Embed Size (px)
Citation preview
Building Secure Wi-Fi & IT Infrastructure with Cisco Meraki
Chris Riley
Director
System Source Presents
Ellyn StewartMeraki Sales Specialist
MD + Delaware
(415) 432-1648
Caitlin KellyMeraki Sales Specialist
D.C. Metro
(312) 736-3086
Scott Rippey
Solutions Architect
Dan Phillips
Cisco
Agenda
Welcome and Intro – Chris Riley
Meraki Team:
• Cloud management across WAPs, firewalls, switches and cameras
• Two factor authentication methods using DUO
• New Wi-Fi 6 AX standard (802.11ax) as an alternative to wired networks
• New Cisco Umbrella DNS filter policy management in the Meraki dashboard
• New MS390 switch with Adaptive Policy controls access by tagging user types
• Q & A with Chris Riley
We Hope You are
Enjoying Your
Pizza!!
If you haven’t received your pizza,
then contact Mike Jones:
During the Webinar…
Audio – In presentation mode
Control Panel
View webinar in full screen mode
In Chat – Tell us what you hope to learn today
In Questions - Submit your questions
Evaluation just after webinar finish (takes just 2 min.)
Two returned surveys will receive a $25 Amazon Gift
Cards (Let’s keep it fun!)
Building Secure Wi-Fi & IT Infrastructure with Cisco Meraki
Meet Your Meraki/DUO Team
Ellyn StewartMeraki Sales SpecialistMD + Delaware(415) [email protected]
Caitlin KellyMeraki Sales SpecialistD.C. Metro(312) [email protected]
Dan PhillipsDUO [email protected]
Sahand ChalabiSystems Engineer
We simplify IT to help passionate people focus on their mission.
At Meraki
A Complete Remote Management PlatformCloud-Managed IT from a Single Pane of Glass
MRWireless Access
Points
MSEthernet Switches
MXSecurity & SD-
WANAppliances
MGCellular
Gateways
MIInsight
[Application & WAN]
SMEndpoint
Management
MVSmart
Cameras
Out of Band Cloud Management
Scalable
Unlimited throughput, no bottlenecks
Add devices or sites in minutes
Reliable
Highly available cloud with multiple datacenters
Network functions even if connection to cloud is interrupted
99.99% uptime SLA
Secure
No user traffic passes through cloud
Create and maintain HIPAA & PCI compliant networks
3rd party security audits, daily penetration testing
Automatic firmware and security updates (user-scheduled)
Reliability and security information at meraki.cisco.com/trust
SolutionComponents
Meraki Firewall (MX)
Secure WiFi*
access
WAN & Application
Performance Monitoring
Application Visibility
& Control
Secure wired
access
Single pane of glass
UTM**
L3
AutoVPN
* Supported on MX64W
** Requires Advanced Security License
SD-WAN
Content
Filtering**
Meraki Switches (MS)
Voice & Video
QoS
Remote Live Tools
Application Visibility
& ControlSingle pane of glass
Virtual
Stacking
Network
Topology
Layer 3
Scalability
Enterprise
Security
Meraki Access Point (MR)
Secure WiFi
access
Wireless Health
Application Visibility
& ControlSingle pane of glass
L2
SSID
TunnelWiFi 6*
Auto
RF
Meraki Smart Camera (MV)
Built-in analytics
Motion Search Tool
Application Visibility
& ControlSingle pane of glass
Secure
Encrypted
Control API
Integration
Cloud
Storage
Dashboard Demo
Product Highlights
Higher ThroughputUp to 4.8 Gbps
Wi-Fi 6 supports up to 4X higher aggregate throughput and clients
High DensityHigh performance and client count
Longer Battery LifeUp to 67%
Enhanced Reliability8x8 deterministic capacity
802.11ax (Wi-Fi 6)
Introducing three new 802.11ax (Wi-Fi 6) models
5Gbps mGig 802.3at
5.
Target Wake Time
OFDMA(DL/UL)
MU-MIMO(DL/UL)
Bluetooth 5.0
2.4 GHz & 5 GHz
MR56
8 Tx/Rx Antennas8 Spatial streams
2.5Gbps mGig 802.3at
MR46
4 Tx/Rx Antennas4 Spatial streams
1Gbps 802.3af
MR36
2 Tx/Rx Antennas2 Spatial streams
Cisco Meraki DNS layer Security
Powered by Cisco Umbrella
DNS layer traffic protection and content filtering on the Meraki MR powered by UmbrellaAvailable on Wi - Fi 6 APs and APs with Firmware R26
How does it work ?
