[PDF] Redesign your workforce and workplace

View - Download Redesign your workforce and workplace

Previous PDF

Next PDF

Martin Rulec mrulec@cisco.com

GVE Technical Solutions Architect

2021 February

Layered Security For Remote Users

Cisco Secure Remote Workforce

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public2

Change is constantly redefining how we work

ACCELERATIONDISRUPTION

OPPORTUNITY

RISK © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public3

Recent events caused a tectonic shift

Sources: PwC US CFO Pulse Survey, June 2020; Scott Galloway; MacAfee Report; Cisco; Zoom; Press Search; BCI Horizon Scan Report 2020; OmdiaCOVID-19 Industrial Impact Survey 2020; Cisco Analysis

TECHNOLOGYBUSINESS

CULTURE

of CFOs will make remote work a permanent option for relevant roles54% of CFOs expect greater resilience and agility to be by-products of the pandemic experience 72%
of CFOs say the technology investments they make during this time will position them better for the long-term 56%

600%increase in cyberattacks with work from home

30-50%growth in cloud services

69%
report supply chains somewhat to significantly impacted

81%of organizations agree safety measures

are a top focus when transitioning back to the workplace

Source: Gartner, May 2020

43%report a negative impact on staff morale and

well-being over the last 12 months © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public4

Where the future is ever-changing?

Yesterday

REMOTE

WORKFORCE

OFFICE

WORKPLACE

Today

REMOTE

WORKFORCE

OFFICE

WORKPLACE

Tomorrow?

REMOTE

WORKFORCE

OFFICE

WORKPLACE

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public5

WorkplaceWorkforce

Redesign the workforce and workplace

Cisco

Trusted

Promote worker safety and

wellness

Expand operational consistency

across environments

Evolve to a secure and seamless

distributed work model Cisco

Secure Remote

Empower workers to be productive

anywhere

Optimize each worker experience

for performance, cost, and security

Extend enterprise-class operations

to the home

Cisco Business Resiliency Solutions

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public7

Data Center / Private Cloud

Corp Workloads and

Cisco UC

applications

Remote workershaving different requirements

Remote worker is secure as they collaborate and access applications

ESSENTIAL

Non VPNremote worker

ADVANCED

VPN remote worker

PREMIUM

HW Optimized remote worker

SaaS

Internet

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public8

Remote Worker

SaaS

Internet

Trusted SaaS

Access control

ESSENTIAL: Software Only

Software Only Remote Worker

Remote worker is secure as they collaborate and access applications

Hostscan

Data Center / Private Cloud

Corp Workloads and

Cisco UC

applications DNG © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public9

Remote Worker

SaaS

Trusted SaaS

Access controlData Center/Private Cloud

Cisco ASA/

NGFW ADVANCED: On Demand Software Better: Software VPN Remote Worker Remote worker is secure as they collaborate and access applications

Internet

Corp VPN traffic

Corp Workloads and

Cisco UC

applications

Hostscan

Cisco Anyconnect

ISE MFA

Management VPN Tunnel

CESA

AC NVM

TND, AlwaysOn, GW Selection, HostScan

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public10

Remote Worker

SaaS

Trusted SaaS

Access controlData Center/Private Cloud

Cisco/ Meraki

Corp Workloads

Cisco UC

applications

PREMIUM: Always On Hardware Access

Remote Worker

Remote worker is secure as they collaborate and access applications

Internet

Corp VPN

ISR, MX, MR, Z3

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public11

Remote Worker

SaaS

Trusted SaaS

Access controlData Center/Private Cloud

Cisco/ Meraki

Corp Workloads

Cisco UC

applications

PREMIUM: Always On Hardware Access

Remote Worker

Remote worker is secure as they collaborate and access applications

Umbrella Secure

Internet Gateway

Internet

Corp VPN

ISR, MX, MR, Z3

CSE CSE Mail

Server

ESA CES CMD API Cisco Secure Access by DUO: MFA, Zero Trust, Secure Access

The Zero Trust Approach

Trust is established for every access request.

