Cisco Intelligent WAN
-
Upload
cisco-systems-india-pvt-ltd -
Category
Devices & Hardware
-
view
446 -
download
6
description
Transcript of Cisco Intelligent WAN
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1Cisco Confidential 1© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Intelligent WAN Deliver an Uncompromised Experience from Any Connection
Jimmy Ray Purser PE / MSEE
TechWIseTV
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2
Emerging Branch DemandsThe Application Landscape Is Changing
Applications Are Moving to the Data Center and Cloud
Internet Edge Is Moving to the Branch
Cloud
Data Centers
Cloud
of CIOs Expect to Operate via the Cloud by 2015
%50Mobility
More Mobile Data Traffic by 2015
Rich Media Apps
of Mobile Traffic Will Be Video6X 2/3
Pressures on the WAN
Branch
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3
68%
75%
$100M +
Nearly HALF of WAN Budget on Wireline/Internet Transport Services*
Fortune 500
Midmarket
$500K +HOW WILL YOU GET MORE VALUE FROM YOUR WAN INVESTMENT?
WAN Transport Costs Re-think Your WAN
Say Demand for WAN
Bandwidth Will Increase**
Organizations Have Flat WAN Budgets*
WAN Spending Trends
Nemertes Research Benchmark Report: Emerging WAN Trends: The Internet Arises*Information Week Reports: 2014 Next Gen WAN Survey**
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 4
Empower IT to Conquer the WAN
What if an Intelligent WAN Can…
1X 2X+
Increase WAN Utilization
Deliver More Bandwidth for Lower Cost
Hours Minutes
Pinpoint App Issues Instantly
Improve YourApp SLA
Backhaul Off-load
Security at Scale
Ensure Security Over Any Connection
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5
PrivateCloud
Intelligent WAN: Leveraging the InternetHybrid WAN
Transport
Branch
VirtualPrivateCloud
PublicCloud
MPLS
InternetDirect Internet
Access
$$$
Internet backhaul
Leverage local Internet path for public cloud and Internet access
Secure WAN transport across MPLS and/or Internet for private cloud / DC access
Increase WAN Capacity Improve App Performance Scale Security at the Branch
$Cisco Cloud Web Security
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 6
Building Highly Available WANs with Cisco IWANRedundancy and Path Availability Matter
Single RouterDual Paths
Downtime per Year
24 Minutes
99.998%0:24 / yr
MPLS or Internet
MPLS or Internet
ISR-AX
Single RouterSingle Path
Downtime per Year
4 Hours23 Minutes
Downtime per Year
8 Hours46 Minutes
ISR -AX
Internet
99.90%8:46 / yr *
ISR -AX
MPLS
99.95%4:23 / yr *
Dual RoutersDual Paths
Downtime per Year
5 Minutes
99.999%0:05 / yr
MPLS or Internet
MPLS or Internet
ISR-AX
* Typical MPLS and Business Grade Broadband Availability SLAs and Downtime per Year
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7
What Can Cisco Intelligent WAN Enable?
Innovate and Transform Your Business
• Enable next generation apps• Improve customer engagement• Increase productivity• Higher sales transactions
Grow Revenues
• Meet growing user expectations• Faster app performance• Instant access to content• Seamless experience
Improve Customer Experiences
• Lower WAN costs• Fully utilize network• Offload traffic• Lower downtime
Reduce Costs and Improve Efficiency
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8
40% Reduction in WAN Costs 2-4X Increase in
BW Utilization
Case Studies: Lower Costs Without Compromise
Mid-Size Insurance Company
CHALLENGE SOLUTION RESULT
• Driver: Reduce costs
• 14,000 bank branches worldwide
• MPLS dual broadband
• ISR 2901 and ASR1004
• PfR and IPSEC
• 40% Reduction in WAN costs
• Completed 200 UK branches
• Next 300 Germany branch
• Followed by Global rollout
CHALLENGE SOLUTION RESULT
• WAN expansion with growing costs
• Addressing MPLS upstream issues
• Real-time apps (voice) quality
• Cisco ISR G2 with PfR, WAAS
• Enable Active-Active MPLS + Internet
• Doubled bandwidth utilization (4X with WAAS) at no additional costs
• Dynamic network response; less manual config
Large European Bank
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9
38 6S E C O N D S
Reduce MobileApp Response 100% WAN Off-load
After Initial User
Case Study: Business Innovation
Large US School DistrictLuxury Global Retailer
CHALLENGE SOLUTION RESULT
• Re-energize customer in-store experience
• Improve mobile application performance
• Cisco ISR-AX with HCO featuring Akamai
• Pilots in Hong Kong, Paris, NYC experience faster app response
• Sales Apps from 36 6 sec
• Catalogs available instantly
