Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap...

26
Cisco Confidential © 2010 Cisco and/or its affiliates. All rights reserved. 1 Cisco Virtual Update: Expressway at the Collaboration Edge 24. september 2013 Speaker: Michael Ahrensburg, Systems Engineer Q&A master: Per Toft, Consulting System Engineer

Transcript of Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap...

Page 1: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

Cisco Confidential © 2010 Cisco and/or its affiliates. All rights reserved. 1

Cisco Virtual Update: Expressway at the Collaboration Edge

24. september 2013 Speaker: Michael Ahrensburg, Systems Engineer Q&A master: Per Toft, Consulting System Engineer

Page 2: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2

This document contains confidential material, and is shared under a valid non-disclosure agreement. Many of the products and features described herein remain in varying stages of development, and will be offered on a when-and-if-available basis. This roadmap is subject to change at the sole discretion of Cisco, and Cisco will have no liability for delay in the delivery or failure to deliver any of the products or features set forth in this document.

Page 3: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3

Voice, Video, Messaging, Conferencing, & Social

Open, Standards-based An integrated / collaborative experience for customers Consumer to Business

Interoperability Enterprise grade flexibility and scale WebEx Integration, Service Provider Offerings

Proven Components & Technology Multimodal collaboration without a VPN Desktop, Mobile and Fixed endpoints

Widely Adopted Protocols Secure communications with anyone Enterprise Border

Page 4: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 4

•  ~1 Billion Tablets and Smartphones will be sold in 2013

•  1.7 Billion mobile units by 2017

•  That many devices would wrap around Earth’s equator 5.4 times

•  Combined….mobile devices will sell 6 times faster than traditional notebooks

0 500

1000 1500 2000 2500

2010

20

11

2012

20

13

2014

20

15

2016

20

17

Annual Unit Sales (M)

Ultramobile PC

Tablet

Wi-Fi Enabled Cellphones

“Connected CE Devices Global Market Forecast” - Strategy Analytics, March 2013

0 50

100 150 200 250

2010

20

11

2012

20

13

2014

20

15

2016

20

17

Total LTE subscribers (M)

Total LTE subscribers (M)

“U.S. LTE Subscriber 2013–2017 Forecast” – IDC, March 2013

•  4G LTE bandwidth unlocks synchronous and asynchronous collaboration

•  By 2014, there will be 125 Million LTE subscribers in U.S. market alone

•  LTE subscribers will grow by 60% in 2014 and 46% CAGR through 2017

Page 5: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5

Application driven security

Multi-device, User-centric

Hybrid service delivery

Multi-modal

Network driven security

Device-centric

On-premise service delivery

Single Purpose

Page 6: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 6

Audio

Video

Social

Messaging In deployment since 2005

Over 15,000 customers deployments worldwide

Including over 70% of Fortune 200

In all markets segments: Finance, Manufacturing, Retail, Government, Defense, Emergency Services, Education & Healthcare

Expressway Solution

Collaboration

Services Internet

Page 7: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7

Outside Network DMZ Inside Network

1.  VCS Expressway is the traversal server installed in DMZ. VCS Control is the traversal client installed inside the enterprise network.

2.  VCS Control connects via the firewall to a specific port on the VCS Expressway with secure login credentials.

3.  Once the connection has been established, the VCS Control sends keep-alive packets to the VCS Expressway

4.  When VCS Expressway receives an incoming call, it issues an incoming call request to VCS Control.

5.  The VCS Control then initiates connection to the endpoint

6.  The call is established and media traverses the firewall securely

A Firewall Expressway Server

B Firewall Expressway Client

Internet

Page 8: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8

Unified CM & applications

Expressway Firewall Traversal

AnyConnect VPN

•  Layer 3 VPN Solution •  Secures the entire device and

it’s contents •  Any allows users access to any

permitted applications & data

•  NEW (FCS Q4 CY13) •  Session-based firewall traversal •  Allows access to collaboration

applications ONLY •  i.e. Personal data not routed

through enterprise network

Page 9: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9

User-centric, not device-centric By 2014, the average number of connected devices per user will reach 3.3

Jabber is seamless Use Jabber as you move between networks,

without reconfiguring anything

Productive on your favorite device — anywhere Work consistently and productively across platforms and operating systems

Easy to Deploy Works with existing firewalls and security policies Leverage direct media

Secure only Jabber application Personal data is not connected to the corporate

network

Core collaboration Jabber just works. No compromises outside the network

Get services from — wherever Support both on-premise and cloud offerings

simultaneously

Page 10: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10

Jabber @ work

Jabber @ SFO, LHR or PVG

Jabber @ Home

Jabber @ the café

Inside firewall (Intranet)

