THE NETWORK. INTUITIVE. Powered by intent, informed by context. Rajinder Singh Product Sales Specialist - ASEAN August 2017

Transcription

1 THE NETWORK. INTUITIVE. Powered by intent, informed by context. Rajinder Singh Product Sales Specialist - ASEAN August 2017

2 The Network. Intuitive. Constantly learning, adapting and protecting. L E A R N I N G DNA Center Policy Automation Analytics I N T E N T C O N T E X T Intent-based Network Infrastructure S E C U R I T Y

3 New Announcement s Networking at the Speed of Software Software-Defined Access (For existing and next-gen infrastructure) (Aug 2017) Reduce OpEx with Simplified Management Cisco DNA Center (Jul 2017) Built on Cisco Built DNA on Cisco DNA See and Act on All Threats Encrypted Traffic Analytics (Sept 2017) Infrastructure Agility Catalyst 9000 Portfolio with Programmable ASICs 9500 (Jun 2017), 9400 (August 2017), 9300 (June 2017) Predict Issues Before They Happen Assurance with Network Data Platform (Nov 2017)

4 Aligned to Digital Network Architecture (DNA) DNA Software Capabilities Cloud Service Management DNA Center Built-in expertise to manage and deploy end-to-end network services from a single pane of glass Identity Services Engine Automation Infrastructure APIC-EM Analytics Network Analytics Platform Software Defined Access Dynamically adapt to changing needs with policy-based management of the network fabric Assurance Network and machine learning for consistent worker and customer experiences DNA-Ready Physical and Virtual Infrastructure Encrypted Traffic Analytics Uncover hidden threats with new visibility into encrypted traffic Enterprise Network Compute System ISR 4000 ASR 1000 Catalyst 9300/9400 WLAN Controller 5520/8540 Aironet 1800/2800/3800 Catalyst 9000 Series Switches First infrastructure devices purposely designed for DNA DNA Software: Cisco ONE Software perpetual and new subscription licensing

5 Technology transformations driving the market Mobility Cloud applications Security Bring your own device Devices in the workspace Public Software as a Service (SaaS) Grant proper access Protect network data

6 Technology transformations driving the market IoT Cloud infrastructure Cyber security Auto-detect non-user devices Devices everywhere Multicloud Hybrid Bring your own app Networking and security Advanced threats

7 Traditional networks cannot keep up Difficult to segment More users and endpoints More VLANs and subnets Complex to configure Multiple steps to give users credentials Difficult to maintain policy Inconsistent user experience Separate user policies for wired and wireless networks Unable to find users when troubleshooting Common user policy for the branch, campus, WAN, and cloud

8 Software-Defined Access Industry s first policy-based automation from the edge to the cloud End-to-End Segmentation Secure users, devices, and applications with identity-based policy, regardless of location Simple, automated workflows Design, provision, and manage your wired and wireless networks Intelligent network fabric Enable a consistent user experience anywhere with insights and analytics into user and application behavior Common user policy for the branch, campus, WAN, and cloud

9 Software-Defined Access Open and programmable DevNet Cisco developer program Build and develop with open APIs from Cisco that allow you to extend and operate your enterprise at scale Cisco IOS XE Easily develop apps for integration, automation, and device-level programming with an open and programmable network operating system Third Party Application Hosting Accelerate digital transformation with technology solutions tailored to your business needs

10 Cisco Digital Network Architecture Enterprise portfolio Cisco DNA Center: Simple workflows Design Provision Cisco DNA Center Software-Defined Access Assurance Policy Network data platform APIC-EM Identity Services Engine Routers Switches Wireless access points Wireless LAN controllers

11 Simplifying how you manage the network Logical workflow to design, provision, set policy Respond to changes faster Monitor end-to-end network performance Predict and act on problems before they happen Pinpoint problems faster Reduce downtime with an end-to-end view instead of hop by hop Manage hardware and software lifecycles Keep up to date, meet compliance requirements, and plan for refresh Cisco DNA Center: Design, provision, automate policy, and assure services from one place

12 Adopt Internet of Things (IoT) at scale End-to-end segmentation Before SD-Access After SD-Access Complex segmentation of IoT and user traffic Chase down IP addresses for troubleshooting Intuitive identity-based segmentation with device profiling Built-in visibility and granular policy control Expensive high-voltage deployments Connected lighting IP surveillance Users and devices Optimized for low-voltage building deployments Purpose-built switches for digital building Automatic provisioning and policy Automatic security and segmentation

