Cloud Managed Networking with Meraki

Transcription

1

2 Cloud Managed Networking with Meraki Peter Stephan Cloud Networking Systems Engineer #clmel

3 3 Cisco Meraki Cloud Networking

4 About Cisco Cloud-managed Networking Cisco Meraki: a complete cloud-managed networking solution - Wireless, switching, security, and EMM, centrally managed over the web - Built from the ground up for cloud management - Integrated hardware, software, and cloud services Leader in cloud-managed networking - Among Cisco s fastest-growing portfolios: over 100% annual growth - Tens of millions of devices connected worldwide Recognised for innovation - Gartner Magic Quadrant, InfoWorld Technology of the Year, CRN Coolest Technologies Trusted by thousands of customers worldwide:

5 Cisco On-premises and Cloud-Managed Primary Positioning Cisco On-Premises Networking Flexible deployment and configuration options Highly customisable and advanced feature set Advanced professional services, extended support Extensive integration capabilities Cisco Cloud Managed Networking Easy to deploy and manage over the web Out-of-the-box optimised feature set Ongoing managed upgrades and enhancements Optimised for lean IT, with limited requirement for 3 rd Party integration Network-as-a-Platform Network-as-a-Service

6 6 The Cisco Meraki Cloud Infrastructure

7 Cloud-managed Networking Architecture Network endpoints securely connected to the cloud Cloud-hosted centralised management platform Intuitive browser-based dashboard

8 Out of Band Cloud Management Scalable Unlimited throughput, no bottlenecks, scale to any size Add devices or sites in minutes WAN Management data (1 kb/s) Reliable Highly available cloud with multiple data centres Network functions even if connection to cloud is interrupted Secure No user traffic passes through cloud Fully HIPAA / PCI compliant (level 1 certified) 3rd party security audits, daily penetration testing Future-proof New features pushed through firmware, guided by customer feedback Automatic firmware and security updates (user-scheduled) Reliability and security information at meraki.cisco.com/trust

9 All-in-one Solution Network as a Service (NaaS) 1:1 ratio of hardware : licence Meraki solution = + 1-yr, 3-yr, 5-yr, 7-yr, and 10-yr options Hardware Licence All licences co-terminate Cloud-based solution includes Centralised management and network-wide visibility and control Seamless firmware and security updates Phone support and lifetime warranty (except outdoor APs)

10 10 Cisco Meraki Full Stack

11 Cisco Meraki Full Stack Cisco Meraki MR Wireless LAN Cisco Meraki SM Mobile Device Management Cisco Meraki MX Security Appliances All Meraki products can integrate with any vendor s network Cisco Meraki MS Ethernet Switches

12 Cisco Meraki MR Wireless Access Points Product Overview

13 MR Wireless Access Points Feature highlights BYOD policies Application traffic shaping Guest access Enterprise security WIDS / WIPS Location analytics Layer 7 visibility 7 models including indoor / outdoor, high performance and value-priced Enterprise-class silicon including RF optimisation, PoE, voice / video support Lifetime warranty on indoor APs

14 MR Wireless Access Points Family Indoor APs MR18 MR26 MR32 MR34 2 Stream Triple-Radio 3 Stream Triple-Radio 2 Stream Quad-Radio 3 Stream Triple-Radio a/b/g/n a/b/g/n ac ac 600 Mbit/s 900 Mbit/s 1.2 Gbit/s 1.75 Gbit/s Outdoor APs MR66 MR72 2 Stream Dual-Radio 2 Stream Quad-Radio a/b/g/n ac 600 Mbit/s 1.2 Gbit/s 14

15 External Antennas Omni Semi-Directional Patch Directional Sector ANT-20 ANT-25 ANT-21/23

16 Dedicated 3 rd Radio for Improved RF Visibility Radio dedicated to scanning and protecting RF environment - Detects and mitigates interference, vulnerabilities, and attacks on all channels - 3 rd radio enables full-time scanning with full-performance client access on 2.4 GHz and 5 GHz radios while using WIDS/WIPS Deeply-integrated with cloud-based software solutions: Air Marshal (WIDS/WIPS), Auto RF (channel planning and interference avoidance) No added cost or complexity - Typical deployments: radio operates in background (zero-config) - Power users: rich tools available for security and RF management - No added cost: no extra hardware, software, or licenses - Most models require no extra power, full functionality with 802.3af

17 MR Wireless Summary Quickly swap between architectures as needed Direct access, remote access, tunneled or distributed Rich policy management functionality Time-based group policies, MDM & ISE integration Management and reporting for distributed enterprise Office, region, country, world wide reporting and analytics Managed service provider integration tools Hotspot 2.0, custom branding and helpdesk integration Scale from 1 to 10,000 APs with minimal to no extra infrastructure

18 Simplified Analytics and Engagement with Cloud CMX Built-in location analytics dashboard Built-in CMX analytics WiFi with Facebook Login Automatic summary reports

19 Meraki APIs & Integration with Third Parties CMX API EXCAP API 19

20 Dashboard Tools to Troubleshoot Wireless Issues Access Point s signal quality at the client (my.meraki.com) Client signal quality at the Access Point Channel utilisation from Dashboard Meraki built-in RF Spectrum Switched related issues (VLAN, ARP, DHCP and DNS) WIPS/WIDS by Meraki Air Marshal

