Case study · Construction
Global construction company

Securing Cohesity backup appliances with CSW and ACI policy.

A global construction company faced a risk management compliance requirement to protect physical servers, virtual servers, and Cohesity backup appliances. BTA delivered micro-segmentation across 100 workloads using Cisco Secure Workload and Cisco ACI.

  • Cisco Secure Workload
  • Cisco ACI
  • Cohesity backup appliances
Talk to a specialistMore case studies
COMPLIANCE · ALL TIERSPHYSICALVIRTUALBACKUP
Outcome 01
100
Workloads under micro-segmentation
Outcome 02
Agentless
Enforcement for backup appliances via ACI
Outcome 03
Compliance
Posture met across all server tiers

Engagement story

At a glance
Customer
Global construction company
Industry
Construction
Technologies
Cisco Secure Workload · Cisco ACI · Cohesity backup appliances

The problem

Cohesity uses locked-down appliances that prohibit software agents, so traditional workload protection could not detect or segment traffic to these systems. The team needed a unified compliance posture across physical servers, virtual servers, and Cohesity backup appliances.

How BTA delivered

BTA used the SIMPLE methodology with Cisco Secure Workload (CSW) and Cisco Application-Centric Infrastructure (ACI). Cohesity appliances were connected directly to the ACI fabric. Network flow data was exported from both ACI and CSW agents. Segmentation policies were enforced via CSW agents on servers and ACI policy objects for unagented workloads.

Outcomes in production

BTA implemented micro-segmentation across 100 workloads, enhancing protection against external threats while delivering efficient time-to-value through the structured engagement process.

What makes us different

We're architects who execute.

Three principles every BTA engagement runs on. Visible in the work itself.

  • We architect, deploy, and stay through Day-2.

    Every engagement is end-to-end. We design the target environment, deploy it in stages, and remain on hand through the operational handoff.

  • We train your team to own the outcome.

    Training is part of every engagement. By the close of an engagement, your operators can run, maintain, and defend the system to an auditor.

  • We measure success when your team runs it alone.

    An engagement closes when your team is operating the solution without us in the room. SIMPLE methodology enforces this exit criterion on every project.

SIMPLE Methodology
See how SIMPLE works
More case studies

Related work.

30 minutes

Schedule a call. We’ll scope it in 30 minutes.

Bring your hardest architecture problem. We’ll tell you what we’d do, what it costs, and how long it takes.

  • 30-minute scoping call
  • 1,000+ projects shipped
  • Training in every engagement

By submitting, you agree to BTA contacting you about this inquiry. See our privacy notice.