With the rise of XDR (Extended Detection and Response) adoption, the architecture question arises on how NDR (Network Detection and Response and XDR work together.

Network Detection and Response… Read more on Cisco Blogs

​

With the rise of XDR (Extended Detection and Response) adoption, the architecture question arises on how NDR (Network Detection and Response and XDR work together.

Network Detection and Response tools have matured in customer architectures throughout the years. NDRs continuously monitor networks and devices connected to it using telemetry collected from network devices, generated by endpoints, or by deploying sensors to collect such data.  NDR uses this telemetry to primary provide unmatched visibility into an environment of managed and unmanaged devices, then analyzes traffic patterns to detect abnormal behaviors caused by potential threats such as data exfiltration, botnet activity and others. In addition, a NDR becomes the main repository of network telemetry for an analyst to perform threat hunting and forensic investigations.

On the other hand, XDR is an aggregation and correlation technology with a main aim to detect incidents while simplifying and accelerating threat response. XDRs leverage a host of integrations to cross correlate detections from different technologies and telemetry sources to draw the bigger picture of an attack in a simplified, enriched, and correlated manner which makes it very simple for a SOC analyst to draw conclusions, locate the source of an attack and respond to threats in a matter of minutes instead of hours or days using individual point product technologies on their own.

Cisco Secure Network Analytics (Cisco NDR) with the modernized Data Store architecture delivers:

The fastest and largest scaling NDR in market which provides the best user experience with traffic analysis against various forms of network telemetry including traffic flows, firewalls logs and endpoint visibility data via Cisco Secure Client’s Network Visibility Module.
Newest Detection Models: Secure Network Analytics offers a next generation converged analytics capability to automatically assign device roles based on behavior and detect threats using enhanced detection techniques.

Expanding Secure Network Analytics by integrating it into Cisco XDR will expand these capabilities to the next level by:

Correlation with other technologies: XDR correlates NDR EDR, Email detections and threat intelligence, and many other technologies from cisco and third-party which expand NDR beyond the Network Detection boundaries.
Expand the Response Ecosystem: with Cisco XDR built-in and customizable incident response capabilities, NDR responses are expanded beyond the natively supported techniques leveraging the diverse and multiple integration that XDR supports with EDRs, DNS, Firewall, and others.
Detections Assertion secure Network Analytics’ detections are based on behavioral and machine learning detections techniques which are advanced techniques that can detect slow and hidden threats. By combining it with Cisco XDR these detections are affirmed through correlation with other technologies detections to form an end-to-end incident that explains the threat activity across multiple threat vectors.

Bottom line, Secure Network Analytics and Cisco XDR work very well together by complimenting each other.  Detections and telemetry from Secure Network Analytics is one source of data feeding into XDR, XDR ingest it along with other data from multiple technologies to identify incidents without having to focus on Network based detections or visibility since it is provided through NDR. Implementing a solution will depend on the specific needs and requirements. If you are looking to improve your network visibility and network detection capabilities it is delivered with NDR, but if your main goal is to  improve your threat response capabilities and get a comprehensive view of incidents then use XDR.

We’d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Secure on social!

Cisco Secure Social Channels

InstagramFacebookTwitterLinkedIn

  This blog post describes how secure network analytics (NDR) and Cisco XDR (Extended detection and response) work together for enhanced detection faster response  Read More Cisco Blogs 

Hybrid and multi-cloud have become the reality when it comes to delivering applications, software, infrastructure, security, and other key networking capabilities at scale. While hybrid and… Read more on Cisco Blogs

​

Hybrid and multi-cloud have become the reality when it comes to delivering applications, software, infrastructure, security, and other key networking capabilities at scale. While hybrid and multi-cloud deliver flexibility that can help our customers optimize on cost, they can come with their own risks and operational complexity.

Application Centric Infrastructure (ACI) and Nexus Dashboard, two of Cisco’s core data center solutions, are designed to alleviate that complexity. ACI enables customers to automate, secure, and accelerate the provisioning of their networks. With Nexus Dashboard, customers can quicken and simplify network orchestration with built-in Infrastructure-as-Code and automation tools, they can gain comprehensive visibility and minimize downtime by leveraging the platform’s powerful analytics, and they can ensure business compliance and keep their networks running smoothly by taking advantage of embedded software recommendations. Most importantly, Nexus Dashboard enables users to unify their operations by consolidating a powerful and consistent operational model under a single pane of glass.