VCS Expressway

VCS Control

Collaboration Services

UCM

Internet

DMZ Outside firewall Automatic location discovery

Authentication, Provisioning, and Configuration via UCM

Support for hybrid service delivery (on-prem and cloud)

Cisco WebEx

Core collaboration inside and outside the enterprise

Device / OS agnostic architecture

Page 11: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11

Audio

Video

Social

Messaging

Core collaboration, no compromises

Inside firewall (Intranet)

Outside firewall

VCS Expressway

VCS Control

Collaboration Services

UCM

Internet

DMZ

Make voice and video calls

Share content

Launch a web conference

Make voice and video calls

Instant Message and Presence

Access visual voicemail

Search corporate directory

Jabber clients: Win, Mac, iOS, Android, SDK

Page 12: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12

Inside firewall (Intranet)

Outside firewall

VCS Expressway

VCS Control

Collaboration Services

UCM

Internet

DMZ Protocol Security Service

SIP TLS Session Establishment – Register, Invite, etc. via UCM

HTTPS TLS Logon, Provisioning/Configuration, Directory, Visual Voicemail

XMPP TLS Instant Messaging, Presence, Federation

Media SRTP, RFC 3711

Audio, Video, Content Share, Advanced Control (RTP/SRTP, BFCP, XCCP)

Cisco WebEx

Audio

Video

Social

Messaging

Page 13: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13

Desktop Tablet Smartphone Web Fixed

Mac OS X Windows iPad iOS 6.1 iPhone iOS 6.1

Android 4.2

Jabber Public to Enterprise (P2E)

Jabber SDK

EX Series MX Series C Series

Jabber Desktop 9.6 Jabber Mobile 9.6 Jabber Mobile 9.6 Jabber P2E 10.0 Jabber SDK 9.6 TelePresence TC7.0

Expressway system support… Login, Automatic Location Discovery, TLS security, and ICE client

Preliminary Target Client Vehicles – Subject to change

Page 14: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14

VCS Expressway

VCS Control

Collaboration Services

UCM

DMZ

EX Series

MX Series

C Series

Endpoint registration, call control, and provisioning are serviced by UCM With

Expressway X8.0

Endpoint registration, call control and provisioning are serviced by VCS

Control and TMS

Outside firewall

Internet

TC7.x Series Platforms

Today

Page 15: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15

Inside firewall (Intranet)

VCS Expressway

VCS Control

Collaboration Services

UCM

Public DNS

DNS SRV lookup cisco-uds.example.com

Not Found ✗

expwyNYC.example.com ✓ TLS Handshake, trusted certificate verification

DNS SRV lookup vcsedge.example.com

Outside firewall (Public Internet)

DMZ

HTTPS: DNSRESOLVE cisco-uds.example.com

Page 16: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16

Feature / Service

Functionality UCM 8.X

UCM 9.1

UCM 10.0

Notes

UDS: Home Cluster Discovery

Cross cluster communication used to determine user’s home cluster

ý þ þ Critical for multi-cluster environments

Service Discovery UC Service Profile including IM&P server, CTI, Voicemail, etc. ý þ þ

Allows for hybrid deployment of hosted WebEx Connect IM&P and on-premise CUCM

ILS: Directory URI Replication

Sync’s URI and reachability across multiple enterprise clusters ý þ þ Nice to have, especially for video

UDS: Directory Search Sorting

Directory search results returned based on first name, last name, email ID

ý þ þ Also includes UDS performance enhancements

ICE (Interactive Connectivity Establishment)

Optimized media between remote endpoints ý ý þ

Page 17: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17

Media Traversal

•  “C” calls “A” on-premise.

•  Media firewall traversal over Expressway solution.

•  VCS Control de-multiplexes media and forwards toward “A”

Media Relay

•  “C” calls “B” off-premise.

•  Either B or C are behind NAT

•  Media is relayed via Expressway solution.

Direct Media

•  “B” calls “D” off-premise.

•  Both “B” and “D” are ICE-enabled and publically addressable.

