Elisity Microsegmentation vs Isovalent Enterprise for Cilium

Elisity Microsegmentation applies identity-based least-privilege policies to users, workloads, and devices across IT, IoT, OT, and IoMT networks. Passive telemetry and integrations discover devices and correlate identity, behavior, traffic, and risk in IdentityGraph. Teams can simulate policies against real traffic before activation, while Elisity Intelligence recommends actions for customer approval. A cloud-hosted Cloud Control Center manages Virtual Edge deployments, and Virtual Edge Nodes enforce policies through existing network infrastructure. Elisity describes Virtual Edge as lightweight container software for access-layer switches or virtual environments, without additional hardware. The platform is agentless, supports mixed workloads and hybrid cloud environments, and is available through API, self-hosted, and web platforms. Integrations include Armis, Claroty, CrowdStrike, Microsoft Defender, ServiceNow, Active Directory, Splunk, Cisco, Juniper, Aruba, and Arista. It targets healthcare, manufacturing and industrial organizations, and commercial enterprises. Pricing and subscription terms are set in a Software Order.

Isovalent Enterprise for Cilium is a paid, hardened distribution of Cilium, Hubble, and Tetragon, built and supported by Cilium’s creators. Cilium supplies network-layer connectivity and security across multi-cloud and on-premises environments. Enterprise policies include DNS-aware, Layer 7, and deny rules for fine-grained traffic control and micro-segmentation. Hubble provides real-time network-flow visibility, policy visualization, and an interface for troubleshooting and network management. Tetragon adds runtime enforcement and security observability, including protocol enforcement, IP and port whitelisting, and automatic application-aware policy generation. Cluster Mesh connects clusters across AWS, Azure, Google Cloud Platform, and on-premises environments. The product also offers sidecar-free service communication and advanced load balancing. It runs on Linux in self-hosted environments, with hybrid deployment and a distributed control plane. Deployment guidance covers Azure Marketplace, an Azure Resource Manager template, and Azure CLI. Pricing is on request. Hubble UI, DNS Proxy HA, and Tetragon are not enabled by default for AKS creation or upgrades.