In general, Cisco builds solutions that ensure high application availability and performance, as we strive to create good experiences for developers and users. Furthermore, Cisco’s API’s, open platforms, ecosystem technology partnerships and integrations, such as our decade-long, strategic partnership with F5, make these tools even more powerful. More than half of the ACI installed base has F5 BIG-IP in their data center networks, and the integration between BIG-IP and Cisco’s toolset helps ensure that our mutual customers benefit from enhanced application availability and performance.

Another important use case of this integration is to simplify both BIG-IP and ACI provisioning and troubleshooting. Our teams have worked together to create resources like the ACI-BIG-IP Design Guide, as well as Red Hat Ansible playbooks and HashiCorp Terraform resources to automate provisioning processes. We also built and continue to add new features to our F5 ACI ServiceCenter App. ServiceCenter is a unified solution that enables our common customer base to consume networking and application delivery services together. It serves as a single point of automation for managing L2-L3 and L4-L7 infrastructure and provides enhanced visibility into Cisco ACI and BIG-IP.

Announcing global server load balancing across sites

We are now excited to take the next step forward in our partnership with F5 with support for global server load balancing across sites. We are introducing a F5 BIG-IP DNS integration with Cisco ACI Multi-Site/Multi-Pod. This is essential for organizations who rely on multiple sites to bring apps in-location to users for the best performance and experience, and as a result need more sophisticated rerouting capabilities to reliably serve a global, distributed audience.

Figure 1: Global server load balancing (GSLB) for Cisco ACI Multi-Site
distributes user traffic to the best LB based on location

This is one step of many more to come, and I look forward to our partnership continuing to pave the way for more successful hybrid multi-cloud deployments and superior application performance for our joint customers

Together, F5 and Cisco are empowering network and application teams with the solutions they need to ensure apps are available and performing at all times and under any circumstances—from overloaded servers to down sites. We are ensuring that our customers can operate successfully in our new hybrid multi-cloud reality.

Our latest white paper explains global server load balancing for Cisco ACI Multi-Site/Multi-Pod and F5 BIG-IP deployments in detail and provides multiple design recommendations to support a wide range of enterprise requirements around application performance and resiliency. In addition, once BIG-IP DNS is deployed in your environment, there is a host of capabilities you can unlock including superior DNS performance, more layers of security, reporting and analytics, and health monitoring.

  See how F5 and Cisco are empowering network and application teams to ensure applications are available and performing successfully in the new hybrid multi-cloud reality.  Read More Cisco Blogs 

Tools simplify processes, create organizational efficiencies, and help individuals achieve goals. There are many tools in the market that can help organizations with talent sourcing and assist with… Read more on Cisco Blogs

​

Tools simplify processes, create organizational efficiencies, and help individuals achieve goals. There are many tools in the market that can help organizations with talent sourcing and assist with job searches – but Cisco offers one to their strategic partners and customers that is free and has many benefits. The Cisco Talent Bridge program simplifies talent sourcing and job searches by providing such a tool. The Cisco Talent Bridge Matching Engine is an accessible, web-based platform, available in 18 languages, purpose-built to connect diverse candidates to job opportunities.

We strive to facilitate a bridge to connect diverse employers as well as candidates. By leveraging our global partnerships and working internally with Cisco teams who have the same mission, we are able to come together for one common goal – to build a more inclusive workforce.

Advocating for Equity in Hiring

By using the unbiased algorithm of the Matching Engine platform, we aim to serve up the best people for the job requisition. However, we realize unconscious bias can still crop up and influence hiring and promotion decisions. In working and communicating with employers across the ecosystem we encourage two different tactics to overcome this potential pitfall. One, they should have a diverse hiring committee and two, by having a diverse workforce they will have a more profitable workforce. Research shows that if you assemble a workforce of people that look, act, think, and behave differently, you are more likely to have a more successful and profitable organization.

“At Cisco, our purpose is to Power an Inclusive Future for All; one way we do this is through the Talent Bridge program. We want all people to have equitable access to resources, including employment options available through our program. Talent Bridge removes bias and promotes a skills-based hiring approach, connecting employers with qualified candidates from diverse communities who are often overlooked. These candidates offer distinctive skills and valuable perspectives that can benefit organizations in remarkable ways,”-Kelly Jones, Chief People Officer, Cisco

Sourcing Candidates from Diverse, Tech-Skilled Backgrounds

Equally important is ensuring that our strategic employers find reliable talent through the Matching Engine platform. We realize there are vast communities of talented individuals who are underrepresented in the tech world, so we actively partner with our peers to direct talent into our pipeline.