•  Media flows directly. A

Inside firewall (Intranet)

VCS Expressway

VCS Control

Collaboration Services

UCM

Internet

DMZ Outside firewall

Cisco WebEx

B

C

D SIGNALING

MEDIA

UCM provides call control for both mobile and on-premise endpoints

Page 18: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18

•  Collaboration Edge is completely transparent to UCM

•  Think SIP line side integration, versus SIP trunk

•  No requirement to build a SIP trunk on UCM to VCS Control or Expressway

•  Remote Jabber clients registering to UCM through Expressway will appear to UCM as VCS Control IP address

•  Remote fixed endpoints registering to UCM through Expressway will appear to UCM as VCS Control IP address

Page 19: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19

ü Most widely adopted protocols in their categories

ü Demonstrable Interoperability

ü Proven Components

ü Allows for services to be delivered from multiple locations

ü Secures only application data, not entire device

ü Requires no reconfiguration from user

SIP Secure Media –

RFC 3711

HTTP XMPP

TLS

TCP UDP

Application Layer

Transport Layer

Application

Page 20: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 20

2014

1H 2H

1H RLS

2H RLS

AC

1

2012

Oct Nov

Dec

X7.2

Trial 1

AC

2

AC

3

Q1

Q2

Q3

Q4

2013

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec

FCS

Trial 2 Trial 3

EXPWY X8.1

Jabber 9.x

UCM 9.1+

Media / Analyst Launch

Page 21: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 21

Selective Media Encryption

•  SRTP termination: RTP->SRTP, SRTP->RTP

•  VCS is now able to selectively add & remove encryption capability for SIP calls flowing through it.

•  Limitations SIP & Interworked call feature only (Not available in native H.323 call)

Controlled TLS terminations

•  White List connections via regex matching on certificates

•  Limitations Maximum of 10,000 regex matches on default zone

Page 22: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 22

Use your favorite device — anywhere

•  Jabber for Win, Mac, iPad*, iPhone, Android, JabberC*, SDK*

Unprecedented Scale…

•  10,000 TLS terminations

•  Maintain state for up to 5,000 registrations

•  500 CPU-intensive video calls, ~2,000 audio calls

•  Cluster support for 4X scale

Simplify TelePresence Deployment…

•  EX, MX, C, SX (TC7.x) series TelePresence

•  Provision, Configure, Register via UCM remotely without a VPN

Core Collaboration Experiences…

•  IM&P on-prem or cloud

•  Hybrid service support

•  Voice & Video

•  Visual Voicemail

•  Directory

•  Direct Media w/ICE (UCM 10.x)*

Simplified Licensing…

Page 23: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 23

Video Communication Server (standalone video)

Expressway for UCM (Unified Communications)

VCS Control Appliance VM VCS Control

Expressway C Appliance VM Expressway C

VCS Expressway Appliance VM VCS Expressway

Expressway E Appliance VM Expressway E

VCS Starter Pack Express Appliance

Page 24: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 24

•  Solution engineered specifically for the UCM install base

•  Remote and mobile traversal capabilities to Jabber and fixed endpoints for existing and new UCM install base

•  B2B Video and Audio for UC customers (Expressway Rich Media Session a la carte)

•  Connects Cisco UC solution to other 3rd party UC solutions (Microsoft Lync 2013) (Expressway Rich Media Session a la carte)

•  Available only for UCM 9.x and above customers

•  Leverages existing UCM licensing model

•  A solution for standalone video customers

•  Standalone video applications for video-only customer base (GK, SIP Proxy, interworking, traversal)

•  Positioned to non-UCM customers

•  For customers that require endpoints to register to VCS

•  Leverages H.323-SIP interworking and support for standards compliant 3rd party endpoints

•  Connects Cisco UC solution to other 3rd party UC solutions (Microsoft Lync 2013)

•  No changes in licensing model

New X8.1

Page 25: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 25

UCM 9.x Expressway C (no cost)

Expressway E (no cost)

Internet

•  Mobile  and  Fixed  Endpoint  registra3on  

•  IM  &  Presence  •  Video  and  Audio  Media  Sessions  

•  No  Cost  with  UCM  9.x  

Jabber and Fixed Endpoints Registered to

UCM

B2B Video and Audio Media Sessions

•  Business    to  Business  Video  and  Audio  Media  Sessions    

•  Expressway  Rich  Media  Session  $1500  a  la  carte  

3rd Party Video and Audio Media Sessions

•  Separate  Expressway  C  Server  required  for  Lync  Gateway  

•  MSFT  Interoperability  Op3on  Key  Required  

•  Expressway  Rich  Media  Session  $1500  a  la  Carte  for  all  Sessions  

No  Addi3onal  Cost  

Page 26: Cisco Virtual Update: Expressway at the Collaboration Edge · • That many devices would wrap around Earth’s equator 5.4 ... VCS Control connects via the firewall to a specific

Thank you.