A security team has migrated a multi-tier application into a hybrid environment consisting of on-premises bare-metal servers and public cloud instances. They need a solution that provides deep visibility into east-west process-level and network flow behavior across every workload, automatically generates whitelist microsegmentation policies based on observed application dependencies, and enforces those policies consistently regardless of where the workload runs. Which Cisco solution best meets these requirements?