Malware
C2 Callbacks
Phishing
HQ
AV AVAV
GUEST Wi-Fi
AV
AV AV
AV
Meraki MR
BRANCH
AV AV
Meraki MR Meraki MR
Without MR+Umbrella, your network is exposed to DNS threats
But with Meraki MR + Umbrella , your network is secureagainst threats
Introducing the MS390
MS390 is the answer to these problems
23
Fast convergence in case of a
stack-member failure to ensures
high network resilience
IMPROVED PHYSICAL STACKING
Creates additional power capacity
by pooling power sources to
power more PoE devices
STACKPOWER
Micro-segmentation of users,
devices and application to simplify
security and access policies
ADAPTIVE POLICY
3x of the throughput of its
predecessor (MS350) to cater to
demands from Wi-Fi 6 & IoT
480 Gbps STACKING
Hot-swappable uplink modules
for flexible hardware upgrades
and easier management
MODULAR UPLINKS
48-Port PoE & mGig
PoE on all 48-ports along with
mGig option to address legacy
infrastructure issues
SolutionBenefits
Zero Touch Provisioning
One-time remote, web-
based configuration
Configuration templates
simplify large multi-site
deployments
No pre-staging
No onsite configuration
Unbox and plug in
devices at required
locations
INTEGRATION AND
AUTOMATION
FEATURE RICH AND
EASY TO USE UI
Marketing Automation
Augmented experiences Custom analytics
90%
Typical customers save
in the region of 90% on
operating costs with
Meraki compared to
traditional architectures
API
An extensible platform
Explore Meraki total cost of ownership
at meraki.cisco.com/TCO
Explore Meraki API solutions at
apps.meraki.io/
Offer ends January 23rd 2021
Next Steps
Risk-free evaluationmeraki.cisco.com/eval
Check out our website & blogmeraki.cisco.com/blog
Cisco, Duo, and Trusting Your Users
v1.1 June 2018
Dan Phillips - Duo Specialist
CONFIDENTIAL INFORMATION PROPERTY OF DUO SECURITY, INC.
What is Duo and why that name?
Two factors of authentication
Easy and effective
A marriage of security and usability
CONFIDENTIAL INFORMATION PROPERTY OF DUO SECURITY, INC.
Why Multi-Factor?● 70-90% of breaches come from compromised
credentials
● MFA adds a 2nd layer of security to online
accounts by verifying identities
● Prevents someone from logging in as you, even if
they know your password
Is Duo only Multi-Factor?
Modern Perimeter
Traditional
Perimeter
Corporate Networks;
On-site Users, Endpoints,
Server, and Apps
Cloud Applications
Hybrid Cloud
Personal Devices
Vendors &
Contractors
Mobile Devices
Remote Employees
Trusted Access Vision
● Who is the user?
● What’s their role?
● Privileged User?
● Up to date?
● Securely configured?
● Corporate Issued or
BYOD?
● Cloud and On-Premise
Apps
● Single Sign On
● Consistent End User
Experience
Trusted
Users
Trusted
Devices
Every
Application
Verify the identity of users and the health of their devices before they
access your applications
2FADevice
Insight Policies
MFA is just the beginning...
-Moving to the cloud
-VPN
-Compliance needs
-BYOD policies
-Meraki
Or my personal favorite:
they simply want their
users to be more secure
and have more freedom.
Expand & Secure any Corporate Application
CONFIDENTIAL INFORMATION PROPERTY OF DUO SECURITY, INC.
Differentiators?1.Speed to security
Deploy these building blocks as quickly as they are ready to – all at once or one at a time, at their
own pace
1.Ease of use
For deployment and maintenance for admins & for end users
1.Broadest coverage of applications, users, and devices
Duo is designed so that no matter what IT and security vendors you use, you can still secure access
to all work applications, for all users, from anywhere.
1.Lower TCO
Invest far less time and resources in securing your environment with Duo; spend your time and
resources on other important projects
CONFIDENTIAL INFORMATION PROPERTY OF DUO SECURITY, INC.
Duo Access+
Differentiate between corporate and
personal devices
Only allow corporate devices to
access critical applications
Control which applications
applications are accessible by remote
users
Duo MFA +
Detailed visibility into device hygiene
Encourage users to self-remediate
Granular security policies
Phishing assessments
Duo Product Line
Duo MFA Duo Access Duo
BeyondScalable 2FA for all users
Summary of device hygiene
Basic Access Control
Consistent MFA experience across
all applications
Q & A
Kindly complete the survey at the end of this
webinar. We will use your feedback to help us
improve.
Fun Reminder…Two returned surveys will
receive $25 Amazon Gift Cards
THANK YOU!
