Arista Delivers Multi-Domain Segmentation for Zero Trust Enterprise - Seite 2

Arista has partnered with Forescout in building such a solution that streamlines policy design and management. Organizations can use Forescout eyeSegment to automatically apply real-time context to associate each connected device with its relevant security segmentation group, easily design and monitor group-based policies and communicate the appropriate segmentation policies to CloudVision. CloudVision is then responsible for the dynamic orchestration of the required policy to the Arista switches for enforcement.

Arista Multi-Domain Segmentation

Arista Multi-Domain Segmentation converges the network with security across the campus to data center to cloud. The solution avoids the proprietary siloed architectures from incumbent vendors.

With multi-domain and network-security convergence as the goal, Arista is also enhancing MSS for enterprise edge firewall and data center virtualization use cases, delivering comprehensive segmentation solutions for enterprise-wide use cases.

MSS Firewall provides security service insertion, allowing flexible placement of firewall policy across DMZ edge, data center and campus networks. Leveraging open-standards network constructs, MSS Firewall dynamically steers traffic to the firewall policy enforcement point, extending security policy enforcement to address broader traffic patterns. Using the same CloudVision orchestration, MSS Firewall integrates with Palo Alto Networks and other leading firewall solutions from Arista’s security partner ecosystem.

MSS Host is a data center focused solution where security policies are extended from the virtualized host to the physical network. Through an API integration between CloudVision and VMware NSX platform, MSS Host extends NSX micro-segmentation policies to bare-metal workloads.

Arista enables through a broad set of security ecosystem partner integrations such as Aruba, Forescout, Palo Alto Networks, VMware (NSX), and Zscaler (see industry support here). In addition to advanced MSS-based dynamic segmentation services, Arista continues to support broad network segmentation models such as VXLAN/EVPN, VRFs, VLANs, and Access Control Lists.

Availability

MSS Firewall and MSS Host functionality are shipping as part of Arista CloudVision. The MSS-Group functionality will be available for trials in Q1’21.

Register here to learn more about Arista’s multi-domain segmentation solution at our webinar on March 18th, 2021.

Read more about this announcement on Jayshree Ullal’s blog here.