What You Missed on the Expo Floor
Top Network Security Highlights at RSAC 2025:
- Cisco unveiled its 8B-parameter AI Foundation Model for unified signal intelligence
- Palo Alto Networks expanded Prisma AIRS with adaptive traffic shaping
- Vectra AI enhanced Attack Signal Intelligence™ across hybrid networks
- Arista Networks introduced Microsegmentation-as-a-Service for east-west traffic
- Cribl focused on reducing alert fatigue with observability pipeline intelligence
The Network is No Longer the Perimeter—It’s the Battleground
If RSAC 2024 was about Zero Trust frameworks, RSAC 2025 was about what comes next—adaptive, AI-driven network security. Our team spent time in key sessions like “Stronger Defense, Smarter Ops: The Power of Converging Security & Networking” and “Strengthening Network Infrastructure Security in a Complex Threat Landscape,” where the shift was clear: defending the network now means orchestrating across it.
From the expo floor to analyst briefings, the talk wasn’t about monitoring traffic—it was about interpreting it. Threat detection is no longer just signature-based or rule-driven. It’s predictive, real-time, and deeply integrated with signals from endpoints, identity systems, and the cloud.
And everywhere we went, the pressure was the same: security teams need tools that reduce noise, correlate threats, and automate containment before human intervention becomes the bottleneck.
“It’s not enough to watch traffic anymore. You need to understand intent—before the threat manifests.”
— Nirav Shah, SVP Products and Solutions, Fortinet
Here’s what rose to the top from the conversations, sessions, and demos we experienced firsthand:
AI Models Take the Wheel
Cisco’s 8-billion-parameter Foundation Model, trained on diverse enterprise telemetry, was a standout. Designed to unify threat detection across network, endpoint, and identity sources, it feeds real-time AI agents capable of summarizing threat chains and triggering orchestrated responses across platforms.
Vectra AI doubled down on its Attack Signal Intelligence™, layering behavioral AI on top of packet-level data to differentiate malicious behavior from noise—particularly powerful in east-west traffic where traditional IDS tools fail.
NetBrain exhibited its AI-driven intent-based automation platform, emphasizing its capabilities in continuous threat exposure management and network security automation.
Adaptive Response, Not Just Detection
Palo Alto’s Prisma AIRS introduced dynamic traffic shaping based on policy-driven AI. Imagine a system that not only flags unusual lateral movement, but throttles or isolates the suspected connection while a deeper investigation runs in parallel.
Meanwhile, Arista Networks took segmentation to the next level with Microsegmentation-as-a-Service, a lightweight overlay for dynamic workloads that integrates with container platforms and cloud-native tools—no agent required.
NetWitness highlighted its advanced threat detection and response capabilities, including packet-level network monitoring which empowers effective threat hunting and faster decision-making.
Observability Meets Security
Observability vendors leaned into a new narrative: security teams don’t need more data—they need better signal.
Cribl’s latest pipeline intelligence helps identify redundant alerts, correlate logs across sources, and feed only prioritized, context-rich telemetry into your SIEM or XDR.
“The goal isn’t just more visibility—it’s decision clarity.”
— Cribl Engineer, live demo walkthrough at the Cribl booth
Mimecast unveiled their Integrated Human Risk Management Platform which is built to secure organizations more effectively by connecting the dots between humans and technology.
What We Heard in the Hallways
“Firewalls still matter—but context-aware traffic inspection is where the fight is.”
— Omar Santos, Distinguished Engineer, Cisco
“We need network tools that talk to our endpoint, IAM, and data teams. The silo days are over.”
— Sohil Merchant, Senior Director, WM
Why It Matters
RSAC 2025 made one thing clear: network security can no longer operate in a vacuum.
The best platforms are now:
- Powered by AI that interprets, not just detects
- Designed for cross-signal correlation (identity + network + endpoint)
- Capable of autonomous enforcement actions based on real-time posture
- Focused on reducing noise so analysts can act, not sift
If your network security stack still just alerts on anomalies—it’s falling behind. The future is adaptive, integrated, and intelligent. Check out our vetted list of Networking Security solution providers.
For more insights and detailed discussions from RSA Conference 2025, explore the full agenda and session recordings available on the RSA Conference website.
