F Cisco Routing Software Subscription Offers Understanding the new world of routing subscriptions What is the new announcement? Cisco announced the new subscription offers for enterprise routing in pril 2018. s part of the intent-based networking journey, Cisco is strengthening its SD-WN software portfolio with the following new capabilities: 1. New advanced security features that deliver the right security in the right place. Cisco is the industry leader in bridging together networking and security. With Cisco SD-WN, we provide highly effective and scalable security that is easy to manage, deploy, and maintain, empowering businesses to adopt the latest cloud services with confidence. 2. New SaaS optimization features make Microsoft Office 365 faster There are multiple internet exit points from a network, and the shortest path is not always the fastest. Cisco SD-WN can evaluate every path for the best outcome, and split out specific Office 365 traffic (Skype, Microsoft Teams, PowerPoint) through different paths for up to 40 percent faster performance than alternative methods. 3. Unified access security and multifactor authentication In a multicloud world, it is not necessary for remote users to connect to the corporate network to securely access SaaS applications. n authentication mechanism for remote users can provide the required application access control wherever the user may roam. Duo Security an add-on product to the Cisco SD-WN solution delivers a zero-trust security model. It secures connections to all applications (whether on premises or in the cloud) based on the trustworthiness of users and devices. 2018 Cisco 2018 and/or Cisco its and/or affiliates. its affiliates. ll rights ll reserved. rights reserved.
F What are the customer challenges that intent-based networking for the WN address? Digitization is real. The demands on the network are exponentially growing. Mobile, cloud, IoT trends bring increased complexity, and the scale and range of security threats bring additional management difficulty. In the face of these demands, the WN is struggling to keep up, leading to these customer pain points: Poor user experience Users access cloud applications over the internet. Taking the suboptimal path leads to higher latency and poor application performance, leading to lower productivity. Operational complexities Each cloud platform and application is unique. IT must ensure that authorized users have the proper access to each cloud. Utilizing more clouds leads to more day-to-day configuration and management for IT. Inability to secure the network edge Different types of users, who are connecting to multiple clouds, makes it harder to enforce security policy. This exposes the enterprise to more threats and vulnerabilities. By extending intent-based networking to the WN, Cisco is helping customers solve these challenges. We bring transport independence, management, analytics and assurance, network services and end-point flexibility together into a single solution. How is Cisco making the WN solution more secure? Cisco SD-WN security capabilities include application-aware enterprise firewall, intrusion prevention, DNS layer enforcement (Cisco Umbrella ), and URL filtering. These capabilities, integrated into Cisco SD-WN and managed with a single interface (vmanage), reduce complexity. Unified ccess Security with Duo, another essential new security feature, complements Cisco s Secure Internet Gateway (Cisco Umbrella). This powerful combination provides end-to-end application security not only for the branch but also for remote users and devices. bout the routing subscription offers What are the DN subscription offers in routing? The DN subscription offers are DN Essentials, DN dvantage and DN Premier for WN. Similar to the subscription offers for switching and wireless, these are nested SKUs and represent good, better, best offers. They are available as 3/5 year subscription. What is the top-line view of the DN subscription offers in routing? t a high level, customers should consider this: Cisco DN Essentials gives you connectivity, SD-WN, security, and application visibility. Cisco DN dvantage gives you flexible connectivity, advanced SD-WN, advanced security, application-aware policy, segmentation, and optimization for cloud connectivity, along with Cisco DN Essentials. Cisco DN Premier gives you advanced security, applicationaware policy, advanced SD-WN, network insights, and network and application assurance using real-time analytics and WN optimization, along with Cisco DN dvantage. The same subscription offers are applicable to both cloud managed and on premises managed environments. 2018 Cisco and/or its affiliates. ll rights reserved.
