Platform

Hypershield for Security Cloud Control

—

—

The Hypershield control plane and management plane are accessed through Security Cloud Control.

Tesseract Security Agents for Linux

—

1.3.4

The agent provides workload visualization and mitigation of workload vulnerabilities at the kernel level using the extended Berkeley Packet Filter (eBPF). eBPF is open source and native to the Linux kernel.

Network-Based Enforcers for Amazon Web Services

1.1.0

—

The network-based enforcer is a transparent, stateful virtual firewall that provides network segmentation and network security policy.

Security Policy

Unified policies

1.1.0

—

Hypershield deploys policies to all enforcers. All policies are evaluated, and the order doesn't matter. A block policy will always take precedence over a permit policy. By default, enforcers block all traffic unless you deploy a policy to permit traffic.

Manual policies using 5-tuple (source IP address/port number, destination IP address/port number, and the protocol), VLAN, and SGT

1.1.0

—

You can manually create policies that will be deployed to the enforcers.

Verification

Dual data plane

1.1.0

—

A shadow data plane, with a copy of your traffic from the primary data plane, lets you test policy changes or system updates to make sure you don't unintentially cause a network outage, for example. Hypershield tests the policies or update against useful measures and suggests a confidence score for the deployment or update.

Visualization and Guidance

Visualization for all workloads

—

1.3.4

The Tesseract Security Agent on each node or VM keeps track of one or more workloads (a process or application) and sends telemetry to Hypershield so you can see all of the workloads for your entire network. Using that information, you can create enforcer policies as needed.

Cisco AI Assistant

—

—

The AI Assistant intelligently guides and informs decision-making.