Egress security in the public cloud comprises a significant portion of the total security posture toward protecting public cloud workloads. Cisco Multicloud Defense is architected using software-defined principles of a decoupled control plane and data plane, offering a software-as-a-service (SaaS)-delivered control plane (the Multicloud Defense Controller) and a platform-as-a-service (PaaS)-delivered data plane (Multicloud Defense Gateway) residing in the organization’s cloud accounts.