Category: Commercial
Home / Commercial /

Sight & Sound Theatres® Enhances Network Visibility & Functionality

Multi-location facilities can run into the obstacle of establishing and sustaining effective communication and network consistency between all locations. Sight & Sound Theatres®, with locations in Lancaster, PA and Branson, MO, faced this challenge and approached CNI for the solution. Sight & Sound employs almost 800 individuals and produces 750 shows annually between both locations. Each of these state-of-the-art theaters can seat up to 2,000 individuals and boasts a massive 300-foot stage that wraps around the viewing audience.

In the past, achieving identical network infrastructure and seamless management of both locations was extremely challenging. Ensuring dependable connectivity and fast network speeds is crucial for delivering seamless live productions and shows. CNI recognized the importance of the relationship between production sets and their supporting network infrastructure. Extreme’s state-of-the-art technology was leveraged by CNI to facilitate this synergy. CNI, an Extreme Diamond Partner, and the Extreme local team arranged an onsite Extreme Fabric workshop that took place on a single day and Sight & Sound was able to bring team members from MO out to PA to participate. The workshop demonstrated the power and flexibility of the Extreme Fabric solution.

The collaboration between Extreme Networks and CNI successfully delivered a robust and efficient network infrastructure for Sight & Sound’s complex production needs. The project involved the installation of a myriad of complex connection points and 36 switches. Extreme’s IoT connected approximately 250 full show production devices such as motion control interfaces, media servers, PLCs, audio systems, lighting consoles, dimmer racks, automated lights, backstage cameras, communication links, and industrial Wi-Fi devices that provided wireless links to each set piece.

According to Luke Bates, their Technical Director, “Using Extreme technology, along with the support of CNI, we now have better network visibility and functionality, as well as the ability to centrally manage both systems.”

To learn more about Sight & Sound’s Extreme Networks Fabric project, check out the case study here CNI_Sight+Sound Case Study_Extreme 2023.

If you are interested in discussing Extreme Networks Fabric or other solutions, contact CNI at communication@cnisalesinc.com or 610-584-8040.

CNI & Fortinet Bring You Adaptive Cloud Security

Looking for a more trusted cloud strategy?  Let CNI Sales and Fortinet bring you Adaptive Cloud Security.  These solutions provide the necessary visibility and control across cloud cybersecurity infrastructures, enabling secure applications and connectivity from data center to cloud.  CNI brings you Fortinet’s Adaptive Cloud Security to deliver integrated networking, application, and platform security solutions to support and enhance digital innovation.

To learn more about our solutions, check out Fortinet’s Solution Brief today.  If you want to discuss how to adopt a trusted cloud strategy using Fortinet, contact CNI at communication@cnisalesinc.com or 610-584-8040.

This information was originally published on Fortinet’s website. It has been used here with permission from the provider.

Network-as-a-Service (NaaS) Becomes an Enabler of Retail Digital Transformation

Retailers around the globe are in a state of transition, one that has been exacerbated significantly by fallout from COVID-19. The transition is defined by retail organizations embracing digital transformation (DX). Trends driving retail DX initiatives are multi-fold: the continued rise of analytically robust customer-driven organizations; the operational innovations that drive efficiency and customer experiences; and innovation in IT infrastructure and processes.

Safeguarding Shopper Privacy and Ensuring Retail Security in a Mobile First World

IDC’s FutureScape: Worldwide Retail 2021 Predictions reinforce these points. The research features 10 predictions of how the retail industry is changing. Three of these predictions are key:

  • By 2023, 80% of retailers will offer contactless payments and app-based scan-and-pay systems in-store, increasing conversion rates by 40% and customer retention rates by 30%.
  • By 2023, the COVID-19-related intersection of safety and security will drive shared retailer funding and a 30% lift in spending across computer vision, biometrics, and enhanced video surveillance.
  • By 2023, a major retailer will announce a completely reimagined, almost completely touchless, contactless in-store experience, leveraging voice activation and gesture- and motion-sensitive technologies.

There is one common thread that can enable these DX initiatives: the network. Connectivity is the foundational element that serves as the linchpin for supporting retailers’ digital services. But too often retailers rely on legacy network systems and architectures that were not designed for the digital-native, mobility-focused, cloud-centric world.

In recent years, a new model has emerged to help enterprises close the gap in their networking strategy: Network as a Service (NaaS). IDC defines NaaS as network infrastructure hardware, software, management and licensing components consumed in a flexible consumption model. NaaS models allow enterprises, including retailers, to focus on business-enabling DX tasks, instead of the day-to-day management of the network.