F What benefits do customers experience from these new routing subscription offers? The new subscription offers bring these customer benefits: Latest innovations through simple subscription tiers Simplicity in purchasing and using via DN Essentials, DN dvantage or DN Premier software suites. Management flexibility Choice of cloud or on premises management. vailability across the routing stack cross the SR 1000, ISR 1000 and 4000, CSR 1000v, ENCS 5000 and vedge routers. Software license portability Between generations of hardware and between product families (e.g. vedge to ISR, across ISR platforms); ability to renew and scale what you want, when you want. Did these new subscription offers evolve from previously available offers? Yes. These new subscription offers evolved from the cloud-based Viptela WN offers (Pro, Plus, Enterprise) moving to the Cisco Global Price List (GPL), various routing perpetual licenses (for example, X bundles), and extensions to the Cisco ONE for WN perpetual offers. These combined to create three simple subscription tiers for routing: DN Essentials, DN dvantage, and DN Premier for WN. What happened to Cisco ONE dvantage subscription offer? Cisco ONE dvantage subscription offer is now renamed as DN Premier. Cisco is making this change to better align with other DN offers. No change to underlying offer structure. Why is Cisco providing on premises and cloud offers? We recognize that customers will have different use cases and requirements. Some may need or prefer on premises management while others may need or prefer cloud management. Cisco offers flexibility and choice. Why would a customer choose vmanage vs. DN Center? Customers who are on the journey to intent-based networking for the WN and want cloud management will prefer Cisco vmanage. For customers who have Cisco switching and wireless environments and want on premises management, Cisco DN Center may be the preferable solution. Can the customer migrate from on premises to cloud management and vice versa? Yes. With these subscription offers, customer choice and flexibility are paramount. Whether your current environment is based on IOS-XE or vedge, cloud managed or on premises managed, you can choose from three simple subscription tiers based on your use cases. If you choose to move from on premises management to cloud management, you can easily do that by changing the image at no additional cost. For example: Customer has SR 1000, ISR 1000/4000, or ENCS 5000 with DN Center if the customer wanted to manage with vmanage, he would change the image to deploy the cloud version. No additional cost. Customer has vedge managed with vmanage if the customer wanted to also manage ISR devices through vmanage, he would purchase the ISR and port the license from vedge to ISR. 2018 Cisco and/or its affiliates. ll rights reserved.
F What hardware platforms are supported by the onpremises management vs. cloud management offers? Today, customers can choose DN Essentials, DN dvantage or DN Premier for either on premises management or cloud management. For on-premises, managed use cases, the offers support the SR 1000, ISR 1000 and 4000, CSR 1000v, and ENCS 5000 hardware and are managed through DN Center. For cloud-managed use cases, the offers support the vedge series hardware as well as the following: Cisco 1000 Series ggregation Services Routers (SR 1000): SR 1001-HX and SR 1001-X; SR 1002-HX and SR 1002-X. What happens if a hardware product goes end of support during an active software subscription period? Both hardware and software have their own release and support cycle, independent of each other. If the customer have an active software subscription while the underlying hardware goes out of support, then customer can port the software to a new hardware platform. Which software release version is the IOS XE SD-WN image supported on for ISR 1000, ISR 4000, SR 1000, and ENCS 5000 platforms? IOS XE SD-WN Software Release 16.10.1. Cisco 1000 Series Integrated Services Routers (ISR 1000): C1111-8P, C1111-8P LTE E, and C1111-8P LTE L. lso C1117-4P LTE E and C1117-4P LTE L. Cisco 4000 Series Integrated Services Routers (ISR 4000): ISR 4221; ISR 4321; ISR 4331; ISR 4351. Cisco Enterprise Network Compute System (ENCS 5000): ENCS 5412 with T1/E1 and 4G NIM modules - ISRv. Where do I learn what features are supported on the IOS XE SD-WN? Visit the Release Notes for Cisco SD-WN Release 18.3: https://sdwan-docs.cisco.com/product_documentation/software_ Features/Release_18.3/Release_Notes/Release_Notes_for_XE_SD- WN_Release_16.9.1_and_SD-WN_Release_18.3. If a customer stops paying for their subscription software license, does the network stop working? For traditional environments (management on premises vs. cloud managed), upon subscription expiration with no renewal, customers will still be able to use base routing features using CLI. However, customers will not be able to use the WN management and control capabilities of DN Center. Before diving deeper into the routing subscription offers, will you outline a brief comparison? The subscription offers are designed around the vital principles of secure connectivity, policy based automation, and analytics and assurance. Each offer delivers a range of capability for each principle, designed to meet varying customer requirements. For cloud-managed environments (vmanage), upon subscription expiration with no renewal, WN management functions will no longer operate. Customers must renew their subscription-based licenses to continue to get access to innovation. 2018 Cisco and/or its affiliates. ll rights reserved.
