Earlier this year, Cisco outlined our vision for Zero Trust for the agentic workforce. At its core is a simple principle: trust should not be established once and assumed indefinitely. As agents interact with models, tools, applications, and data, their activity must be continuously evaluated.
Putting that principle into practice requires controls that can follow agents as they work. Consider a coding agent like Claude Code or Codex. To complete a single task, it may call an LLM for reasoning, connect with MCP tools to read Jira and push to GitHub, hit SaaS APIs for data, and browse the web for additional context. It does all this autonomously, at machine speed, carrying whatever credentials it was handed at startup.
Traditional Zero Trust controls authenticate a user and grant access to a resource. Once access is granted, we rely on humans to exercise judgment or machines to follow pre-defined rules. An agent is neither a user nor a deterministic machine. It is a process that reasons, decides, and acts – with broad scope, exponential scale, and no human judgment.
As a result, access control is no longer enough. A coding agent may be authorized to connect to GitHub, Jira, and an approved set of models. The real question is not whether it can connect to those systems, but what actions it takes across them as it works toward a goal. Reading a repository, creating a pull request, modifying a production configuration, or accessing sensitive data may all carry different levels of risk.
This is the shift from access control to action control. Organizations need to evaluate agent activity not just when access is granted, but throughout the workflow itself. That is the agent security challenge—and it is categorically different from the problems Zero Trust was originally designed to solve.
Cisco Secure Access is evolving to help make that shift with Agent Gateway—new functionality that extends policy enforcement across agent interaction with LLMs, MCP servers, SaaS APIs, and web destinations. To move from access control to action control, Agent Gateway will help answer five questions before a request is allowed to proceed:
Many approaches to agent security introduce a second access stack that enterprises adopt alongside their existing SSE and identity infrastructure. Cisco’s approach is different: if you already run Secure Client, Secure Access, and Duo, you already have the enforcement surface. With Agent Gateway, Cisco extends these capabilities into the agentic workflow. No agent code changes. No new management portal. No second identity system.
Consider an enterprise deploying hundreds of coding agents across software development. Each agent may be authorized to use approved LLMs, access Jira through MCP tools, retrieve source code from GitHub, consult internal documentation, and interact with selected enterprise APIs. On paper, that sounds straightforward. In practice, those agents may perform thousands of actions every day across dozens of systems.
Traditional access controls can answer whether an agent is allowed to connect to GitHub. They struggle to show whether a particular action was appropriate once the agent got there. Even basic audit questions require stitching evidence from LLM provider logs, MCP server logs, GitHub audit trails, and whatever the agent’s orchestration framework happens to capture.
With Agent Gateway and Duo, every agent has a named identity tied to its owner and business purpose. Every GitHub interaction shows which method was called, whether it was allowed, and which vault reference provided the token. When a model provider has an outage, requests can automatically fail over to another approved model within the same policy framework. Observation mode can identify unusual patterns—such as a burst of write requests to a normally read-only API—and surface them as policy recommendations.
The value is not another dashboard. It is a single control loop for agent identity, action, credential, policy, and outcome.
Some products or features described may be in various stages of development and offered on a when-and-if available basis. Cisco reserves the right to change delivery timelines and will have no liability for any delays or failures to deliver.
We’d love to hear what you think! Ask a question and stay connected with Cisco Security on social media.
Cisco Security Social Media
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。