Why is security moving to the virtualization layer?

Broadcom argues that perimeter defenses alone can be bypassed and that agentic AI's shifting cloud infrastructure requires policy enforcement at the hypervisor level, so security can be handled at scale without slowing traffic.

What throughput figures does Broadcom cite for its security processing?

Mahajan says the company is doing 75 terabits per vCenter cluster for firewalling and 17 terabits for IDS IPS, with an emphasis on keeping latency low for AI workloads.

What does Mahajan say about the timing of security deployment?

He says enterprises cannot put off security for two or three years, warning that by then they will be compromised. The message is that security must be deployed at the infrastructure level and at scale now.

Large Language ModelsAI Safety & AlignmentAI Business & IndustrySiliconANGLE AIAug 31, 2026Sep 1, 2026, 06:01 JST

Broadcom moves security into hypervisor as agentic AI widens attack surface

Send on LINE

3 Key Points

What happened
Broadcom's Umesh Mahajan says agentic AI's constantly shifting cloud infrastructure is expanding the enterprise attack surface, pushing security enforcement down to the virtualization layer. The company is delivering this through its vDefend and Avi Load Balancer product lines, with firewalling at 75 terabits per vCenter cluster and IDS IPS at 17 terabits.
Why it matters
Mahajan argues perimeter firewalls alone can be bypassed and that enterprises delaying lateral security risk falling behind automated attacks. He warns that bolting protection onto infrastructure already carrying production AI traffic is the failure mode to avoid, saying security must be at the infrastructure level and at scale before compromise happens.
What to watch
Broadcom is doing security processing in the hypervisor to avoid latency from separate appliances, which matters for AI workloads. Mahajan says agents and Model Context Protocol services are transient, so admins need a real-time picture of what is authorized versus shadow IT, with work now landing alongside private cloud modernization programs.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

Get news like this every morning, free

Context & Analysis

The conversation at VMware Explore 2026 frames agentic AI not just as a workload change but as a structural challenge for enterprise security. Mahajan describes how customers have bought multiple security products that do not integrate, leaving seams that attackers exploit. Broadcom's answer is an integrated software stack sharing context across vDefend and Avi Load Balancer, pushing enforcement into the hypervisor where traffic inspection can occur without the delay of separate appliances. That design choice is grounded in the scale of AI workloads, which generate heavy east-west traffic and punish any added latency.

The emphasis on visibility reflects the transient nature of agents and Model Context Protocol services. Administrators need a real-time picture of what is authorized and what is shadow IT before they can quarantine anything, and that work is now being folded into private cloud modernization programs. Mahajan's warning is pointed: waiting two years to deploy lateral security means risking compromise, especially as automated attacks evolve. He frames the choice as deploying security at the infrastructure level and at scale now, rather than bolting it onto infrastructure already carrying production AI traffic.

FAQ

Why is security moving to the virtualization layer?: Broadcom argues that perimeter defenses alone can be bypassed and that agentic AI's shifting cloud infrastructure requires policy enforcement at the hypervisor level, so security can be handled at scale without slowing traffic.
What throughput figures does Broadcom cite for its security processing?: Mahajan says the company is doing 75 terabits per vCenter cluster for firewalling and 17 terabits for IDS IPS, with an emphasis on keeping latency low for AI workloads.
What does Mahajan say about the timing of security deployment?: He says enterprises cannot put off security for two or three years, warning that by then they will be compromised. The message is that security must be deployed at the infrastructure level and at scale now.

SiliconANGLE AIRead Original Article

Send on LINE

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Get it free

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.