{"id":1754,"date":"2020-10-01T20:09:32","date_gmt":"2020-10-01T20:09:32","guid":{"rendered":"https:\/\/ptp.cloud\/ptp\/?p=1754"},"modified":"2025-07-21T22:04:48","modified_gmt":"2025-07-22T02:04:48","slug":"cisco-stealthwatch-cloud-security-panel","status":"publish","type":"post","link":"https:\/\/ptp.cloud\/cisco-stealthwatch-cloud-security-panel\/","title":{"rendered":"Enhancing Threat Detection with Cisco Stealthwatch Cloud for Life Sciences"},"content":{"rendered":"[et_pb_section fb_built=”1″ _builder_version=”4.16″ _module_preset=”default” custom_padding=”0px|||||” da_disable_devices=”off|off|off” global_colors_info=”{}” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row _builder_version=”4.25.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.25.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_code _builder_version=”4.27.4″ _module_preset=”default” hover_enabled=”0″ sticky_enabled=”0″]\n
\"Cisco <\/a> In a world where data, users, and workloads are everywhere, visibility is the foundation of effective cybersecurity. On October 1st, experts from PTP<\/a> and Cisco<\/a> hosted a panel discussion focused on Cisco Stealthwatch Cloud and how it helps life sciences organizations manage threats across hybrid cloud and remote environments.<\/pee><\/p>\n
src=”https:\/\/www.youtube-nocookie.com\/embed\/GD1oxRwK6c8?start=0&rel=0″ title=”Cisco Stealthwatch Cloud Panel \u2013 Life Sciences Cybersecurity” loading=”lazy” style=”position: absolute; top: 0; left: 0; width: 100%; height: 100%; border: 0;” referrerpolicy=”strict-origin-when-cross-origin” allow=”accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share” allowfullscreen> <\/iframe> <\/div>\n

<\/p>\n

Watch the full video on YouTube<\/strong> \"YouTube <\/a> <\/div>\n

<\/p>\n

Security Visibility in a Changing Landscape<\/h3>\n

Gary Derheim from PTP opened the session by highlighting the growing complexity of securing distributed environments\u2014especially for research teams working across cloud platforms and on-prem systems. As threat vectors evolve with seasonal and operational shifts, maintaining visibility is no longer optional.<\/pee> Cisco Stealthwatch Cloud<\/a> offers behavior-based detection that enables security teams to identify, protect, detect, and respond to threats before they escalate.<\/pee> <\/p>\n

Adapting to Hybrid and Remote Environments<\/h3>\n

Jim Reilly from Cisco explained how Stealthwatch Cloud bridges visibility gaps caused by the shift to hybrid infrastructure and remote work. Using cloud-native telemetry, flow logs, and traditional sources like NetFlow, the platform creates a comprehensive picture of both cloud and on-prem environments.<\/pee> John Heintz elaborated on the ingestion process, explaining that Stealthwatch Cloud integrates with cloud environments using VPC flow logs, security groups, and telemetry sources, while ingesting on-prem data via span ports and flow-based analytics.<\/pee> This hybrid model supports unified detection across distributed infrastructure\u2014critical for biotech companies managing sensitive research data in AWS, Azure, or private clouds.<\/pee> <\/p>\n

Dynamic Entity Modeling and Real-Time Anomaly Detection<\/h3>\n

Unlike traditional tools that rely on static rules or user-defined thresholds, Stealthwatch Cloud uses dynamic entity modeling to establish behavioral baselines for every connected system. When abnormal behavior is detected\u2014such as a lab printer attempting outbound internet connections\u2014it automatically triggers an alert.<\/pee> Ethan Simmons from PTP noted that this reduces alert fatigue and simplifies operations for managed security teams<\/a>, allowing them to focus on real threats, not noisy logs.<\/pee> <\/p>\n

Adding Value to the Security Stack<\/h3>\n

Jim Reilly emphasized Stealthwatch Cloud\u2019s role as a complement to SIEM platforms. Instead of relying solely on log correlation, the tool uses behavior analytics to detect issues earlier\u2014such as data exfiltration, suspicious geolocation access, or unusual traffic spikes.<\/pee> For life sciences organizations, where clinical trial data or genomic IP must remain protected, early detection is essential. Stealthwatch Cloud delivers that through lightweight deployment and low operational overhead.<\/pee> <\/p>\n

Key Considerations for Implementation<\/h3>\n

Steve Hoevenaar of PTP outlined four major considerations for selecting detection tools:<\/pee> <\/p>\n

    <\/p>\n
  1. Identify gaps in current cloud or hybrid visibility<\/li>\n

    <\/p>\n

  2. Ensure ease of use for internal or managed security teams<\/li>\n

    <\/p>\n

  3. Focus on signal-over-noise alerting<\/li>\n

    <\/p>\n

  4. Choose a scalable licensing model that fits your research lab or enterprise<\/li>\n

    <\/ol>\n

    Jim added that the tool\u2019s flexible consumption model\u2014based on endpoint count and flow volume\u2014makes it ideal for both growing biotech firms and enterprise life sciences teams.<\/pee> <\/p>\n

    Why It Matters for Life Sciences<\/h3>\n

    Whether you’re running hybrid environments for clinical research, scaling cloud workloads, or managing compliance under HIPAA or GxP, Stealthwatch Cloud provides a behavioral-based detection layer that integrates with your life sciences IT support strategy<\/a>.<\/pee> It helps uncover misconfigurations, catch subtle breaches, and improve your overall security posture\u2014all without overburdening your team.<\/pee> <\/p>\n

    Final Thoughts<\/h3>\n

    The panel concluded that Cisco Stealthwatch Cloud is a strong fit for organizations that need deep visibility with minimal complexity. Its real-time anomaly detection and dynamic baselining capabilities make it a smart choice for life sciences teams seeking scalable, secure IT services.<\/pee> Want to explore how Stealthwatch Cloud fits into your infrastructure? Learn more about PTP\u2019s SecOps services<\/a> or contact us<\/a> for a tailored security assessment.<\/pee><\/article>\n

    \u00a0