Prepare for Digital

Network Architecture,
NFV, and SDN with
Cisco ONE Software
Dan Lohmeyer, Vice President, Product Management
Vikram Rao, Senior Director, Product Management
Kishan Ramaswamy, Product Manager
PSODGT-1075

PSODGT-1075
Cisco Spark
Questions?
Use Cisco Spark to chat with the
speaker after the session

How
1. Find this session in the Cisco Live Mobile App
2. Click “Join the Discussion”
3. Install Spark or go directly to the space
4. Enter messages/questions in the space

Cisco Spark spaces will be cs.co/ciscolivebot#PSODGT-1075

available until July 3, 2017.

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 3
Agenda

• Digital Network Architecture

• Intelligent WAN
• Enterprise NFV
• Cisco ONE Software
Digital Network Architecture
Digital Disruption Complexity Security

1 Million Devices $60B Spent of Attack Surface

Online Every Hour Network Operations
Threat Actors
Mobile, IoT, Cloud, AI/ML 95% Manual Operations
Attack Sophistication
Explosion of Data, Customer Experience in a
Lack of Insights Multi-cloud Environment

Network Challenges
Relevant Insights Slow and Dynamic Threat
at Scale Error Prone Landscape
PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 6
Network Requirements for the Digital Organization

Insights & Automation Security &

Experiences & Assurance Compliance
Drive Business Speed, Simplicity Real-time and Dynamic
Innovations & Visibility Threat Defense

The Network Enables Digital Business

© 2017 Cisco and/or its affiliates. All rights reserved. PSODGT-1075
Cisco Public 7
Digital Network Architecture – What’s New
DNA Software Capabilities

DNA CenterCloud Service Management

Automation Analytics

SD-AccessVirtualization
& Assurance
DNA-Ready Physical and Virtual Infrastructure
Catalyst 9K

Encrypted Traffic
Security Analytics

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 8
 DNA Enables New Capabilities

Workforce Experience Customer Experience Branch Agility Security

• Digital Workforce • Omnichannel Experience • Automation • Faster threat detection

• Personalized Workspaces • Enhanced Points of Service • Rollout services faster • Continuous compliance
• Effective Collaboration • Personalized Customer • Application performance
Experiences • Lower OpEx

Built on the Network as a Platform

© 2017 Cisco and/or its affiliates. All rights reserved.
PSODGT-1075
Cisco Public 9
Intelligent WAN
Enterprise WAN - What’s going on?

50% $ Lower costs

of Applications are
accessed via Internet

Simplifying management

70% 32.4%
Have either 2 or 3 WAN Cite management of
connections/branch connectivity at branch as a
challenge Consistent user
experience

48.6% Deliver services from the

Cite poor application
performance and latency as cloud
corporate WAN concern

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 11
What is Intelligent WAN (IWAN)?
Uncompromised experience over multiple transport options

Hybrid WAN
Transport
MPLS
Private
Cloud
Virtual
Internet Private Cloud
Branch Backhaul
Internet
Direct Cisco
Internet Cloud
Web Security Public
Access Cloud

 Secure WAN Transport Across  Leverage Local Internet Path For

MPLS/Internet For Private Cloud/DC Access Public Cloud And Internet Access

Increase WAN Improve App Scale Security at the

Lower Cost
Capacity Performance Branch
PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 12
PSODGT-1075
Cisco Intelligent WAN
Building Blocks of Application-centric SD-WAN

Identify Prioritize Accelerate

See 1000+ apps running on Automate app priority based on Boost app performance
your network business policies

Securely on any connection or platform for all users

Automation to simplify & accelerate the deployment of IWAN

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 13
Identify: Make Your Network Application-Aware
Ubiquitous Visibility Across Entire Network

Intelligence & Insights

Detect/Categorize 1000+
applications automatically No probes, Any user, Facilitates
additional HW device, wired or trouble-
wireless shooting

“ Cisco AVC also makes it easy to see if slow application

performance is a result of client network delay or server
network delay
”
“ IT staff gain a 360-degree view of all devices, users, and
applications from a single location ”

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 14
Prioritize: Increase Application Availability
Intelligent path control based on priority

Set app Use Internet Route apps

rankings as your based on
and policies 2nd WAN policies

Active-Standby Active-Active

“I want my critical data and voice traffic moving over MPLS,

% % because I have a service-level agreement with my MPLS
85 46 provider and I can hold him accountable if there’s an outage or
slowdown. PfR does that for me, while sending lower-priority
Of branches have 2
or more connections
Of organizations are
planning to
traffic like web surfing to DMVPN. ”
transition to Internet
connections
PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 15
Accelerate: Enhance the Application Experience
Reduce latency & bandwidth congestion