CHALLENGE SOLUTION RESULT
• Support iPad apps for all students
• HD Video curriculum
• Limited bandwidth in classrooms
• Cisco ISR-AX with AVC, WAAS
• Cisco HCO with Akamai
• Moving forward to provide 750K iPads to students
• Able to deliver online rich media content with minimal WAN impact—100% offload after initial user
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10
Cisco Intelligent WANSolution Components
TransportIndependent
Secure Connectivity
Application Optimization
Intelligent Path Control
Provider FlexibilityModular Design
Common Operational Model
Load BalancingPolicy-Based Path Selection
Network Availability
Scalable, Strong EncryptionApp-Aware Threat Defense
Cloud Web Security
Application VisibilityApp Acceleration
Intelligent Caching
Secure, Reliable and High Performance Application Experience on Any Device, over Any Connection, to Any Cloud
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11
Cisco AX Routers ISR-4451-AX | 3900-AX | 2900-AX | 1900-AX | 800-AX | ASR1000-AX
L2-L3Transport
L4-L7Application
Services
Start with Cisco AX RoutersIWAN Capabilities Embedded in the Router
ISR-AX
Simplify Application Delivery
One NetworkUNIFIED SERVICES
ASR1000-AX
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12
IWAN Solution Components
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13Cisco Confidential 13© 2013 Cisco and/or its affiliates. All rights reserved.
Transport-Independent Design Simplifying and Scaling Hybrid WANs
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14
Transport IndependentComprehensive WAN transport support with secure, full mesh connectivity
Simplifies WANDesign
Dynamic Full-Meshed Connectivity
Proven RobustSecurity
• Easy multi-homing over any carrier service offering
• Single routing control plane with minimal peering to the provider
• Consistent design over all transports
• Automatic site-to-site IPsec tunnels
• Zero-touch hub configuration fornew spokes
• Certified crypto and firewall for compliance
• Scalable design with high-performance cryptography in hardware
ISR-G2
WAN
Internet
MPLSASR 1000
ASR 1000
Data CenterBranch
FLEXIBLE SECURETRANSPORT-INDEPENDENT
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15Cisco Confidential 15© 2013 Cisco and/or its affiliates. All rights reserved.
Intelligent Path ControlImproving Application Delivery and WAN Efficiency
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16
Intelligent Path ControlMaximize WAN Utilization with High Reliability
Lower WAN Costs
SOLUTION
• Set Policy Actions– Based on app traffic classes
– Re-route based on criteria (app SLA, link status)
• Extends Classical Routing– Adaptive to Real-time
Conditions
– Delay, Jitter, BW metrics
• 2X WAN Utilization
PROBLEM
• Enforce App SLA
• Business continuity for critical/real-time apps
• Poor bandwidth utilization
Path A
Path B Data Centers
Full BandwidthUtilization
Improved App Performance
App Priority Path Loss Jitter Delay
Voice/Video Path A x x x
Business Critical
Path B x x
Remaining Load balance
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17
SP1 (MPLS) ISP (Internet)
• Protect voice and video quality
Latency less than 150 ms; Jitter less than 20 ms
• Protect VDI applications from brownouts
Loss less than 5%
• Voice and video preferred
path SP-A• VDI preferred path SP-B• Increase utilization
by load sharing
Multimedia and Critical Data Policy
Cloud Services
Hybrid IWAN
Best-Effort Traffic
Detect Loss Greater Than 10%
ISP-1 (Cable) ISP-2 (DSL)
Voice and Video
Dual Internet WANDetect
High Jitter
VDI
Best-Effort Traffic
What PfR DoesProtecting Critical Applications While Increasing Bandwidth Utilization
• Protect business cloud applications from brownouts
Loss less than 5%
• Preferred path for criticalapplications: SP1 (MPLS)
• Increase WAN bandwidth efficiency by load-sharing traffic over all WAN paths, MPLS + Internet
Cloud Services and Load-Balancing Policy
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18
PfR Enhances Classical Routing
CLASSICAL PfR
PATH CONTROL
METRICS
ADAPTIVE
• Topological state• Least cost path• Static user preference
• Path cost• Interface state
• Application-aware • Policy controlled• Measured performance
• Delay• Jitter• Bandwidth
RESPONDS TO:Measured performance changes (degradation)
RESPONDS TO: Link and node state changes (up/down)
+
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19Cisco Confidential 19© 2013 Cisco and/or its affiliates. All rights reserved.
