book

Zero Trust in Resilient Cloud and Network Architectures

Name: Zero Trust in Resilient Cloud and Network Architectures
ISBN: 9780138204501

by Josh Halley, Dhrumil Prajapati, Ariel Leza, Vinay Saini

June 2025

Intermediate to advanced

864 pages

27h 3m

English

Cisco Press

Read now

Unlock full access

Cover Page
About This eBook
Title Page
Copyright Page
About the Authors
About the Technical Reviewers
Dedications
Acknowledgments
Contents at a Glance
Reader Services

Contents
Icons Used in This Book
Command Syntax Conventions
Introduction
Who Should Read This Book?How This Book Is OrganizedCredits
Chapter 1. Zero Trust Demystified
Definition of Zero TrustHow It All BeganWhy We Need Zero TrustCore Principles of Zero TrustMajor Zero Trust Industry StandardsPeople, Processes, and TechnologyOn-Premises vs. CloudHybrid Environment RecommendationsSecurity CertificationsSummaryReferences
Chapter 2. Secure Automation and Orchestration Overview
Introduction to Automation and OrchestrationBuilding Blocks of Secure AutomationCommon Automation Practices and ToolsAI and Machine Learning with AutomationSummary
Chapter 3. Zero Trust Network Deployment
Elements of Zero Trust Strategy DefinitionsTools and TechnologiesIdentifying Business WorkflowsApplying Zero Trust Using SSEZTNA Deployment ScenariosSummary
Chapter 4. Security and Segmentation
OverviewSegmentation OptionsMethods of TrustSec TransportControl Plane TrustSec TransportSummary
Chapter 5. DHCP and Dynamic Addressing Concepts
Introduction to Dynamic AddressingZero Trust Approach to Dynamic AddressingDHCP OptionsDHCP AuthenticationIPv6 Address AssignmentIPv6 First Hop SecuritySummary
Chapter 6. Automating the Campus
OverviewPlanningExecutionSummaryReferences
Chapter 7. Plug-and-Play and Zero-Touch Provisioning
OverviewPlug-and-Play ProvisioningZero-Touch ProvisioningTemplate Usage in Catalyst CenterProgrammability-Based DeploymentCustomer Use CasesSummary
Chapter 8. Routing and Traffic Engineering
OverviewRoutingTraffic EngineeringSummaryReferences
Chapter 9. Authentication and Authorization
OverviewA Broader View of IdentityAuthentication and Authentication MethodsAuthorizationCustomer Use CasesSummary
Chapter 10. Quantum Security
What Is Quantum Computing?Quantum Computing and Emerging Security ThreatsApproaches to Safeguard Against Quantum AdversariesSummary
Chapter 11. Network Convergence and Considerations
What Is Convergence?Convergence in Layer 3 Routed ArchitecturesMethodologies of Convergence TestingMonitoring Security ConvergenceSummary
Chapter 12. Software-Defined Network Deployment Best Practices
IntroductionNetwork Deployment LifecycleStage 1: Planning and DesignStage 2: Deployment and MigrationStage 3: Operations and ManagementSummaryReferences
Chapter 13. Wired and Wireless Assurance
What Is the Best Practice for Your Enterprise Architecture?Wired Network Best Practice Design ConceptsTiered Network DesignStacking ConstructsLayer 3 ArchitecturesOptimizing Wireless NetworksAnchoring Concepts (Catalyst/Meraki)Monitoring TrustSec and Security EnforcementCase Study: Financial Sector CustomerSummary
Chapter 14. Large-Scale Software-Defined Network Deployment
IntroductionNetwork DesignSecurityAutomationImplementation: Kyle and Jason Go to Fast BurgerSummary
Chapter 15. Cloud-Native Security Foundation
Introduction to Cloud-Native Security: A Zero Trust PerspectiveCloud Infrastructure Security: Pillars and Practices in the Modern CloudKey Management in Cloud EnvironmentsNetwork Security Evolution and SegmentationNavigating Multicloud and Hybrid Cloud SecurityMonitoring and Logging Requirements for ComplianceEmerging Trends and Technologies in Cloud-Native SecuritySummaryReferences
Chapter 16. Cloud-Native Application Security
Introduction to Cloud-Native Application SecurityRole of Cloud-Native Application Protection Platform (CNAPP)Building Secure Applications with Cloud-Native SecurityUnique Security Considerations for Serverless ArchitecturesEmerging Trends and Future Outlook in Cloud-Native SecuritySummaryReferences
Chapter 17. Data Center Segmentation On-Prem to the Cloud
