mark krischer january 2015 en perfect pitch the intelligent branch

Mark Krischer

January 2015

EN Perfect Pitch

The Intelligent Branch

2Cisco Confidential © 2014 Cisco and/or its affiliates. All rights reserved.

VS[ I n Re t a i l ]


VS[ I n E d u c a t i o n ]


VS[ I n Fi n a n c i a l S e r v i c e s ]


The Business Landscape is Changing

New Digital Experiences Make the Network More Relevant

78% Of executives state achieving digital transformation in two years is critical*

MIT Sloan Management Review, 2013 Digital Transformation Global Executive Study

FINANCE EDUCATIONGenerate More Sales Customer Loyalty Improved Learning

Books iPadsTellers Remote Agents

Stores Omni-channel

RETAIL


Emerging Demands

Applications Are Moving to the Data Center and Cloud

Internet Edge Is Moving to the Branch and User Device

Increasing Pressure on the WAN

More Mobile Data Traffic by 2018

10x

Mobility

of CIOs Expect to Operate via the Cloud by 2015

%50Cloud

of Mobile Traffic Will Be Video

Video

%80

Branch

Cloud

Data Centers


Digital Innovation Overwhelms the Network

Branch

Social Networking

HD Video

HD

Omni-channel Apps

Mobile Apps

Online Trainin

g

SaaS Enterprise

Apps

Social Media

Guest WiFi

Digital Display

s According to Gartner average enterprise bandwidth will

increase by up to

50% per year

Source: Gartner: How to Cost-Justify WAN Optimization


Digital Innovation Overwhelms the Branch

Digital Display

s

Omni-channel

Apps

SaaS Enterprise

Apps

Guest WiFi

HD Video

Online Trainin

g

Social Media

Mobile Apps

OSUpdates

*Tech Target, Branch Office Growth Demands New Devices., 2013 ** Cisco Mobility Landscape Survey, 2014***Gartner, Forecast Analysis: Worldwide Enterprise Network Services, Q2 2014 Update ****Gartner: “Bring Branch Office Network Security Up to the Enterprise Standard, Jeremy D’Hoinne, 26 April. 2013.

80%

30%

20-50%

MORE USERS

MORE APPS

MORE THREATS

Of employee and customers are served

in branch offices*

Increase in Enterprise bandwidth per year through 2018***

Of advanced threats will target branch offices by 2016 (up from 5%)***

73%MORE DEVICES Growth in mobile

devices from 2014-2018**

Branch


WAN Demands Exceeding Budget

5 years Cisco Visual Networking Index, June 2014

Increase 3X in the next

GLOBAL IP TRAFFIC GROWTH:

will be flat or declining

Nemertes Research, August 2014

60% WAN budgets

LIMITED WAN BUDGETS:

Exhibit 2: The Widening Network Complexity Gap

Building Blocks of IT

End

poin

ts

on

the

Netw

ork

VoIP/Video

Virtualization

Cloud Computing

Mobility

SDN

IoT

IT Budgets

Network Complexity Gap

Source: ZK Research, 2014


Application Performance ImpactREVENUE LOSS

Source: Walmart Source: Gomez/Compuware

Conversation Rate Abandonment Rate

0 142 4 6 8 10 12

0

5

15

20

25

30

Aba

ndon

men

t R

ate

(%)

>150-1 3-4 7-8 11-12

Page Load Time (sec)

Population % Conversion Rate

Page Load Time (sec)

iPhone

EMPLOYEE PRODUCTIVITY

Employee ExperienceSource: Aberdeen Group

Decreased employee satisfaction

58%

Lost Revenue opportunity

50%

Decreased responsiveness to needs

47%

Damage to brand reputation

32%

Decreased effectiveness of IT staff

31%

Slower pages = lower conversion & higher abandonment ratesEmployee Experience

Customer Satisfaction


Mobile Devices Expect to be Connected

Third-Party Lab TestChromebook vs. Windows 8 Laptop Chromebook creates

as high as 692.2 times more network traffic

On average, Chromebook creates 152 times more network traffic

0 1 2 3 4 5 6 7 8 9 10

Asus VivoBook S200E Notebook Running Micro...

