designing cisco webex meetings serverd2zmdbbm9feqrf.cloudfront.net/2012/lat/pdf/brkcol-2180.pdfbuilt...

© 2012 Cisco and/or its affiliates. All rights reserved. BRKCOL-2180 Cisco Public

Designing Cisco WebEx Meetings Server BRKCOL-2180

2


Cisco WebEx Meetings Server

  Product Overview   Design Components   Hardware Licensing sizing   Network Layout   Deployment

Agenda

3


Cisco WebEx Meetings Server

  WebEx meetings in a private cloud ‒  Installed in your datacenter

  All-in-one conferencing solution ‒  Incorporates audio, web and video in a

single solution   Same great WebEx user experience ‒  WebEx clients for PC, Mac, iPhone, and iPad; high quality

video; sharing, annotation, and collaboration tools; recording and playback etc.

  Software based ‒  Designed for Cisco UCS Servers + VMware 5

  Integrates with Cisco UC suite ‒  Extends Cisco Unified Communications Manager to

conferencing, and meeting escalation from Jabber*. Also part of CUWL Pro

An Entirely New WebEx Deployment Model

4 * 1Q CY2013


Target Markets   Customers that want full in house control

of their IT applications   Organizations with mandated compliance

requirements ‒  Public Sector, defense departments and

contractors, intelligence agencies, etc.   Companies particularly concerned about

data privacy and data security ‒  Finance / banking, Healthcare, Insurance etc.

  Markets that are Internet restricted / regulated ‒  China, Russia, Mid East

  Cisco Unified MeetingPlace install base   Cisco Unified Communications Manager

install base

5


Customer Challenges   Control travel costs   Speed up functional processes and drive

competitive differentiation   Manage evolving employee expectations:

mobile workforce, virtual teams, wide array of devices

-----   Ensure security and policy control   Reduce outsourced OpEx audio conferencing

costs   Get more value out of existing Cisco Unified

Communications investments

6

Cisco WebEx Meetings Server - Details

7


WebEx User Experience

  Comprehensive conferencing solution that includes audio, web and video

  Rich set of real-time collaboration tools and features, as found in Meeting Center ‒  Document, applications, and desktop sharing

‒  Annotation and collaboration tools

‒  Integrated audio—participant list, active talker, video switching etc.

‒  Host controls—effectively manage meetings

‒  Recording and Playback

‒  Scheduling integration with Outlook 2007 and 2010

‒  Consistent, cross-platform experience on Windows, Mac, Smartphones and tablets

Industry-Leading Web Conferencing Solution


Mobile Device Support

  Meeting clients for mobile devices ‒  iPhone and iPad

‒  Android: planned for 2H 2013

  Key features ‒  Start, Join, Schedule and Attend meetings

‒  Chat, Audio, Call Me, Calendar, Pass Presenter

‒  Two-way video on iPad 2.0 and beyond

‒  Voice over Wi-Fi on iPad

Anywhere - anytime collaboration

9


High-Quality Video

  Engaging video experience ‒  High Quality (HQ) video: 360p resolution

‒  High Definition (HD) video: planned for 2H 2013

‒  Active speaker switching

‒  Full-screen video

‒  Share content and view video

  Mobile video experience on iPad and iPhone

A natural, face-to-face experience

10


Audio Conferencing Features

  SIP Trunk link between Cisco WebEx Meetings Server and Cisco Unified Communications Manager

Built on top of CUCM 7.1, 8.6 and 9.0

Call-In and Call-Me Teleconferencing

Mute / Unmute / Eject / Restrict Access

Join WebEx Meeting on Teleconference only (approximates an audio-only meeting)

VoIP audio support, join directly from PC using headset – no phone required

Hybrid Audio support – PSTN and VoIP in same meeting

IPv6 Support for teleconferencing

Integrate with your Cisco UC Infrastructure

11


CWMS + Jabber / CUP Integration

  Jabber for Windows – targeted for January 2013 Display scheduled WebEx meetings in Jabber “Meetings Tab” Start /Join WebEx meeting from Jabber “Meetings Tab” Start instant WebEx meeting from Jabber Client Escalate IM Session to a full WebEx meeting Launch WebEx meeting from daily calendar Meeting Reminders