We meet the candidates where they are, such as participating in military career fairs, supporting diversity conferences, and engaging refugee organizations. This is done through a multi-faceted approach, including in-person participation, virtual presentations in global webinars, and even direct integration into programs such as Cisco Networking Academy and Cisco Learning Network.

While our candidates come from a variety of communities, 77% have at least a 2-year degree or higher education level. We offer candidates the opportunity to feature certifications on their profile and 26% of our active candidates have indicated they have at least one certification. When recruiters use the platform, they can focus on specific candidate profiles that match the job requirements they’ve posted and sort them further by using our filtering process.

Connecting Tech Talent to Employers

Employers on the platform are from our Cisco ecosystem, representing small and large companies in all types of industries. They encompass our Channel and Distribution Partners, customers, and strategic employers. These companies sell, install, support, and utilize Cisco products globally.

Candidates who work with these employers are ultimately exposed to the latest, most advanced technological solutions. We provide a platform which optimizes the job search process with robust filtering, opportunity sorting, and the ability to showcases certifications.

By providing a platform that bridges the gap between candidates and employers, we are supporting a more inclusive experience for those seeking employment.

Learn more about Cisco Talent Bridge

We’d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with #CiscoPartners on social!

Cisco Partners Facebook    Cisco Partners LinkedIn

  Cisco provides a platform that bridges the gap between candidates and employers, in doing so we support a more inclusive experience for those seeking employment through the Talent Bridge program.  Read More Cisco Blogs 

Across the globe, organizations are struggling with a skills gap that isn’t closing anytime soon. There are millions more jobs available than there are unemployed workers, and recruiters can’t find t… Read more on Cisco Blogs

​

Across the globe, organizations are struggling with a skills gap that isn’t closing anytime soon. There are millions more jobs available than there are unemployed workers, and recruiters can’t find the talent they need. I hear from customers daily that the skills gap is a major concern.

It’s impossible for the IT team of any organization to stay up to speed on the latest technology, while also doing their day jobs. Just reading the headlines about generative AI is practically a full-time job! Instead of trying to close the gap, we can be more successful if we adopt a strategy of investing, growing, and partnering to infuse expertise into the workforce.

Cisco Networking Academy offerings range from free, self-paced courses for beginners to advanced training for professionals seeking certifications.

Investing

We have a shared responsibility as a global community to invest in technical talent early. We need more laptops in the hands of every child, more STEM in our schools, and more colleges offering technical degrees. Online learning programs, like Cisco’s Networking Academy, are helping to make it easier than ever. The platform has trained more than 17.5 million learners across 190 countries, opening the door to educational opportunities and meaningful technical careers. Our future generation of workers is used to remote learning, and they need this kind of head start. Intern programs are another way companies can help groom young talent. At Cisco, we hosted 1700 college interns in summer 2023, with the goal of extending job offers to as many as possible after graduation. We’re witnessing what happens when a wave of workers like the Baby Boomers exits the workforce, and the investment in future workers has not been sufficient for the task at hand.

Our future generation of workers is used to remote learning. Investing in their education through digital platforms builds a foundation for the future.

Growing

All people teams know that attrition detracts from the bottom line when workers leave and take their skills elsewhere. Millennials and Gen Z workers make up most of the workforce, and they are looking for a culture fit, purpose, good compensation, and opportunity for professional growth on a regular basis. Leaders need to realize that the skilled labor they need has bargaining power. Focusing on culture is as important as focusing on the bottom line. Embracing a mindset of continuous learning, and offering training and certifications, is smart business. Growing talent and providing a path for upward mobility within the company will help retain workers you’ve invested in from walking out the door.

Partnering

Most businesses work with partners; after all, restaurants don’t grow their own food and pave their own parking lots. It’s a smart business leader who understands that they should focus on what they do best, while bringing in outside expertise where needed. Cisco Lifecycle Services takes the risk out of major IT initiatives, bringing experts, tools, automation, and AI/ML insights to deliver the most critical business outcomes for Cisco customers. The digital learning experience CiscoU provides access to advanced training and certifications on demand for tech professionals. Cisco CX and its global ecosystem of partners help design and deploy business transformation solutions across the globe and transfer knowledge to customers looking to build their in-house skills. Partnering is the logical way for organizations to get what they need when they need it.

