View
5
Download
0
Category
Preview:
Citation preview
© 2010 Cisco and/or its affiliates. All rights reserved.
November 2015
© 2010 Cisco and/or its affiliates. All rights reserved. 2
Cisco Meraki: a complete cloud-managed networking solution - Wireless, switching, security, and MDM, centrally managed over the web - Built from the ground up for cloud management - Integrated hardware, software, and cloud services
Leader in cloud-managed networking - Among Cisco’s fastest-growing portfolios: over 100% annual growth - Tens of millions of devices connected worldwide
Recognized for innovation - Gartner Magic Quadrant, InfoWorld Technology of the Year, CRN Coolest Technologies
Trusted by thousands of customers worldwide:
© 2010 Cisco and/or its affiliates. All rights reserved. 3
Meraki MS Ethernet Switches
Meraki SM Mobile Device Management
Meraki MR Wireless LAN
Meraki MX Security Appliances
© 2010 Cisco and/or its affiliates. All rights reserved. 4
Application Control Web Caching, Traffic Shaping, Content Filtering
Security NG Firewall, Client VPN, Site to Site VPN, IDS/IPS, Anti-Malware, Geo-Firewall
Networking NAT/DHCP, 3G/4G Cellular, Intelligent WAN (IWAN)
© 2010 Cisco and/or its affiliates. All rights reserved. 5
Intuitive centralized management!• No training, no command line • Templates to configure at-scale • Packet capture, built-in tools and diagnostics
Industry-leading visibility!• Fingerprints users, applications, and devices • Network-wide monitoring and alerts • Full stack: APs, switches, Security, MDM
Designed for distributed enterprises!• Single pane of glass visibility • Zero-touch provisioning • Seamless updates from the cloud • Site-to-site IPSec VPN in 3 clicks
© 2010 Cisco and/or its affiliates. All rights reserved. 6
Best IPS SOURCEfire IDS / IPS, updated every day
Content Filtering
4+ billions URLS, updated in real-time
Geo-based security
Block attackers from rogue countries
AV / anti-phishing
Kaspersky AV, updated every hour
PCI compliance
PCI 3.1 certified cloud-based management
Cisco Confidential © 2010 Cisco and/or its affiliates. All rights reserved. 7
© 2010 Cisco and/or its affiliates. All rights reserved. 8
© 2010 Cisco and/or its affiliates. All rights reserved. 9
“Intelligent WAN” (IWAN) is a collection of Cisco technologies and products that enable transport independence, intelligent path control, application optimization, and secure connectivity for multi-site deployments.
Transport Independence
Application Optimization
Intelligent Path Control
Secure Connectivity
• IPSec overlay (Auto VPN) • Scalable (Cloud Controller)
• Traffic distribution over multiple pathways (Internet, cellular, MPLS-to-VPN failover)
• App visibility & control (Meraki dashboard, group-based policies, traffic analytics)
• Application QoS & bandwidth
optimization (Traffic shaping)
• Uplink chosen by link latency, data loss, etc. (PfR, aka performance-based routing)
• Uplink assigned by traffic protocol, subnet, source, destination, etc. (PbR, aka policy-based routing)
• Intuitive, automatic, scalable VPN solution to connect remote branch sites (Auto VPN)
© 2010 Cisco and/or its affiliates. All rights reserved. 10
Dual-active path: • Active-active VPN • Active-active VPN & MPLS
Policy-based routing (PbR) : • Allows uplinks to be intelligently assigned
based on traffic protocol, subnet, source, destination, etc.
