Delivering Real Time User Experiences Everywhere with Secure Mobile Access

Size: px

Start display at page:

Download "Delivering Real Time User Experiences Everywhere with Secure Mobile Access"

Augusta Randall
5 years ago
Views:

1 Delivering Real Time User Experiences Everywhere with Secure Mobile Access 1

2 Borderless Networks Services MediaNet What can Borderless Networks do for your business? 2

3 Video Changes Everything Consumer Video Business Video New Business Models 3

4 Cisco Medianet Transform Video Experiences No Resource Reservation, Degraded Video Context-Aware, Prioritized, High Quality Video Global Business, WW Offices CEO Meeting M&A Negotiation Sports Event CEO Meeting M&A Negotiation Sports Event Can My Network Deliver Real-Time Collaboration Experiences? 4

and improved QoE Capability and Features

AutoQoS Media Services Interface Cisco VideoStream

ongoing operational costs of rich-media applications

11n support to enable enterpriseclass, wireless Cisco

streams Products Cisco Catalyst 3K and 4K Switches

5 Cisco Medianet Release 2.1 Simplification of deployment and maintenance of video and improved QoE Capability and Features Autoconfiguration: Auto Smartports Location Cisco AutoQoS Media Services Interface Cisco VideoStream Benefits Helps simplify the deployment and reduce the ongoing operational costs of rich-media applications and endpoints Extends IEEE n support to enable enterpriseclass, wireless Cisco Video Surveillance IP Cameras and other live video streams Products Cisco Catalyst 3K and 4K Switches Cisco ISR & ISRG2 Cisco Digital Media Player 4310G Cisco Video Surveillance IP Cameras Cisco 5508 Wireless LAN Controller Cisco Aironet Access Points 5

Cisco Medianet Autoconfiguration Simplify deployment Automate network configuration Auto Smartports and QoS Location integration Automate location configuration Camera registers with MSI: it s send

6 Cisco Medianet Autoconfiguration Simplify deployment Automate network configuration Auto Smartports and QoS Location integration Automate location configuration Camera registers with MSI: it s send location device info type = with Camera its manager via CDP Switch provides civic & geo location info to endpoint CDP: location Assign to VLAN 10 & = bldg 24/room 5 apply QoS policy x How many IP cameras do I have installed in Bldg 24 CiscoWorks LMS MSE provides geo location info to switches Cisco Mobility Service Engine WAN IP Surveillance Manager Automated configuration and deployment reduce cost of deployment and ongoing moves, adds and changes 6

Streaming Video Challenges over Wireless Radio Frequency Limitations Can t deliver multicast video at scale Video overloads network and degrades other

7 Streaming Video Challenges over Wireless Radio Frequency Limitations Can t deliver multicast video at scale Video overloads network and degrades other application performance Unable to deliver business quality video Video Streaming Without Reliable Multicast WLC Switch AP AP AP AP Poor Performance Poor Performance 7

8 Streaming Video Challenges Poor Wired to Wireless Network Integration Reliability at WLC improves quality but NOT overall scale No identification of respective priority Inefficient use of overall network Inefficient use of bandwidth on the wired port Wireless Controller Switch AP AP AP AP Good Performance Good Performance Good Performance Poor Performance 8

9 Media Ready WLAN with VideoStream Wireless Investment Optimized for Video Improves quality and scale of streaming content : Solved challenges associated with RF and wired / wireless integration Brings wired video quality to wireless Stream prioritization protects important content precedence Prioritization Criticality Level: High Reliable Multicast WLC Switch RRC AP AP AP AP Admission Control Great Performance Great Performance Great Performance 9 Video Not Available

10 Borderless Networks Services Cisco ISR G2 What can Borderless Networks do for your business? 10

Operational Efficiency Borderless Branch WAN Evolution A Few Years Ago

Custom Apps Virtualized Services Security Business Apps Integrated Compute

Routing WAN Optimization Integrated Routing + Switching+ Unified

Converged systems and services Hardware Software Decouple hardware &

11 Operational Efficiency Borderless Branch WAN Evolution A Few Years Ago Integrated Services Integrated Applications On Demand Services Mobility Custom Apps Virtualized Services Security Business Apps Integrated Compute and Storage Centralized Management Network Analysis and Monitoring Voice Routing WAN Optimization Integrated Routing + Switching+ Unified Communications + Wan Optimization + Mobility Management Tools Vertical Apps Converged systems and services Hardware Software Decouple hardware & software Overlay Products Network Consolidation Application and Server Consolidation Virtualized Services 11

