Cisco Intelligent WAN

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1Cisco Confidential 1© 2013 Cisco and/or its affiliates. All rights reserved.

Cisco Intelligent WAN Deliver an Uncompromised Experience from Any Connection

Jimmy Ray Purser PE / MSEE

TechWIseTV

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2

Emerging Branch DemandsThe Application Landscape Is Changing

Applications Are Moving to the Data Center and Cloud

Internet Edge Is Moving to the Branch

Cloud

Data Centers

Cloud

of CIOs Expect to Operate via the Cloud by 2015

%50Mobility

More Mobile Data Traffic by 2015

Rich Media Apps

of Mobile Traffic Will Be Video6X 2/3

Pressures on the WAN

Branch


68%

75%

$100M +

Nearly HALF of WAN Budget on Wireline/Internet Transport Services*

Fortune 500

Midmarket

$500K +HOW WILL YOU GET MORE VALUE FROM YOUR WAN INVESTMENT?

WAN Transport Costs Re-think Your WAN

Say Demand for WAN

Bandwidth Will Increase**

Organizations Have Flat WAN Budgets*

WAN Spending Trends

Nemertes Research Benchmark Report: Emerging WAN Trends: The Internet Arises*Information Week Reports: 2014 Next Gen WAN Survey**


Empower IT to Conquer the WAN

What if an Intelligent WAN Can…

1X 2X+

Increase WAN Utilization

Deliver More Bandwidth for Lower Cost

Hours Minutes

Pinpoint App Issues Instantly

Improve YourApp SLA

Backhaul Off-load

Security at Scale

Ensure Security Over Any Connection


PrivateCloud

Intelligent WAN: Leveraging the InternetHybrid WAN

Transport

Branch

VirtualPrivateCloud

PublicCloud

MPLS

InternetDirect Internet

Access

$$$

Internet backhaul

Leverage local Internet path for public cloud and Internet access

Secure WAN transport across MPLS and/or Internet for private cloud / DC access

Increase WAN Capacity Improve App Performance Scale Security at the Branch

$Cisco Cloud Web Security


Building Highly Available WANs with Cisco IWANRedundancy and Path Availability Matter

Single RouterDual Paths

Downtime per Year

24 Minutes

99.998%0:24 / yr

MPLS or Internet

MPLS or Internet

ISR-AX

Single RouterSingle Path

Downtime per Year

4 Hours23 Minutes

Downtime per Year

8 Hours46 Minutes

ISR -AX

Internet

99.90%8:46 / yr *

ISR -AX

MPLS

99.95%4:23 / yr *

Dual RoutersDual Paths

Downtime per Year

5 Minutes

99.999%0:05 / yr

MPLS or Internet

MPLS or Internet

ISR-AX

* Typical MPLS and Business Grade Broadband Availability SLAs and Downtime per Year


What Can Cisco Intelligent WAN Enable?

Innovate and Transform Your Business

• Enable next generation apps• Improve customer engagement• Increase productivity• Higher sales transactions

Grow Revenues

• Meet growing user expectations• Faster app performance• Instant access to content• Seamless experience

Improve Customer Experiences

• Lower WAN costs• Fully utilize network• Offload traffic• Lower downtime

Reduce Costs and Improve Efficiency


40% Reduction in WAN Costs 2-4X Increase in

BW Utilization

Case Studies: Lower Costs Without Compromise

Mid-Size Insurance Company

CHALLENGE SOLUTION RESULT

• Driver: Reduce costs

• 14,000 bank branches worldwide

• MPLS dual broadband

• ISR 2901 and ASR1004

• PfR and IPSEC

• 40% Reduction in WAN costs

• Completed 200 UK branches

• Next 300 Germany branch

• Followed by Global rollout


• WAN expansion with growing costs

• Addressing MPLS upstream issues

• Real-time apps (voice) quality

• Cisco ISR G2 with PfR, WAAS

• Enable Active-Active MPLS + Internet

• Doubled bandwidth utilization (4X with WAAS) at no additional costs

• Dynamic network response; less manual config

Large European Bank


38 6S E C O N D S

Reduce MobileApp Response 100% WAN Off-load

After Initial User

Case Study: Business Innovation

Large US School DistrictLuxury Global Retailer


• Re-energize customer in-store experience

• Improve mobile application performance

• Cisco ISR-AX with HCO featuring Akamai

• Pilots in Hong Kong, Paris, NYC experience faster app response

• Sales Apps from 36 6 sec

• Catalogs available instantly


• Support iPad apps for all students

• HD Video curriculum

• Limited bandwidth in classrooms

• Cisco ISR-AX with AVC, WAAS

• Cisco HCO with Akamai

• Moving forward to provide 750K iPads to students

• Able to deliver online rich media content with minimal WAN impact—100% offload after initial user