DocumentManipulation

PhotoManipulation

VideoManipulation

MusicManipulation

WebBrowsing

NoteTaking

TestTaking

0.14

0.27

2.73

0.21

6.06

5.008.65

18.30

77.39

145.56

211.29

57.84

10.80

41.33

http://principledtechnologies.com/Microsoft/Chromebook_PC_network_traffic_0613.pdf


Branch Scaling Challenges

1,000s100s10s0s IoE Scale10,000s

Complex and Tedious

Difficult to Provision Applications

Difficult to Troubleshoot

Slow Deploymentof Services

Enabling Innovation

10–20% Network Operations

80–90%


Branch Requirements

Rising User Expectation

Growing Security Attack

Faster Time to Market

Cost Optimization

App Performance

Advanced Threat Defense

Operational Simplicity

Agility/Simplicity

BUSINESS NEEDS IT REQUIREMENTS


Different Buyers Have Different Needs

AN INTELLIGENT BRANCHIS THE BRIDGE

LOBWAN Cost Reduction

Application Visibility and Control

Simplification

Personalized Experience

Rich Content Delivery

Application Agility

IT


Transform Your BusinessWhat if your WAN Could….

Hours Minutes

Pinpoint Application Issues Instantly

Improve Your Application Performance

1x 2x +

Increase WAN Utilization

Deliver More Bandwidth for Lower Cost

Backhaul Off-load

Consistent Security Policies

Ensure Security Over Any Connection

Device-by-device

System

Abstract Network Complexity

Automate and Orchestrate IT


Architecting theIntelligent Branch


Intelligent Branch Architectural Elements

Branch Unified CommunicationVoice with Survivability

High Quality VideoSession Border Controller

Branch Compute and StorageDistributed Server VirtualizationLocal Compute and StorageSeamless Management

Branch Security ServicesHigh Performance VPNAdvanced Threat DefensePolicy Enforcement

Intelligent WANTransport Independence

Intelligent Path SelectionApplication Optimization

Secure Connectivity

Intelligent Branch


Intelligent WAN

Intelligent Path ControlLoad Balancing

Policy-Based Path SelectionNetwork Availability

Application Optimization

Application Visibility

App AccelerationIntelligent Caching

Secure ConnectivityScalable, Strong

EncryptionApp-Aware Threat

DefenseCloud Web Security

TransportIndependenceProvider Flexibility

Modular DesignCommon Operational

Model

SECURE, RELIABLE AND HIGH PERFORMANCE APPLICATION EXPERIENCE

ISR4000-AX


Branch Unified Communications

Cisco® Unified Border Element

TDM Gateway

• FXO, FXS, and E/M Modules

• BRI Modules

TDM Gateway• T1 / E1

Modules

CME/eSRSTHCS Cloud Connector

DSP Media Services• Conferencing• Transcoding

Higher multiservice performance

• Multi-Core Arch separates signaling from media stream

ISR 4K ADVANTAGE

Greater density and scale• Up to 40 T1/E1

terminations

• Up to 6000 voice sessions; and up to 2000 SRST seats

• Cloud Connector for HCSSimpler for IT• OIR enabling without

downtime

• DSPs built into UC cards

• SRTP/RTP Internetworking

• Individual clock source


Branch Compute and Storage

Network | Compute | Storage

Clinic in a Box

Bank in a Box

School in a Box

Store in a Box

BLADE FORM FACTOR

Eliminate wires, components and save space

Rapidly provision hardware with plug-and-play modularity

Right-size hardware profile for the lean branch office

Consolidate physical servers to reduce costs

Improve application uptime and failure recovery time

Shorten time-to-deployment for new apps

SERVER VIRTUALIZATION

Unified Compute Infrastructure Management with UCS Director

Centralized provisioning and management across branches

Separate management domain for network and server teams

SEAMLESS MANAGEMENT


Branch Security Services

• Up to 1.3 Gbps encryption

• Advanced encryption (Suite B)

• Integrated crypto without additional hardware

• Single Policy allowing 80% reduction in policy rules sets

• Consistent segmentation across DC, Branch and Campus

• Industry-leading network intrusion detection

• Real-time web filtering – Cloud Based (Scansafe) or IronPort on-Premise

• DMVPN• GET VPN• Flex VPN

• Zone-Based Firewall

• Sourcefire®

IDS• Web Security

TrustSec®Integrated UC Security

VPN

HIGH-PERFORMANCE VPN

COLLABORATION SECURITY

NETWORK SEGMENTATION

ADVANCED THREAT DEFENSE

• Prevent toll fraud

• Firewall aware of voice protocol

• Endpoint authentication and traffic encryption


Enabling the Intelligent WAN


Intelligent WAN

Branch

Cloud

Data Centers

Internet

MPLS

3G/4G-LTEWAAS

Akamai ConnectPfR

AVC

CWS

Intelligent Path Control

Secure Connectivity

Application Optimization

TransportIndependence


Transport Independence

Two IPsec TechnologiesGETVPN/MPLSDMVPN/Internet

Two WAN Routing DomainsMPLS: eBGP or StaticInternet: iBGP, EIGRP or OSPFRoute RedistributionRoute Filtering Loop Prevention