Secures access across your applications and network. Extends trust to support BYOD, cloud apps, hybrid environments & more. Every

Application

Trusted

Devices

Trusted

Users

Visibility &

Policies

PushSoft TokenSMS

Phone Call

U2FWearables

Biometrics

Hardware

Tokens

Broadest Range of MFA

Options

Assess Security Posture (based or not on MDM)

Complete Visibility; Mobile devices, Laptops

Improve Device Trust with Cisco Duo

Continuous Inspection

Secure Any Corporate Application

Duo Access Gateway Setup (DAG):

2FA implementation

Duo Network Gateway:

Remote Access for HTTP/S and SSH apps

Security

Groups

T1 T2 T3

Network

Gateway

(443)

Public Internet

NEW

FPR 1010

650 Mbps AVC

650 Mbps AVC+IPS

SOHO/SMB

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public

ASA 5508/16

NEW

FPR 4112/15/25/45

NEW

FPR 1120/40/50

FPR 2110/20/30/40

FPR 9300

Series

SM-40 SM-48 SM-56 NEW

FPR 4110/20/40/50

SM-24 SM-36 SM-44

1.5-3 Gbps AVC

1.5-3 Gbps AVC+IPS

2-8.5 Gbps AVC

2-8.5 Gbps AVC+IPS

Stand-alone device:

12-53 Gbps AVC

10-47 Gbps AVC+IPS 6

Six node cluster:

Up to 254 Gbps AVC

Up to 226 Gbps AVC+IPS

One Module:

30-70 Gbps AVC

24-64 Gbps AVC+IPS

Six node (2 chassis)

cluster:

Up to 336 Gbps AVC

Up to 307 Gbps AVC+IPS

Branch

Office

Mid-Size

Enterprise

Large

Enterprise

Data

Center

Service

Provider

TSL / SSL Decryption

Security Intelligence:

Block latest malicious

IPs, URLs and FQDNs

AVC with OpenAppID:

Identify and control over

4,000+ pre-defined apps

AVC with OpenAppID:

Easily create custom

application detectors

URL Categories:

Classify 280M+ URLs

using 80+categories

Category-based

Policy Creation

DNS Sinkhole

0100101010000100101101Security feeds

URL | IP | DNS

NGFW

Site-to-Site VPN

Remote Access VPN

AVCSSL

Decryption

Engine

NGIPS #$%*Block Allow www DNS

AMP file inspection

AMP Threat Grid

Cisco Secure Firewall: NGFW / NGIPS

World-class security controls:

-Firepower Threat Defense (FTD) -ASA -Firepower Platforms (physical/virtual/cloud) -Cisco Talos -Failover Active/Passive, Clustering -Multiple Instances

Consistent policies and visibility

-Firepower Management Center (FMC) -Firepower Device Manager (FDM) -Cisco Defense Orchestrator (CDO)

Private Cloud

4 Core

3 Gbps AVC

1.1 Gbps AVC+IPS+IPSec

8 Core

5.5Gbps AVC

2 Gbps AVC+IPS+IPSec

12 Core

10Gbps AVC

4Gbps AVC+IPS+IPSec

8.4Gbps AVC

4Gbps AVC+IPS+IPSc

AWS Instance types

c5.xlarge c5.2xlargequotesdbs_dbs10.pdfusesText_16

[PDF] cisco bcs

[PDF] cisco bcs 3.0 lifecycle packages

[PDF] cisco bcs sku

[PDF] cisco bcs3 0

[PDF] cisco brochure 2019

[PDF] cisco business critical services

[PDF] cisco capp

[PDF] cisco ccie service provider certification

[PDF] cisco ccna 1 introduction to networks

[PDF] cisco ccna 1 notes pdf

[PDF] cisco ccna 1 pdf en español

[PDF] cisco ccna 1 v6 pdf

[PDF] cisco ccna 200 301 audiobook

[PDF] cisco ccna 200 301 book pdf

[PDF] cisco ccna 200 301 course outline