Cisco Intelligent WANSolution Components

TransportIndependent

Secure Connectivity

Application Optimization

Intelligent Path Control

Provider FlexibilityModular Design

Common Operational Model

Load BalancingPolicy-Based Path Selection

Network Availability

Scalable, Strong EncryptionApp-Aware Threat Defense

Cloud Web Security

Application VisibilityApp Acceleration

Intelligent Caching

Secure, Reliable and High Performance Application Experience on Any Device, over Any Connection, to Any Cloud


Cisco AX Routers ISR-4451-AX | 3900-AX | 2900-AX | 1900-AX | 800-AX | ASR1000-AX

L2-L3Transport

L4-L7Application

Services

Start with Cisco AX RoutersIWAN Capabilities Embedded in the Router

ISR-AX

Simplify Application Delivery

One NetworkUNIFIED SERVICES

ASR1000-AX


IWAN Solution Components


Transport-Independent Design Simplifying and Scaling Hybrid WANs


Transport IndependentComprehensive WAN transport support with secure, full mesh connectivity

Simplifies WANDesign

Dynamic Full-Meshed Connectivity

Proven RobustSecurity

• Easy multi-homing over any carrier service offering

• Single routing control plane with minimal peering to the provider

• Consistent design over all transports

• Automatic site-to-site IPsec tunnels

• Zero-touch hub configuration fornew spokes

• Certified crypto and firewall for compliance

• Scalable design with high-performance cryptography in hardware

ISR-G2

WAN

Internet

MPLSASR 1000

ASR 1000

Data CenterBranch

FLEXIBLE SECURETRANSPORT-INDEPENDENT


Intelligent Path ControlImproving Application Delivery and WAN Efficiency


Intelligent Path ControlMaximize WAN Utilization with High Reliability

Lower WAN Costs

SOLUTION

• Set Policy Actions– Based on app traffic classes

– Re-route based on criteria (app SLA, link status)

• Extends Classical Routing– Adaptive to Real-time

Conditions

– Delay, Jitter, BW metrics

• 2X WAN Utilization

PROBLEM

• Enforce App SLA

• Business continuity for critical/real-time apps

• Poor bandwidth utilization

Path A

Path B Data Centers

Full BandwidthUtilization

Improved App Performance

App Priority Path Loss Jitter Delay

Voice/Video Path A x x x

Business Critical

Path B x x

Remaining Load balance


SP1 (MPLS) ISP (Internet)

• Protect voice and video quality

Latency less than 150 ms; Jitter less than 20 ms

• Protect VDI applications from brownouts

Loss less than 5%

• Voice and video preferred

path SP-A• VDI preferred path SP-B• Increase utilization

by load sharing

Multimedia and Critical Data Policy

Cloud Services

Hybrid IWAN

Best-Effort Traffic

Detect Loss Greater Than 10%

ISP-1 (Cable) ISP-2 (DSL)

Voice and Video

Dual Internet WANDetect

High Jitter

VDI

Best-Effort Traffic

What PfR DoesProtecting Critical Applications While Increasing Bandwidth Utilization

• Protect business cloud applications from brownouts

Loss less than 5%

• Preferred path for criticalapplications: SP1 (MPLS)

• Increase WAN bandwidth efficiency by load-sharing traffic over all WAN paths, MPLS + Internet

Cloud Services and Load-Balancing Policy


PfR Enhances Classical Routing

CLASSICAL PfR

PATH CONTROL

METRICS

ADAPTIVE

• Topological state• Least cost path• Static user preference

• Path cost• Interface state

• Application-aware • Policy controlled• Measured performance

• Delay• Jitter• Bandwidth

RESPONDS TO:Measured performance changes (degradation)

RESPONDS TO: Link and node state changes (up/down)

+


Optimize Application Performance


SOLUTION

• Probe-less Deployment– Integrated on the router

– Visibility between LAN and WAN

• Visibility to 1000+ apps– Gain L7 visibility into the network; see

inside HTTP flows

– NetFlow, IPFIX export + partner tools

• Rapid root cause analysis– Hop by hop media trace

– Determine app, network or carrier

PROBLEM

• Limited visibility to web apps

• Unable to prioritize and adequately plan for capacity

• Difficultly resolving cause of application degradation

Application Optimization: Start with VisibilityEnhancing User Experience and WAN Efficiency

Validate App SLA

Smart Capacity Planning

Pinpoint App Issues in Minutes

?