Dynamic path selection: • Ensures the best VPN tunnel is used based on
latency and loss metrics
WAN 1 Secure VPN tunnel (active) Latency / loss > threshold
WAN 2 Secure VPN tunnel (active) Latency / loss < threshold
Data
Based on L3 / L4 categorization, this data normally travels out WAN 1 (PbR), but MX detects optimal path is WAN 2 based on latency / loss on WAN 1
© 2010 Cisco and/or its affiliates. All rights reserved. 11
Projects / Pain Points: • Implement a BYOD platform at 50 remote sites • Managed Service Provider & MPLS costs
Solution: • Complete Meraki Stack: MR, MS, MX • Phase off MPLS to Broadband
Business Outcomes: • Reduced Telco Spend by 40% • Single platform in branch improved IT efficiency
Projected Costs for Legacy 3-Year WAN Run Rate Internet Connectivity (3 years) $2,016,000
Traditional T1 VPB hub-and-spoke model x 45 sites (1.544-4.632Mbps Ethernet)
$582,000 / year
WAN at HQ & DR (45Mbps x 2) $90,000 / year
Content Management (3 years) $153,000
Content filtering software $51,000 / year
Maintenance $24,750
Hardware security appliance $8,250 / year
Total Spend (3 years) $2,193,750
Projected 3-Year Costs with Meraki (Incl. Rip & Replace)
Internet Connectivity (3 years) $673,495
HQ + 37 branches (50Mbps DSL broadband) $212,040 / year
WAN Management vendor (one-time setup) $37,375
Meraki Hardware & Licensing $599,141
MX, MS, & MR x 41 branches $382,896
Content Management Included
Wireless installation (one-time setup) $62,257
26 branches wired for MR
Total Spend (3 years) $1,334,893
© 2010 Cisco and/or its affiliates. All rights reserved. 12
© 2010 Cisco and/or its affiliates. All rights reserved. 13
Speed • Industry’s first 802.11ac UTM • Dual radio • ~3X speed of 11n wireless • 2-3X faster than MX60 / MX60W
Security • UTM provides one-stop security • IPS, content filtering, malware / anti-phishing
— Seamless, automatic updates • PCI 3.0-certified cloud backend
SKU List Price MX64-HW $595
LIC-MX64-ENT-3Y $600
LIC-MX64-SEC-3Y $1200
MX64W-HW $945
LIC-MX64W-ENT-3Y $650
LIC-MX64W-SEC-3Y $1300
© 2010 Cisco and/or its affiliates. All rights reserved. 14
Strength by the numbers • 3X faster than MX80 • 2x dedicated WAN ports • 8x copper LAN (1 Gbps) ports • 2x SFP LAN (1 Gbps) ports
Availability • Orderable Nov 16th, 2015 • Product an licensing is identical to MX80 • Customers can migrate MX80 licenses to
MX84 free of charge
SKU List Price MX84-HW $1995
LIC-MX84-ENT-3Y $2000
LIC-MX84-SEC-3Y $4000
Cisco Confidential © 2010 Cisco and/or its affiliates. All rights reserved. 15
© 2010 Cisco and/or its affiliates. All rights reserved. 16
MX64/64W
MX84
MX100
MX400
MX600
Z1
Small branches (~50 users)
Where Adv Sec Throughput
100 Mbps
Large branch/campus (~10,000 users)
Large branch/campus (~2,000 users)
Mid-size branches (~200 users)
Mid-size branches (~500 users)
Unique Features
Wireless (MX64W)
300 Mbps 2x SFP ports 1 TB Storage for Web Caching
600 Mbps 2x SFP ports 1 TB Storage for Web Caching
1 Gbps
1 Gbps
SFP (1 Gpbs), and SFP+ (10 Gbps) interfaces 1 TB Storage for Web Caching
For teleworkers (1-5 users) Dual-radio wireless FW throughput: 50 Mbps
All devices support 3G/4G
SFP (1 Gpbs), and SFP+ (10 Gbps) interfaces 4 TB Storage for Web Caching
© 2010 Cisco and/or its affiliates. All rights reserved. 17
Enterprise License Advanced Security License
Stateful firewall
Site to site VPN
Branch routing
Internet load-balancing (over dual WAN)
Application control
Web caching
Intelligent WAN (IWAN)
Client VPN
`
All enterprise features, plus Content filtering (with Google SafeSearch)
Kaspersky Anti-Virus and Anti-Phishing
SourceFire IPS / IDS
Geo-based firewall rules
Thank you.
Recommended