12 Performance, Scalability, Availability Cisco Integrated Services Router Generation E*, 3945E* 887*, 887V*, 888E* , 1941W 2901, 2911, 2921, , , 880, 890 Virtual Office Secure Mobility Customizable Applications Secure Collaboration Scalable Rich- Media Services Enhancing the Borderless Experience * New Platforms 12

13 The New Branch Experience Integrated Services Routers Generation 2 Service Virtualization Video-Ready Operational Excellence Services on demand Customized services Cloud extension Rich media applications High performance Application optimization Greener technology Operational simplicity Investment protection Business Innovation Customer Experience Lowest TCO 13

What s New with Cisco ISR G2? Making the best even better!

Services Up to 160GB storage Single Network processor Multi-core Service Module Performance

E/2960 Multiple IOS Images Single Universal IOS Image Hardware Coupled Service Delivery

14 What s New with Cisco ISR G2? Making the best even better! Cisco ISR Cisco ISR G2 Up to 45 Mbps with Services WAN Performance Up to 350 Mbps with Services Up to 160GB storage Single Network processor Multi-core Service Module Performance and Capacity Voice Only Onboard DSPs Voice + Video Up to 7X with Dual Core and 1TB storage Fast Ethernet with PoE. Based on Catalyst 3560/3750 Switch Modules FE/GE Ethernet with EPoE Based on Catalyst 3560 E/2960 Multiple IOS Images Single Universal IOS Image Hardware Coupled Service Delivery Virtual Services On-demand Single Motherboard EnergyWise Redundancy Energy Efficiency Redundant power supplies. Field-upgradeable motherboard EnergyWise with slot based controls. Up to 7x the Performance 14

15 WAN Access Speed With Services T1/E1 EFM VDSL2+/Su b-rate FE Line Rate FE + ISR G2 Performance Positioning WAN Access and Collaboration 150 Mb 100 Mb Mb Mb Mb Mb / Concurrent Rich-media Collaboration Sessions

Service Modules and Interface Cards Interface Cards (WAN or LAN) Internal Module

Independent CPU and Memory for Hosting Services or High Density Interface Ports.

Density Rich-Media Voice and Video DSP Modules EHWIC Enhanced High Speed WAN

16 Service Modules and Interface Cards Interface Cards (WAN or LAN) Internal Module for Running Services That Don t Require Interface Ports, Dedicated CPU and Memory Independent CPU and Memory for Hosting Services or High Density Interface Ports. Examples: Wireless LAN Controller, WAN Optimization, Etherswitch Module High Density Rich-Media Voice and Video DSP Modules EHWIC Enhanced High Speed WAN Interface Card ISM Internal Service Module SM Service Module PVDM3 Packet Voice/ Data Module 16

17 Platform Module Slot Evolution WIC HWIC EHWIC Supports VIC, VWIC Supports WIC, VWIC, VIC Supports HWIC WIC, VIC & VWIC NM NME,EVM NME-X SM Supports NM, NME-X,NME-XD NME Supports NM, NME & EVM via Adapter card AIM AIM ISM PVDM2 PVDM3 Supports PVDM2 Via Adapter Card Pre-ISR ISR ISR G2 17

18 ISR Generation 2 Services Ready Engines (SRE) Internal Service Module (ISM) Single Core x86 512MB RAM, 4GB Flash Available on 1941 & above Selected Services Service Module (SM) Dual Core High Performance x86 2 4GB RAM, 500GB-1TB HDD Available on 2911 and above Full Range of Services Up to 7x Performance Improvement Compared to Previous Generation Support for EnergyWise Reduces Power Consumption, High Capacity Storage, RAID Capable and FRU Disks Enable HA Deployments Integrated Management, Troubleshooting, on-board HW Diagnostics Tool o o Flexible Service Ready Deployment Model Deploy HW with router SW can be deployed remotely saving truck roll costs Services: Application extension Platform, Cisco Unity Express, WAAS, Video Surveillance, Wireless LAN Controller, Network Analysis, Server Virtualization, Windows Server 18

ISR G2 Services Portfolio Network and Security Services Collaboration Services Compute Services and Applications Network

Infrastructure and Management Secure, Protect, Compliance High-performance Communication and Collaboration Consolidate

