Cisco Live Las Vegas | May 31 – June 4
Meet Isovalent at Cisco Live Las Vegas
Join us at Cisco Live Las Vegas and discover how modern cloud-native networking, security, and observability are transforming the way enterprises build and operate Kubernetes environments at scale.
Whether you’re focused on AI-ready infrastructure, Kubernetes networking, zero-trust security, or deep observability with eBPF, our experts will be onsite to show how Isovalent helps teams simplify operations while strengthening performance and security across hybrid and multi-cloud environments.
Isovalent Demo Pods
Hybrid Mesh Firewall | Cisco Secure Workload | Cisco Smart Switch
Enforce Segmentation Everywhere | AIDC28
Segmentation that mets you where you are. Learn how Cisco Hybrid Mesh Firewall can help you on your segmentation journey by providing agentless and agent based segmentation for your traditional and modern applications including Kubernetes, there by minimizing attack surface and stopping unauthorized lateral movement.
Hybrid Mesh Firewall | Isovalent
Secure AI infrastructure | AIDC32
No matter how well you secure the models and agents, AI is software running somewhere. Isovalent uses eBPF to combine network and runtime enforcement in a single system with no seams. See process-level visibility, runtime shields that block container escapes without rebooting, and workload segmentation that contains threats at the source.
Hybrid Mesh Firewall | Splunk | Cisco Cloud Control
Accelerate SecOps with network data | AIDC34
Leverage network and firewall telemetry to accelerate threat detection and response. Integrate firewall logs into Splunk, perform federated search across environments, and enable advanced threat hunting with enriched context. Correlate signals, uncover hidden threats, and act faster with unified visibility across network infrastructure and security operations.
Nexus One and Isovalent | Isovalent Network Bridge
Unify ops from fabric to Kubernetes | ADIC25
Uncover how a unified Nexus Dashboard is the foundation for centralized control and visibility across all fabrics in Nexus One. Learn how Isovalent’s integration enhances cloud-native applications with cutting-edge observability, robust security, and peak performance, giving you unmatched visibility and control.
Agenda
Speaker Sessions
Sunday, May 31, 2026
Introduction to Cloud-Native Networking with Isovalent Platform [LTRSEC-2274]
Luxor, Egyptian FG
9:00 AM - 1:00 PM
Modern application architectures are undergoing a significat shift from the infrastructure layer all the way up through the application stack. This evolution has led to the widespread adoption of the term cloud-native, which refers to architectures that fully embrace cloud computing delivery models to build systems that are inherently scalable, resilient, flexible, and elastic. As a result of this evolution, a new discipline has emerged in the industry called platform engineering responsible for managing the underlying cloud-native infrastructure, based on kubernetes nodes and clusters.
The Kubernetes architecture has seen a new evolution thanks to an innovative technology in this space called eBPF (extended Berkeley Packet Filter). eBPF is revolutionizing the infrastructure landscape by enabling the safe and efficient execution of custom programs directly within the Linux kernel, without requiring kernel changes, unlocking powerful capabilities in networking, observability, and security.
Once used primarily by hyperscalers, eBPF is now making its way into the enterprise world. Isovalent (now part of Cisco) has been leading this shift by bringing eBPF-powered solutions to the cloud-native ecosystem with Cilium, Hubble and Tetragon. Their technology helps answer tough questions like 'How are my microservices communicating?", "Where are my packets going?", and "How can I implement zero-trust network segmentation for my Kubernetes apps?"
In this introductory lab, participants will get understading of the Isovalent Platform landscape and gain practical experience with cloud-native tools in kubernetes.
Christopher Luciano, Sr. Solutions Engineer
Jorge Quintero, Solutions Engineer
Pedro Antunez, Software Consulting Engineer
Using Isovalent Tetragon and Hypershield for Runtime Security, Observability and Network Policy [LTRSEC-2170]
LL, South Pacific J
2:00 PM - 6:00 PM
In this hands-on lab, participants will learn about the capabilities of Hypershield and Isovalent Enterprise.
