Cisco Meraki Cloud-Managed Networking. George Carlan

Transcription

1 Cisco Meraki Cloud-Managed Networking George Carlan

2

3 Cisco Networking Portfolio Cisco Enterprise Portfolio Cisco Cloud Managed Prime ISE Cloud Management & Policy Systems Manager Systems Manager WLAN Controllers Catalyst 2K/3K/4K/6K Catalyst 3850 with integrated controller Cloud Controller MS Switch Aironet Access Points ASA - Firewall ISR - Routing MR AP s MX Series Security Appliances Unparalleled Deployment Flexibility Ease of Use 2014 Cisco and/or its affiliates. All rights reserved. 4

4 Cloud Managed WiFi Cloud Managed Network Cisco Acquisition Cloud Managed IT (2006) (2010) (2012) (2016) MR Wireless LAN MS Ethernet Switches MX Security Appliances Systems Manager EMM MC Communications MV Security Cameras

5 A Meraki solution includes a 1:1 ratio of hardware and licenses Licensing is required and includes: + Centralized management and network-wide visibility and control Seamless firmware and security updates hardware license 24/7 Enterprise Support and lifetime warranty Zero-touch device provisioning The cloud license represents the total cost of ownership for all of your Meraki devices

6 LOWER IT COST FULL BUSINESS VISIBILITY ON-DEMAND SCALABILITY Fewer IT resources and greater manageability up to 67% cost savings INSTANT IT Monitoring of locations, users, devices, and apps Consistent experience across all locations Deployments without the need for local IT BETTER BUSINESS OUTCOMES The strength of a complete cloud-managed network

7

8

9 Security NG Firewall, Client VPN, Site-to-Site VPN, IDS/IPS, AMP with Threat Grid, Security Center Networking NAT/DHCP, 3G/4G Cellular, Static Routing, OSPF, BGP, Link Balancing, HA & Failover, SD-WAN Application Control Geo-based IP FW rules, Traffic Shaping, Content Filtering

10 Where Notable Features FW Throughput MX64/64W Small branch (~50 users) 11ac wireless (MX64W) 250 Mbps MX65/65W MX84 MX100 Small branch (~50 users) Mid-size branch (~200 users) Mid-size branch/ Small campus (~500 users) PoE+, dual WAN, ac SFP Ports SFP Ports 250 Mbps 500 Mbps 750 Mbps Z1 For teleworkers (1-5 users) Dual-radio wireless FW throughput: 50 Mbps MX400 Large branch/campus (~2,000 users) Power redundancy Modular interface SFP or SFP+ (with modules) 1 Gbps MX600 Campus/ VPN Concentration (~10,000 users) Power redundancy Modular interface SFP or SFP+ (with modules) 1 Gbps All devices support 3G/4G

11 Stateful Firewall IPS/IDS Content Filtering Geo-based security Malware Protection L3, L7 (NGFW) Snort 4+ billions URLs (Webroot BrightCloud) Geo-filtering (Max Mind) Cisco AMP AMP Threat Grid Client authentication AD, Radius, 802.1x SOC Firmware freshness PCI compliance Single pane of glass security center Continuous security updates PCI 3.1 certified cloud-based management

12 WAN 1 Secure VPN tunnel (active) Latency / loss > threshold Data WAN 2 Secure VPN tunnel (active) Latency / loss < threshold Based on L3 / L4 / L7 categorization, this data normally travels out WAN 1 (PbR), but MX detects optimal path is WAN 2 based on latency / loss on WAN 1 Single cloud management interface for Security, SD- WAN, Wireless, Switching, VoIP, EMM, and Security Cameras Cisco Security Technologies(IPS/IDS, AMP, AMP Threatgrid) Integrated SD-WAN functionality (left) Auto-VPN Built-in Wireless with Social Login and Analytics(MX64W & MX65W models) Templates & Network Cloning True Plug & Play Behaviour (MX deployment in US locations in 4 months) SD-WAN Dynamic policy application via EMM

13 Retail Education Hospitality Healthcare Corporate Offices MX Appliance SD-WAN Auto-VPN Plug & Play Behavior Built-in Wireless with CMX Analytics Built-in customizable Wireless Welcome Page & FB Login 3G / 4G Failover Open APIs Integration with ISE Content Filtering Cisco Security Technologies (AMP, IPS) Simplicity in configuration Content Filtering Cisco Security Technologies (AMP, IPS) Built-in customizable Wireless Welcome Page & FB Login Templates Content Filtering Site-to-Site VPN Cisco Security Technologies (AMP, IPS) Traffic Shaping Segmented network Templates Integration with 802.1X, ISE Cisco Security Technologies (AMP, IPS) Content Filtering Templates Meraki Dashboard: Visibility, Central Management, Ease of configuration and administration, Monitoring, Alerts & Reporting