Make Your Network App Aware with IWANCisco Application Visibility and Control

Pervasive App Visibility Business Policy-based Rules Comprehensive Reporting• No additional hardware • Rich data collection using

NetFlow v9/IPFIX• Easy to integrate into many

reporting tools

• No need for complex IP and port ACLs

• See inside HTTP flows to identify specific Cloud applications

• Better use of costly bandwidth• Per-branch and per-application

level reporting

VISIBILITY TO 1000+ APPS SMART CAPACITY PLANNINGNO PROBES

PrivateCloud

Branch DC/Headquarters

WANNetFlow v9

Enterprise Edge

AVC

AVC

CSR

Proliferationof Devices

Users/Machines

60% of IT Professionals Cite Performance as Key Challenge for Cloud

ISR

ASR

AVC

AVC


SOLUTION

• Reduce load– Data redundancy

elimination (DRE), compression, and TCP optimization

• Application optimization– Fewer protocol messages

and metadata caching

PROBLEM

• Application latency

• WAN bandwidth inefficiencies

Application bandwidth with Cisco® WAAS

Application bandwidth natively

Application latency natively

Application latency with Cisco WAAS

0 0

1

2

3

4

40

80

120

160

ApplicationBandwidth

ApplicationLatency

Bandwidth(Mbps)

Latency(Seconds)

Reduction inbandwidth

Reductionin latency

App Optimization: Reduce Bandwidth and LatencyEnhancing User Experience and WAN Efficiency


EMAIL 5 MB Attachment CIFS 5 MB File

WAAS Delivers User Experience at Scale

Send and receive email over native WAN First optimized with WAAS Second pass optimized with WAAS

100 20 30 40 50 60 70 80 90 100 110 120 130 140 150

Time in Seconds

T1 (1.54Mbps)

80 ms Latency

MS SHAREPOINT 5 MB Document VDI (CITRIX)

24x FASTER

17x FASTER

30x FASTER

3 – 8x FASTER

100 20 30 40 50 60 70 80 90 100 110 120 130 140 150

Time in Seconds

File drag and drop over native WAN First optimized with WAAS Second pass optimized with WAAS

SharePoint file download over native WAN First optimized with WAAS Second pass optimized with WAAS

20 4 6 8 10 12 14 16 18 20 22 24 26 28 30

Time in Seconds

Launch Citrix XenDesktop over native Citrix ICA/SSL Launch Citrix XenDesktop with WAAS Site navigation over native Citrix ICA/SSL Site navigation with WAAS

20 4 6 8 10 12 14 16 18 20 22 24 26 28 30

Time in Seconds


Digitization of the Enterprise Impact the Network

Retail Retail BankingEducation Enterprise

• Extend learning beyond classroom walls

• Deliver HD content to tablets for students

• Real-time online education system

• Increase shopper dwell time with guest wi-fi

• Seamless online and in-store experience (omni channel)

• Online concierge

• Product catalogs

• Web Point-of-Sale

• Accelerate business apps from all clouds

• On-demand video sales or new hire training

• Direct Internet access for faster app performance

• Guest wifi

• Digital signage

• HD video

• Virtual offices


Akamai Intelligent Platform

Extending Akamai to the Branch with Akamai ConnectAkamai Intelligent Caching Inside Cisco ISR-AX

COMPLETING THE LAST MILE

Branch

ISR-AX

AKAMAI INSIDE

AKAMAICACHE

Optimal Experience Regardless of Device, Connectivity or CloudAll HTTP Traffic in Private, Public, Akamai Cloud