Patrick Whyte, Technical Marketing Engineering Technical Leader
Ova Bear, Solutions Engineer
Monday, June 1, 2026
Cisco DC Fabrics and Cilium: Deploy, Secure, and Observe Cloud-Native Applications [LTRDCN-2467]
LL, South Pacific I
8:00 AM - 12:00 PM
Unlock the full potential of your cloud-native applications by integrating Cilium with Cisco Application Centric Infrastructure (ACI) and NX-OS VXLAN EVPN. In this session, you'll discover how to seamlessly deploy modern applications while leveraging advanced networking and security capabilities across multiple Cisco platforms. The lab will guide you through step-by-step configuration of Cilium with ACI/NX-OS, demonstrating how to apply Kubernetes-native network policies for workload security and utilize Cilium's robust observability features for enhanced visibility and troubleshooting. You'll also learn how to use ACI/NX-OS security policies to secure north-south (N/S) communication. To provide comprehensive end-to-end visibility, you'll see how Cisco Nexus Dashboard Insights (NDI) can be configured and used across both ACI and NX-OS VXLAN EVPN environments. This session provides practical, hands-on insights and best practices to build, secure, and monitor your applications with confidence across both ACI and NX-OS VXLAN EVPN.
Camillo Rossi, Technical Leader
Vaibhav Agrawal, Customer Delivery Architect
From On-Prem to Cloud: Unifying Security with Hybrid Mesh Firewalls and Cisco's Secure Ecosystem [BRKSEC-1802]
L2, Breakers DJ
9:30 AM - 10:30 AM
Securing workloads across on-premises data centers and multicloud environments demands an integrated, scalable architecture. This session focuses on building hybrid mesh firewalls using Cisco Secure Workload, Firepower Threat Defense (FTD), Secure Cloud Controls, and Multicloud Defense. We'll present a reference architecture that demonstrates how these technologies interoperate to deliver unified security policies, automated threat response, and seamless segmentation across hybrid deployments.
Dirk Stoeckmann, Technical Solutions Architect
Architecting Private Cloud "VPC-like" services with Cisco Nexus and Isovalent [BRKDCN-2982]
L2, Surf EF
1:30 PM - 3:00 PM
As enterprises strive to achieve the agility and scalability of public cloud within their private data centers, modern networking and observability solutions are key. This session will explore how advances in network overlays, container networking, and service observability enable the creation of "VPC-like" environments on-premises. Attendees will gain insight into how Cisco Nexus Data Center Switching and Isovalent deliver robust, scalable architectures for next-generation private clouds. Join us to discover design strategies and integration best practices that empower your organization to build secure, flexible, and cloud-like private infrastructure.
Christopher Luciano, Sr. Solutions Engineer
Mario Ruiz, Solutions Engineer
Unifying Kubernetes and the Data Center: Isovalent Private Networks over EVPN/VXLAN [BRKDCN-3668]
L2, Surf AB
2:30 PM - 3:30 PM
This technical session details the integration of Isovalent Private Networks with external EVPN/VXLAN fabrics. We provide a practical blueprint for connecting Kubernetes networking with enterprise data center fabrics. The discussion covers architecture, underlay/overlay connectivity, BGP control plane setup, and specific EVPN route advertisements (Route Types). We will examine datapath programming, VRF instantiation, and VTEP configuration on both Kubernetes and the Cisco fabric. This session focuses on the specific mechanisms required to stretch logical networks, providing a technical guide for building a fully integrated hybrid environment. We will also show how this architecture supports the network designs required by distributed AI/ML applications.
Marcos Hernandez, Distinguished Engineer/Sr. Director of Technical Marketing
AI Gave Every Attacker a Kubernetes Playbook. Isovalent Takes It Away [PSOSEC-2345]
WoS - Cisco Theater 1
4:30 PM - 5:30 PM
Kubernetes environments are dynamic, ephemeral, and often invisible to traditional security tools. Because workloads spin up and disappear in seconds and east-west traffic remains within the node, standard IP-based policies frequently fail. This is the environment where your applications—and your AI workloads—actually run. Isovalent brings runtime security, network segmentation, and multi-cloud connectivity into one eBPF-based platform. In this session, we will demonstrate how Cilium replaces IP-based network policy with identity-aware enforcement, while Isovalent Runtime Security delivers process-level visibility and nano-segmentation. We will also show how these tools integrate with Splunk ES to provide actionable, ATT&CK-mapped detection content. If you run Kubernetes in production, this session provides a blueprint for building security that is as dynamic as your infrastructure.
