cisco digital network architecture · digital business –application-driven agility time it spends...

“The platform for winning in the digital era”

Cisco Digital Network Architecture

Eric Marin

Enterprise Networks, EMEAR CTO

Keynote Agenda

Introduction & IT Challenges

Conclusion

Cisco New Architecture

Innovation: Virtualization & Automation

Innovation: Analytics - Demo

Innovation: Security

IT Priorities for Digital Transformation

IT Must Simplify to Accelerate Digital Innovation

Faster

Innovation

Reduce Cost

& ComplexityLower Risk

Static budgetsOnly 30% of digital projects will succeed

More devices, apps, usersTechnology innovation speed

OpEx 2-3 X the CapExSlow IT processes

Cost of business disruption

80 days to discover threats

New regulations

Faster

Innovation

Reduce Cost

& ComplexityLower Risk

Network Requirements for the Digital Organization

Insights &

Experiences

Visibility and Analytics users | devices | applications | threats

Automation &

Assurance

Speed and Simplicity

Security &

Compliance

Real-time & Dynamic

Threat Defense

Digital Business – Application-Driven Agility

Time IT spends on operationsCEOs are worried about IT strategy

not supporting business growth80% 57%

0

100%

Source: Forrester

CAPEX OPEX

33% 67%

0 10 100 1000

Computing Networking

Seconds

Source: Open Compute Project

“…While other components of the IT infrastructure have become more programmable and allow for faster, automated provisioning,

installing network circuits is still a painstakingly manual process...”

—Andrew Lerner, Gartner Research

Network Expenses Deployment Speed

Keynote Agenda


Conclusion





9© 2013-2014 Cisco and/or its affiliates. All rights reserved.

Automation Across Branch to DC

Application Network Flow Profile

SLA, Security, QoS, Load Balancing

Cloud Data Center

DATA CENTER

User/Things Network Profile

QoS, Security, SLA, Device, Location, Role

WAN Access

WAN AND ACCESS

CONSISTENT POLICY ACROSS CLOUD, DC, WAN AND ACCESS

CISCO ADVANTAGE

BROWNFIELD AND

GREENFIELDEND TO END

POLICY FRAMEWORK: FOCUS ON

APPLICATION AND USER ENABLEMENT


Automation

Abstraction & Policy Control

from Core to Edge

Open & Programmable | Standards-Based

Open APIs | Developers Environment

Cloud Service Management

Policy | Orchestration

Virtualization

Physical & Virtual Infrastructure | App Hosting

Analytics

Network Data,

Contextual Insights

Insights &

Experiences

Automation

& Assurance

Security &

Compliance

Network-enabled Applications

Cloud-enabled | Software-delivered

Principles

Keynote Agenda


Conclusion






Automation


from Core to Edge





Virtualization


Analytics

Network Data,

Contextual Insights

Insights &

Experiences

Automation

& Assurance

Security &

Compliance



Principles

Automation: Cisco APIC-EM Automation Platform

Complete Lifecycle | Consistent End to End

“Unlike other SDN solutions, APIC-EM can be

deployed on our existing infrastructure so we can

move quickly with minimum risk and maximum

investment protection.

CJ Singh, Chief Technology Officer

Backcountry.com

”

Open and

Extensible

Enterprise Scale

and Resiliency

Automation and

Services

“The inherent programmability of Cisco APIC-EM

allows us to drive innovation and improve on user

experience on a world-class infrastructure. It is a

solid foundation to embark on a journey to SDN.

Raj Gulani, Director Product Management

Citrix

”

Industry-Leading Network Controller

Open

APIs

Group-based

Policy

Clustering

Technology

Cloud Connected

Telemetry

Complete

Abstraction

Cisco APIC-EM

1000sOf DevNet

Developers

160+Customers

Deployments

running up to

4000 devices

Customer MomentumIOS ASIC

New: APIC-EM QoS Automation - Easy QoS

EM

Applications can ALSO interact with APIC-EM via

Northbound APIs, informing the network of application-

specific and dynamic QoS requirements

Southbound APIs translate

business-intent to platform-

specific configurations

Network Operators express high-level

business-intent to APIC-EM EasyQoS

Southbound APIs translate

business-intent to platform-

specific configurations as

they are needed

STATIC QoSDYNAMIC QoS


Automation


from Core to Edge





Virtualization


Analytics

Network Data,

Contextual Insights

Insights &

Experiences

Automation

& Assurance

Security &

Compliance



Principles

ISR 4K + UCS E-Series

UCS C-Series ENCS

Network Functions Virtualization Infrastructure Software (NFVIS)

Enterprise Service Automation (ESA)

Introducing: Cisco Enterprise NFVNetwork services in minutes, on any platform

Virtual Router

(ISRv)

Virtual Firewall

(ASAv)

Virtual WAN

Optimization

(vWAAS)

Virtual Wireless

LAN Controller

(vWLC)

3rd Party VNFs

Customized Network Services For Your NetworkEnterprise Service Automation

APIC-EM with

Enterprise

Service

Automation

vRouter

vFirewall

vWAN Optimization

vWLAN Controller

3rd party services

ISR/UCS E-Series

UCS C-Series

X86 Server

Select your

network functions1

Select your preferred

platform2

Orchestrate and

automate services3

IT Agility

Run on any platformElastic services Deploy in minutes

Keynote Agenda


Conclusion






Automation


from Core to Edge





Virtualization


Analytics

Network Data,

Contextual Insights

Insights &

Experiences

Automation

& Assurance

Security &

Compliance



Principles

Gain Business Insights Through Analytics

Presence & Analytics Heat Maps Correlation

Visitors vs. Passerbys

Repeat vs. New Visitors

Dwell Time

Busiest Hour, Day

Visitor Sentiment

Conversion Rate

Building/Floor

Where do visitors spend time? Which paths

did visitors take?

DETECT

Timeframe Parameters Heat Map

Keynote Agenda


Conclusion





Network Resources

Role-Based Access

Contextual Security

A centralized security solution that automates context-aware access to

network resources and shares contextual data

Network

Door

Identity Profiling

and Posture

Who

What

When

Where

How

Compliant

Context

Traditional Cisco TrustSec®

Role-Based Policy AccessPhysical

or VM

Guest Access

BYOD Access

Secure Access

ISE pxGrid

Controller

Enable Threat Response By Sharing Contextual Data- Cisco Platform Exchange Grid (pxGrid)

When

Where

Who

How

What

Cisco and Partner

Ecosystem

ISE

Cisco Network

pxGrid

controller

Context

32

1

45

Cisco® ISE collects

contextual data

from network1

Context is shared via

pxGrid technology2

Partners use context

to improve visibility

to detect threats3

Partners can direct Cisco

ISE to rapidly contain threats4

Cisco ISE uses partner data

to update context

and refine access policy5

Keynote Agenda


Conclusion





Begin Your Digital Journey Today


ARE YOU READY:

To automate network operations?

Save on WAN transport?

Enable richer collaboration experiences?

Gain business insights?

Deliver personalized customer experiences?

Detect and remediate threats rapidly?

To virtualize your branch?

cisco digital network architecture · digital business –application-driven agility time it spends...

Documents