arista.com

Solution Brief

Enterprises are going through digital transformation driven by trends such as hybrid and mobile workforce, explosion

of managed and unmanaged IT, OT & IoT devices, distributed Cloud applications causing the notion of traditional

network security perimeter to collapse.

This accelerated pace of change coupled with an ever-changing threat landscape is posing many security challenges,

the biggest one being minimizing any lateral movement to contain the lateral spread of ransomware and other

cyberattacks. These growing threats need to be identified & contained quickly otherwise could result in huge losses of

revenue and customers as well as risk the company’s reputation.

Zero trust is a framework for securing enterprises in today’s modern digital transformation.

Zero trust assumes there is no network perimeter & based on the “Never Trust Always Verify” approach, that requires

organizations to continuously monitor and validate all users, devices, and applications against appropriate access

privileges and security policies to explicitly allow only trusted traffic.

Arista Multi-domain Segmentation Services implements the following key principles of zero trust frameworks like the

Cybersecurity and Infrastructure Security Agency (CISA) “Zero Trust Maturity Model”:

•

Minimize lateral movement with identity-aware microperimeters

•

Trust nothing with zero trust policies to explicitly allow only trusted traffic

•

Always verify with visibility into policy violations and permitted traffic to update and validate zero trust policies

Arista Networks Multi-Domain Segmentation

Services (MSS) For Zero Trust Networking

Microsegmentation solution mitigates threats across east-west lateral

networks from Data Center to Campus and Branch