21 Live Demonstration - Wireless

22 Bluetooth Low Energy (BLE) and Beacons BLE is a form of Bluetooth designed for very low power applications Beacons use BLE to enable location based services like mobile payment, couponing, and indoor navigation (ibeacon is Apple s BLE trademark) Beacons identify themselves using unique codes (similar to MAC addresses) Gaining traction as an opt-in alternative to WiFi-based location services Location Engagement Provide better consumer experience with opt-in mobile app integration using beacon technology Asset Tracking Track beacon-tagged assets with Bluetooth scanning and location estimation Included in the MR32 and MR72

23 So What Are Beacons and ibeacons Transmitting? Beacons are very simple Bluetooth Low Energy (BLE) messages which are transmitted or heard by BLE compatible devices. This device could be a computer, a phone, a wireless AP, or a tag, to name just a few possible devices. This message has three basic components: Universally Unique Identifier (UUID) Major Minor These components of the beacon can be configured with information the operator wants to communicate to other BLE-compatible devices. Typically this is in a non-human friendly form but it can be interpreted by a listening device. For example, in a retail environment it could be interpreted as: Retail Brand (UUID) Shop Location (Major) Product Category (Minor) 23

24 Use Case: Location Engagement with Beacons Better consumer experience with opt-in mobile app integration Seamless deployment by integrating Beacons into the AP Increased customer visibility with both WiFi and Bluetooth analytics built-in

25 Use Case: Asset Tracking with Bluetooth Track Beacon-tagged assets with Bluetooth scanning and location estimation Seamless site-wide deployment with Bluetooth integrated into the AP Increased administrative visibility with both WiFi and Bluetooth inventory built-in

26 Meraki Beacon System ac WiFi and integrated Bluetooth Radio - Wide-area beaconing - Client inventory & macro location analytics - Remote beacon fleet monitoring Remote beacon overlay - Immediate zone beaconing - Micro-location mapping (<1m) Technology Partners Mobile app integration - Beacon-aware SDKs

27 Cisco Meraki Systems Manager MDM Product Overview

28 Systems Manager Mobile Device Management Feature highlights Centralised app deployment Device security Dynamic Profile Support Rapid provisioning Backpack file sharing Asset management Device Management controls ios, Android, Mac, and Windows devices Cloud-based - no on-site appliances or software, works with any vendor s network Full integration seamless integration with Meraki WLAN products Available for free - available at no cost to any organisation, sign up at meraki.cisco.com/sm

29 Systems Manager Enterprise Summary Active Directory Integration Automatically enrol devices, with relevant network group policies based on Active Directory groups. Cisco ISE Integration Meraki EMM adds device posture assessment and automates enrolment with Cisco ISE Open-in Containerisation Whitelist and blacklist apps as well as utilise per-app VPN using native OS tools. Android Samsung Knox Support Increased configuration options with Samsung devices including kiosk mode. RemediationThrough Group Policy Automatically limit the reach of jail broken and non-compliant devices 24/7 Enterprise Support Utilise our team of specialists day or night to keep your SME network running smoothly.

30 Cisco Meraki MX Security Appliances Product Overview

31 A Complete Unified Threat Management Solution Security NG Firewall, Client VPN, Site to Site VPN, IDS/IPS Networking NAT/DHCP, 3G/4G Cellular, Static Routing, Link Balancing Application Control WAN Optimisation, Traffic Shaping, Content Filtering 31

32 Why Customers Choose the Cisco Meraki MX Intuitive centralised management No training, no command line Templates to configure at-scale Packet capture, built-in tools and diagnostics Designed for distributed enterprises Single pane of glass visibility Zero-touch provisioning Seamless updates from the cloud Site-to-site IPSec VPN in 3 clicks Industry-leading visibility Fingerprints users, applications, and devices Network-wide monitoring and alerts Full stack: APs, switches, Security, MDM

33 Ironclad Security Best IPS SOURCEfire IDS / IPS, updated every day Content Filtering 4+ billions URLS, updated in real-time Geo-based security Block attackers from rogue countries AV / antiphishing Kaspersky AV, updated every hour PCI compliance PCI L1 certified cloud-based management

34 Cisco Meraki MS Switches Product Overview

35 Meraki Layer 7 Visibility Industry First Application Visibility Identify hundreds of applications down to hostname visibility Identify bandwidth roadblocks 100% built-in: no separate hardware or software needed Make data driven decisions with traffic analytics 35

36 Meraki Remote Live Tools Remote Live Tools Identify cable issues remotely and avoid hours in the wiring closet Packet capture to diagnose and reduce truck-rolls Test switch throughput, ping clients, and reboot PoE clients remotely Reduce truck-rolls and improve IT staff efficiency 36

37 Live Demonstration

38 What Next?

39 Call to Action Visit the Meraki booth in the World of Solutions Subscribe to the Meraki blog Visit our YouTube channel meraki Try any product for free Get a free access point! 39

40 Interested in Learning About Next Gen Solutions? Have your account team setup a meeting in our Whisper Suites Requirements Cisco Account Team Presence Cisco NDA in Place Please use the address if you have any queries pestepha@cisco.com 40

41 Q & A

42 Complete Your Online Session Evaluation Give us your feedback and receive a Cisco Live 2015 T-Shirt! Complete your Overall Event Survey and 5 Session Evaluations. Directly from your mobile device on the Cisco Live Mobile App By visiting the Cisco Live Mobile Site Visit any Cisco Live Internet Station located throughout the venue T-Shirts can be collected in the World of Solutions on Friday 20 March 12:00pm - 2:00pm Learn online with Cisco Live! Visit us online after the conference for full access to session videos and presentations.

43

44