IDC recently commissioned a study to gauge enterprise interest in NaaS models. Retailers cited significant challenges in managing their networks today. When asked what their biggest network management concerns are, behind network security, the inability to efficiently scale up and down was a top-rated concern. Given their need to rapidly engage in DX initiatives, retailers found significant benefits from NaaS models. Top reasons retailers cited as driving their interest in NaaS models were:

  • The need to expand network capacity
  • The need to implement new technology (e.g. Wi-Fi 6, 100GbE, etc.)
  • The need to dynamically scale network resources up and down in response to demand
  • The desire for simplified management of the network

NaaS models specifically address these challenges. NaaS allows retailers to outsource the day-to-day management of the network, in turn significantly simplifying network management. In a NaaS model the networking provider (either the network infrastructure vendor, or their partner) uses advanced management techniques, such as streaming telemetry enhanced by ML and AI to continually optimize the network. This frees the retailer’s IT teams to focus on business-enabling tasks, such as in-store customer experience (contactless checkout) and optimizing operations (ML/AI-enhanced inventory management), instead of just “keeping the lights on” and providing basic connectivity.

As retailers around the globe look to embrace DX initiatives, they’re increasingly realizing the importance of their enterprise network as a critical enabler of digital-native initiatives they’re pursuing. Relying on legacy network equipment and architectures does not scale in this digital-first world. NaaS represent a way for retailers to get access to new networking technology, to more rapidly respond to the uncertain environment that has arisen in the age of COVID and to be more agile and dynamic. It’s for these reasons IDC expects retailers to consider NaaS during their next network infrastructure procurement process.

View the infographic: The retail sector adopts NaaS to accelerate digital transformation.

The blog was originally published on Aruba’s website. It has been used here with permission from the provider.

Secure the Edge With A10 Networks and Garland Technology

Provide Visibility and Secure Blind Spots With SSL Decryption

When trying to support network continuity, mitigating the risk of scheduled or unscheduled downtime is an issue for any operation. The need for a secure layer to identify and actively block hidden threats can be difficult and costly, especially while also keeping your network resilient. Deploying inline appliances on mission-critical network segments requires active-passive flows to decrypt data for network security.

A10 Networks has partnered with Garland Technology to provide an inline security layer without compromising network uptime. A10 Networks Thunder SSLi eliminates blind spots within your network for efficiency within your security device. Garland Technology’s Inline Edge Security solutions, which provides bypass technology mirrors the SSL decrypted traffic from A10 Networks to application performance monitoring tools, adding seamless SSL decryption to necessary workflows.

Simple Inline Bypass

For a single source deployment, traffic is sent from the router through the A10 Networks’ Thunder SSLi CFW 5840 for data decryption. The decrypted traffic is directed back to the Garland Technology EdgeSafe™ Network Bypass TAP, exiting the daisy-chained network port to the next bypass segment.

Once the network data is sent through the DPI and into a second network port, the traffic travels through the second A10 device for re-encryption. The simplicity of this connection allows a single point of decryption throughout the network to eliminate blind spots, ensuring compliance and privacy.

Seamless Integration Within Multiple Networks

When deploying in multiple networks, traffic from each network link is brought into the Edgelens® inline security packet broker and VLAN tagged. Once tagged, the traffic is aggregated and load-balanced through the two A10 Thunder SSLi devices. The data is decrypted and routed to the DPI appliances in reverse order back to the A10 devices for re-encryption. This seamless integration throughout your infrastructure allows comprehensive, real-time and actionable insights with application-level visibility.

The joint solution provides visibility to all security devices, including inline, out-of-band and ICAP- enabled devices. Together, A10 Networks and Garland Technology detect advanced threats with low impact and load-balance to distribute traffic across multiple networks.

Garland Technology Network TAPs and Packet Brokers

Garland Technology provides a full platform of network access products including a range of network TAPs and Network Packet Broker devices, supporting the entire wire spectrum from 10/100M copper to 1G/10G/40G/100G.

Key Capabilities

  • Complete network visibility by passing all live wire data
  • Ensure no dropped packets for out-of-band tools
  • Quality standard, all TAPs are tested with live network data and validated
  • 100% failsafe packet capture – all network TAPs are tested and validated, and have built-in failsafe and/or heartbeat technology
  • Reliable traffic aggregation, load balancing, and filtering – full control over traffic behavior and flexibility for aggregation and regeneration

A10 Networks Thunder SSLi CFW

A10 Networks believes the future of cyber security for 5G and multi-cloud rests on Intelligent Automation coupled with machine learning, ensuring that business critical applications are protected, reliable, and always available.