F Routing offer details DN Premier DN dvantage DN Essentials Centralized Management Secure Connectivity Policy Based utomation nalytics and ssurance Unlimited segmentation dvanced network and application visibility WN Optimization Network optimization analytics pplication trending and forecasting On-prem or cloud managed Zero touch deployment Branch virtualization with Cisco VNF orchestration Day 0 and Day 2 provisioning Lifecycle Management SD-WN and advanced WN topologies Limited segmentation Cloud connectivity ll types of connectivity Secure VPN overlay L3-L4 firewall, pp ware FW IPS/IDS with Talos Signatures URL-Filtering Basic application visibility pplication aware policies using path control, bandwidth optimization Cloud OnRamp Forwarding Error Correction Contextual insights with assurance Encrypted traffic analytics Network Essentials (IP Base + Sec)* Network dvantage (IP Base + Sec+ pp)* * Network Essentials and Network dvantage are perpetual and not required for vedge or ENCS 2018 Cisco and/or its affiliates. ll rights reserved.
F Understanding DN Essentials for WN Who is the target customer for DN Essentials for WN? DN Essentials for WN is a good choice for customers who need base connectivity, security and application visibility. What are the capabilities of the DN Essentials on premises subscription offer? The DN Essentials for WN on premises offer includes: Branch virtualization with NFV provisioning. Basic application visibility. ssurance Router monitoring, VNF monitoring, dashboards for overall heath, network health, pre-canned reports. utomation Network settings, credential update, integrity verification, PnP pplication. For a detailed list of features, please refer to the Licensing for DNSoftware Routing Subscription presentation. https://www.cisco.com/c/dam/en/us/products/collateral/software/ dna-software-routing-subscription.pdf. What are the capabilities of the DN Essentials cloud subscription offer? The DN Essentials for WN cloud offer includes features: Connectivity VPN overlay, hub and spoke topology, VPN with L2 or L3. Security Secure VPN overlay, L3 L4 firewall, applicationaware firewall, IPS/IDS with Talos signatures, URL filtering, and DN monitoring. Encryption and policy support. pplication Experience os, app-aware routing, DPI for visibility. Management Viptela vmanage platform, zero-touch provisioning. For detailed list of features, please refer to the Licensing for DNSoftware Routing Subscription presentation. https://www.cisco.com/c/dam/en/us/products/collateral/software/ dna-software-routing-subscription.pdf. Why might a customer choose DN Essentials vs. an existing à la carte software alternative? While Cisco will continue to offer the option to purchase software à la carte, many new innovations such as DN Center will only be offered via the subscription licensing alternatives. 2018 Cisco and/or its affiliates. ll rights reserved.
F Understanding DN dvantage for WN Who is the target customer for DN dvantage for WN? DN dvantage for WN is a good choice for customers who want to go beyond just visibility. They need segmentation, cloud networking, application driven policy experience along with advanced security. What are the capabilities of the DN dvantage on premises offer? This offer includes all the features of DN Essentials plus: IWN IWN pplication. Branch Virtualization Third party VNF orchestration. ssurance 360 pages, health score, targeted Insights, neighbor topology, path trace, KPIs, baselining, trends, custom reports (application experience, SD, WiFi KPIs etc.). utomation pplication policy, SWIM (Patching), SD Bonjour, ET, reporting (Tableau) etc. For detailed list of features, please refer to the Licensing for DNSoftware Routing Subscription presentation. https://www.cisco.com/c/dam/en/us/products/collateral/software/ dna-software-routing-subscription.pdf. What are the capabilities of the DN dvantage cloud offer? This offer includes all the features of DN Essentials plus: Connectivity Service-side routing, mesh topology, multicast. VPNs five (one transport and four service-side). Security Control policy and advanced policies. pplication experience DPI for application-aware routing and policies, SaaS on-ramp, TCP optimization, forwarding error correction (FEC). Management and orchestration End to end SD-WN policy orchestration, network and application trouble shooting. For detailed list of features, please refer to the Licensing for DNSoftware Routing Subscription presentation. https://www. cisco.com/c/dam/en/us/products/collateral/software/dnasoftware-routing-subscription.pdf. What additional value do customers get from DN dvantage vs. DN Essentials for WN? long with the DN Essentials capabilities, DN dvantage provides additional value in secure connectivity, policy based automation, analytics and assurance. Secure connectivity dvanced WN topologies and limited segmentation. Policy based automation pplication-aware policies (path control, b/w optimization, latency, os). nalytics and assurance L4-L7 application firewall and enhanced security (ET). Understanding DN Premier for WN Who is the target customer for DN Premier for WN? DN Premier is a good choice for customers with geographically disparate WNs with all types of connectivity. These customers need enhanced advanced security, application driven policy and experience with network insights. 2018 Cisco and/or its affiliates. ll rights reserved.
F What are the capabilities of the DN Premier on premises offer? This offer includes all the features of DN dvantage and DN Essentials plus: dvanced application experience ppnav, WN Full stack WS. For detailed list of features, please refer to the Licensing for DNSoftware Routing Subscription presentation. https://www. cisco.com/c/dam/en/us/products/collateral/software/dnasoftware-routing-subscription.pdf. What are the capabilities of the DN Premier cloud offer? This offer includes all the features of DN dvantage and DN Essentials plus: Connectivity VPNs, up to system scale. dvanced pplication Experience with Full stack WS. nalytics vnalytics platform for advanced analytics. For detailed list of features, please refer to the Licensing for DNSoftware Routing Subscription presentation. https://www.cisco.com/c/dam/en/us/products/collateral/software/ dna-software-routing-subscription.pdf. What additional value do customers get from DN Premier vs. DN dvantage for WN? long with the DN dvantage and DN Essentials capabilities, Cisco ONE dvantage provides additional value in secure connectivity, policy based automation, analytics and assurance. Secure connectivity Cloud connectivity and unlimited segmentation. Policy based automation dvanced pplication optimization and network analytics. nalytics and assurance Same as DN Essentials and DN dvantage. Migration What is the investment protection for existing perpetual customers who are interested in the new DN for WN capabilities? customer who purchased the X bundle, XV bundle or Cisco ONE Foundation perpetual on the ISR 1000, ISR 4000, or SR 1000 within the last four years (from July 28, 2014) and has active Software Support (SWSS)/Partner support/sntc is eligible for a promotional credit to apply toward the purchase of either DN dvantage or DN Premier. Specifications: Credit applicable only towards 3/5 year DN dvantage/dn Premier offers. Promotional Credit available only until July 26, 2019. See the table below for credit: Platform Family Credit ISR 1K, ISR 4221, ISR 4321 $1,000 ISR 4351, ISR 4331 $2,000 ISR 4431, ISR 4451 $5,000 SR 1K $12,000 Example: customer has Cisco ONE WN Foundation on ISR 4331. The customer receives a $2,000 credit to apply towards the purchase of DN dvantage or DN Premier as a 3- or 5-year subscription. What is the investment protection for customers who already have DN software? Customers with an active subscription can get the new features by simply downloading the new version from Cisco Connection Online (CCO) for no additional cost. 2018 Cisco and/or its affiliates. ll rights reserved.