Wireless LAN Controller (WLC) o Cisco Network Analysis Module o Infoblox core network services on AXP o Cisco Video

Sagem Interstar Fax over IP on AXP o SingleWire Informacast on AXP o Cisco Application Extension Platform (AXP) o Cisco

19 ISR G2 Services Portfolio Network and Security Services Collaboration Services Compute Services and Applications Network Services Network and Physical Security Unified Communications Application Infrastructure Industry Applications Branch IT Infrastructure and Management Secure, Protect, Compliance High-performance Communication and Collaboration Consolidate Branch Servers and Applications Customized Vertical Solutions o Cisco Wide Area Application Services (WAAS) o Cisco Wireless LAN Controller (WLC) o Cisco Network Analysis Module o Infoblox core network services on AXP o Cisco Video Surveillance o Cisco Intrusion Prevention System o Cisco Unity Express (Voic , IVR) o NICE Voice Recording on AXP o Sagem Interstar Fax over IP on AXP o SingleWire Informacast on AXP o Cisco Application Extension Platform (AXP) o Cisco Integrated Storage System o Industry standard virtualization o Windows Server o Tiani Medical Data Exchange on AXP o Global Protocols Skipware on AXP 19

20 Security for the Borderless Branch Secure collaboration with video integration o Integrated IPsec acceleration o One touch PSIRT update o Advanced Management and Instrumentation o Hardened Foundational security, Compliance o Up to 7X performance increase over the ISRs Comprehensive, Secure Services for the Borderless Branch Cisco TrustSec Secure Cloud Computing Architecture Secure Unified Mobile Architecture Secure Connectivity with Cisco TrustSec Advanced Security Services 20

21 Operational Excellence Operational Efficiency through Innovation o Remote deployment, management and monitoring o Gibabit Ethernet Switching Modules with Enhanced POE o EnergyWise Support with configurable slot controls o Field upgradeable motherboard for performance growth o Increased redundancy across portfolio o Single Universal IOS Image with Cisco IOS 15.0(1)M New Business Innovations Drive Lowest TCO Operational Simplicity No Truck Rolls! Energy Efficiency and Savings Hardware Re-usability with Investment Protection Business Uptime 21

22 Operational Excellence Improving Carbon Footprint with ISR G2 Cisco EnergyWise NEW EnergyWise Policy: Power off at 7 p.m. Real-time Energy Power Consumption reporting System-wide EnergyWise Verdiem Orchestrator PC control ISR G2 Module power Up/Down EnergyWise Policy: Power on at 7 a.m. Hardware Re-Usability 90% of service modules and WAN interface cards supported Investment protection Green Engineering Power Boost mode on 3900 series High-efficiency power supplies (85%) Integrated Switching Up to 48 ports of FE/GE switching No additional power supply required Industry leading epoe Environmentally Friendly RoHS compliant motherboards no lead! Recyclable packaging 22

23 Energy Efficiency = Real Results AM PM 5 Year Results Per Site/Year - 50 Sites Total Devices kwh Saved $$ Saved 1 Cisco % 0% 4 Wireless AP % 66% 20 IP Phones % 66% 1 SRE 1 EtherSwitch 3 SRE 1 PVDM % 66% Total 54% 54% $ 87 K in Savings 54% Savings in Energy 451 Tons of CO2 83 Cars Removed 23

Evolution of Software Packaging and Activation 2010+ 2004+ 1990s Licensed IOS Many Images, Feature Upgrades Complex to Support IOS

24 Evolution of Software Packaging and Activation s Licensed IOS Many Images, Feature Upgrades Complex to Support IOS Reformation Introduced with ISRs Reduced Complexity/Images Some SW Licensing Ease Of Ordering Operational Simplicity Services On Demand 24

upgrade 2. Using the Cisco website, the customer can purchase and generate a license for a feature set on that specific device 3.