  Jabber for Mac, iPad and iPhone Road-map for CWMS Phase II – formal commit planned later this year

12


Secure

  Behind the firewall installation   100% 128 and 256 Bit SSL encrypted

online meetings   Industry-standard 2048 Bit encryption

keys   Wild-card and SAN SSL

certificate support   Optional TLS/SRTP SIP

teleconferencing encryption   Hardened ‘Virtual Appliance’

with SE/Linux extensions   FIPS 140-2 Level 1 compliant

Designed for Customers with High Security Requirments

13


Manageable

  Virtualized ‒  Designed for VMware 5.0

‒  Rapid ‘Virtual Appliance’ Install

‒  UCS Spec based - no TRCs

‒  Runs on Cisco UCS Servers (B and C series)

Ex. UCS C-220 for smaller systems (50 and 250 Users)

Ex. UCS C-460 for larger systems (800 and 2,000 Users)

  Simplified system capacity model ‒  50 250 800 2,000 concurrent user configurations

‒  Each ‘port’ supports all features across the single port No need to reserve certain ports for video, some for audio etc.

‒  500 to 40,000* employee companies

Designed for Next Generation Private Clouds

14

* Can deploy separate systems to serve more users


Advanced Administration

Benefits   Securely manage inter-company collaboration

  Ease of administration and system manageability

  Reduced total cost of ownership

Feature highlights   Step-by-step guided install

  View system status at a glance

  Web based, real time system dashboard

  Easy user management—SSO, import users

  Pdf reports to track usage, licenses etc.

15


Localized

  Support for 13 Languages English (with Audio Prompts in US English and UK English) Simplified and Traditional Chinese Japanese Korean German French (France) Italian Dutch* Spanish (Spain)* Spanish (Latin America) Portuguese (Brazil) Russian*

Designed for customers worldwide

16

* These languages supported on Windows only. Mac road-‐mapped but not commiHed.


High Level System Architecture

17

INTERNET ENTERPRISE PERIMETER ENTERPRISE NETWORK

Cisco WebEx MeeKngs Server Virtual Appliance

Mobile and Internet Users

SAML Single Sign On based on Corporate Directory Credentials

SIP Trunk Teleconferencing

to CUCM Internal Users

Optimized for 100% Secure, behind-the-firewall VPN-less Access that integrates with your Corporate User Management and UC Infrastructure Minimal integration points with Telephony and enterprise networks


Scalability and Flexibility

Phase IV TBD

Video Integration and Collaboration

Phase III TBD

•  Cisco Telepresence Interop • MeeKng Spaces •  Single idenKty •  Support for 3rd party servers •  Some legacy MeeKngPlace features

•  AddiKonal public sector features

Mobility and IM Integration

Cisco WebEx Meetings Server 3 Year Vision

18

Phase II 2H 2013

• Mobility – meeKngs on Android

•  IM IntegraKon – Jabber/Mac, Jabber/iPad

• WebEx HD Video •  LDAP AD IntegraKon •  Some legacy MeeKngPlace features

•  Full IPv6 support •  In-‐MeeKng experience improvements

•  VirtualizaKon improvements

• MeeKngs overflow to SaaS WebEx for large meeKngs

•  Higher scalability

Phase II-IV Not Committed Yet

Pre-Deployment Considerations

19


HA or DR Required?


Determine System

Deployment Size

Licenses Needed

Is CWMS the right product?

Is CMWS the right product

21


Organizations Looking for Private Cloud Options

Emerging Markets Public Sector Data Privacy Sensitive Customers

CapEx vs. OpEx


SaaS WebEx & WebEx Meetings Server Comparison Cisco WebEx Meetings Server targets verticals with on-premises requirements

SaaS WebEx

Enterprise Edition – Meetings, Trainings, Events, Support

Broad range of 3rd party Plug-Ins

Extensive Customizability

Unlimited Scalability

Flexible Subscriptions – Minutes, Ports, Hosts

Add on audio separately

CWMS 1.0

Meeting Center

Outlook Calendaring Plug-In

Limited Customizability (Logo, PS, TOS, Legal Disclaimer)

2,000 Peak Attendees (Ports)

Perpetual User Licenses

Audio is built in (requires CUCM)


SaaS WebEx & WebEx Meetings Server Comparison Cisco WebEx Meetings Server targets verticals with on-premises requirements

MeetingPlace

Audio Conferencing Focus

Specialized Audio Features – E.g. Continuous Meetings / Reservationless Meetings

DSP Based Audio + Video

Port Based Licensing*

Customer buys audio, video, web separately

CWMS 1.0

Integrated Web + Audio + Video + Mobile Conferencing Focus

Basic Audio Conferencing + PC Based Audio

Virtualized Software

User Based Licensing

Customer gets web, audio, video, included as part of the user license

* MP 8.5 uses user based Licensing


HA or DR Required?