Key Capabilities

  • Delivers the performance, scalability, and agility for the largest multi-cloud and 4G/5G networks
  • Leverage built-in connected intelligence and analytics for smarter protection throughout your mission critical network
  • Use artificial intelligence, machine learning, and predictive analytics to protect against threats, today and in the future
  • With automation and open API’s, seamlessly strengthen your security posture while optimizing IT resources

About A10 Networks

A10 Networks provides Reliable Security Always™, with a range of high-performance application networking solutions that help organizations ensure that their data center applications and networks remain highly available, accelerated and secure. Founded in 2004, A10 Networks is based in San Jose, Calif., and serves customers globally with offices worldwide. For more information, visit: www.a10networks.com and @A10Networks.

This blog was originally published on Garland Technology’s website.  It has been used here with permission from the provider.

Garland & ExtraHop Team Up To Provide Real-time Data Capture for End-to-End Visibility

Garland Technology recently partnered with ExtraHop, a leader in real-time IT Analytics, which gives IT Operations, Network, and Security teams comprehensive visibility across everything from network performance to website user experience.

The Garland and ExtraHop platform partnership provides 100% network visibility with an end-to-end infrastructure that eliminates network blind spots. Garland’s network TAPs and packet brokers tap at the live wire for 100% packet capture. By securing the data at the physical layer through reliable network TAPs, the ExtraHop platform provides real-time application visibility to monitor, protect, block, and analyze traffic in real time, all the time.

Implement a Scalable and Reliable Data Monitoring Solution

Scalable network TAPs and packet brokers enable future network growth, from 1G/10G today to 25G/40G/100G tomorrow, with the most reliable data capture available. Purpose-built network packet brokers filter, aggregate, and load balance to one or many monitoring ports.

Complete Visibility

Real-time Data Capture Starts with the Foundation of Visibility

Upon receiving a copy of network traffic from Garland, the stream processor performs line-rate decryption, protocol decoding, and full-stream reassembly for every transaction, up to a sustained 40 Gbps. The result: Customers get deeper and more meaningful insight at a fraction of the cost compared to other real-time analytics solutions.

Foundation of visibility

This solution delivers data-driven, real-time application (L2-L7) network monitoring and security solutions based on wire data, and guarantee no dropped or distorted packets as well as accurate relationships of frames, spacing, and response times with Garland’s passive fiber TAPs and network packet brokers.

This blog was originally published on Garland Technology’s website.  It has been used here with permission from the provider.

Best Practices for Cloud Infrastructure: Zero Trust Microsegmentation

Zero Trust has become a widely adopted cybersecurity strategy, and organizations are learning to operate under the assumption that no user, endpoint, workload, application or content can be trusted within their networks, no matter what’s been previously checked or what will be checked later on. In other words, each device, application and microservice must be responsible for its own security.

There’s a learning curve, however, to understanding how to apply that principle throughout your infrastructure. In the case of cloud native technologies, infrastructure and development processes often don’t look the same as in traditional environments. The way we apply Zero Trust must shift as well. In constantly changing cloud environments, Zero Trust microsegmentation is a technique that can help enforce cloud security policies that follow Zero Trust best practices.

Developers and DevOps teams continue to use cloud native technologies like microservices and containers to scale development and speed up releases, along with multi-cloud architectures to optimize efficiency. However, it’s these same core components of cloud native development that are causing fundamental shifts in the way network security policies are administered in the cloud. Zero Trust microsegmentation can help solve issues where environments are constantly changing and the IP addresses that were traditionally used for managing and defining security policies are no longer sufficient.

Why Cloud Security Policies Can’t Be Based on IP Addresses

Cloud native development can present a challenge to traditional enterprise policies, partially due to the nature of constant change within the environments. Cloud workloads move across locations, and instances within an application can scale dynamically as demands fluctuate and containers come and go in seconds – making validation a serious concern.

In these environments, the IP-based security that many enterprises are used to can quickly become unmanageable. Hybrid and multi-cloud environments introduce shifting IP domains as containerized workloads can be replicated, rescheduled and rehosted within the scope of an hour. And microservices are exposed through APIs accessible via HTTP/gRPC, making IP address irrelevant. In order to achieve end-to-end visibility, administrators would have to stitch together IP flows across the multitude of environments, which becomes unworkable at scale.