25 DATA SECURITY SNA SSL IPS URLF IOS Software Activation Software Activation After Product Order 1. Customer purchases product activation keys (PAKs) for desired feature set and obtains Unique Device Identifier (Product ID + Serial Number), for the device he wants to upgrade 2. Using the Cisco website, the customer can purchase and generate a license for a feature set on that specific device 3. License is installed and activated using Cisco License Manager, Router Call-Home, or manual copy and install 4. These steps are the same for additional feature sets PAK Product ID Serial Number System Administrator Unique Device Identifier Previously Purchased Router UC CUBE Product ID Serial Number 25

26 The New Branch Experience Integrated Services Routers Generation 2 Service Virtualization Video-Ready Operational Excellence Services on demand Customized services Cloud extension Rich media applications High performance Application optimization Greener technology Operational simplicity Investment protection Business Innovation Customer Experience Lowest TCO 27

27 Borderless Networks Services CleanAir What can Borderless Networks do for your business? 28

28 Motion Technology to Deliver the Experience Mobility User Services Mobile Collaboration AnyConnect CleanAir Technology ClientLink Context/Location Client Troubleshooting Motion Network Services Borderless Access n Intelligent Switching Remote Access/VPN 29

29 Enterprise Wireless Evolution From Best-Effort to Mission-Critical Casual Pervasive Media Rich Applications Mission Critical Performance Protection for n Networks Hotspot System Management Capacity Self Healing and Optimizing 30

Challenges with Spectrum Performance Limited Spectrum 802.

30 Challenges with Spectrum Performance Limited Spectrum n Performance Decrease System Overload! Support Cost $ $ $ $ Increase in Support Costs 31

31 Detect and Mitigate RF Interference Cisco Spectrum Expert Interference Item: Classifying Send Microwave Alert! detected Spectrum Expert 32

Introducing CleanAir Detect and Classify

32 Introducing CleanAir Detect and Classify Locate Mitigate Cisco CleanAir A system-wide feature that uses silicon-level intelligence to automatically mitigate the impact of wireless interference, optimize network performance and reduce troubleshooting costs 33

Power Power High Resolution Spectral Advantage Industry s

Wi-Fi chipset Spectral Resolution at 5 MHz Cisco CleanAir

33 Power Power High Resolution Spectral Advantage Industry s ONLY in-line high-resolution spectrum analyzer Typical Wi-Fi chipset Spectral Resolution at 5 MHz Cisco CleanAir Wi-Fi chipset Spectral Resolution at 78 to 156 KHz Microwave oven Microwave oven? BlueTooth BlueTooth Chip View Visualization of Microwave oven and BlueTooth Interference 34

34 Benefits of CleanAir Self Healing and Optimizing POOR GOOD Maintain Air Quality Forensics for Troubleshooting Wireless Security IP and Application Attacks & Exploits Traditional IDS/IPS Layer 3-7 WiFi Protocol Attacks & Exploits wips Layer 2 Monitors Exploits Invisible to existing Systems RF Signaling Attacks & Exploits CleanAir Layer 1 Policy Enforcement 35

Best of Interop 2010 Wireless & Mobility Cisco s Aironet 3500

and represents the next phase in the evolution of enterprise

Mike Brandenburg Best of Interop judge Aironet 3500 Series Access

35 Best of Interop 2010 Wireless & Mobility Cisco s Aironet 3500 Series with CleanAir technology tackles [interference] head on and represents the next phase in the evolution of enterprise wireless networks: self healing, missioncritical WLANs. Mike Brandenburg Best of Interop judge Aironet 3500 Series Access Point with CleanAir Technology 2010 Cisco and/or its affiliates. All rights reserved. 36

36 Technology Differentiation and Innovation Cisco Specialized chipset design High Resolution Information Benefit Enables collection of rich RF data, monitor/serve traffic simultaneously Spectrum intelligence on non-wi-fi interference with impact severity and unique device tracking Alternative Standard chips limited to basic Wi-Fi data only, in monitor OR traffic mode Wi-Fi data only, very limited best guess data System Integration Auto-Optimization, location, history, RF forensics, reporting No automatic action or system-wide correlation 37

37 Borderless Networks Services Cisco AnyConnect What can Borderless Networks do for your business? 38

In-Office and Out-of-Office User Experience Extending

38 Mobility Challenges Improved Remote Access Experience Always-On Security and Protection Consumerization Unifying In-Office and Out-of-Office User Experience Extending In-Office Security and Policy to Mobile Users Mandate for User Choice in Device 39

39 Future of Work: Work Is an Activity, Not a Place Real-Time Collaboration Workforce Flexibility Anywhere Productivity 40

Cisco AnyConnect Secure Mobility Unmanaged

Data Loss Prevention Mobile Business Executive

40 Cisco AnyConnect Secure Mobility Unmanaged Devices, Risk of Data Loss, and Lack of Access Seamless, Persistent Services for Flexible Security Policy Acceptable Use Access Control Data Loss Prevention Mobile Business Executive Can Mobile Devices Access My Network Transparently and Securely? 41