Optimize Application Performance
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 20
SOLUTION
• Probe-less Deployment– Integrated on the router
– Visibility between LAN and WAN
• Visibility to 1000+ apps– Gain L7 visibility into the network; see
inside HTTP flows
– NetFlow, IPFIX export + partner tools
• Rapid root cause analysis– Hop by hop media trace
– Determine app, network or carrier
PROBLEM
• Limited visibility to web apps
• Unable to prioritize and adequately plan for capacity
• Difficultly resolving cause of application degradation
Application Optimization: Start with VisibilityEnhancing User Experience and WAN Efficiency
Validate App SLA
Smart Capacity Planning
Pinpoint App Issues in Minutes
?
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 21
Make Your Network App Aware with IWANCisco Application Visibility and Control
Pervasive App Visibility Business Policy-based Rules Comprehensive Reporting• No additional hardware • Rich data collection using
NetFlow v9/IPFIX• Easy to integrate into many
reporting tools
• No need for complex IP and port ACLs
• See inside HTTP flows to identify specific Cloud applications
• Better use of costly bandwidth• Per-branch and per-application
level reporting
VISIBILITY TO 1000+ APPS SMART CAPACITY PLANNINGNO PROBES
PrivateCloud
Branch DC/Headquarters
WANNetFlow v9
Enterprise Edge
AVC
AVC
CSR
Proliferationof Devices
Users/Machines
60% of IT Professionals Cite Performance as Key Challenge for Cloud
ISR
ASR
AVC
AVC
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 22
SOLUTION
• Reduce load– Data redundancy
elimination (DRE), compression, and TCP optimization
• Application optimization– Fewer protocol messages
and metadata caching
PROBLEM
• Application latency
• WAN bandwidth inefficiencies
Application bandwidth with Cisco® WAAS
Application bandwidth natively
Application latency natively
Application latency with Cisco WAAS
0 0
1
2
3
4
40
80
120
160
ApplicationBandwidth
ApplicationLatency
Bandwidth(Mbps)
Latency(Seconds)
Reduction inbandwidth
Reductionin latency
App Optimization: Reduce Bandwidth and LatencyEnhancing User Experience and WAN Efficiency
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 23
EMAIL 5 MB Attachment CIFS 5 MB File
WAAS Delivers User Experience at Scale
Send and receive email over native WAN First optimized with WAAS Second pass optimized with WAAS
100 20 30 40 50 60 70 80 90 100 110 120 130 140 150
Time in Seconds
T1 (1.54Mbps)
80 ms Latency
MS SHAREPOINT 5 MB Document VDI (CITRIX)
24x FASTER
17x FASTER
30x FASTER
3 – 8x FASTER
100 20 30 40 50 60 70 80 90 100 110 120 130 140 150
Time in Seconds
File drag and drop over native WAN First optimized with WAAS Second pass optimized with WAAS
SharePoint file download over native WAN First optimized with WAAS Second pass optimized with WAAS
20 4 6 8 10 12 14 16 18 20 22 24 26 28 30
Time in Seconds
Launch Citrix XenDesktop over native Citrix ICA/SSL Launch Citrix XenDesktop with WAAS Site navigation over native Citrix ICA/SSL Site navigation with WAAS
20 4 6 8 10 12 14 16 18 20 22 24 26 28 30
Time in Seconds
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 24
Digitization of the Enterprise Impact the Network
Retail Retail BankingEducation Enterprise
• Extend learning beyond classroom walls
• Deliver HD content to tablets for students
• Real-time online education system
• Increase shopper dwell time with guest wi-fi
• Seamless online and in-store experience (omni channel)
• Online concierge
• Product catalogs
• Web Point-of-Sale
• Accelerate business apps from all clouds
• On-demand video sales or new hire training
• Direct Internet access for faster app performance
• Guest wifi
• Digital signage
• HD video
• Virtual offices
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 25
Akamai Intelligent Platform
Extending Akamai to the Branch with Akamai ConnectAkamai Intelligent Caching Inside Cisco ISR-AX
COMPLETING THE LAST MILE
Branch
ISR-AX
AKAMAI INSIDE
AKAMAICACHE
Optimal Experience Regardless of Device, Connectivity or CloudAll HTTP Traffic in Private, Public, Akamai Cloud
Prepositioning | Dynamic HTTP Caching (YouTube) | Any Transport
Data CenterWAN/MLPS
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 26
Building On Cisco WAAS SolutionAkamai Caching Enhances the User Experience
Cisco Intelligent WAN with Akamai Connect
World’s Best Optimization Solution for HTTP Traffic
AKAMAI WEB ACCELERATIONIntranet HTTP
CachingDynamic OTT HTTP Caching
Akamai Connected Cache
Content Pre-positioning
CISCO WAASLZ
CompressionTCP
OptimizationData
De-duplicationApplication Specific
Acceleration
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 27Cisco Confidential 27© 2013 Cisco and/or its affiliates. All rights reserved.