Determine System

Deployment Size

Licenses Needed



System Sizing

  UC Sizing tool will be updated to help size CWMS ‒ http://tools.cisco.com/cucst

UC Sizing tool

26


System Sizing Deployment Size Guidelines

27

Model Size Simultaneous Users

Company Knowledge Workers based on usage

Average Minutes Per Month Ranges

50 Concurrent Users ~ 500 heavy (10 to 1) ~ 1,000 avg. (20 to 1) ~ 1,500 light (30 to 1)

50-125 K (2500 min/port)

250 Concurrent Users ~ 2,500 heavy (10 to 1) ~ 5,000 avg. (20 to 1) ~ 7,500 light (30 to 1)

130-750 K (3000 min/port)


1000 K - 2.8 M (3500 min/port)


3-8 M (4000 min/port)

Estimates Only Actual Usage may vary – Also account for future growth


System Capacities Size indicated is Concurrent Users

28

Media Type 50 250 800 2000

100% SIP/PC Audio 50 250 800 2000

Encrypted Audio (sRTP) * 50 250 800 2000

Secured MC Web (SSL) 50 250 800 2000

50% HQ Video (SSL) 25 125 400 1000

Single Meeting Max Size** 50 100 100 100

Recorded Meetings Max at Peak 5% of Ports or 10% of Maximum meetings

*Includes high fidelity Codecs E.g. G722 **For larger MeeKngs customer can order Events Center Directly


Network Bandwidth Sizing

  1 Mb per use base assumption (Audio/Web/Video)   Typical Enterprise Usage 80% Internal/20% External ‒ Actual customer usage may vary on how they use conferencing and their business

practices…some enterprises may be 60/40 or 70/30 or 90/10 ‒ 800 Port system - Assume 80% internal/20% External

Internal = 800 x 80% = 640 x 1 MB = 640 MB on LAN/WAN maximum External 800 x 20% = 160 x 1 MB = 160 Mb on Internet Proxies/Firewalls maximum

  Webex Network Bandwidth White Paper   http://www.webex.com/pdf/wp_bandwidth.pdf


HA or DR Required?


Determine System

Deployment Size

Licenses Needed



CWMS Deployment Models – 3 Options   Non-redundant Centralized (Recommended for initial deployment)

‒  No redundant components

‒  Single Data center only

‒  With Internet Reverse Proxy (IRP) for External Access or without IRP

‒  1 hr to restore on same UCS Hardware in VMWare

  Level 1: High Availability (HA) (Optional, Can be added on after initial deployment) ‒  Centralized Single Data Center – multiple servers/blades (N+1)

‒  Active/Active resiliency – load sharing between all like VM’s

‒  No Latency between VMs

‒  With Internet Reverse Proxy (IRP) or without IRP (no external web access)

  Level 2: Disaster Recovery (DR) – (Optional , Can be added on after initial deployment) ‒  Centralized, Dual Data Center model – “cold standby” mode

‒  Multiple ways to “enable” this site

‒  Requires IT Manual intervention to use DR Site system

‒  Restore DB, Change DNS routing, Change UC Manager SIP Routing (checklist)

31


Deployment Layouts

32

50 Concurrent Users


Deployment Layouts

33


Deployment Layouts

34


HA or DR Required?


Determine System

Deployment Size

Licenses Needed



WebEx Meetings Server Licensing   User Based Licensing conforms with all other UC Products (effectively “named host”)

  Customers pay for per user licenses (provision as many Host users as they want/need)

‒  If customer has 1,000 employees and would like to enable all users to host a meeting they should purchase 1,000 licenses.

