Network World
Tuesday, January 6, 2009
DNSstuff.com
Get information about your IP
IP Information
50+ On-demand DNS and network tools

Jamey Heary: Cisco Security Expert

Cisco Subnet

Navigation

Cisco claims best of breed security solutions

Is it possible to be both a security market share leader and have best of breed solutions? Cisco thinks so.
The two terms market share leader & best of breed have always been antonyms in the security space. Cisco has been advocating a systems based approach to security for some time. In the past, customers felt they had two choices, either go with a single vendor systems based approach or go with a multi-vendor best of breed point product approach. Now Cisco is trying to change that. Here is a quote from their new approach,

”Cisco Self-Defending Network: Combining Best-of-Breed Products and Services with a Systems Approach. To meet today’s security challenges, businesses need both best-of-breed product capabilities and the ability to plan, design, integrate, and operate those capabilities as an overarching, autonomous system. Only one security vendor can provide such a solution: Cisco®.”

That seems like a tall order for Cisco. Especially given that most customers still do not even recognize Cisco’s dominance in security market share for many security products. And Cisco has held some of those positions for years. Now Cisco is attempting to convince the market it offers best of breed products as well.

A case in point is analysts pronounce that Cisco owns the number one market share for all of the following: FW, IPS, VPN, NAC, AAA, XML firewall, Email security appliances, SIMS appliances, and overall security products revenue. Wow that is quite a list! However, there has traditionally been a strong perception that Cisco is not a best of breed player in the security market. With so many small, agile, niche security companies it seems an impossibility that a lumbering market share leader, carrying the baggage that comes with having a large installed customer base, could move fast enough to compete for best of breed status on a consistent basis. The reasoning used is that the bigger/established companies that are market share leaders just can’t move as fast as the smaller niche vendors can and therefore cannot maintain a best of breed solution. Makes some sense to me. But has Cisco found a way around this limitation? Well, I’ll let you decide that. However, Cisco’s newest self-defending network campaign is targeted at convincing companies it is capable of being both.

A “best of breed” label is very product/solution specific and does not lend itself to a blanket yes or no answer on a per vendor basis. It requires us to drill down into each product/solution in the security space. On the other hand, it can be argued that the security market is moving to an end-to-end single vendor story where products collaborate amongst each other to create a more secure environment. Several vendors, Cisco included, are gobbling up companies that allow them to fill in their end-to-end security solution gaps. So should end-to-end security solution be a best of breed category by itself then? I think so.

What criteria should be used to identify a best of breed product? Who decides what is and is not best of breed? Not easy questions. Ask 10 people what they consider to be the best of breed firewall and you’ll likely get at least 2 or 3 different answers. So is the best of breed moniker controlled by individuals, group think, by vendors, by periodicals like NW, or by analysts. I think the answer is yes to all of them. This makes it a pretty tough assignment for a company like Cisco to change its image to best of breed. It is definitely not something that will change overnight, but rather through a slow process of continuously producing quality, innovative security products. Best of breed status needs to be earned. And of course Cisco acquiring best of breed companies, like Ironport, Altiga, Perfigo, Okena, and others always helps.

So what is your take, Is it possible for any vendor to be both a market share leader and a best of breed solution provider or is this status reserved for start-ups and smaller, more agile companies?

Here is a good whitepaper on a systems approach to security by the Lippis Report.

Now for your opinions, please take a couple minutes and fill out the poll and survey. Let’s see where Cisco stands on this.


Click to take the Best of breed products survey.




The opinions and information presented here are my personal views and not those of my employer.

More from Jamey Heary:
* iPhone raises Privacy concerns: it records screenshots every time you hit the home button

* Cisco enters the crowded AV and DLP client market
*Cisco's new ASA code allows you to securely take your Cisco IP Phone with you anywhere
* Cisco targets Symantec, McAfee with its new antivirus client
* Google's Chrome raises security concerns and tastes like chicken feet a>

Go to Jamey's Blog to read more of his security related blogs.

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <i> <b> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <blockquote> <br /> <br> <p>
  • Lines and paragraphs break automatically.
  • You can use BBCode tags in the text.
  • Web page addresses and e-mail addresses turn into links automatically.

More information about formatting options

CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.

About Jamey Heary

Jamey Heary, CCIE No. 7680, is a security consulting systems engineer at Cisco. He leads its Western Security Asset team and is a field advisor for Cisco's global security virtual team. Jamey is the author of the recently published Cisco NAC Appliance: Enforcing Host Security with Clean Access. His areas of expertise include network and host security design and implementation, security regulatory compliance, and routing and switching. His other certifications include CISSP, CCSP, and Microsoft MCSE. He is also a Certified HIPAA Security Professional. Jamey has been working in the IT field for 14 years and in IT security for 9 years.

Contact him.

RSS feed XML feed

Jamey Heary archive.

Cisco Subnet

RSS feed Cisco news RSS feed

The opinions expressed in this Weblog are those of the writer and may not represent the opinions of Network World.

Advertisement: