Winning with Cisco IWAN. Johnny Mehl Manager of Channel Technical Operations

Winning with Cisco IWAN Johnny Mehl Manager of Channel Technical Operations

Mapping Cisco Technologies Cisco Technologies DMVPN PfRv3 QoS/NBAR2 Cisco AVC Cisco WAAS N/A N/A Riverbed Technologies Secure Transport Path Selection QoS/AFE SteelCentral Network Performance Monitoring SteelHead SteelCentral Application Performance Monitoring SteelFusion 2015 Riverbed Technology. All rights reserved. 9

Cisco vs Riverbed IWAN Profile Technologies Riverbed Products Base DMVPN QoS PfRv3 Advanced DMVPN QoS PfRv3 Cisco AVC Advanced with WAAS DMVPN QoS PfRv3 Cisco AVC WAAS SteelHead (WAN opt.) SteelCentral (Visibility) SteelFusion (Converged Infra.) SteelHead SteelCentral SteelFusion SteelHead SaaS SteelCentral SteelFusion 2015 Riverbed Technology. All rights reserved. 10

IWAN Base profile Problems: End-user performance is not guaranteed. PfRv3 does nothing to reduce bandwidth or mitigate latency Lack of visibility into both the application layer and network layer Value proposition: SteelHead provides WAN opt. while SteelCentral provides both application and networking monitoring capabilities on top of IWAN Base profile 2015 Riverbed Technology. All rights reserved. 11

IWAN Advanced Profile Problems: End-user performance is not guaranteed. PfRv3 does nothing to reduce bandwidth or mitigate latency Lack of visibility into the applications. Cisco AVC only provides networkbased performance metrics leading to blind spots in the network. Value proposition: SteelHead provides WAN opt. while SteelCentral provides complete network and application visibilities. 2015 Riverbed Technology. All rights reserved. 12

Complete, End-to-End Transaction Visibility Client Browser BEGIN Page Render Time END EUE WAN OS TCP/IP Stack IIS Web Server.NET Worker Process LAN VMware OS TCP/IP Stack Apache Java App Server Request Payload Network/Bandwidth/Latency Queuing Code Processing Network/Bandwidth/Latency Hypervisor Oversubscription Queuing Code Processing Response Payload Network/Bandwidth/Latency Code Processing Code Processing Network/Bandwidth/Latency Web App Packets Riverbed Performance Management Metrics Code Instrumentation Packets Metrics Code Instrumentation Remote Calls Web Service, DB etc. Packets 2015 Riverbed Technology. All rights reserved. 13

IWAN Advanced with WAAS Problems: WAAS has fallen ridiculously behind in terms of application acceleration WAAS solves some enterprise application performance problems, but what about SaaS apps? What can Cisco AVC do for SaaS apps? Value proposition: SteelHead can replace WAAS and work with IWAN SteelHead SaaS provides optimization and visibility into SaaS applications. 2015 Riverbed Technology. All rights reserved. 14

Cisco is ridiculously far behind in developing WAAS Here is an example 2010 2011 2012 2013 2014 2015 Encrypted MAPI L7 Optimization Outlook Anywhere L7 Optimization Oops! Encrypted MAPI L7 Optimization after no support announced by MS Outlook Anywhere L7 Optimization MS announced that Exchange 13 will no longer support MAPI MS announced MAPI/HTTP protocol to replace Outlook Anywhere Future Proofing SteelHead: We ship with IPv6 BW optimization and IPv6 L7 optimization 2015 Riverbed Technology. All rights reserved. 15

Monitoring SaaS application Page load time Waterfall chart showing object load times with optimization coverage (in orange) riverbed.my.salesforce.com 6640000000TnGa&ic=1 200 [salesforce: riverbed] Search Results Named page families provide simple, meaningful names to web transactions/urls Quantify end-user experience of your optimized web and SaaS applications Quickly identify web apps, pages, objects, sites, and users with high response times Break down HTTP response times into network vs. application delays for specific pages, objects, and applications 2015 Riverbed Technology. All rights reserved. 16

Setting up IWAN: Minimal Work Configure DMVPN Hub Router (8 procedures) 102 pages! Configure Firewall/DMZ 175 steps! switch (5 procedures) Configure remote-site DMVPN Router (9 procedures) Configure PfR Hub Master Controller (3 procedures) Configure PfR for Hub (5 procedures) Configure PfR for Remote Site locations 671 (4 procedures) commands/ entries!!! 2015 Riverbed Technology. All rights reserved. 18

Branch IT: Trends and Requirements Data Center Cloud/SaaS Cloud Internet Edge is moving closer to the branch Branch Office Transition to Cloud/SaaS from Data Center 2/3 Branch Traffic will be video Branch offices represent roughly half of 50% IT budget 50% Nearly half of all employees work in branch offices 2015 Riverbed Technology. All rights reserved. 21 Source: Lippis Consulting

Branch IT: Challenges Improve End User Experience Manage New Traffic Control Costs Users want instant response Increased use of video Added bandwidth HD quality Rich Media Recreation (YouTube) mixed with business traffic Costs of MPLS Branch Focus creating content and traffic overload 2015 Riverbed Technology. All rights reserved. 22

Use-cases Across Vertical Markets Enterprise Retail Education Hospitality Efficient use of WAN Provide in-store digital Supplement school Cater to growing demand with hybrid networks experience for shoppers curriculum with rich of high BW requirements Pervasive use of Faster POS app media (video) from guest Wi-Fi video for training and processing Addition of laptops and High latency environment collaboration tablets to access digital on cruise ships content 2015 Riverbed Technology. All rights reserved. 23

Target deployment models Data Center Branch Office Direct Internet Access MPLS WAN Backhaul Internet Access Case #1: Internet Connec/ons backhauled through corporate data center Case #2: Direct to Internet connec/ons Internet breakout at the branch Internet breakout from within the managed SP network 2015 Riverbed Technology. All rights reserved. 24

Web Proxy: Key Benefits Transparent HTTP(S) proxy Asymmetrical deployment Only on the client side Local connection termination Co-existence with traditional wan-opt features Caching: Separate from wan-opt data store YouTube video caching Centralized management and reporting via SCC 2015 Riverbed Technology. All rights reserved. 26

Additional Information Supported on CX appliances xx55 and xx70 SteelHead needs to be physical inline. No PBR or WCCP virtual inpath Web Proxy connections are part of the same optimized TCP connections pool as DEI. Consider while sizing. * Support for vsh and EX platforms coming in later releases 2015 Riverbed Technology. All rights reserved. 27

What Makes This So Special? Opex model follow the user Subscription pricing per user per month (any duration 12-36 months) $1.99 No incremental hardware investment Service matches the user, not the appliance or the server Opex consumption model eases adoption just like SaaS 2015 Riverbed Technology. All rights reserved. 29

SteelHead for Every SaaS Expanding the scope of SaaS applications 3 Cloud SteelHead is: - Automatically created if needed - Paired with on premise SH - Certificates exchanged 4 Cloud SteelHead communicates with SaaS on behalf of original request 1 Client browses to SaaS.com 2 On premise SteelHead intercepts Office365 Traffic and routes to Akamai cloud 2015 Riverbed Technology. All rights reserved. 31

Opportunity #1 Scenario: Customer would like to utilize their MPLS + Internet links. Problem: Customer is not ready for a hardware refresh to run PfRv3. Solution: SteelHead s Path Selection feature does not require any router software or hardware upgrade. 2015 Riverbed Technology. All rights reserved. 36

Opportunity #2 Scenario: Customer is moving to [SaaS vendor] and requires optimization and/or concerned about lack of visibility in the cloud. Problem: Customer already has IWAN with WAAS deployed to optimize the enterprise traffic. Solution: SteelHead SaaS can co-exist with WAAS and optimize traffic to the SaaS vendors. 2015 Riverbed Technology. All rights reserved. 37

Opportunity #3 Scenario: Customer has deployed IWAN but require optimization for mobile users. Problem: Cisco has no solution for optimizing mobile users. Solution: SteelHead Mobile can co-exist with IWAN/WAAS. 2015 Riverbed Technology. All rights reserved. 38

Opportunity #4 Scenario: Customer would like to move their workload into Azure and AWS but they re concerned about performance and visibility. Problem: Cisco WAAS cannot run in Azure or AWS. Solution: Cloud SteelHead is available in both Azure and AWS. SteelCentral can provide visibility into Azure and AWS. 2015 Riverbed Technology. All rights reserved. 39

Optimizing and monitoring public cloud Cloud SteelHead Branch Office Data Center SteelHead SteelFlow WTA data from Client Side SteelHeads SteelHead SteelCentral 2015 Riverbed Technology. All rights reserved. 40

Opportunity #5 Scenario: Customer uploaded the corporate training videos to their secure YouTube channel but are concerned about the bandwidth required to view them at the branch locations. Problem: Cisco/Akamai Connnect cannot cache secure YouTube videos. Solution: Web proxy on the SteelHead can cache the secure YouTube video. It can also cache other SSL-based content 2015 Riverbed Technology. All rights reserved. 41