  License Enforcement counts the number of users who actually host meetings

‒  If this number of users exceeds the “Active User” licenses then the licensing system takes actions

‒  The count is the number of users who hosted a meeting in the past 30 days

‒  If the customer continues to over-use the Webex Meetings Server system we will give notifications to the admin, emails, Dashboard, SNMP and eventually shut down the system in 180 days

  Simultaneous Users (attendees and hosts) – is UCS hardware design based (50-2000 ports)

  Demo Labs/POC’s – No License key needed

‒  System can be run 180 days maximum on any UCS size platform (Per specifications)

‒  No restrictions on number of users provisioned or that can use the system

  50 User Minimum purchase & UCSS required for 1st year (15% of license)

36


CWMS Pricing (GPL)

  User (named host) licenses are perpetual/ pay once over lifetime   Cisco WebEx Meetings Server has four standard deployment options ‒  50, 250, 800, 2000 concurrent user configurations affect recommended hardware (see next

section)

  (Mainland) China pricing on per port basis * See technical slides for license enforcement details. Note that system will shut down after 6 consecutive months of license violations.

37

Base Price UCSS (Major Release Upgrades) ESW (Support & Minor Upgrades)

•  $230 per user list price •  Priced per named host*

•  15% ($35 per user) •  Mandatory for 1st Year •  2-year 15% discount •  3- or 5-year 30% discount

•  7% ($16 per user) •  Mandatory for 1st Year


CWMS Offer Details

38

Route to Market Availability Geographies*

GPL Now All (except China)

CPL Now China

CUWL Pro Now All

Collaboration Enterprise Agreement

Before December 20, 2012 Everywhere EA available (eg, US, Canada, UK)

Evaluation Copy Now All

* Not including embargoed countries


SKU Options for GPL

  Electronic delivery vs. standard delivery   Standard audio encryption vs. audio encryption disabled for Russian and

Turkish markets   Initial order (50 user minimum) vs. add-on order (5 user minimum)   Length of UCSS contract (one year minimum required)   Migration SKU for MeetingPlace installed base (see next section)

SKU Description WBXMTSVR1-K9 Standard CWMS on USB drive

R-WBXMTSVR1-K9 Standard CWMS with electronic download

WBXMTSVR1-AU-K9 CWMS with audio encryption disabled on USB drive

R-WBXMTSVR1-AU-K9 CWMS with audio encryption disabled with electronic download

L-WBXMTSVR1-ADDON Add-on licenses for existing system


License Enforcement – How it Works

Jan 1

•  License consumption count resets to 0

Jan 1

•  Admin creates User Accounts for Jane and John

Jan 5

•  Jane hosts a meeting

•  1 Active User License consumed

•  John schedules a meeting but does not actually host it

•  No License consumed

Jan 10, 15, 20

•  Jane hosts multiple meetings

•  No additional Licenses consumed

Jan 30

•  System reports 1 License consumed in January

Feb 1

•  License consumption count resets and starts again

Key element is a 1 month ‘window’ for License counting


License Overage – How it Works

100 Users are licensed to host CWMS Meetings

Over 1 month 150 unique Users actually host meetings

Customer is in overage by 50 users

Rolling 180 Day Grace Period begins during which Admin

can buy 50 AUL to come back into compliance

If during the 180 Day Grace Period, usage comes back to

under 100 Users then the customer doesn’t have to purchase new Licenses

Otherwise starting Day 1 of Grace Period, CWMS Admin

warns Sys Admin with E-Mails etc. on a monthly basis

Customer can buy 50 AUL to stay in compliance

If the Sys Admin ignores warnings for 180 days then

the system shuts down altogether even for end users – and can only be activated if

the Admin installs the right number of additional AUL

Give customer “Grace Period” to buy more Licenses


1st Time License ‘Activation’ – How it Works

Customer buys 100 Licenses from Cisco

Cisco emails a PAK (PDF) file to customer

The customer then brings up an CWMS System

They go to the ‘Licensing Settings’ Section of CWMS

Admin and are presented with a USI (Unique System

Identifier) for that CWMS System

Ideally if CWMS detects a connection to the Internet then

it can transmit the PAK Information and USI to Cisco Licensing Site automatically.