F re there additional ways for existing Cisco ONE perpetual customers to get the software-based and policy-driven functionality included in the DN subscription offers? We are making it easier for our existing Cisco ONE customers get on the path of DN innovations. In addition to the credits above for DN dvantage or DN Premier, existing Cisco ONE customers will automatically get DN Essentials at the time of SWSS renewal. This DN software will include SWSS benefits for the perpetual and subscription offers in addition to the DN innovations. t equivalent cost to what would have been SWSS renewal, customers can get the benefits of DN Essentials (with SWSS included). These will be available as 1-, 3-, or 5-year terms. Customers will also retain their perpetual licenses. Purchasing If a customer wants to buy DN Premier, do they have to buy DN dvantage and/or DN Essentials? No. The routing subscription offers are nested SKUs. DN dvantage includes DN Essentials. DN Premier includes DN dvantage (which includes DN Essentials). What subscription terms are available? Both cloud management through vedge, and on premises management through DN Center is available as 3 and 5 years terms. If customers prefer, may they purchase routing software via perpetual licenses? Yes. Cisco software for WN is still available via perpetual licenses. DN software, which offers the rich new functionality, is available only by subscription. How does a customer choose the optimal routing solution? The customer will consider these 5 steps: Step 1 Identify license tier. Step 2 Select the bandwidth. Step 3 Pick the license term. Step 4 Choose on premises or cloud managed. Step 5 Determine platform for future scale. Some routing platforms do not have DN bundles. How do I order DN subscription for these platforms? The customer will order the respective platform with the SDWN image. In addition, they will separately order the SKU LIC-DN-DD. When selecting LIC-DN-DD, the customer will consider 5-steps similar as described in the previous question. My customer already has the router deployed. How can they add subscription to this router? The customer will order the SKU LIC-DN-DD. When selecting LIC-DN-DD, the customer will select the correct platform and follow the steps in the previous question on ordering LIC-DN-DD. Smart licensing and smart accounts What is a smart license and why should I care? Smart Licensing is a new, flexible software-licensing model that simplifies the way customers activate and manage licenses across their organization. Instead of using Product ctivation Keys (PKs), Smart Licenses establish a pool of software licenses in a customerdefined Smart ccount that can be used throughout the enterprise. What are smart accounts? Why should I care? Smart ccounts are mandatory for any subscription. They help identify and connect the right customer account into which the subscription licenses purchased by the customer will be deposited before they may be used. The combination of Smart Licensing and Smart ccounts delivers visibility into your license ownership and consumption (through a cloud portal) to help you reduce operational costs. Smart License is used with DN Center. 2018 Cisco and/or its affiliates. ll rights reserved.
F What software products offer smart account and smart license capabilities? ll ISR1000 Series, ISR4000 Series, SR1000 Series and the virtual routers of CSR1000v, ISRv routers provide support for Smart ccounts and Licensing. The vedge products (including the cloud versions) will support Smart License in upcoming versions of the software. How do I view and use smart license? License availability and consumption through smart license is visible through a portal called Cisco Smart Software License (CSSM). ll licenses that are deposited and consumed are clearly visible through the user-id and password provided for the smart or virtual account for each customer. Where can I learn more about Cisco Smart Software Licensing and smart accounts? Smart License: https://www.cisco.com/c/en/us/products/software/ smart-accounts/software-licensing.html Smart ccount: https://www.cisco.com/c/en/us/products/software/ smart-accounts.html for Smart ccounts Cisco Enterprise greement (E) Can the routing subscription offers be added to an existing Cisco ONE Foundation for WN E? DN Premier or DN dvantage for WN may be added to an E. There is a $250K minimum Total Contract Value (TCV). Metering is license based. The new Cisco ONE dvantage subscription must comprise at least 15% of the total number of nodes. Newly added subscription offers will co-term with the existing E. Cisco True Forward benefits apply. Support How is software support provided? With the routing subscription offers, SoftWare Support Service (SWSS) is already included. This includes TC, knowledge base access and software downloads. Please see www.cisco.com/go/swss What hardware support services are available? Three options are available: Cisco Smart Net Total Care (SNTC) provides 24-hour global support for the base OS and underlying hardware platforms on which Cisco ONE Software is deployed. Please see www.cisco.com/go/smartnet Cisco Solution Support is a high-value services offering that provides centralized support through our solution experts whether you have an issue with a Cisco product or one from a solution partner. Please see www.cisco.com/go/solutionsupport Partner Support Service provides technical support capabilities and insights that partners can select, customize, and deliver cost effectively to their customers. Please see https://www.cisco. com/c/en/us/partners/sell-integrate-consult/sell-services/ partner-support.html. Please note that a three-year hardware warranty is included for vedge. 2018 Cisco and/or its affiliates. ll rights reserved. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: https://www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R) C67-740524-02 11/18