Duffie Cooley, Field CTO Isovalent & CNCF Ambassador
Tuesday, June 2, 2026
The Swiss Army Knife of Cloud Native Networking [BRKCLD-1012]
L3, South Seas A
10:30 AM - 11:30 AM
Join us to explore how Cilium, powered by eBPF, enhances multi-cloud and multi-tenancy networking capabilities. In this session, we will dive deep into Cilium's advanced features, including BGP, Load Balancing, LB IPAM, and Network Policies, showcasing how they deliver secure and scalable networking solutions. Discover how Cilium allows for efficient routing and connectivity between Kubernetes clusters and external networks and you'll learn the setup and configuration of BGP with Cilium including its adaptability to different network topologies. Additionally, learn about Cilium Load Balancing capabilities, which offer high availability for applications. Understand its integration with LB IPAM and how it enables platform engineers to configure multi-tenancy routing with multiple IP pools for assigning Load Balancer IPs. Whether you are a Platform or Network Engineer, this session will equip you with the knowledge and tools to optimize your Kubernetes networking architecture with Cilium.
Raymond de Jong, Field CTO
Enhancing Cloud-Native Security: Isovalent's CNI Innovations in Kubernetes [BRKSEC-2891]
L3, South Seas D
10:30 AM - 11:30 AM
In this presentation, we introduce Isovalent's products Cilium, Tetragon, and the underlying eBPF technology. We explain how these tools address the network and security challenges of modern cloud-native applications. Cilium revolutionizes networking in Kubernetes clusters, while Tetragon provides deep insights into the security and behavior of applications. Both are based on eBPF technology, which allows dynamic code insertion into the Linux kernel without the need for recompilation. We will also provide an outlook on how Cisco Hypershield will utilize these products as part of a decentralized security architecture in the future.
Dirk Stoeckmann, Technical Solutions Architect
Seamless AI Networking: From Network Fabric to Container [PSODCN-2000]
WoS - Cisco Theater 3
2:30 PM - 3:00 PM
With over 90% of AI workloads running on Kubernetes, modernizing your infrastructure is critical. Join us to explore Cisco's end-to-end approach to AI networking. Discover how to achieve seamless connectivity, consistent visibility, and robust security across your entire ecosystem, from on-premises deployments to the cloud. We will unpack how Cisco simplifies operations across bare metal, VMs, and containers. You will learn how extending the network fabric with Isovalent Networking bridges traditional and cloud-native architectures, optimizing performance directly to the container pod level. Leave with actionable strategies to unify observability and security, ensuring your infrastructure is fully optimized and scalable for the next generation of AI workloads.
Marcos Hernandez, Distinguished Engineer/Sr. Director of Technical Marketing
Agents, Models, and Mayhem: Securing Every Layer of the AI Data Center [CENSEC-1046]
WoS - Center Stage, Bayside B
4:15 PM - 4:45 PM
AI workloads running in the data center pull in third-party models, libraries, and agents — any one of which can introduce risk. Security bolted on after can't keep up. See how Cisco fuses enforcement into every layer: hardware root of trust, DPU-powered firewalling, Kubernetes-native workload protection, runtime model guardrails, and agentic identity control.
Dan Wendlandt, Co-founder & CEO of Isovalent
Rick Miles, VP, Product Management
Wednesday, June 3, 2026
Kubernetes in CML: Building Secure Cloud-Native Networks in Reproducible Lab Environments [BRKCLD-2019]
L3, South Seas A
10:30 AM - 11:30 AM
Kubernetes networking can feel unpredictable—especially when you're trying to understand routing behavior, enforce zero-trust policies, or troubleshoot microservice traffic at scale. In this session, you’ll learn how to build fully functional Kubernetes clusters inside Cisco Modeling Labs (CML), giving you a reproducible environment you can mirror in your own data centers for experimentation, validation, and training. We’ll deploy Cilium as the CNI, use Hubble for eBPF-powered flow visibility, and integrate Envoy to inspect and control service-to-service communication. Together, we’ll explore core networking concepts, trace real traffic flows, diagnose common misconfigurations, and apply identity-aware network policies that form the foundation of a zero-trust model. By grounding cloud-native networking in hands-on, observable practice, this session helps network engineers build the intuition needed to support secure, resilient Kubernetes deployments—whether on-prem, in the cloud, or across hybrid environments.
