data from various security tools, including firewalls, email gateways, endpoint, network, identity, DNS, public cloud tools, and mobile threat management solutions. While it is possible to connect these components manually, a comprehensive XDR solution is designed to function as a unified system wherein components are interconnected and work together seamlessly to optimize threat detection and response workflows. Cisco's XDR solution in one such system.

New work patterns and the acceleration of distributed workplaces are resulting in a range of productivity benefits for SMBs today. As such, businesses see increased workforce efficiencies and talent recruitment while minimizing cost by reducing intermediaries and integrating contract professionals – and even improved environmental performance through reduced commuting and building footprints.

In the quest to deploy a perfect hybrid workplace technology infrastructure, SMBs often overlook networking – wireless, routers, firewalls, and beyond. Similarly, as small business retailers and other small commercial offices struggle with re-opening uncertainties, they also grapple with the daunting task of enabling secure and safe environments for their employees and customers. Digitization with minimum IT disruption and low manageability is on their minds.

Cash flow constraints, limited access to finances, competitive landscapes, the need for innovation, erratic revenue, uncertainties, the pace of technology change, and many more are drivers for achieving cost efficiencies within SMBs. Digital transformation is no longer the domain of only upper midmarket firms and enterprises. Techaisle's SMB and Midmarket Digital transformation survey research shows that 46% of SMBs are adopting digital transformation to reduce costs, and 38% are planning for innovation in customer engagement and services.

Helping SMBs thrive with robust IT solutions

Unbeknownst to many, the Cisco Meraki platform and the solutions it powers is a critical foundational technology to fast-forward digital transformation for SMBs. Much of this comes from its ease of use, simplicity, and flexibility for lean IT to innovate by doing more with less.

Cisco acquired Meraki in 2012, around the same time (2013), when it divested Linksys to Belkin. Over the years, Cisco has continued to innovate on its highly successful Meraki platform. It is no secret that Cisco Meraki invented cloud-managed networking technology in 2006. It has continued to innovate and expand the networking portfolio to IoT solutions and cover any business need or use case. The Meraki platform consists of switching, security & SD-WAN, wireless access points, mobile device management, and extending to IoT, including smart cameras and AI-equipped sensors to drive business intelligence.

Regarding deep intelligence and analytics, Meraki Health and Meraki Insight allow SMBs to monitor all aspects of their network and applications from the Meraki dashboard or API and easily detect and fix potential issues in minutes. Techaisle's survey shows that only 4% of small businesses have internal full-time IT staff. They spend 79% of their time on support, maintenance, and troubleshooting— creating an IT efficiency deficit and negatively impacting organizational productivity. Meraki Health's objective is to simplify troubleshooting for the lean, almost non-existent, or over-burdened small business owner/manager. Small businesses need to propel growth and enable new business initiatives freeing up time and resources. To ease the digital transformation, Meraki provides many capabilities that protect SMBs of any size, including:

• Preventing cyber-attacks: Meraki MX Security & SD-WAN appliances protect SMB businesses, users, and devices. Meraki security has the backing of Cisco Talos, one of the largest commercial threat intelligence teams globally.

• Deploying remote workers: Meraki Z3 teleworker gateways provide connectivity and secure and seamless in-office experiences. Meraki Insight delivers deep visibility into critical business applications and proactive troubleshooting for remote workers.

• Ensuring safe occupancy: Meraki MV smart cameras let SMBs maintain social distancing guidelines by remotely monitoring and tracking safe occupancy levels in physical environments through intelligent analytics, such as object detection and tracking.

• Cost savings from simplicity: All Meraki products are deployed and controlled from a single pane of glass. Meraki Health is available for all devices, saving many troubleshooting times by pinpointing specific problematic devices and clients via root cause analysis.

SMBs agree that Meraki solutions can be quickly deployed with zero-touch provisioning and configuration and remotely managed through a cloud-based GUI dashboard (single pane of glass), with all-inclusive licensing. Meraki provides 24/7 technical support (email or phone) and a lifetime warranty on devices (except cameras & outdoor APs) with advanced replacement.

Challenges in small business security

Techaisle's SMB security survey research data shows that security is a top IT priority and challenge for 76% of SMBs, and 65% are planning to increase IT security investments. Within the SMB segment, small businesses often lack the skills required to work with software-based security solutions and are 25%-33% less likely than midmarket firms to work with managed service providers.

Most small businesses are not proactive in addressing security issues, but that may not be the whole problem or perhaps even the greatest obstacle to small businesses’ adoption of security technology. Relative to midmarket firms, small businesses have limited to no internal IT security staff, are not generally working with a managed service provider capable of handling security needs, and are about 50% less likely to embrace external vendors' software-based security solutions.

While small businesses could theoretically pursue some strategies used by larger competitors, they lack the experience and skills to identify, deploy, and manage the products and relationships used to develop shields protecting valuable corporate data, applications, and human assets.

Meraki addresses these issues by providing a secure in-office experience to remote workers—giving access to applications while maintaining visibility and control from anywhere with a cloud-managed dashboard. It also encrypts data with Auto VPN, allowing employees to quickly, securely, and remotely connect to corporate locations.

Meraki smart cameras also address physical security, remote monitoring, and intelligence by including on-device storage and flexibility to access data through the cloud. The cameras allow for many playback features with machine learning and AI to compress the data and provide business intelligence instantly gleaned from long recordings. It is an ideal product for SMBs implementing social distancing guidelines, remotely monitoring physical spaces, reducing in-person exposure on-site, and ensuring comprehensive security.

How SMBs can adapt and digitize

As I said earlier, there is increasing importance for innovation and digitization (not referring strictly to the substitution of digital records for physical documents, but more broadly to the use of digital technologies to meet business goals) in SMB strategy. Dependence on technology as a critical element of business success, burgeoning complexity, and cost constraint has created a perfect storm for small businesses to adapt to changing environments using specifically designed technology.

Over the last few months, we studied use cases and Meraki's usefulness within the SMB segment. Meraki addresses real and compelling issues, and I believe it will continue to expand within the SMB community. Verticals such as healthcare, manufacturing, retail, and financial services have been quick adopters of Meraki, specifically for launching new business models, deploying remote workers, transitioning to hybrid workplaces, cybersecurity, location analysis, contact tracing, social distancing, personal safety, curbside pickup, and more.

SMB owners and executives are concerned with issues that extend beyond technology. Yet, today's business environments are increasingly dependent on IT support, products, and services that improve productivity and efficiency or expand market reach and potential.

Final Techaisle Take

IT initiatives that can be linked meaningfully to broader business objectives can attract SMB executive support – meaning that products and services that address key business priorities have the most significant growth potential. Meraki is well on its way.

Today's economy demands that technology support SMB activities. The future will be defined by them capitalizing on technology-enabled business options. If SMBs are thinking about the path forward, from today's foundation to tomorrow's opportunity, they should include Meraki in their evaluations. Writing this analysis reminds me that I work from home and should probably replace my mesh routers with Meraki devices.