License Activation is complete at this point

Otherwise, they see instructions to cut-and-paste

the USI + PAK ID to the Cisco Licensing Site manually

Cisco Licensing emails them the actual License file

Customer uploads the License file into CWMS Admin

100 Users can now host CWMS 1.0 Meetings

Hardware and Network Requirements

43


General Requirements Category System Requirements UCS •  UCS only, support for 3rd party servers planned

•  No Co-Residency in V1 (vcenter can be co-resident in certain deployment types) VMware •  VMware 5.0

•  vSphere 5.0 Standard for lower scale deployments •  vSphere 5.0 Enterprise Plus for higher scale deployments •  vCenter mandatory •  One License per socket

Networking •  LAN •  DNS must be configured prior to deployment •  NTP required on ESXi Host •  Redundant configurations must have all NIC interfaces duplicated and connected to independent

switching fabric to support LAN Fault tolerance •  WAN

•  Similar to SaaS WebEx for HQ Video, Web Share etc. •  Plan assuming 70-30 distribution in-company users (LAN) and internet users (WAN)

Storage (Network Attached Storage)

•  Needed only if customer wants to record meetings and keep system snapshots (for DR)

Teleconferencing •  CUCM 7.1, 8.6, 9.0 for SIP Trunk based Teleconferencing SSO (Single Sign On) •  If using ADFS 2.0 as iDP then customer needs AD (Active Directory) 2008R2

•  Other SAML 2.0 SSO Compliant iDP also supported – same as SaaS WebEx •  PingFederation V6.5.2, ADFS V2, OpenAM V9.5.4


UCS Requirements

45

Common Requirements •  UCS M2 Gen or above (Westmere Processor or above) w/AES-NI •  2.4GHz Processor or above •  vSphere ESXi version 5 •  Additional NIC recommended for VMware Management Network

•  vCenter version 5 - •  DAS minimum 4 Drives - RAID 10 •  SAN Supported •  RAID Battery Backup

50 Port. Requirements: vSphere Standard, 7200RPM HDD, 100Mbps NIC, 1TB HDD, Built in RAID - Example host C220-M3

Primary •  4 cores •  26 GB RAM •  1 NIC

IRP •  4 cores •  20 GB RAM •  1 NIC

Co-Resident Configurations Primary + vCenter •  8 cores •  36 GB RAM •  1 NIC

Primary + IRP •  8 cores •  40 GB RAM •  2 NIC

Primary + IRP + vCenter •  12 cores •  42 GB RAM •  2 NIC

250 Port Requirements: vSphere Standard, 7200RPM HDD, 1GB NIC, 1TB HDD, Built in RAID - Example host C220-M3

Primary •  12 Cores •  56 GB RAM •  1 NIC

IRP •  12 Cores •  36 GB RAM •  1 NIC

Co-Resident Configuration Primary + vCenter •  12 Cores •  56 GB RAM •  1 NIC

800 or 2000 Port Requirements: vSphere Enterprise Plus, 10,000RPM SAS, 10Gbps NIC, 1TB HDD, LSI 9260-8i - Example host C460-M2

Primary •  40 Cores •  80 GB RAM •  4 NIC

IRP •  40 Cores •  36 GB RAM •  4 NIC

Networking Details

46

Audio Deployment Considerations

49


CUBE CUBE

PSTN

H323 MGCP SIP

Unified CM Session Management Edi?on Cluster or UCM Cluster

Leaf Unified CM Clusters/ Leaf UC Systems

CUCM Clusters with

H323 QSIG Trunks to SME

PBXs/ CUCM Clusters with

SIP Trunks to SME

CUCM Clusters with

H323 Trunks to SME

PBXs with MGCP Q931 Gateway

Trunks

PBXs with MGCP QSIG Trunks

to SME

CUCM/PBX with SIP QSIG Trunks to SME

An SME cluster can interconnect 1000’s of UC/PBX systems using SIP, H323, or MGCP Trunks SME allows you to reduce UC system complexity by centralizing your dial plan and call rouKng

rules.

