Skip to content

Deep Dive into Cisco's Use of QUIC, MASQUE and OS Native Capabilities to Deliver Frictionless Zero Trust Access - BRKSEC-3027#

Cisco Live Europe 2025 (Amsterdam) digest Program Core pick Amsterdam · 9–14 February 2025

Abstract

Speakers: Vinny Parla (Cisco)

  • Why: Sits exactly at the intersection of the PM's identity and network-security interests: standards-track access (MASQUE/QUIC) combined with passkeys/WebAuthn and OS-native clients — the credible near-term replacement for legacy VPN.
  • What: How Cisco is building "frictionless" Zero Trust access on industry standards: MASQUE (proxying over HTTP/3/QUIC) instead of legacy tunnel protocols, WebAuthn/passkeys for user authentication, and native OS clients from Apple and Samsung alongside Cisco's Zero Trust Access module in Secure Client. (from abstract only)
  • How: MASQUE provides an encrypted proxy over QUIC so per-app access control replaces full-tunnel VPN; authentication moves to passkeys (FIDO/WebAuthn) eliminating phishable credentials; OS-native integration makes connection as transparent as associating to Wi-Fi, with private 5G as another access path.
  • Where applicable: Enterprise remote/hybrid access replacing or augmenting VPN. Standards-based in principle (IETF MASQUE, W3C WebAuthn), but the seamless-experience pieces depend on specific vendor partnerships (Apple, Google, Samsung) and Cisco's client — evaluate the protocol design separately from the product packaging.