Prepositioning | Dynamic HTTP Caching (YouTube) | Any Transport

Data CenterWAN/MLPS


Building On Cisco WAAS SolutionAkamai Caching Enhances the User Experience

Cisco Intelligent WAN with Akamai Connect

World’s Best Optimization Solution for HTTP Traffic

AKAMAI WEB ACCELERATIONIntranet HTTP

CachingDynamic OTT HTTP Caching

Akamai Connected Cache

Content Pre-positioning

CISCO WAASLZ

CompressionTCP

OptimizationData

De-duplicationApplication Specific

Acceleration


Securing Your IWAN


Web Filtering, Adv. Malware Detection &

Threat Analystics

PrivateCloud

BranchPublicCloud

WAN1(IP-VPN)

WAN2(Internet)

Internet

Cisco Cloud Web

Security CWS

IWAN Tunnels for HQ/DC Traffic

Secure Public Cloud and Internet Access

CWS Encapsulated HTTP, HTTPS

ISR Cloud Connector to CWS datacenters

Secure ConnectivitySecure Transport for Backhaul, Plus Threat Defense for Direct Internet Access

• Scalable security via DMVPN enforced locally

• Firewall/IPS support to protect for external threats

SECURE BRANCH EDGE

• Secure local Internet breakout with encapsulated traffic

• Improved application performance at lower costs

OFF-LOAD CORPORATE WAN

• Real-time web filtering with Application Visibility & Control

• Advanced Malware Protection and Threat Analystics

CLOUD WEB SECURITY


Roaming Users Headquarters Branch Office

Cisco Cloud Web Security (CWS)Advanced Threat Protection for Intelligent WAN (Direct Internet Access)

Web

Filt

erin

g

Web

Rep

utat

ion

Mal

war

e S

igna

ture

File

Rep

utat

ion

File

Beh

avio

r

File

Ret

rosp

ectio

n

Thr

eat A

naly

tics

Application Visibility and Control

CLOUD WEB SECURITY


Web Filtering

Reputation Filtering

Acceptable Use Policy

Signature-based AV

Heuristic Analysis

File Reputation

File Retrospection

Threat Analytics

Continuous Protection Across the Attack ContinuumCloud Web Security (CWS) for Dedicated Internet Access

BEFOREDiscoverEnforce Harden

AFTERScope

ContainRemediate

Attack Continuum

Detect Block Defend

DURING

Actionable Reporting

File BehaviorApplication Visibility Control


Simplified Branch Deployments


Network DevicesCatalyst, ASR, ISR

Cisco Intelligent WAN Is SDN Provisioning ReadyCisco APIC—Enterprise Module Architecture

Abstracts Network Devices to Mask Complexity

Treat Network as a System

Exposes Network Intelligence

For Business InnovationCisco APIC—Enterprise Module

Cisco and Third Party Applications

Network Info Database

PolicyInfrastructure

Automation

REST API

CLI, OpenFlow, onePK API

Security QoS Mobility


Template, On-demand

1000s of devices across domains

Dynamic Set-Up, Tear Down, Provisioning, Monitoring

On-Demand Workload

Movement withService Profiles

Simplification

ScaleNetworkAutomation

Orchestration

Cisco APIC Enterprise Module Enabling the Intelligent WAN

ELIMINATE IT COMPLEXITY

Full Access to Resource Pools

Anywhere

Simple

Automated

Scale Secure

SIMPLER OPERATIONS, FASTER SERVICE DELIVERY


Cisco IWAN Management

• Lifecycle: Simplified deployment and configuration

• Configuration: Plug and Play deployment automation

• Health Assurance: Improved application delivery

• Compliance: Regulatory requirements and best practices

• Speed: Eliminates manual building of WANs

• Agility: Quick configuration updates and IOS upgrades

• Dynamic: Compatible with onePK for app aware WANs

• Reduced OpEx: Automated WAN orchestration

• Cost Savings: Centralized hybrid WAN management

• Integrates with Cisco App Visibility and Control

• Monitor and analyze app-level traffic

• Visualization real-time traffic, end-to-end

• Troubleshoots hop-by-hop to pinpoint source

• QoS monitoring and configuration

Cloud-Based Management Specialized ManagementOn-Prem Management

Cisco Prime

Automates Deployment and Lifecycle Management

Application Aware Network Performance Management

Enterprise and IntegratorLifecycle Management


Why Cisco IWAN?