Cisco Webex Mee?ngs Server

Audio Deployment

Dial-‐In Examples: 800-‐XXX-‐XXXX Toll Free 919-‐XXX-‐XXXX Direct x5000 Internal Or CallBack


Call Control – Inbound/Outbound Call-back Teleconferencing ‒ Best End User experience to Join Web session first, then use Callback ‒ Controlled via SIP trunk outbound to UC Manager/Session Manager Edition ‒ Most efficient call processing methodology ‒ Can be disabled

Dial In Operations ‒ UC Manager /Session Manager Edition - SIP Trunks

Tested with MGCP Trunks end to end

Tested with SIP Telco Trunks end to end

‒  Inbound Calling can be from unlimited number of UC Manager clusters OR via intercluster trunks (ICT) between all clusters to a centralized UC Manager

‒ Normal customers deploy with 3 phone numbers: toll free, toll and internal dial numbers pointed to SIP trunks inbound to Cisco Webex Meetings Server system.

‒ Uses SIP Refer to provide load balancing across redundant systems


UC Manager SIP Trunk Sizing   Unified Communications Sizing Tool - CWMS will be available as part of tool

  http://tools.cisco.com/cucst/faces/newSol.jsp

  SIP Trunk configuration to Webex Meetings Server Sizing

  Voice Gateway Sizing: External Toll/Toll Free Guest & Mobile Audio

  Busy Hour – typical 10-11 am

‒  The busiest hour of the day when people are most likely to use their conference bridge.

  Busy Hour Call Attempts - (BHCA) 800 simultaneous calls maximum

‒  The number of calls attempted during the busiest hour of the day (the peak hour). This is the same as the calls-per-second (cps) rating for the busiest hour of the day, but it is expressed over a period of an hour rather than a second.

  Average Hold Time – typical conferences are 1 hr. AHT

‒  This is the period of "talk time" on a voice call; that is, the period of time between call setup and tear-down when there is an open speech path between the two parties.


Circular

SIP Trunking from UC Manager – Inbound SIP Processing

Admin Media Web

Admin Media Web

SIP 1

SIP 2

Toll Free Toll (DDI)

PSTN

Internal Extension: 5000

H.323/MGCP/SIP Webex MeeKngs Server(s)

HA Single Data Center

SIP Refer1

SIP Refer2


Audio Parameters   There is no loss in capacity when using complex/low bitrate codecs – For

the best user experience we recommend g.722 for the best quality audio   No echo cancellation built into Webex Server ‒  ISR Voice Gateway use DSP Echo Cancellation modules ‒ CUBE can also be used for Echo cancellation

  Can set QoS for SIP Audio – outbound Call-back   The most commonly purchased edition of CWMS has TLS/SRTP audio

encryption avalable ‒ Turkish and Russian customers may only purchase the "-AU" edition which lacks

TLS/SRTP and is thus compliant with Russian / Turkish import laws

CWMS Recording

55


Recordings

  Recordings are streaming only (no download or conversion supported)   Webex “.arf” formats (proprietary)   A unique URL link to the current recording is associated so that a user can

look up at the meeting later.   Available to both internal and external users via URL Link ‒ External users via Internet Reverse Proxy (IRP)

  Recordings Saved period End User controlled – no automated expiration   Administrator can Enable or Disable Recordings system wide   Requires Customer provided NFS Server on network for Recording

storage

Multimedia Audio/Web/HQ Video


Webex Server Recording Elements

 Application Share, Desktop Share  Participant List – who’s speaking/sharing  DocView, Presentation, Whiteboard  HQ Video (view from Presenter)  Chats  Polls  File Share(s)

Combined files include any of these functions used in meetings

57


Webex Meetings Server Recording Architecture Customer provides NFS server (with or without SAN) Customer responsibility to monitor storage capacity/file backup management

High – Level Architecture

NBR

Storage

Domain Nodes

Streaming ServerWeb Services Server

AndConsolidation Service

Primary Storage

RecordingsData

Meeting Node AV Node Telephony Node Web Node


Adding a Storage Server

End User Management/SSO

60


Managing User Profiles in WebEx Meetings Server Deployments There are three options: 1.  Manually define individual using administrative GUI 2.  Bulk import based upon .CSV/.TXT 3.  Federated SSO (Automated)

•  SAML 2.0 SSO End User Authentication

•  Auto-Create Profile (Option)


User Profile Parameters

•  Required Fields (First Name, Last Name, Email)

•  User receives email to set password


User Authentication

•  Authentication required to use WebEx services ‒ User ID for starting and scheduling meetings ‒ Passwords for joining meetings

•  Administrators can manage accounts and password requirements ‒ Password strength ‒ Password aging ‒ Deactivate accounts