41 Traditional Remote Access VPN Limited Predominantly PC-based Client Support Manual Numerous clicks Non-persistent Connection No Security or Visibility Intranet Corporate File Sharing Security Rarely-On Only connected if / when absolutely necessary 42

Limited Security URL-filtering client unable to address key use cases Access No

42 Traditional Mobile Web Security Limited Clients Predominantly PC-based Client Support Data Loss Prevention Threat Prevention Acceptable Use Access Control Limited Security URL-filtering client unable to address key use cases Access No Access Intranet Corporate File Sharing No Access Not integrated, requires separate VPN client 43

43 Cisco AnyConnect Secure Mobility Web Security with Next Generation Remote Access Choice Diverse Endpoint Support for Greater Flexibility Data Loss Prevention Acceptable Use Security Threat Prevention WSA ASA Access Control Rich, Granular Security Integrated Into the network Access Granted Intranet Corporate File Sharing Experience Always-on Intelligent Connection for Seamless Experience and Performance 44

Widest Support for Enterprise Mobility Windows, Mac and Linux Apple ios 4 iphone 3G/3GS/4, ipod touch 2nd and 3rd generation, upcoming ipad support Windows Mobile 6.

44 Widest Support for Enterprise Mobility Windows, Mac and Linux Apple ios 4 iphone 3G/3GS/4, ipod touch 2nd and 3rd generation, upcoming ipad support Windows Mobile 6.x Touch screen devices Secure remote access to enterprise applications from Apple ios 4 and Windows Mobile 6.x Support planned for additional enterprise mobility platforms 45

45 Profile Import SCEP Enrollment Connect on Demand Network Roaming DTLS Support 46

46 Cisco AnyConnect One Client Secure Services Client VPN Client AnyConnect VPN Client ScanSafe Anywhere X Connection Manager IPsec VPN SSL VPN Web Security Wired switches & Wireless controllers ASA Remote Access ISRs Web Security Appliances 47

Delivering Real Time User Experiences Everywhere with Secure Mobile Access Summary Cisco Medianet improves users'

47 Delivering Real Time User Experiences Everywhere with Secure Mobile Access Summary Cisco Medianet improves users' quality of experience while at the same time reducing operating costs by simplifying the deployment and operation of the network. Cisco ISR G2 delivers a superior customer experience and delivers the lowest TCO in the industry with green credentials. Cisco CleanAir provides the tools you need to support a truly mission-critical wireless network while simplifying ongoing operations. Cisco AnyConnect provides mobile employees on laptops or smartphones with an always-protected experience while enabling IT administrators to deliver comprehensive policy enforcement. 48

48 Be Sure To Complete An Evaluation For a Chance to Win a Flip Mino HD Camera 49

49 Borderless Networks Track Agenda TIME SESSION 9:30-10:30am 10:30-10:45am Break 10:45-12pm Borderless Networks: Delivering Real Time User Experiences Everywhere with Secure Mobile Access Collaboration: The New Workspace Data Center: Journey to a Service-Centric IT Environment Borderless Networks: Using the Network to Optimize TCO and Business Agility Collaboration: Virtualization Data Center: Virtual Desktop Experience 12-1pm Lunch and Networking 1:00-2:00pm 2-2:15pm 2:15-3:15pm 3:15-3:30pm Borderless Networks: Extending Virtualization Beyond the Cloud Collaboration: Video Interoperability, TelePresence, Tandberg, WebEx and the World Data Center: Real World Applications: Break Borderless Networks: and Web Security in a World Without Borders Collaboration: An architectural roadmap for Avaya/Nortel PBXs to Cisco Unified Communications and Collaboration Data Center: Unified Computing with Unified Fabric CLOSE Please hand your Evaluation forms in at the Tech Days Registration Desk. 50

50 51

Cisco Borderless Mobility. Kim Min Se Technical Marketing Engineer Borderless Networks

Cisco Borderless Mobility. Kim Min Se Technical Marketing Engineer Borderless Networks Cisco Borderless Mobility Kim Min Se Technical Marketing Engineer Borderless Networks Mobility as a Business Imperative Done Wrong! Loss of connectivity Inability to attract and retain the best employees