© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 4 of 16
Cisco 890 Series Routers come with a comprehensive security solution tha t protects organizations’ networks from
known and new Internet vulnerabilities and attacks while improving employee producti vity. Security suite also
includes the following:
FlexVPN: Large customers deploying IPsec VPN over IP networks are faced with high complexity and high
cost of deploying multiple types of VPN to meet different types of connecti vity requirements. Customers
often have to learn different type of VPNs to manage and operate different types of networks. And when a
technology is selected for a deployment, migrating or adding functi ons to enhance the VPN is often
avoided. FlexVPN was created to simplify the deployment of VPN, to address the complexity of multi ple
solutions, and as a unified ecosystem to cover all types of VPNs: remote access, teleworker, site-to-site,
mobility, managed security services, and others.
NGE: Traditional encryption standards (Internet Key Exchange Version 1 [IKEv1], Secure Hash Algorithm 1
[SHA-1], etc.) were developed more than a decade ago. They are no longer considered as secure as
before. Next-Generation Encryption is meant to refresh the existing security protocols to t he next level
based on the standard Suite-B algorithms, such as, SHA-2, AES-Galois Counter Mode(AES-GCM), Elliptic
Curve Diffie-Hellman(ECDH), Elliptic Curve Digital Signature Algorithm(ECDSA), IKEv2, etc. NGE will offer
customers secure network communications systems that will be reliab le for the next decade.
Cisco ScanSafe Web Security: Cloud Web Sec urity is a cloud-based service designed to prevent zero-day
malware from reaching corporate networks, including roaming or mobile us ers. The Cisco ScanSafe Cloud
Web Security solution requires no hardware, initial capita l costs, or maintenance and provides unparalleled
real-time threat protection (Figure 3). This solution is scalable an d easy to maintain, and is ideally suited for
small businesses and enterprise small branch offices.
Figure 3. Typical Cisco Integrated Services Router Web Security with Cisco ScanSafe Deployment
Metro Ethernet Connectivity
Cisco 890 Series Routers are ideal for service provider deployments as Metro Ethernet customer premises
equipment (CPE). The routers also provide failover protection and load balanci ng. The 8-port managed switch
provides enough LAN ports for connecting multiple devices, and the op tional PoE capability can supply power to
IP phones or other devices. The Cisco 890 Series provides significant value to customers by simplifying
deployment of Ethernet WAN services with end-to-end OA&M, service-level agreement (SLA) monitoring and