Cisco Security Service Insertion Explained
Security Service Insertion (SSI) is an architectural shift in network security, enhancing efficiency and scalability by using identity-based traffic inspection and LISP Map Server integration, available soon on Catalyst Center 3.16 with IOS XE 17.18.2.
MAIN POINTS FROM TRANSCRIPT
- SSI represents a major architectural change in large-scale security design.
- Traditional methods like policy-based routing are inefficient and not scalable.
- SSI uses identity-based traffic inspection, not topology-based.
- Available soon on Catalyst Center 3.16 with IOS XE 17.18.2.
TAKEAWAYS
- SSI solves inefficiencies in traditional policy-based routing and SXP tunnels.
- Traffic is inspected once at ingress and redirected deterministically.
- LISP Map Server integration allows precise firewall IP address management.
- Operational management is via On-Prem Catalyst Center with policy intent on ISE.