14

15 Centralized Management Full Feature Set CMX Analytics Built-in Security with L3/L7 firewall rules Traffic Shaping Posture & ISE Integration Templates & Network Cloning True Plug&Play Behavior Dynamic policy application via EMM Lifetime warranty on indoor APs more functionality!! - We don t upsell customers to give them

16 Indoor APs MR30H MR33 MR42 MR52 MR53 2 Stream 4 Radio ac Wave 2 Bluetooth LE Integrated 4-port SW 2 Stream 4 Radio ac Wave 2 Bluetooth LE 3 Stream Triple-Radio ac Wave 2 Bluetooth LE 4 Stream 4 Radio ac Wave 2 Bluetooth LE 4 Stream 4 Radio ac Wave 2 Bluetooth LE 1 2.5Gbps Multigigabit Ethernet Port Outdoor APs MR62 MR66 MR72 MR82 Single-Radio Dual-Radio 2 Stream Triple-Radio 4 Stream 4 Radio b/g/n a/b/g/n ac ac Bluetooth LE Bluetooth LE Gbps Multigigabit Ethernet Port

17 RF optimization and application-aware QoS for highthroughput, high-density WLAN Layer 7 application traffic shaping Cloud-base RF optimization Density-optimized WLAN Throttle, block, or prioritize application traffic with DPI-based fingerprinting; set user and group-based shaping rules Dynamically avoid interference, optimizing channel selection and power levels RF platform tuned for airtime fairness and performance in dense performancecritical environments

18 Out-of-the-box security, management, and capacity for BYOD-ready deployments Device-aware security Integrated MDM Simplified onboarding Device-aware firewall and access control; Antivirus scan; LAN isolation; Bonjour Gateway; Content and security filtering Enforce encryption, passcodes, and device restrictions; Deploy enterprise applications; Remotely lock or wipe devices Flexible authentication with AD integration, SMS authentication, hosted splash pages, and automatic MDM enrollment

19 Built-in location analytics dashboard Optimize marketing and business operations Built-in analytics Extensible API Analyze capture rate, dwell time, and new / repeat visitors to measure advertising, promotions, site utilization, etc. Integrated into WLAN, no extra sensors, appliances, or software Integrate location data with CRM, loyalty programs, and custom applications for targeted real-time offers

20 Retail Education Hospitality Healthcare Corporate Offices MR Access Points High Density Plug & Play Behavior CMX Analytics Customizable Welcome Page & FB Login Open APIs Templates Built-in Security Monitoring and Alerts High Density Content Filtering(Adult Content) Built-in Security Simplicity in configuration Dynamic policy application via EMM ISE Integration Content Filtering(Adult Content) Customizable Welcome Page & FB Login Open APIs Templates Built-in Security Monitoring and Alerts Simplicity in configuration Content Filtering(Adult Content) Wireless traffic shaping Segmented network Templates Integration with 802.1X and ISE Dedicated 3rd Radio Content Filtering(Adult Content) Wireless traffic shaping Dynamic Policy application via EMM Segmented network Meraki Dashboard: Visibility, Central Management, Ease of configuration and administration, Monitoring, Alerts & Reporting

21 Centralized Management Templates & Cloning Network Configuration True Plug & Play Behavior Dynamic policy application via EMM Built-in troubleshooting & diagnostic tools SaaS feature delivery, quarterly updates Feature velocity future-proofs hardware investment more functionality!! - We don t upsell customers to give them

22 Available Models & Options Access MS220 MS225 MS250 MS350 Features 8 port models Layer 2 Gigabit SFP uplinks 24, 48 port models Layer 2 10Gb SFP+ uplinks 80Gb Stacking 24, 48 port models Physical stacking (80Gbps) Layer 3 10Gb SFP+ uplinks Hot-swappable, fieldreplaceable fans and power supplies 24, 48 port models Physical stacking (160Gbps) High performance Layer 3 10Gb SFP+ uplinks Multi Gigabit Hot-swappable, fieldreplaceable fans and power supplies Positioning Branch access switching ( Compact L2) Branch access switching(l2) Stackable Branch and Campus access switching (L3) Stackable Branch and Campus access switching (L3)