Because IP addresses are no longer as persistent as they once were, they cannot be relied upon to accurately identify workloads in the cloud, thereby making them unusable for security policies following Zero Trust best practices.

Identity-Based Microsegmentation

Identity-Based Microsegmentation in Prisma Cloud gives users the ability to base security policies on strong, machine-generated identity for individual workloads instead of broad IP addresses. This makes it possible to track a workload as it moves through your environment, even if IP addresses and other traditional identifiers change. Development risk posture is improved while managing the needs of dynamic cloud native environments.

Once workload identities are assigned, Prisma Cloud can automatically discover and learn application communication behaviors inside and across clouds. These flows can then be monitored in real time using a visualized map of the network.

Application dependency mapping with Identity-Based Microsegmentation in Prisma Cloud.
Application dependency mapping with Identity-Based Microsegmentation in Prisma Cloud.

Users can set policies to authenticate and authorize connection requests among these generated identities, and they can automatically deny unknown requests. Compliance teams, for example, can create policies to isolate systems that may be subject to specific regulations.

Microsegmentation for Zero Trust

Microsegmentation gives organizations a way to implement Zero Trust best practices for cloud native application development. A trusted identity can be used for security policy enforcement while allowing the seamless use of technology like containers and microservices. You can learn more in our e-book, “Identity-Powered Microsegmentation with Prisma Cloud.”

Microsegmentation is just one aspect of an enterprise Zero Trust strategy. Watch as Palo Alto Networks Founder and CTO Nir Zuk explains how it all fits together. And be sure to check out the rest of the blogs in our Zero Trust series.

This blog was originally published on Palo Alto’s website.  It has been used here with permission from the provider.

Expanding From 4G LTE to 5G Plus

Discover how networks have evolved from 4G LTE to 5G Plus, and exactly what that means for the future of wireless communications in enterprise environments.

‍Check out Episode 1 of Office Hours to get answers to questions like:

  • How has the 5G standard evolved over time?
  • How can private enterprises benefit from 5G NR-U?
  • What is the biggest difference between 5G and 5G Plus?
  • What are the most significant differences between public and private LTE networks?

Key Takeaways

  • 5G takes advantage of two frequency ranges to provide 5G and 5G plus. While there are many different variations of 5G, the overall technology is a large leap forward.
  • Private enterprises will be able to use 5G NR-U to deploy networks for IoT, driverless vehicles, and dozens of other widespread applications.
  • Private LTE networks give companies granular control over their networks, base stations, and geographic coverage.
  • 5G brings improved data rates, increased reliability, and significantly lower latency than the current 4G standard.
This blog was originally published on Celona’s website.  It has been used here with permission from the provider.

How Do LTE and 5G Enhance Network Failover and Redundancy for Business Continuity?

Wireless strategies for business continuity gain importance as enterprise expand IoT, cloud, and other technologies

Our evolving world has seen uninterrupted connectivity become a business requirement. With cloud services, IoT devices, and increasing mobility putting a strain on wired network architecture, more organizations are looking to adopt a wireless wide-area network (WAN) to keep a competitive edge.

An enterprise needs to be proactive about network failover. It is no longer enough to solely rely on wired lines for backup connectivity and redundancy. Today availability, reliability, and bandwidth are the three mandatory capabilities for any network failover solution.

Network Availability

Historically, enterprises added multiple wired connections for network failover. This might seem like a good way to ensure internet uptime, but it doesn’t always provide the guaranteed connectivity that organizations now require.

When adding a failover wired connection to a fixed location, typically the new secondary link enters the facility through the same trench as the primary connection. The enterprise is putting itself at risk of network interruption due to accidents during construction or other maintenance.

Another option is to install a new wire through a different entrance, but that costs time and money that enterprises often can ill afford. A more effective and economical solution is a high-performance wireless failover connection. This ensures diversity by providing a secondary connection that can’t be physically interrupted.

Network Reliability

When network service is interrupted, reliable management access is required to securely diagnose and fix any problems. To alleviate the need for an onsite IT team, Cradlepoint’s NetCloud Service and endpoints enable Out-of-Band Management (OOBM) so IT teams can troubleshoot issues remotely. Having a direct connection from an LTE adapter’s console port to the primary router at a branch location enables network managers to diagnose and sometimes fix problems even if the wired link is not available.

