Cisco Systems 850 manual Cisco 870 Security Features, Cisco 870 VPN Features, Cisco 870 Series

Cisco 870 Series

Security Features

Cisco 870 Security Features

•Stateful inspection firewall

•Intrusion Prevention System (IPS)

•Antivirus support through Network Admission Control (NAC) and enforcement of secure access policies

•URL Filtering

Cisco 870 VPN Features

•Hardware-accelerated 3DES for IPSec

•Hardware-accelerated AES for IPSec

•Cisco Easy VPN Client and Server

•IPSec 3DES termination/initiation

•IPSec pass-through

•Point-to-Point Tunneling Protocol (PPTP) pass-through

•L2TP pass-through

•802..1X

•Secure HTTP (HTTPS), FTP, and Telnet authentication proxies

•Dynamic Multipoint VPN (DMVPN), SSL VPN, and Group Encrypted Transport (GET VPN)

WLAN Features

Cisco 870 Series

Network Example

Corporate Headquarters

	Teleworker
	Cable
	Internet
	DSL
Small Offices or	Metro Ethernet
Small Businesses

WLAN Hardware

•802..11b/g

•Wi-Fi and Wireless Multi-Media (WMM) Certified

•Automatic rate selection for 802..11b/g

•Field-replaceable external antennas

•Antenna diversity

•WECA interoperability

•Default antenna gain: 2..2 dBi

•PoE (optional external adapter for inline power) for IP phones or external wireless access points

WLAN Software Features

•Maximize throughput or maximize range option

•Software configurable transmit power

•SSID Globalization

•SSIDs =10

•Wireless VLANs =10

•Encrypted Wireless VLANs =4

•MBSSIDs =2

•Universal Client Mode

WLAN Security Features

•802..1X

•802..11i

•Wi-Fi Protected Access (WPA) and AES (WPA2)

•EAP Authentication: Cisco LEAP, PEAP, EAP-TLS, EAP-FAST, EAP-SIM, EAP-MD5, EAP-TTLS

•Static and dynamic Wired Equivalent Privacy (WEP)

•Temporal Key Integrity Protocol (TKIP)/SSN Temporal Key Integrity Protocol/Simple Security Network encryption

•MAC authentication/filter

•User database for survivable local authentication using LEAP and EAP-FAST

•Configurable limit to the number of wireless clients

•Configurable RADIUS accounting for wireless clients

•PSK (Pre Shared Keys) (WPA-SOHO)

When to Deploy

Deploy the Cisco 870 Series when you need			• Advanced security with firewall, VPNs, IPS,
the following in a small remote office, or			NAC, DMVPNs, Easy VPNs
teleworker and small business sites:			• Integrated 802..11b/g with replaceable diversity
• Secure, concurrent services for broadband
			antennas
	connection		• Four-port 10/100 managed switch
• High-speed VPN solution
			• Easy to set up solution with Cisco SDM and
			remote management capabilities
	Series Distinctions
	Cisco 870 Series
WAN Technologies		• Cisco 871 – 100 MB Ethernet
		• Cisco 876 – ADSL over ISDN (ADSL2/ADSL2+)
		• Cisco 877 – ADSL over analog telephone lines (ADSL2/ADSL2+)
		• Cisco 878 – G..SHDSL (2- and 4-wire support)
	LAN Switch	Managed 4-port 10/100Base-T switch with autosensing MDI/MDX (Media Device
		In/Media Device Crossover) for auto-crossover
	Network Security	Firewall, IPSec and AES High Speed Encryption, IPS, Antivirus through Cisco NAC,
		IPSec, and AES High Speed Encryption, Cisco Easy VPN, DMVPN, DMZ, GET VPN
	Upgradeability	Cisco IOS Software upgrades and updates, memory upgrades

18 19