Why Cisco for Your Intelligent WAN?Application Performance with IT Simplicity at Lower Costs

One Platform for Simplicity

Pervasive Services

Security at Scale

Context-Based Routing

Quick ROI

Integrated Platform

Up to 72% in Savings

vs. stack of overlay

appliances

• Proven security across thousands of sites

• Protect all branch resources

• Secure direct internet access

• Network-aware

• App-aware

• Endpoint-aware

Many pay off in

6-12 Months

$$$

• Branch ISR-AX

• DC ASR1K-AX

• Cloud CSR1000V


Cisco Intelligent WAN (IWAN)Uncompromised Experience Over Any Connection

Calculate Your Estimated Savings

View Demonstration of Capabilities

Accelerate Deployment with Services

Get More From Your WAN Investment Today


Thank you.


Quick Payoff for Infrastructure InvestmentCan Shift Spend from Connectivity to Enabling New Services

EXAMPLE:

San Francisco MPLS VPN vs. Dual Business Internet ($ per month)

Source: Telegeography MPLS VPN pricing for San Francisco as of March 2013; Comcast Web site; Verizon Web siteAssumes average Router upgrade is $3000; installation is $1000 and Support is $300CoS2 refers to VPN services providing real-time data and middle priority

$665 Savings/month x 12 months x 100 sites

80

274.000000000031

140

611.00000000007

1.5 Mbps 10 Mbps

$220

MPLS VPN CoS2 $885

Direct Internet Access

Combined for Ent SLA

-75%

$800K Annual Savings

186% ROI

Payoff in 6 Months


What Can IWAN Enable?

High BW Apps OpEx SavingsWiFi SaaS Rollout

BUSINESS CHALLENGES

HOW IWAN HELPs

• Bandwidth Costs• App Quality

• High WAN recurring charges

• Inflexible SLAs

• Leverage low-cost Internet links

• Flexibility for new services

• No tradeoffs

• Transport Choice• App Awareness

and Prioritization• Intelligent WAN

Path Selection

• Increase Traffic• Security

and Policy

• App Latency• Backhaul to DC

• DIA: low latency• Faster Roll Out• Visibility

and control

• App Visualization and Prioritization

• Threat Defense• DIA: no backhaul

Apps

365 $$$


Cisco IWAN Deployment ModelsThe Router Upgrade that Pays for Itself

Dual MPLS Hybrid Dual Internet

Highest Service Level (SLA) – Least flexible for new servicesẋ Expensive, high latency for Cloud

Enable SaaS and/or high BW apps Balanced SLA guarantees– Moderately priced

Best price/performance Least dependent on contracts– Enterprise responsible for SLAs

Public Public Enterprise

DCDCDC

Internet

MPLS MPLS MPLS Internet Internet Internet

Consistent VPN Overlay Enables Security Across Transition


Enterprise Routing Product PortfolioCloud-Ready Routing and WAN Optimization Platforms

WAAS (WAVE 294, 594, 694)

WAVEWAAS on SREWAAS Express

ISR G2 (800, 1900, 2900, 3900)

ASR 1000 (1001, 1002, 1004, 1006, 1013)

ASR 1000 (with OTV, LISP, etc.)WAAS (WAVE 7541, 7571, 8541), vWAAS

UCS E Series

Branch/Remote Sites

DC/Cloud

WAN Aggregation/HQ

CSR


IWAN 1.0 Management Tool Matrix

SIMPLIFIED DEPLOYMENT

TRANSPORT INDEPENDENT DESIGN

INTELLIGENT PATH CONTROL

APPLICATION OPTIMIZATION

SECURE INTERNET CONNECTIVITY

NETWORK HEALTH AND STATUS

Cisco Prime

Prime Infrastructure


WAAS Central Manager



(AVC)


CWS Features and Benefits

Real-time Malware Scanning Layered, multiple engines integrated into CWS

Application Visibility and Control 1000+ Applications; 150,000+ micro-applications

Advanced Malware Protection (AMP) Protects against malware through file reputation, sandboxing and retrospection

Cognitive Threat Analytics (CTA) Identifies threats through behavior analysis, anomaly detection and machine learning

Security Intelligence Operations (SIO) Powered by 100 TB of daily threat telemetry; Updated every ~3-5 minutes

Policy Management and Actionable Reporting (WIRe)

Easily implement policies, control application use, Comprehensive reports hosted in the cloud

URL Filtering Granular Categories and Dynamic Classification of Internet web sites

Web Reputation Only vendor to examine IP, Domain, URL, and sender reputations

NEW

NEW

Cisco Intelligent WAN

Devices & Hardware

Transcript of Cisco Intelligent WAN