Life Storage, with hundreds of self-storage locations across the U.S., struggled with reliable connectivity. Its third-party-managed, USB-based modems could not handle the growing number of connected devices that helped drive business. After deploying Cradlepoint’s NetCloud Service and branch routers, Life Storage’s IT team has been able to remotely control all devices and connections.

Network Bandwidth

Even when a network failover link kicks in, businesses still require sufficient bandwidth to support the transfer of all required company data. With an all-in-one branch networking solution, you can switch between a wired and wireless connections without degrading bandwidth, ensuring business continuity.

Software-Defined WAN (SD-WAN) technologies support bandwidth aggregation and traffic segregation between both wired and wireless WAN links. With lower-bandwidth LTE connections, SD-WAN allows IT teams to set configurations that ensure critical data always has precedence on the wireless failover link. With higher-bandwidth Gigabit-Class LTE and 5G connections, all traffic can continue to flow over the backup link.

Wireless failover allows businesses in any industry to never skip a beat.

Learn more about wireless strategies for addressing enterprise networking challenges from Cradlepoint’s WANs Without Wires white paper.

This blog was originally published on Cradlepoint’s website.  It has been used here with permission from the provider.

How SD-WAN Can Fulfill Its Promises Through Secure Cloud Connectivity

SD-WAN promises several benefits, including the ability to deliver an optimal application experience for branch offices and remote workers. In other words, these solutions are designed to connect a remote or branch user to an application – no matter where either is located – as quickly and reliably as possible. But just as important, it also works to secure these connections to ensure an ongoing positive user experience.

The ability for SD-WAN solutions to accelerate the delivery of cloud-based resources across multi-cloud environments plays a critical role in fulfilling this promise of an optimal user experience. This is always true, regardless of whether assets are deployed in a private or public cloud environment or if users require access to business-critical Software-as-a-Service (SaaS) applications such as Salesforce, Microsoft Office 365, streaming video, or others. Providing reliable access to this range of cloud-based resources requires granular controls, including dynamic failover, SLA-based application steering, and application availability, even during brownout or blackout conditions.

SD-WAN Requires a Cloud On-Ramp

However, even with these tools in place, the main challenge is that the internet was not designed for performance. Further, most traditional methods used for steering traffic through public networks (i.e., border gateway protocol (BGP)) don’t redirect traffic to avoid congestion. The answer to this problem is a cloud on-ramp solution that joins colocation sites to a cloud-based application accelerator – such as Equinix – for accelerated cloud connectivity. There should also be a simultaneous focus on middle-mile optimization using sensors embedded in backbone networks by providers like Teridion. When service providers combine SD-WAN acceleration with backbone-based route optimization and protocol acceleration, they can stamp out the inherent performance issues associated with traditional internet routing.

Another challenge associated with SD-WAN is that most solutions must be looped in with a vendor-specific cloud connector that manages matters like traffic steering and internet access before connecting to an application acceleration point. This element adds extraneous distance and delays to a system already unfavorably disposed to latency, jitter, and packet loss. With this in mind, it is recommended to leverage an SD-WAN solution featuring a built-in connector to enable intelligent connection flexibility without the need to backhaul application traffic through an SD-WAN vendor’s remote cloud connector.

Enabling Security Without Hindering Performance

SD-WAN solutions featuring built-in security functionality should also be able to use open APIs to connect to identical virtual security solutions offered in the core provider’s marketplace; this enables point-to-point connections that are fast, reliable, and secure. In addition, these direct cloud connection capabilities help organizations address the challenges of unauthorized Shadow IT and data loss by pairing their SD-WAN solution to a cloud access security broker (CASB) solution. This enables deep visibility into and control over application access, usage, and traffic across a multi-cloud environment without hindering performance.

Most SD-WAN Solutions Struggle with Performance

While SD-WAN promises flexible direct connectivity, advanced application steering, robust connection management, and full-stack security, most solutions struggle with a lack of horsepower required to appropriately scale these functions. Part of the reason why vendors deploy their connectors in the cloud and relegate security responsibilities to their customers – leading to the deployment of overlay solutions – is that their SD-WAN solutions have been built using standard, off-the-shelf processors, limiting their ability to deliver the necessary level of power and performance.

Most technology-dependent solutions from leading vendors (i.e., smartphones and cloud platforms) rely on custom central processing units (CPUs) for acceleration and scalability to meet the needs of applications and the environments where they are used. For SD-WAN to meet expectations around flexible, scalable, reliable, and secure connectivity, those who manufacture these solutions must also work to fulfill these promises. If not, they will continue to offload performance responsibilities to service providers, cloud providers, and even customers, producing unsatisfactory results and increased overhead.