Enable Business Initiatives

Optimize WAN bandwidth for better ROI
Mobile Apps Digital Signage

Guest WiFi Catalogs Accelerate applications over any connection

Video Conferencing On-demand Training

Store content locally for instant access

Bandwidth Latency
(Mbps) (ms)

4 160
Example: Louis Vuitton
Reduced
3 120 Bandwidth

Faster App Greater

2 80 Reduced
Latency
Bandwidth natively
Bandwidth with IWAN
%
80 Response 3x Dwell
1 40
App latency natively Time Time
0 0 App latency with IWAN
App Bandwidth App Latency

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 16
Secure Your Applications and Data
Protect Your Branch and WAN

Secure Intelligent WAN Respond faster to threats and vulnerabilities

Government and regulatory Integrated, all-in-one security platform

compliance
Scalability without compromising performance
Flexible, secure WAN design
over any connection

Comprehensive Threat
Defense
“Having the entire security suite at our fingertips has
given us agility to enhance our toolbox on the fly. It’s
Secure Direct Internet Access been easy to manage, and we don’t need to worry
about whether to add security elements when we
order routers or firewalls; they just come included. ”

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 17
Automation with IWAN App on APIC-EM
Highly intuitive, policy-based interface that abstracts network complexity

Optimal Branch Experience

Made Easy
Simple Workflows

Zero-Touch Set Application Gain Visibility Point and Click

Rollout Policy and Tune Troubleshoot

“ IWAN automation eliminates tedious

configuration tasks for advanced networking
Faster features. I can configure IWAN with just 10
85% deployments
GUI clicks. ”

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 18
Cisco & Partner Services for IWAN

IWAN Advise and Solution Support for Network Managed Networks

Implement Services Cisco IWAN Optimization Service for IWAN

Planning, design and Centralized support across Advice, implementation support End-to-end management to
validation for IWAN network all products in your Cisco and management support for improve network availability
and Next Generation branch IWAN deployment optimal network performance and application performance

Design Expertise Primary Point of Operational Single Point of

Contact Efficiency Accountability

Validated Deep Solution Improved Increased Operational

Solution Expertise Compliance Efficiencies

Accelerated Coordinates Between High Availability & Lowered Operational

Adoption Key Vendors Performance Expenditures

Reduced Risk Manages Case Reduced Risk Reduced Deployment

to Resolution Times

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 19
Challenges
• Long lines for ordering (upto 8 minutes)
• Customer disliked waiting in “mosh pit” for
food
• 10% of orders were wrong

Cisco Solution
• Cisco UCS-E virtual compute blade in
router to run Kiosk application
• Location services and heat maps based on
Cisco CMX to locate customers and
provide analytics
• Cisco IWAN to ensure a uncompromised
experience for security, reliability &
performance
Business Outcomes
• Online orders are 25% of sales.
• Time spent in line is down to 1 minute
• Sales increased 5.7% in stores with Store of the future
technology deployed
• Increase order accuracy by 72%
Increase Customer Satisfaction
PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
PSODGT-1075 20
Enterprise NFV
The First NFV Solution for the Enterprise
Cisco Enterprise NFV

Simplify day to day operations

Simple and easy
to design, provision,
manage the trusted
Quickly roll out new services and locations
services that are critical
to your business
Gives you flexible deployment options

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 22
What is Enterprise NFV?
Customizable and Prescriptive Automation
Orchestration and Management

Consistent, trusted network services across all the platforms

Virtual Network Functions (VNFs)

Add Software Intelligence to the Hardware

Virtualization Layer

Freedom of Choice
Hardware Platform

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 23
Introducing: Cisco Enterprise NFV
Network services in minutes, on any platform

Enterprise Service Automation / Network Service Orchestrator

Virtual WAN Virtual Wireless

Virtual Router Virtual Firewall
Optimization LAN Controller 3rd Party VNFs
(ISRv) (ASAv)
(vWAAS) (vWLC)

Network Functions Virtualization Infrastructure Software (NFVIS)

ISR 4000 +
UCS E-Series UCS C-Series Enterprise Network
Compute System

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 24
Platform Built for Enterprise NFV
ENCS 5400 Series for the Branch

Best of Routing Complete Open for Third Party

& Compute Virtualized Services Services and Apps

Enterprise Network Compute System

NEW

CIMC – Lights-out Integrated 6,8, or 12-core Network Interface Module

management LAN ports Intel Xeon-D for LTE & Legacy WAN

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 25
Customized Network Services for Your Network