Nico Vibert, Principal Technical Marketing Engineer
Colin Lacy, Software Engineering Technical Leader
Agents Under Fire: Full-Stack Security from Model to Kernel [PSOSEC-2346]
WoS - Cisco Theater 3
11:30 AM - 12:00 PM
Agents get attacked before they run and while they run. Malicious MCP tools, backdoored skills, and compromised models introduce risk before the first request is processed. Once running, adversaries use prompt injection and tool manipulation to redirect agent behavior, then move laterally through the infrastructure underneath to reach credentials, databases, and sensitive workloads. This session maps the full attack lifecycle and shows how to close security gaps. Cisco AI Defense secures the model and agent layer using supply chain scanning, MCP traffic inspection, and runtime guardrails against prompt injection and tool exploitation. Isovalent secures the infrastructure layer with runtime enforcement that stops container escape and contains lateral movement at the kernel before attackers can pivot. Full-stack defense, from model to kernel.
Christopher Luciano, Sr. Solutions Engineer
Modern AI networks: IOS-XR, SRv6, Cilium, and SONiC [LTRMSI-3000]
Luxor - L1, Lotus 1
1:00 PM - 5:00 PM
In this immersive hands-on lab, explore how next-generation AI networking fabrics can be designed and deployed using SRv6, Kubernetes-native networking with Cilium, and open-source data center technologies. You'll explore a new way to architect, program, and optimize traffic in high-performance compute environments using Cisco IOS-XR and SONiC. This session walks participants through a series of progressive tutorials and labs covering: - SRv6 fundamentals and real-world use cases for L3VPN and Traffic Engineering - Kubernetes integration using Cilium and SRv6 for modern service-aware routing - SONiC-based data center fabric bring-up and host-based SRv6. - Programmatic traffic control using custom SRv6 mappings and intelligent automation Participants will gain practical skills in deploying flexible, scalable, and programmable infrastructure purpose-built for AI, HPC, or cloud-native workloads. Whether you're a network engineer, cloud architect, or AI infrastructure specialist, this session bridges the gap between architecture and hands-on implementation.
Bruce McDougall, Principal Solutions Engineer
Kubernetes (K8s) Infrastructure Connectivity for the Modern Data Center [BRKDCN-2963]
L3, South Seas B
1:30 PM - 3:00 PM
Kubernetes platforms serve as the cornerstone of cloud-native applications, with the process of bootstrapping a Kubernetes cluster now simplified to just a few commands. However, selecting and configuring an appropriate Container Network Interface (CNI) remains a complex yet critical task for establishing a scalable and reliable Kubernetes infrastructure. With a variety of CNI solutions available, determining which ones integrate most effectively with Cisco NX-OS and ACI is essential for making informed design choices. In this session, we will delve into the capabilities of Cilium and explore strategies for seamless integration with Cisco ACI and NX-OS based fabrics.
We will discuss methods for implementing network segmentation, Service LoadBalancing and demonstrate how to enhance visibility across container and network environments. This exploration aims to empower attendees with the knowledge to optimize their Kubernetes networking configurations, ensuring robust and efficient infrastructure.
Camillo Rossi, Technical Leader
Rob van der Kind, Technical Leader
Life of a Packet in Kubernetes: A Network Engineer’s Guide [BRKCLD-3734]
L2, Mandalay Bay D
1:30 PM - 3:00 PM
Kubernetes networking can be difficult to reason about, especially for those used to traditional infrastructure. Traffic is routed through layers of abstraction such as services, overlays, policies and proxies, making visibility and control a challenge. This advanced session maps the full journey of a packet through a Kubernetes cluster, across nodes, and out via egress. Using Isovalent Cilium as the dataplane, we will unpack how traffic flows through technologies such as VXLAN and Geneve overlays, Gateway API, Egress Gateway, BGP routing, IPsec encryption, Direct Server Return (DSR), and multi-cluster networking with Cluster Mesh. We will also explore performance-focused features including BIG TCP and topology-aware traffic engineering. Expect live demos. Attendees will learn how to correlate packet behavior with Kubernetes constructs using Hubble, Cilium CLI, and Wireshark, gaining the insight needed to troubleshoot and optimize real-world networks.
