Cisco Systems 1800, 7300, 3700, 7200 Security Features, Security Application Example, Dmvpn DMZ

Cisco 800 Series

BENEFITS AND ADVANTAGES continued

Cisco 800 Series

WHEN TO DEPLOY

an ISDN port on the Cisco 836 router for out of band management; and Secure Shell Protocol (SSH) for secure in-band management via Telnet. For scalability in deployment and management, the Cisco Router Web Setup tool (CRWS) or SDM allows non-technical users to quickly set up the router and turn on key features such as the stateful firewall. Cisco also provides a suite of solutions—such as Cisco Easy VPN, Cisco IE2100 management appliance, Cisco VPN Solution Center (VPN SC), Cisco Router Management Center (Router MC), and Cisco Configuration Express—that allow for

For reliable access, the virtual AUX port on the Cisco 831 and Cisco 837 and Cisco 836 can be used for dial backup with an external modem, should the primary WAN connection fail.The Cisco 836 offers this same functionality but with an integrated ISDN port also. Dynamic DNS feature is available on Cisco 830 routers which enables the router to be accessible from outside using a DNS name even when the WAN IP address changes frequently. Additionally, the Cisco 800 Series runs Cisco IOS Software, the industry-proven software that has become the standard for reliable business access.

The Cisco 800 Series is recommended when you need to deploy:

•Managed firewall and VPNs for small remote offices and teleworkers

•High-performance VPNs over DSL or cable (Cisco 831 or Cisco 837) with AUX port functionality for remote sites or with ADSL over ISDN and an integrated ISDN port (Cisco 836)

•QoS features for voice, video, and mission- critical applications

•Simple to deploy and setup with Cisco Easy VPN support

•VoIP with IP Phones (Cisco 831, 836, or 837) or integrated VoIP ports (827-4V)

•The proven reliability and manageability of Cisco IOS Software

scalable network deployment and management, including automated security policy push, and configuration updates.

SERIES DISTINCTIONS

	Cisco 800 Series
WAN Technologies	Ethernet, ADSL, ADSL over ISDN, G.SHDSL, serial

SECURITY FEATURES

VPN

•Encryption – AES and 3DES SW + HW (HW on 830 Series Only)

•Cisco Easy VPN Remote

•Cisco Site-to-Site VPN

•DMVPN

•DMZ

•802.1x

•URL Filtering – Using Websense or N2H2 server

•MAX IPsec Tunnels Supported – 10 concurrent

Certifications

•ICSA – IPsec, Firewall (in process)

•Common Criteria – IPsec

SECURITY APPLICATION EXAMPLE

�������������

	�������������������������
	��������
	�����������
	����������
�����		����������
������������	������������������������	������������
	����������������������

LAN Ports	4-port 10 MB Hub or 4-port 10/100 managed switch (Cisco 831, 836, or 837)
DMZ	One LAN switch port can be converted in to a DMZ (Separate LAN) on 830 routers
Security	Stateful Firewall, IDS and AES (Cisco 831, 836, or 837)
VPN	Software IPsec 3DES encryption, hardware encryption
	acceleration (Cisco 831, 836, or 837)
AUX or ISDN backup	Virtual AUX port on 831 and 837, ISDN port on 836 for dial backup
Functionality	and out-of-band management
Upgradability	Software updates and upgrades to new software feature sets,
	upgradable memory

12 13