arista.com

arista.com

Solution Brief

Solution Brief

Arista MSS Key Benefits

1. A single operational model for Campus, Branch and Datacenter Microsegmentation

Predicated on a single EOS binary, common across all switching platforms, a single Arista CloudVision® policy orchestration platform,

and an aggregated Network Data Lake (Arista NetDL™) infrastructure for state management and monitoring.

2. Standards-based networking with no custom protocols or hardware

Unlike other switch-based microperimeter segmentation solutions, Arista MSS is not dependent on any custom protocol or custom

hardware and is thus able to be integrated into any standard brownfield and multi-vendor network (wired and wireless).

3. Flexible to any endpoint with no custom agents or software

Since MSS does not require any software agents on endpoints and workloads, it seamlessly extends microperimeter segmentation

from campus, to branch, factory, and IoT endpoints as well as virtualized and bare metal workloads in the data center. There is no

limitation of specific operating system or virtualization platforms.

4. Simplified management of zero trust microperimeters

CloudVision integrates with multiple campus endpoint and datacenter workload identity sources, such as network access control

solutions, IP address management offerings, IT service management tools and virtualization platforms. Arista MSS is thus able to

dynamically establish and enforce identity-aware microperimeters across the entire enterprise.

5. Eliminates “blind spots” for safe deployment of zero trust policies

Using the data in Arista NetDL, MSS generates a map of all traffic sessions and then provides a set of zero trust police

recommendations based on the observed traffic map. Once policies are deployed, MSS can continuously monitor traffic violating

policies and stream the flow information to CloudVision for monitoring and rule update purposes. Importantly, MSS can also connect

to other sources of context such as network detection and response (NDR) and endpoint detection and response (EDR). Thus, Arista

MSS can quickly react to endpoints and workloads that might be misbehaving or compromised and isolate them as appropriate,

minimizing breach impact on the organization.

Who can benefit from implementing Arista MSS

Organizations with existing microsegmentation deployments that are looking to:

•

Enhance and extend agent/host-based microsegmentation to the rest of the infrastructure not managed by host Firewalls/agents.

•

Simplify existing switch-based microsegmentation deployments with an easy-to-deploy consistent solution that adapts to any

network overlay and underlay from data center to campus and branch.

Organizations new to microsegmentation that are looking to:

•

Reduce Firewall spend while extending segmentation to all internal traffic

•

Jumpstart their zero trust initiative with an easy-to-insert solution in existing brownfield network infrastructure with wired and

wireless endpoints and virtualized and bare metal workloads