Nico Vibert, Principal Technical Marketing Engineer
Adopting Network Policies in Highly Secure Environments [BRKCLD-2017]
LL, Tradewinds DEF
4:00 PM - 5:00 PM
In the modern era of distributed computing, network connectivity is the backbone of every application—but not all network traffic should be public. Kubernetes, by default, allows open networking, making it essential for organizations to implement robust network policies to protect sensitive workloads. Drawing on real-world experience from highly regulated and complex environments, this session will introduce the core concepts of Cilium Network Policies, including application-aware and identity-based security models. We’ll walk through the differences between default-allow and default-deny policies, demonstrating how a risk-based approach helps prioritize protection for your most sensitive assets. The session will also cover exposure types and practical strategies for securing workloads across diverse environments. Attendees will gain hands-on insights into leveraging observability tools like Cilium, Hubble Timescape, and Splunk Observability Cloud to visualize network flows and streamline policy creation using the Network Policy Editor. We’ll also showcase how Network Policy Guardrails empower organizations to maintain security control while enabling teams with self-service policy management. By the end of this session, participants will have actionable strategies to efficiently secure Kubernetes environments - even those handling highly sensitive workloads - using modern network policy best practices.
Raymond de Jong, Field CTO
eBPF-Powered Runtime Security and Exposure Management in Splunk [BRKOBS-1007]
L2, Breakers DJ
2:30 PM - 3:30 PM
Discover how Splunk and Cisco Isovalent improve threat detection, incident investigation, and common vulnerabilities and exposures (CVE) mitigation workflows with richer data, deeper context, stronger correlation, and AI-driven insights with low friction and memory usage. This session showcases how to use kernel-level runtime and network security data in Splunk during threat hunting and incident response to protect critical cloud infrastructure against known and unknown vulnerabilities before they are exploited. You'll leave this session understanding how eBPF-based security observability with Splunk and Isovalent can strengthen your SecOps workflows and help protect your infrastructure from exploitation. Intermediate experience with security operations and cloud infrastructure is recommended.
Natalia Ivanko, Engineering Product Manager
Isovalent & Red Hat Session I Red Hat Mini Theater Booth 9011
Booth 9011
4:00 PM - 4:30 PM
Join Isovalent and Red Hat for a collaborative session on simplifying secure, multi-tenant networking in Red Hat OpenShift with Isovalent Networking. Learn how teams can create VPC-style isolated network segments natively in Kubernetes, simplify management of overlapping IP ranges and hybrid IPv4/IPv6 environments, and streamline operations with GitOps.
Marcos Hernandez, Distinguished Engineer/Sr. Director of Technical Marketing
Thursday, June 4, 2026
Unlocking Day2 Ops Excellence: Nexus Dashboard Innovations for ACI and NX-OS N9K Fabrics [BRKDCN-3924]
L3, Jasmine AB
8:30 AM - 10:00 AM
In most data center networks, operational paradigms are primarily reactive, leaving operators scrambling to resolve business-impacting network, security, and compliance issues long after they occur. Imagine having a powerful, intelligent assistant that alerts you to potential problems in your network and guides you in resolving them before they affect your business. In this session, discover how to harness the capabilities of Nexus Dashboard (ND) to proactively identify and address issues within Cisco Application Centric Infrastructure (ACI) or NX-OS fabrics, transforming your approach from reactive to proactive.
Camillo Rossi, Technical Leader
Domenico Dastoli, Principal Technical Marketing Engineer
Kubernetes Networking for the NetDevOps Engineer [DEVNET-2445]
WoS - DevNet Tech Talk 2
12:30 PM - 1:15 PM
Kubernetes networking can seem like a completely different world to network engineers. New terminology, unfamiliar tools, and YAML everywhere. But if you've already embraced NetDevOps principles, you're closer than you think. In this session, we'll draw direct parallels between the NetDevOps workflows you already use and how Kubernetes networking actually works. Intent-driven configuration, network-as-code, templates, source of truth, GitOps: these concepts map directly onto Kubernetes Networking and Cilium. We'll walk through how the concepts network automators have learned over the past decade are applicable in Kubernetes. We'll start with a recap of Kubernetes networking for those unfamiliar with it before showing, with demos, how the skills network automators have learned over the past decade apply and translate in Kubernetes. You'll leave knowing that Kubernetes networking isn't a leap. It's the next step on a path you're already walking.
Nico Vibert, Principal Technical Marketing Engineer