Cisco ONE Tetration Workload Protection - License - Hosted - C1-TAAS-WP-FND-K9

• Implement a whitelist-based, zero-trust model
  By using advanced algorithms, Tetration generates a granular segmentation policy for each application. It provides the ability to merge business policy requirements with policies that are generated based on application behavior. This normalization and hierarchical merging of policies helps ensure that administrators with reduced scope cannot override higher level business policy intentions.
• Control communication using segmentation
  The platform provides consistent policy enforcement through server operating system capabilities across the multi-cloud infrastructure. Because policy is enforced on the workload itself, Tetration supports virtualized, bare-metal, and container-based environments in unison. This approach ensures that policy moves along with the workload, even when an application component migrates from a bare-metal server to a virtualized environment.
• Identify process behavior deviation
  Behavior of the servers can be determined by baselining the processes that are running on the server and identifying any deviations in behavior from those baselines. In Cisco Tetration, algorithms are available to match the behavior deviations to malware execution patterns, enabling faster detection. The behavior-pattern matching includes serious threats such as Specter and Meltdown.

What is a data center? You are free to ponder that, but by all means you do not want your data center security to be defined by the infrastructure you pick. Today's data centers consist of a hybrid multicloud infrastructure using baremetal, virtualized, and container-based workloads or anywhere in-between. As everything revolves around software today, applications running on your infrastructure are the crown jewels, these are dynamic - these are constantly evolving. Even today, the majority of data centers are designed with traditional perimeter-only security, which is insufficient. The Cisco Tetration platform is designed to address this challenge in a comprehensive and scalable way. Tetration enables holistic workload protection for multicloud data centers.
The Cisco Tetration platform is powered by big-data technologies to support the scale requirements of data centers. It can process comprehensive telemetry information received from servers in near-real time (up to 25,000 servers per cluster). Tetration can enforce consistent policy across thousands of applications and hundreds of millions of policy rules. And it is designed for long-term data retention to enable powerful forensics for such things as identifying incidents and operational troubleshooting.