Riverbed SteelHead vs Cisco IWAN/WAAS comparison Updated August 2015 More application-specific optimizations Better performance for the applications you use 1. CIFS (SMB1) 2. SMB2/3 3. CIFS Print 4. Mac CIFS 5. SMB Signed CIFS 6. MS-SQL 7. MAPI 2003-2010 8. Encrypted MAPI RiOS 9.1 IWAN/WAAS 5.5.5 9. Outlook Anywhere 10. Lotus Notes 11. Enc. Lotus Notes 12. Oracle Forms 13. NFS 14. HTTP 15. SSL 16. Citrix ICA 17. FCIP 18. SRDF/A 19. UDP and IPv6 20. MS Silverlight video 21. Adobe Flash video 22. MAPI/HTTP 1. CIFS (SMB1) 8. HTTP 2. SMB2 9. SSL 3. CIFS Print 10. Citrix ICA 4. MAPI 2003-2010 11. MS Windows Media 5. Encrypted MAPI 12. RTSP splitting 6. Outlook Anywhere 7. NFS Disaster Recovery Meet RPO and RTO objectives more efficiently by optimizing backup and replication Mobile Software Client Effective and easy-to-administer optimization for mobile employees SSD-based storage available for high throughput Largest appliance has 4.8TB usable data store Disk and memory-based data reduction can be mixed and matched, enabled selectively per site or traffic SRDF-aware optimization for replicating EMC storage Qualified by storage vendors Same RiOS S/W branch + mobile Client connects with any Steelheads already in network Auto-detection of local Steelhead when mobile client in branch Data store warming when client in Steelhead-equipped branch Replicator Mode Discontinued WAAS Mobile Discontinued IaaS/SaaS optimization and visbility Optimize and provide visibility for workloads in IaaS and SaaS Cloud SteelHead available for Amazon AWS and Microsoft Azure End-to-end optimization for multiple SaaS vendors Visibility into both IaaS and SaaS vendors Not available 2015 Riverbed Technology. All rights reserved. 42

Riverbed SD-WAN ü Software-defined. Business-defined. ü Optimized & secure. Hybrid by design. ü ü Complete visibility. On-premises & cloud. Apps that simply work. 1. Centralized App Policies Layer-3 Services Application Identification & Classification Deep-packet Inspection SSL Cert Management Hybrid WAN Path Selection 3 rd Party Service Secure Transport Secure Transport Network QoS Network QoS Layer-3 Services Layer-3 Services Container A Container B Container C Container D Container E Centralized Controller 2. Local App Policy Enforcement Management & Monitoring Zero-touch Provisioning Application Policy Engine App Performance Monitoring On-premises or Cloud 3. SteelFlow TM Telemetry Optimization Visibility Control 2015 Riverbed Technology. All rights reserved. 44

Project Tiger New modular operating platform built with containerization and service-chaining to support Riverbed-native and 3 rd party services. LAN Tiger Appliance Coming 2016! Packet Capture Layer-3 Services Application Intelligence Identification Classification SteelFlow TM Telemetry Path Selection 3 rd Party Service(s) Secure Transport Secure Transport Network QoS Network QoS Layer-3 Services Layer-3 Services Packet Capture Packet Capture WAN_0 WAN_1 Container A Container B Container C Container D Container E Riverbed SteelOS TM Runtime Environment Complete set of SD-WAN network services for application visibility & control Application Identification & Classification, Hybrid WAN Path Selection, Secure Transport, QoS, SteelFlow TM Telemetry Native routing services included. Branch router not required. Supported as a layer-3 hop or as transparent bridge. 2015 Riverbed Technology. All rights reserved. 45

Riverbed Application Performance Platform TM A complete branch IT solution for the software-defined enterprise. Server Virtualization Coming 2016! Industry-leading WAN Optimization Storage Delivery Industry-leading WAN Optimization SD-WAN Application & Network Services SD-WAN Application & Network Services SD-WAN Application & Network Services Project Tiger Branch Type I Lower-cost, Higher-speed bandwidth SteelHead Branch Type II Higher-cost, Lower-speed bandwidth SteelFusion Branch Type III Local servers, storage & backup SteelCentral TM Controller On-premises, Cloud, RESTful APIs, 3 rd Party Orchestration 2015 Riverbed Technology. All rights reserved. 46

Key Takeaways with 5 Arrows IWAN can be very complex to set up. We can help. We have coexisted with IWAN for a very long time. Visibility/performance into SaaS providers are key concerns for customers. Mobile users are important. Do not leave them behind. Web proxy can help alleviate the pressure on the WAN. 2015 Riverbed Technology. All rights reserved. 47