Introduction to Data Center Segmentation in Hybrid and Multicloud EnvironmentsZero Trust and Microsegmentation Principles for SegmentationSegmentation Challenges in Hybrid and Multicloud EnvironmentsWays to Implement End-to-End Segmentation Policies with Zero TrustWays to Migrate Segmentation Policies: From On-Premises to CloudWeb3 and Immutable Trust in Hybrid Cloud SegmentationSummaryReferences
Chapter 18. Using Common Policy to Enforce Security
Introduction to Security PoliciesDesigning Common Security PoliciesPolicy Enforcement MechanismsIdentity and Access Management (IAM) PoliciesData Protection and Privacy PoliciesNetwork Security PoliciesFrom SDLC to SDL to SSDLC: A Journey Toward Secure Software DevelopmentOWASP SAMM: A Framework for Security MaturityMonitoring, Logging, and Auditing PoliciesIncident Response and Remediation PoliciesPolicy Compliance and VerificationChallenges in Policy Enforcement Across Hybrid EnvironmentsFuture Directions in Policy-Based SecuritySummaryReferences
Chapter 19. Workload Mobility: On-Prem to Cloud
Definition and Scope of Workload MobilityIs Your Cloud Ready for Your Workloads? Understanding the Benefits and ChallengesChoosing a Cloud Model with Zero Trust as the GoalAnalysis of TCO and ROI for Workload MigrationBuilding Out a Secure Migration PlanIntegrating AWS’s Well-Architected Framework: Case Study of ABC CorpWorkload Migration Frameworks and ToolsData Security During Workload MigrationData Transfer vs. Cloud Migration: An OverviewCloud Migration SecurityQuality Engineering: The Heart of Cloud MigrationNetwork and Connectivity ConsiderationsManaging IP Addressing and DNS ChangesEnsuring High Availability and Disaster Recovery ReadinessSecurity Posture Adjustment Post-MigrationIdentity and Access Management in Hybrid EnvironmentsSummaryReferences
Chapter 20. Resilience and Survivability
Resilience MetricsTypes of ResilienceSoftware ResilienceResilience in the CloudConsequences of Authentication and Authorization ResilienceClient and Server Agent ResilienceAudit Trail ResilienceProactive Resilience ValidationNetwork Infrastructure Resilience ConsiderationSummary
Chapter 21. Zero Trust in Industrial Manufacturing Vertical
Introduction to Industrial NetworkingPillars of ZTNA for Industrial Plant NetworksSecure Remote Access with ZTNAExtending ZTNA in a Noncarpeted Environment with Cisco SD-AccessSummary
Chapter 22. Third-Party SDN Integrations
Introduction to Third-Party SDN IntegrationsEnd-to-End Policy Strategy in a Multivendor EnvironmentBenefits of End-to-End SegmentationChallenges in Multivendor EnvironmentsWhy VXLAN-EVPN?BGP EVPN Detailed Traffic Flow and ArchitectureSecurity Considerations in the CampusFirewall Connectivity in the CampusThird-Party Vendor Firewall Policy IntegrationHighly Resilient Firewall IntegrationsSummaryReferences
Chapter 23. Infrastructure as Code (IaC)
IntroductionEvolution of Automation in Network Device Deployment and ManagementWorking with Structured DataRevision ControlBuilding a Data ModelNetwork Controllers vs. Direct to DeviceDeploying an IaC ArchitectureSecuring IaC ProvisioningDeploying a Resilient “as Code” Infrastructure“As Code” TodayTransitioning to a Network “as Code”Pre-Validation in the Physical Replica or a Digital TwinSummary
Index
Code Snippets

Content preview from Zero Trust in Resilient Cloud and Network Architectures

Index

Numerics

4C’s of Cloud-Native Security
- cloud, 453
  - challenges in standardizing IAM policies, 453–454
  - encryption challenges and solutions, 454
- clusters, 454–456
- code, 457–458
- containers, 456–457
7 R’s model, 583–586
802.1x, 240–243

A

AAA (authentication, authorization, and accounting), 220. See also authentication; authorization
access/access control, 619–620
- in distributed systems, 444
- JIT (just-in-time), 6
- just-enough, 6
- least-privilege, 12, 17, 31–32
- policies, 59–60
- role-based, 6
- smart contract-based, 523–530
ACLs (access control lists), 404–405
Adaptive Policy, 355, 369, 511–513. See also policy/ies
ADM (Application Dependency Mapping), 625–626, 627
agent, PnP, 151
AI/ML, 33–34, 48, 426
- for adaptive policy enforcement in ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9780138204501

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Zero Trust in Resilient Cloud and Network Architectures

by Josh Halley, Dhrumil Prajapati, Ariel Leza, Vinay Saini