As the concept of a traditional network perimeter becomes obsolete, identity is now the key to maintaining control. Attackers are increasingly targeting user credentials and sessions to gain unauthorized access, bypassing traditional defenses. Protecting user identities and access is paramount for securing modern enterprises, especially those relying on cloud services like Microsoft 365.

That's why we're thrilled to announce thatUniversal Zero Trust Network Access (ZTNA) from Ciscohas undergone rigorous independent testing bySE Labs, a leading authority in security testing, and has achieved its highest possible rating:AAA. This marks a significant milestone as theindustry's first SE Labs test specifically focused on Universal ZTNA identity-based security.

The SE Labs test evaluated how effectively Universal ZTNA from Cisco could detect and block realistic, identity-focused attacks that mimic techniques used by advanced threat actors in the wild. Unlike tests relying on synthetic traffic, SE Labs testers behaved like real attackers, probing for weaknesses and adapting to defenses in a real-world environment targeting a Microsoft 365 deployment.

Universal ZTNA from Cisco, which combines the power ofCisco Duofor security-first Identity and Access Management,Cisco Secure Accessfor zero trust network controls, andCisco Identity Intelligencefor identity behavior analysis, was put to the test against three primary attack vectors:

1. Stolen Credentials: Using valid, but compromised, usernames and passwords to gain access.
2. MFA Brute-Forcing: Attempting to bypass multi-factor authentication through techniques like MFA fatigue, phishing or credential stuffing.
3. Session Hijacking:Utilizing phishing to take over an existing user session without needing credentials or MFA.

Across a total of30 distinct attacks(12 Stolen Credentials, 8 MFA Brute-Forcing, and 10 Session Hijacking attempts), Universal ZTNA from Cisco demonstrated exceptional performance. The results were conclusive:

• 100% Detection: Every single attack attempt was identified.
• 100% Protection: Every single attack attempt was blocked.

No successful compromises were achieved during the testing.

This perfect score across all attack types underscores the capability of Universal ZTNA from Cisco to defend against key identity-based attack techniques that are actively exploited by adversaries today. It highlights the critical need for robust identity protection as a core component of any security architecture. As the report notes, attackers using these techniques can cause considerable damage if they can log in without triggering alarms.

The SE Labs AAA award for Advanced Security IAM Protection is a testament to the effectiveness of Universal ZTNA from Cisco in providing comprehensive identity and access management protection against sophisticated, real-world threats.

We are incredibly proud of this result, which validates our approach to delivering a truly universal ZTNA solution that prioritizes identity-centric security and protects against the most prevalent attack methods targeting organizations today.

"Zero Trust Network Access is key to protecting organizations today, and we're delighted that our first-of-its-kind Universal ZTNA from Cisco has been awarded the top accolade from SE Labs," says Raj Chopra, SVP, CPO Cisco Security. "This rigorous benchmark underscores how Cisco's unique integration of identity security and SASE delivers a true universal Zero Trust solution, providing unmatched protection for the workforce against the diverse and sophisticated attacks organizations face today."

To learn more about the testing methodology and the detailed results, you can review the full SE Labs Advanced Security Test Report for Universal ZTNA from Cisco.

Download the report.

Learn More

Discover how Universal ZTNA from Cisco can transform your organization's security posture. Visit the following resources to explore our innovative approach:

• Product Page - Universal ZTNA from Cisco
• Product Page - Cisco Secure Access
• Product Website - Cisco Duo
• Product Page - Cisco Identity Intelligence
• Product Page - Cisco User Protection Suite

We'd love to hear what you think! Ask a question and stay connected with Cisco Security on social media.

Cisco Security Social Media

LinkedIn
Facebook
Instagram
X