Choosing the Right SD-WAN Solution

Organizations are adopting new applications within their SaaS and multi-cloud environments daily, meaning establishing a secure posture around this access is more critical than ever – this is especially true for applications deployed in the cloud. With this in mind, organizations require an SD-WAN solution that can dynamically select the optimal path to SaaS applications in the cloud, optimize those connections, and also deliver full Layer-7 security and advanced security capabilities, all without impacting scalability and performance. And while this may seem like a daunting task, there are solutions that feature these elements – organizations just need to be aware of what they’re actually looking for.

Take a security-driven approach to networking to improve user experience and simplify operations at the WAN edge with Fortinet’s Secure SD-WAN solution.

Fortinet Named a Leader in the 2020 Gartner Magic Quadrant for Network Firewalls

This blog was originally published on Fortinet’s website.  It has been used here with permission from the provider.

IoT One Of the Top Drivers For Enterprise Investment in Zero Trust Networking

Zero Trust has emerged in the past ten years as the foundational approach to cybersecurity for many organizations. As the name implies, Zero Trust is about removing the presumption of trust for all users, i.e. “never trust, always verify”. Instead of a one-time access decision, trust is continuously addressed and evaluated, and access is limited to least privilege.

While the Zero Trust concept is fairly mature, its application to IoT and unmanaged devices is relatively new, but growing.

New research from EMA points to IoT as one of the top drivers for enterprise interest and investment in zero-trust networking (46% of enterprises).

Figure 1: Technical initiatives that are driving interest in Zero Trust networking

The EMA report, “Enterprise Zero Trust Networking Strategies: Secure Remote Access and Network Segmentation” based on a survey of 252 enterprise technology professionals, discovered the following:

  • IoT drove healthcare, manufacturing, and professional IT services companies towards Zero Trust networking, while software and retail companies were the least influenced by IoT.
  • IoT and other unmanaged devices present a challenge to Zero Trust networking policy design because they have no users associated with them and require an alternative way to authenticate connection requests. 38% of enterprises surveyed create tailored access privileges based on the functions and characteristics of individual devices or classes of devices. This means that 64% of enterprises establish generic access for all devices or devices are untrusted with limited access, or are untrusted and banned from the corporate network.
  • Establishing a generic, minimum level of access privilege for IoT and unmanaged devices, such as an IoT VLAN, is popular among government agencies (50%) and healthcare organizations (55%). However, this strategy isn’t ideal as risks can differ even among a set of similar IoT devices based on behavior, vulnerabilities, manufacturer.
  • The most important parameters for determining access privileges of unmanaged devices were cited as security status, device vulnerability and risks, owner of the device, and observed network behavior. This makes sense so that enterprises can use tailored policies and place devices in the right “trusted” areas of the environment.
  • Enterprises are more likely to succeed with tailored policies for unmanaged devices if they formed a Zero Trust networking taskforce rather than relying on formal partnerships between network and security teams.
  • Identifying and segregating IoT and other unmanaged devices is a top priority for healthcare organizations (55%). This is not a big surprise given the vast numbers of sensors, scanners, and other medical equipment that connect to networks in clinics, hospitals, and laboratories.
  • The top issue that enterprises find most challenging to Zero Trust network segmentation are the high volume of changes and exceptions straining management capacity. This points to a need for network automation.
  • 92% of enterprises want tools that simplify segmentation, specifically to address “exceptions/custom rules”, cross-tool support, and to automate/eliminate errors — this is especially true for IoT since there are so many different types of devices and their numbers are so large that automation is critical to drive Zero Trust segmentation

As the report shows, enterprises are recognizing the need to extend Zero Trust to unmanaged and IoT devices. 50% of enterprises in the EMA survey have started Zero Trust microsegmentation in the LAN where IoT lives. To do this effectively and without manual errors, automation is critical. Ordr can help. We help enterprises discover and profile devices so they know exactly what an IoT device is at a very granular level, how it is behaving, and protect these devices at the firewall and in the network via automated Zero Trust and microsegmentation policies.

We invite you to download the report summary here. For complete visibility into what’s in your network, sign up for our IoT Discovery Program at www.ordr.net/sensor.

This blog was originally published on Ordr’s website.  It has been used here with permission from the provider.

Copyright © CNI Sales Inc. All Rights Reserved