1 Select your 2 Select your preferred 3 Orchestrate and

network functions platform automate services

 vRouter  Cisco® ISR, UCS® E-Series APIC-EM with

Enterprise
 vFirewall  Cisco ENCS Service
 Cisco® UCS C-Series Automation
 vWAN optimization

 vWLAN controller
IT Agility  Third-party services

Elastic Services Run on Any Platform Deploy in Minutes

© 2017 Cisco and/or its affiliates. All rights reserved.
PSODGT-1075
Cisco Public 26
Best-of-breed Trusted Services from Cisco
Consistent software across physical and virtual
NEW NEW NEW
ISRv NGFWv 3rd Party VNFs

High Performance Harden virtual services VNF Program

Rich Features Enable Secure Access Tested and Certified
End-to-end Support On-premise or Streamlined support
cloud management from Cisco & 3rd party

vWAAS vWLC ASAv Applications

ISR WAAS: Leader Survivability & Scale Comprehensive Protection Microsoft Windows
in Gartner MQ Built for small and Full DC-class Custom applications
Superior Caching medium branches Featured Functionality
with Akamai Connect Designed for NFV

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 27
 Freedom of Choice
Cisco Intelligent Branch

Traditional Enterprise NFV

Physical Router Physical Router Virtual Router Virtual Router

Virtual Services Virtual Services Virtual Services

4000 Series ISR + Enterprise Network

Cisco® 4000 Series ISR UCS® E-Series Compute System (ENCS) UCS C-Series

Centralized services Upgradable hardware Elastic routing and services

Elastic routing and services
Fixed integrated services Deterministic routing Performance
Router / Server Hybrid
Conservative performance Early adopter

Cisco ONE™ Access to Ongoing License Investment

Innovation Portability Protection
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 28
Air Transportation Services
Customer Scenario 1
Transforming the Travel Experience
Challenge
• Increasing real estate cost at airports to
service airlines
• Rising maintenance cost from multiple
hardware platforms

Solution
• Consolidate services onto one platform
• Services: Firewall, WAN Optimization,
Security, Routing, Windows Server and Apps

Benefits
• Save on real estate and maintenance costs
by reducing the number of devices to serve
the airlines and their customers
• Ability to deliver services in an
easier and faster way with software-based
services, orchestration, and management
• Consistency of Cisco® APIC-EM apps,
including the Cisco IWAN App and ESA

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 29
Oil & Gas
Customer Scenario 2
Operational Efficiency
Challenge
• Lower cost in IT operations and
infrastructure, especially for remote locations
• Slow and expensive service rollout that
requires service calls

Solution
• One standard platform for all locations
• Services: Routing, Firewall, Wireless LAN
Controller, WAN Optimization

Benefits
• Lower cost by utilizing x86 servers with
Cisco® NFVIS
• Keep current operational standards with
best-of-breed services
• Agile service deployment and monitoring
with Cisco ESA

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 30
Cisco & Partner Services for Enterprise NFV
Enterprise NFV Advise and Solution Support Managed Services
Implement Service for Enterprise NFV for Enterprise Networks

Migration plan to assess E-NFV

Centralized support across all products Managed service for multi-technology
readiness and validate the solution
in an E-NFV solution deployment and multi-vendor environments
works with existing network

Customized Design Primary Point of Contact Single Point of Accountability

Validated Solution Deep Solution Expertise Increased Operational

Efficiencies

Accelerated Adoption Coordinates Between Lowered Operational

Key Vendors Expenditures

Reduced Risk Manages Case Reduced Deployment

to Resolution Times

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 31
Cisco ONE Software
What is Cisco ONE Software?

Simple Set Access to License

of Solutions Innovation Flexibility

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 33
Secure WAN
Traditional Model Cisco ONE Software

Necessary Features: Foundation for WAN

1 SEC (VPN, Firewall)

2 WAAS (Wide Area App Services)

3 AVC (Application Visibility)

4 PfR (Performance Routing)

5 Umbrella Branch (Open DNS)

6 Akamai Connect
+ License Portability and Ongoing Innovation
7 Prime + IWAN App for APIC-EM

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 34
 Approx.
Secure WAN Value Comparison 110%
ISR 4331 Traditional vs DNA Offer more value with
Cisco ONE