•  Webex Federated Single Sign-On can be used to integrate corporate authentication processes with WebEx Meetings Server on premises behind corporate firewall (Optional)


WebEx Meetings Server SAML SSO Option   Enabled by Administrator if needed   Cisco Advanced Services highly recommended if complex LDAP environment   Users do not need to remember WebEx usernames or password   No user passwords are stored   Requires an Identity and Access Management (IAM) system that conforms to: ‒  Security Assertion Markup Language (SAML) 2.0

  Customers use native ‘Attribute/Group’ filtering capabilities found in the IDMS to allow groups of users access permissions

  “Deactivate” users is not available, however Users will not be able to authenticate via LDAP SSO and this will block access via LDAP disable account only.

  Webex Server Internet Reverse Proxy (IRP) allows authentication through firewall as long as IAM will allow authentication as well from outside firewall.

  X.509 Security Certificate uploaded into WebEx Server


Webex Federated SSO Customer Requirements   SAML 2.0 Compliant Identity & Access Management System (IAM) ‒  Microsoft Windows Server AD Federated Services(ADFS) and Geneva

‒  CA SiteMinder ‒  Ping Identity PingFederate ‒  Sun Microsystems OpenSSO Enterprise

‒ Others SAML 2.0 compliant

  X.509 Digital Certificate & SSL TLS Encryption ‒ Granted by Certificate Authority Or Customer generated


Integrated Windows Authentication (IWA)

  Customer AD Federated Services (ADFS) needs to be configured for IWA   After logging into Windows PC, no need to enter UserID/Password for WebEx

meetings/scheduling   Windows generates Kerberos/NTLMSSP token which IDMS validates and

Webex Federated SSO does not prompt for any userID /Password.


Federated SSO Types

  IdP Initiated ‒  Identity Provider Initiated ‒  SAML 2.0

  SP Initiated ‒  Service Provider Initiated ‒  (Webex Server) ‒  SAML 2.0

  PingFederation 6.5.2, ADFS V.2, OpenAM 9.5.4

MeetingPlace/MPE Migration

68


MeetingPlace/MPE Migration Path – Making Transition Easier for Installed Base

  Most MeetingPlace versions going end-of-sale ‒ MeetingPlace 8.5+ saleable for foreseeable future

  For MeetingPlace customers with UCSS contract, license upgrade path to CWMS ‒ Migration promotion without UCSS (planned to start by

December 2012)

  Migration will be forklift/ new system ‒ Can install new CWMS system parallel to existing MP system

and users can be phased over or hot cut

  CWMS will require CUCM, UCS servers, VMWare 5.0 vSphere


MeetingPlace/MPE Migration Scenario with Current UCSS Contract   MP/MPE customer with current UCSS contract in place   With valid UCSS contracts, customers will be able to migrate to CWMS

Via PUT Tool   License Exchange based on MP audio licenses ‒ 1:1 for MP audio User Licenses ‒ 10:1 for MP audio port Licenses ‒ No additional credit for SaaS WebEx contract

SKU Description MP-WMS-MIG= Standard encrypted version

MP-WMS-MIG-AU-K9= Audio unencrypted version


More Information/Links

  Cisco WebEx Meetings Server Cisco.com URL ‒ http://www.cisco.com/en/US/products/ps12732/index.html

  Partner Launch Accelerator ‒ http://www.cisco-practicebuilder.com/pla

  Cisco Pricing Tool (GPL) ‒ https://tools.cisco.com/qtc/pricing/MainServlet

  Quoting (sizing) Tool ‒ http://tools.cisco.com/cucst/faces/landing.jsp

CWMS Information links

71


Complete Your Online Session Evaluation   Give us your feedback and you

could win fabulous prizes. Winners announced daily.

  Receive 20 Passport points for each session evaluation you complete.

  Complete your session evaluation online now (open a browser through our wireless network to access our portal) or visit one of the Internet stations throughout the Convention Center.

Don’t forget to activate your Cisco Live Virtual account for access to all session material, communities, and on-demand and live activities throughout the year. Activate your account at the Cisco booth in the World of Solutions or visit www.ciscolive.com.

72

designing cisco webex meetings serverd2zmdbbm9feqrf.cloudfront.net/2012/lat/pdf/brkcol-2180.pdfbuilt...

Documents