Securing Your IWAN
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 28
Web Filtering, Adv. Malware Detection &
Threat Analystics
PrivateCloud
BranchPublicCloud
WAN1(IP-VPN)
WAN2(Internet)
Internet
Cisco Cloud Web
Security CWS
IWAN Tunnels for HQ/DC Traffic
Secure Public Cloud and Internet Access
CWS Encapsulated HTTP, HTTPS
ISR Cloud Connector to CWS datacenters
Secure ConnectivitySecure Transport for Backhaul, Plus Threat Defense for Direct Internet Access
• Scalable security via DMVPN enforced locally
• Firewall/IPS support to protect for external threats
SECURE BRANCH EDGE
• Secure local Internet breakout with encapsulated traffic
• Improved application performance at lower costs
OFF-LOAD CORPORATE WAN
• Real-time web filtering with Application Visibility & Control
• Advanced Malware Protection and Threat Analystics
CLOUD WEB SECURITY
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 29
Roaming Users Headquarters Branch Office
Cisco Cloud Web Security (CWS)Advanced Threat Protection for Intelligent WAN (Direct Internet Access)
Web
Filt
erin
g
Web
Rep
utat
ion
Mal
war
e S
igna
ture
File
Rep
utat
ion
File
Beh
avio
r
File
Ret
rosp
ectio
n
Thr
eat A
naly
tics
Application Visibility and Control
CLOUD WEB SECURITY
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 30
Web Filtering
Reputation Filtering
Acceptable Use Policy
Signature-based AV
Heuristic Analysis
File Reputation
File Retrospection
Threat Analytics
Continuous Protection Across the Attack ContinuumCloud Web Security (CWS) for Dedicated Internet Access
BEFOREDiscoverEnforce Harden
AFTERScope
ContainRemediate
Attack Continuum
Detect Block Defend
DURING
Actionable Reporting
File BehaviorApplication Visibility Control
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 31Cisco Confidential 31© 2013 Cisco and/or its affiliates. All rights reserved.
Simplified Branch Deployments
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 32
Network DevicesCatalyst, ASR, ISR
Cisco Intelligent WAN Is SDN Provisioning ReadyCisco APIC—Enterprise Module Architecture
Abstracts Network Devices to Mask Complexity
Treat Network as a System
Exposes Network Intelligence
For Business InnovationCisco APIC—Enterprise Module
Cisco and Third Party Applications
Network Info Database
PolicyInfrastructure
Automation
REST API
CLI, OpenFlow, onePK API
Security QoS Mobility
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 33
Template, On-demand
1000s of devices across domains
Dynamic Set-Up, Tear Down, Provisioning, Monitoring
On-Demand Workload
Movement withService Profiles
Simplification
ScaleNetworkAutomation
Orchestration
Cisco APIC Enterprise Module Enabling the Intelligent WAN
ELIMINATE IT COMPLEXITY
Full Access to Resource Pools
Anywhere
Simple
Automated
Scale Secure
SIMPLER OPERATIONS, FASTER SERVICE DELIVERY
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 34
Cisco IWAN Management
• Lifecycle: Simplified deployment and configuration
• Configuration: Plug and Play deployment automation
• Health Assurance: Improved application delivery
• Compliance: Regulatory requirements and best practices
• Speed: Eliminates manual building of WANs
• Agility: Quick configuration updates and IOS upgrades
• Dynamic: Compatible with onePK for app aware WANs
• Reduced OpEx: Automated WAN orchestration
• Cost Savings: Centralized hybrid WAN management
• Integrates with Cisco App Visibility and Control
• Monitor and analyze app-level traffic
• Visualization real-time traffic, end-to-end
• Troubleshoots hop-by-hop to pinpoint source
• QoS monitoring and configuration
Cloud-Based Management Specialized ManagementOn-Prem Management
Cisco Prime
Automates Deployment and Lifecycle Management
Application Aware Network Performance Management
Enterprise and IntegratorLifecycle Management
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 35Cisco Confidential 35© 2013 Cisco and/or its affiliates. All rights reserved.
Why Cisco IWAN?