TRADITIONAL SECURE WAN OFFER

ISR4331/K9 Cisco ISR 4331 1 $3,300 C1-CISCO4331/K9 Cisco ONE ISR 4331 1 $3,300

Total $3,300 C1F1PISR4330SK9 Cisco ONE Foundation Perpetual License ISR 4331 1 $2,000
Total $5,300
Security License for Cisco ISR 4330 Series 1 $1,500
Security License for Cisco ISR 4330 Series 1 Included
HARDWARE & SOFTWARE

App License for Cisco ISR 4330 Series 1 $1,000

App License for Cisco ISR 4330 Series 1 Included
APIC EM IWAN App & Prime Infrastructure 1 $105
APIC EM IWAN App & Prime Infrastructure 1 Included
Energy Mgmt 1 $1,000
Energy Mgmt 1 Included
8GB DRAM Upgrade 1 $1,500
8GB DRAM Upgrade 1 Included
8GB Flash Upgrade 1 $1,000 8GB Flash Upgrade 1 Included

NEW
Akamai Connect 1 $1,800 Akamai Connect 1 Included
OpenDNS 1-year Subscription 1 $460 OpenDNS 1-Year Subscription 1 Included
WAAS Central Manager (1 Node, Max 2000 Nodes) 1 $50 WAAS Central Manager 1 node 1 included

Total $8,415 Total Included

SUPPORT

CON-SSSNT-ISR4331K SOLN SUPP 8X5XNBD Cisco ISR 4331 3 $568 CON-SNT-C14331K9 SMARTNET 8X5XNBD C1 ISR 4331 3 $535

SWSS on Software Products Above 3 $751 CON-ECMU-C1F4330S SWSS UPGRADES C1 Foundation Perpetual 3 $426
Total $1,319 Total $961

TOTAL $13,034 Hardware, Software, and Support $6,261

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 35
Cisco ONE Software Use Cases

Data Center
Cloud and Compute Networking
WAN Access Switching Access Wireless

Threat Threat Defense Policy & Threat Defense

Defense for for WAN & Edge for Network Access
Infra & App Analytics
Data Center
Big Data Automation
Scaled & Customized
Converged Next
Service Management Resilient Wireless
Data Center Generation
Connectivity Experience
Network Branch
Cloud Management
Connected Business-
Data Center Intelligent
Organization Class
Infrastructure Automation Network WAN
Wireless
Automation Access

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 36
Momentum
New software included since launch

• Lancope Stealthwatch
• Nexus Fabric Manager • Lots more to come!
• ACI Fabric • Open DNS • WAN Performance
• UCS Performance Manager • Tetration • Tetration Cloud
• IWAN APIC-EM App • Enterprise NFV • Tetration Telemetry
• 40G Storage License • CliQr CloudCenter • CMX Cloud
• Intelligent Traffic Director • Akamai Connect • Enterprise Service Automation
• Data Broker • WAAS Central Manager • NFVIS

2015 2016 2017

Broad array of platforms & devices

• Catalyst 2k, 3k, 4k, 6k • UCS, x86 18,000+
• Wireless Controller, AP • ASA, FirePOWER customers
• ISR, ENCS, ASR 1k, 9k • IoT IE 4k, 5k
• Nexus 3k, 5k, 6k, 7k, 9k • Tetration Appliance
• MDS 9k
95% of Fortune
100 Companies

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 37
 Complete Your Online
Session Evaluation
• Give us your feedback to be
entered into a Daily Survey
Drawing. A daily winner will
receive a $750 gift card.
• Complete your session surveys
through the Cisco Live mobile
app or on www.CiscoLive.com/us.

Don’t forget: Cisco Live sessions will be

available for viewing on demand after the
event at www.CiscoLive.com/Online.

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Continue Your Education
Attend these PSO sessions:
Date/Time Title Session ID

Tuesday, June 27, Enterprise Agreement for Wireless, Switching, WAN, UC, Contact Center, Email/Web PSODGT-1076
9:30 am Security, Stealthwatch and more..
Wednesday, June Secure Data Center, WAN with FirePower services (AMP, IPS,URL), and Access with ISE PSODGT-1077
28, 8:00 am and AnyConnect from multi vector attacks through Cisco ONE Software
Wednesday, Jun Make your network digital ready with Software Defined Access, Assurance and Encrypted PSORST-1331
28, 8:00 a.m Traffic Analytics delivered through Cisco ONE Software

1. Learn more: www.cisco.com/go/one

2. Ask your account team or partner about Cisco ONE Software
3. Visit us at the World of Solutions
4. Make an appointment to meet us at the Whisper Suites for a deeper discussion

PSODGT-1075 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 39
Thank you