23 Meraki Aggregation & Distribution MS410 Affordable 1G fiber distribution Ideal for Large Branch and Small Campus MS425 Powerful 10G fiber distribution Ideal for Medium to large Branch & Campus 16 & 32-port options L3 capable Ideal for MS220 access customers Stackable 16 & 32 - port options L3 capable Ideal for MS350/320 access customers Stackable - 480Gbps switching capacity

24 Virtual stacking Single pane of glass visibility into all switches and ports Configure ports in minutes, regardless of model or location Easy to deploy & manage Zero-touch site provisioning Switch cloning in 3 clicks Seamless updates from the cloud Network-wide monitoring and alerts Built-in troubleshooting & diagnostic tools Remote packet capture Local config page switch.meraki.com Cable test tool

25 Or

26 Retail Education Hospitality Healthcare Corporate Offices MR Switches Plug & Play Behavior Templates Cloning Network Configuration Monitoring and Alerts Simplicity in configuration (hundreds of ports in minutes) Plug & Play Behavior Templates Cloning Network Configuration Monitoring and Alerts Simplicity in configuration( hundreds of ports in minutes) Plug & Play Behavior Templates Cloning Network Configuration Monitoring and Alerts Simplicity in configuration( hundreds of ports in minutes) Plug & Play Behavior Templates Cloning Network Configuration Monitoring and Alerts Simplicity in configuration( hundreds of ports in minutes) Integration with 802.1X and ISE Templates Cloning Network Configuration Monitoring and Alerts Simplicity in configuration( hundreds of ports in minutes) Segmented network Meraki Dashboard: Visibility, Central Management, Ease of configuration and administration, Monitoring, Alerts & Reporting

27

28 Mobile & Desktop Management Multi Platform EMM Support: Application management Dynamic provisioning Active Directory enrollment integration Network integration via Sentry policies: Cisco Meraki hardware integration through sentry and group policies Wireless & VPN access through sentry policies Integrates with Cisco ISE for enrollment and posture assessment more functionality!! - We don t upsell customers to give them

29

30 Retail Education Hospitality Healthcare Corporate Offices Sentry Policies Sentry Policies Sentry Policies Sentry Policies Sentry Policies Meraki SM Device Management Application Management Cellular Management Remote Wipe Device Management(Students & Teachers) Application Management Remote Wipe Profiles (Wireless, VPN) Device Management Application Management Remote Wipe Device Management Application Management Remote Wipe Application management Dynamic provisioning Enterprise wipe Active Directory enrollment integration Integrates with Cisco ISE for enrollment and posture assessment Meraki Dashboard: Visibility, Central Management, Ease of configuration and administration, Monitoring, Alerts & Reporting

31 MV21 Indoor Camera Centralized Management with Video wall, Motion Search MV71 Outdoor Camera 128GB of solid state storage on each camera Up to 20 days of 24/7 continuous recording Night Mode Less than 50kbps upstream bandwidth per camera SaaS feature delivery, quarterly updates Feature velocity future-proofs hardware investment more functionality!! - We don t upsell customers to give them

32 Video wall Resize, reorder, and monitor video streams on the fly Drag-and-drop functionality Motion search Automatically isolate key motion events and find out who stole that laptop Easily export important video segments Granular access controls Choose who can view, export, and change the layout of your videos more functionality!! - We don t upsell customers to give them

33

34 A Meraki solution includes a 1:1 ratio of hardware and licenses Licensing is required and includes: + Centralized management and network-wide visibility and control Seamless firmware and security updates hardware license 24/7 Enterprise Support and lifetime warranty Zero-touch device provisioning The cloud license represents the total cost of ownership for all of your Meraki devices

35 Meraki SM Mobile Device Management Meraki MR Wireless LAN Meraki MX Security Appliances Meraki MS Ethernet Switches

36 NETWORKING IS COMPLICATED. MERAKI IS MAKING IT EASIER, FASTER, AND SMARTER. Better networking means that businesses run more smoothly, and more people have reliable access to the information they need. Manage your networks from anywhere you have internet connectivity using an intuitive, web-based dashboard or a mobile app. A complete, powerful, and intuitive cloud-managed IT solution. Wireless Security Switching Communications Enterprise Mobility Security Cameras

37 1 2 3 Free AP Program Try => Buy Dashboard / Dcloud Demo

38 Thank you! Radu-George Carlan Meraki Consultant Mobile: Parteneri media