CloudVision AGNI (Network Access Control)

CloudVision AGNI (Guardian for Network Identity) is an AI-driven network identity and access control service that connects users, devices, and the network across distributed campus, branch, and data center locations. Built on CloudVision, AGNI provides real-time device posture assessment by consuming telemetry from Arista NDR and third-party EDR platforms, making dynamic authorization decisions that reflect the actual current security state of each connecting device rather than static credentials that do not change when a device is compromised between authentication events.

The service covers the full endpoint spectrum: managed corporate devices with EDR agents, BYOD devices without agents, IoT sensors, and remote workers connecting from unmanaged networks. For environments where endpoint agents cannot be deployed (including industrial OT, building management systems, and medical devices), AGNI derives identity and posture from network behavior and NDR profiling, enabling network access control enforcement without requiring device enrollment in an agent deployment program.

As a CloudVision service, AGNI inherits the platform's streaming telemetry and API-first architecture, enabling integration with existing ITSM, CMDB, and identity platforms through published APIs. Authorization decisions update in real time as device posture changes. A device whose security posture degrades due to a detected infection or policy violation receives updated network access restrictions immediately, without waiting for a scheduled re-assessment or a manual intervention to enforce the change.