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 36
Why Cisco for Your Intelligent WAN?Application Performance with IT Simplicity at Lower Costs
One Platform for Simplicity
Pervasive Services
Security at Scale
Context-Based Routing
Quick ROI
Integrated Platform
Up to 72% in Savings
vs. stack of overlay
appliances
• Proven security across thousands of sites
• Protect all branch resources
• Secure direct internet access
• Network-aware
• App-aware
• Endpoint-aware
Many pay off in
6-12 Months
$$$
• Branch ISR-AX
• DC ASR1K-AX
• Cloud CSR1000V
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 37
Cisco Intelligent WAN (IWAN)Uncompromised Experience Over Any Connection
Calculate Your Estimated Savings
View Demonstration of Capabilities
Accelerate Deployment with Services
Get More From Your WAN Investment Today
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 39
Quick Payoff for Infrastructure InvestmentCan Shift Spend from Connectivity to Enabling New Services
EXAMPLE:
San Francisco MPLS VPN vs. Dual Business Internet ($ per month)
Source: Telegeography MPLS VPN pricing for San Francisco as of March 2013; Comcast Web site; Verizon Web siteAssumes average Router upgrade is $3000; installation is $1000 and Support is $300CoS2 refers to VPN services providing real-time data and middle priority
$665 Savings/month x 12 months x 100 sites
80
274.000000000031
140
611.00000000007
1.5 Mbps 10 Mbps
$220
MPLS VPN CoS2 $885
Direct Internet Access
Combined for Ent SLA
-75%
$800K Annual Savings
186% ROI
Payoff in 6 Months
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 40
What Can IWAN Enable?
High BW Apps OpEx SavingsWiFi SaaS Rollout
BUSINESS CHALLENGES
HOW IWAN HELPs
• Bandwidth Costs• App Quality
• High WAN recurring charges
• Inflexible SLAs
• Leverage low-cost Internet links
• Flexibility for new services
• No tradeoffs
• Transport Choice• App Awareness
and Prioritization• Intelligent WAN
Path Selection
• Increase Traffic• Security
and Policy
• App Latency• Backhaul to DC
• DIA: low latency• Faster Roll Out• Visibility
and control
• App Visualization and Prioritization
• Threat Defense• DIA: no backhaul
Apps
365 $$$
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 41
Cisco IWAN Deployment ModelsThe Router Upgrade that Pays for Itself
Dual MPLS Hybrid Dual Internet
Highest Service Level (SLA) – Least flexible for new servicesẋ Expensive, high latency for Cloud
Enable SaaS and/or high BW apps Balanced SLA guarantees– Moderately priced
Best price/performance Least dependent on contracts– Enterprise responsible for SLAs
Public Public Enterprise
DCDCDC
Internet
MPLS MPLS MPLS Internet Internet Internet
Consistent VPN Overlay Enables Security Across Transition
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 42
Enterprise Routing Product PortfolioCloud-Ready Routing and WAN Optimization Platforms
WAAS (WAVE 294, 594, 694)
WAVEWAAS on SREWAAS Express
ISR G2 (800, 1900, 2900, 3900)
ASR 1000 (1001, 1002, 1004, 1006, 1013)
ASR 1000 (with OTV, LISP, etc.)WAAS (WAVE 7541, 7571, 8541), vWAAS
UCS E Series
Branch/Remote Sites
DC/Cloud
WAN Aggregation/HQ
CSR
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 43
IWAN 1.0 Management Tool Matrix
SIMPLIFIED DEPLOYMENT
TRANSPORT INDEPENDENT DESIGN
INTELLIGENT PATH CONTROL
APPLICATION OPTIMIZATION
SECURE INTERNET CONNECTIVITY
NETWORK HEALTH AND STATUS
Cisco Prime
Prime Infrastructure
Prime Infrastructure
WAAS Central Manager
Prime Infrastructure
Prime Infrastructure
(AVC)
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 44
CWS Features and Benefits
Real-time Malware Scanning Layered, multiple engines integrated into CWS
Application Visibility and Control 1000+ Applications; 150,000+ micro-applications
Advanced Malware Protection (AMP) Protects against malware through file reputation, sandboxing and retrospection
Cognitive Threat Analytics (CTA) Identifies threats through behavior analysis, anomaly detection and machine learning
Security Intelligence Operations (SIO) Powered by 100 TB of daily threat telemetry; Updated every ~3-5 minutes
Policy Management and Actionable Reporting (WIRe)
Easily implement policies, control application use, Comprehensive reports hosted in the cloud
URL Filtering Granular Categories and Dynamic Classification of Internet web sites
Web Reputation Only vendor to examine IP, Domain, URL, and sender reputations
NEW
NEW