13 Faster onboarding of users and devices Policy automation Employee Virtual Network Before SD-Access Users Group 1 Group 2 After SD-Access VLAN and IP address based Create IP-based Access Control Lists (ACLs) for access policy Deal with policy violations and errors manually Devices Apps Drag policy to apply IoT Virtual Network Group 3 Group 4 Guest Virtual Network Group 5 Group 6 No IP address dependency for segmentation Define one consistent policy Policy follows user from edge to cloud Completely automated Group-based policy Policy from edge to cloud

14 Seamless wired and wireless access A single network fabric Before SD-Access After SD-Access Repeated policy work for wired and wireless Roaming issues across Layer 3 domains Chase down IP addresses for troubleshooting Seamless roam Roam is layer 2 Policy stays with user Consistent management across wired and wireless Optimal traffic flows with seamless roaming Seamless roaming in fabric and nonfabric domains Simplified provisioning Campuswide roaming Wired and wireless consistency

15 SD-Access support A single fabric for your digital-ready network Switching Routing Wireless Cisco Catalyst 9400 Series ASR 1000-X 5520 Wireless Controller Cisco Catalyst 9300 Series 8540 Wireless Controller Cisco Catalyst 9500 Series ASR 1000-HX Cisco Catalyst 4500E Series Cisco Catalyst 6000 Series Cisco Nexus 7700 Series Cisco Catalyst 3850 and 3650 Series 4430 ISR 4450 ISR CSR 1000V 3504 Wireless Controller Wave 2 APs (1800, 2800, 3800 Series) Wave 1 APs (1700, 2700, 3700 Series)

16 The new Catalyst 9000 Family Built for SD- Access Integrated security Mobility ready IoT ready Cloud ready Find and contain threats fast with real-time monitoring Detect threats in encrypted traffic Simplify BYOD onboarding Manage and secure wired and wireless from one device Instantly onboard IoT devices Automatically segment IoT traffic for better security Build applications through programmability Improve application performance user to cloud Future-ready with Cisco Unified Access Data Plane (UADP) 2.0 and open and programmable Cisco IOS XE

17 Capabilities Catalyst Switching Portfolio Positioning The Network. Intuitive. IOT Security Mobility TRADITIONAL NETWORKING Data ACCESS SWITCHING 2960-X Fixed PS & FAN 2960-XR FRU PS & FAN Stacking Routed Access DNS-AS, NaaS, Full Netflow Video Voice ACCESS SWITCHING FIXED SWITCH 3650 Up to 160G Stacking mgig, 1/10G 10G uplinks NSF/SSO On-device Management, PnP, APIC EM, Prime Infra Access Switching FIXED SWITCH 9300 Up to 480G Stacking Resiliency MODULAR SWITCH Tbps System b/w Performance: mgig, 1/10G uplink, 40G uplinks PoE Leadership: UPOE, Fast/Perpetual PoE High Availability: NSF/SSO, ISSU (C9400), Patching Security: ETTA, MacSec 256, IPSec, Trustworthy Systems IoT Convergence: Perpetual PoE, IEEE 1588/AVB, SD Bonjour Mobility: ewlc Cloud: Netconf/Yang models, Streaming Telemetry, App Hosting Backbone Switching FIXED SWITCH /10/40G interfaces with Comprehensive Features at Scale High Availability: NSF/SSO, VSS XL-SCALE / MODULAR 6800 Scale Software Defined Access (SD-Access)

18 Customer Study Petroleum customer SD-Access delivers real business outcomes Challenge Large global network deployment, challenges to manage network infrastructure with the many complex requirements of a modern business: $4.7M cost of policy changes Up to 18 months per software upgrade cycle Over $5M to reduce risk and meet compliance requirements $2.4M to manually deploy network Business Outcomes 67% reduction in cost of carrying out tasks such as network upgrade, inventory management, provisioning, and policy 48% cost savings by reducing the impact of security breaches and maintaining compliance Issue resolution cost reduced by 80% with a simplified dashboard, integration with other Cisco tools, and automation of monitoring and troubleshooting providing visibility across the network 67%* Reduce network Reduce network provisioning cost provisioning cost $14M $8.4M Current 80%* Improve issue resolution cost 61% 14% 14% CapEx 48%* Reduce cost of security breach $5.4M $7.6M OpEx With Cisco SD-Access * Source: Internal total cost of ownership (TCO) analysis with large enterprise customer ** CapEx reduction based on converging IoT networks

19 Why Software-Defined Access? Industry s first policybased automation from edge to cloud Foundation for Cisco DNA Broad platform support Give time back to IT Network access in minutes for any user or device to any application without compromise

20