Inside Cisco’s Zero Trust Security for AI-Driven Threats
During Cisco Live in San Diego, Cisco representatives highlighted the struggle enterprises face in adopting AI while managing the heightened security concerns that accompany such advancements.
While AI offers the potential to enhance cybersecurity systems by automating threat detection and enabling quicker responses, it equally serves as a tool for threat actors, who have been using it to carry out more intricate attacks.
Addressing this challenge, Cisco has introduced a upgrade of its security framework to counteract the challenges posed by autonomous AI agents and AI-driven cyber threats.
“Safety and security are the defining challenges of the AI era — and agentic AI multiplies the risk, as every new agent is both a force multiplier and a fresh attack surface,” says Jeetu Patel, President and Chief Product Officer at Cisco.
The company’s approach involves deeper integration of security functions into network infrastructure, transitioning from traditional perimeter-based models to “zero trust architectures” that continuously authenticate all network components.
The importance of a new era of hardware
Central to Cisco’s plan is an extension of its Hybrid Mesh Firewall lineup, which includes two new hardware series tailored for diverse scenarios.
The Secure Firewall 6100 Series aims at AI-ready data centres, offering performance density of 200 Gbps per rack unit which – addresses complexity and scalability hurdles identified by Cisco in high-performance computing environments.
For dispersed branch offices, the Secure Firewall 200 Series merges threat inspection with software-defined wide area networking, boasting up to three times better price-performance compared to competitors.
This hardware upgrade is accompanied by enhanced policy management capabilities through Cisco’s Security Cloud Control platform, extending unified management to next-gen firewalls across the company’s SD-WAN, switching, and data centre fabric products.
The unique agentic AI challenge
It is well known that the emergence of agentic AI poses a distinct challenge for security teams across global businesses.
The autonomous characteristics of these systems allow them to access resources, make decisions, and operate independently for teams – beneficial for efficiency but potentially risky for cybersecurity.
As a result, Cisco has introduced ‘Universal Zero Trust Network Access’ to tackle this vulnerability – providing identity-driven access controls for both human users and AI agents in hybrid environments.
What’s crucial about this strategy is that it incorporates automated agent discovery, delegated authorisation and tracking of agent actions through what Cisco defines as native support for the Model Context Protocol.
“The AI era demands a transformative approach to security. Organisations need distributed, identity-based, zero trust protection for applications, users, AI models and agents, supported by a unified policy framework,” says John Grady, Principal Analyst at Enterprise Strategy Group.
How Splunk is contributing to Cisco’s cybersecurity push
Following Cisco’s acquisition of the data analytics platform Splunk in early 2024, enhancements to security systems have been significant, enabling what Cisco calls “advanced detections” and assisting security teams in maximising existing investments.
Further SOAR integrations now feature Cisco Secure Firewall-specific functions for automated threat containment, including host isolation and connection blocking capabilities.
“As AI continues to evolve at an unprecedented pace and new cybersecurity challenges emerge, it’s even more important to fuse security into the very fabric of the network,” explains Chris Konrad, Vice President of Global Cyber at World Wide Technology.