CiscoU serves 1.3 million community members and 300,000+ Active Certification holders looking to grow their skills, further their careers, and accelerate customer business outcomes leveraging Cisco Solutions.

We’ll always be chasing after the next innovation, trying to round the learning curve. The skills gap is here to stay. It’s time for leaders to think differently about how they acquire and retain the technical expertise to get the job done.

  It’s impossible for the IT team of any organization to stay up to speed on the latest technology, while also doing their day jobs. Just reading the headlines about generative AI is practically a full-time job! Instead of trying to close the gap, we can be more successful if we adopt a strategy of investing, growing and partnering to infuse expertise into the workforce.  Read More Cisco Blogs 

Earlier this year at the Optical Fiber Communication (OFC) Conference and Exhibition, Cisco demonstrated the new NCS 1014 with the 2.4T WDM line card based on the Acacia Coherent Interconnect Module… Read more on Cisco Blogs

​

Earlier this year at the Optical Fiber Communication (OFC) Conference and Exhibition, Cisco demonstrated the new NCS 1014 with the 2.4T WDM line card based on the Acacia Coherent Interconnect Module 8 (CIM 8). I’m excited to announce general availability of the NCS 1014 and 2.4T WDM line card today. This latest generation NCS 1014 platform supports 100G, 400G, and 800G clients and up to 1.2T multi-rate trunks—doubling capacity in the same footprint as the previous generation of compact modular systems and addressing the sustainability needs providers seek today.   

 The NCS 1014 is the latest in Cisco’s compact modular platform series, which now includes precision timing support for enhanced monitoring insights and supports both layer 0 (photonics) and layer 1 (transponders) functionalities. NCS 1014 can be applied to a wide variety of use cases, including standalone multi-haul transponders, QSFP-DD-based line cards, metro DCI line systems, and multi-degree ROADMs, combining these into a common system for low-footprint requirements. 

This next-generation platform incorporates the state-of the-art Jannu digital signal processing (DSP) in the CIM 8 pluggable module from Acacia to enable multi-haul transport with up to 2.4 Tbps on a single line card for high-capacity applications.  

Advancements in DSP algorithms, high baud-rate optics, and 3D siliconization have sped time-to-market for this new 2.4T WDM line card. For our customers, this means massive capacity in both C- and L-bands to enable high-performance networks for long-haul and subsea applications to transport 100G, 400G, and 800G clients. NCS 1014 also offers a dense 3.2T QSFP-DD line card leveraging 400G Bright ZR+ optics to optimize space, power, and cost, while guaranteeing interoperability with multi-source agreement (MSA) standards and routed optical networking deployments.  

Dense wavelength-division multiplexing (DWDM) remains one of the few areas in networking where standardization has been slow. Incremental improvements offered by proprietary solutions no longer outweigh the benefits of standardization, and all Cisco line systems are open. Any vendor’s coherent transponder can run today over the NCS 2000, NCS 1010, and NCS 1014, allowing customers to avoid vendor lock-in (technically or commercially).  

Cisco is committed to open standards and continues to participate in key interoperability forums, such as OpenConfig, Open ROADM, OFCnet, OIF, and TIP to develop open management support for multi-layer, multi-domain, and multi-vendor networks. 

Get more at Cisco PONC 2023 

We’re excited to connect with our customers and partners to discuss these and other innovations at our annual Packet Optical Networking Conference (PONC), Sept. 20-21, in Richardson, Texas.  

At the conference, attendees can see our lab and experience the full portfolio of current and future platforms, including a demonstration of the NCS 1014 and the 2.4T WDM line card. Customers at the conference will speak about their routed optical networking deployments and have the possibility to interact during the multiple breakout sessions. 

Get more information about Cisco networking solutions
and how they can address your business and sustainability goals. 

  Sustainability, NCS, NCS 1014, 2.4T, 1.2T, 800G, optical, WDM, DWDM, routed optical networking, CIM 8, DSP, footprint, power reduction, ZR+ optics, QSFP-DD, QDD, PONC, Corning  Read More Cisco Blogs