Active/Standby WAN PathsPrimary With Backup

One IPsec OverlayDMVPN

One WAN Routing DomainiBGP, EIGRP, or OSPF

Active/Active WAN Paths

Internet MPLS

Branch

DMVPN

ASR 1000 ASR 1000

ISP A SP V

TRADITIONAL

Data Center

Internet MPLS

Branch

DMVPN DMVPN

ISP A SP V

ASR 1000 ASR 1000

IWAN

Data Center


Transport IndependenceDeployment Modes

Dual MPLS

Internet

Highest SLA guarantees– Tightly coupled to SPẋ Expensive

Public

MPLS

Branch

MPLS

Hybrid

More BW for key applications Balanced SLA guarantees– Moderately priced

PublicEnterprise

Branch

MPLS+Internet

Dual Internet

Best price/performance Most SP flexibility– Enterprise responsible for

SLAs

Internet

Branch


Intelligent Path Control

Branch

Cloud

Data Centers

Internet

MPLSOther traffic is load balanced to maximize bandwidth

Voice/Video/Critical will be rerouted if the current path degrades below policy thresholds

Voice/Video/Critical take less expensive path while policy requirements are met


Intelligent Path ControlPerformance Routing

Define path optimization policies on the Hub MC

load balancing, path preference, application metrics

DSCP Based PoliciesApplication Based Policies

Define your Traffic Policy

ISR G2

ASR1K

Traffic flowing through the Border Routers (BRs) that match a policy are learned

Traffic ClassesUnified Performance

Monitor

Learn the Traffic

MC

BR BR

LearningActive TCs

Traffic Classes

Measurement

Report the measured TC performance

metrics to the Master Controller for policy

complianceUnified Performance

Monitor

MC

BR BR

PerformanceMeasurements

Path Enforcement

Master Controller directs BR path

changes to keep traffic within policy

Route Enforcement module in feature path

MC

BR BR

TC Path


Intelligent Path ControlPerformance Monitor

Metric Collection(Performance Monitor)

Correlation, Aggregation, AlertsFlexible NetFlow

Traffic

Export NetFlow v9 or IPFIX

Metrics Data

Prime Infrastructure

Partners

Metric ProvidersTraffic Statistics

Application Response TimeMedia Performance

URL Collection

Application Recognition(NBAR2)

Deep Packet Inspection Engine identifying +1000

applications

Control: QoS, PfR

Path ControlApplication PriorizationApplication Bandwidth

Management


Application Optimisation

Now SupportsAkamai Intelligent Platform | Single-sided Optimization | Secure Direct Internet

Access

AKAMAI CONNECTWorld’s Best Optimization Solution for HTTP Traffic

AKAMAI CACHING AND ACCELERATIONIntranet HTTP

CachingDynamic OTT HTTP Caching

Akamai Connected Cache

Content Pre-positioning

CISCO WAASLZ

CompressionTCP

OptimizationData

De-duplicationApplication Specific

Acceleration


Application OptimisationAkamai Connect

Networking Leader 7M+ Router Footprint

(80%+ of branch)

Leader in WAN Optimization, VPN, Firewall and Web Security

IT/Networking Customers

Cloud Services Leader Global Delivery Platform

(154,000 servers)

Leader in Web Acceleration, Content Delivery, Internet Traffic Engineering

Line of Business Customers

Cisco IWAN with Akamai

Connect

Complementary Platforms, Technology and Customers


Application OptimisationTransport and Origin Independence

• Transport and Origin Independence• WAN & Direct Internet Access enterprise network topologies

• Single or dual sided WAAS deployments

WAASWAN

End-user

Internet

Intelligent Platform

Akamai Connect integrated into Cisco ISR-AX

routers

WAASISR-AX+AC

Data Center Branch


Secure Connectivity

Branch

Cloud

Data Centers

Internet

MPLS

CWSWeb Filtering, Adv.

Malware Detection & Threat Analystics

IWAN Tunnels for HQ/DC Traffic

Secure Public Cloud and Internet Access

CWS Encapsulated HTTP, HTTPS

ISR Cloud Connector to CWS datacenters

• Scalable security via DMVPN enforced locally

• Firewall/IPS support to protect for external threats

SECURE BRANCH EDGE

• Secure local Internet breakout with encapsulated traffic

• Improved application performance at lower costs

OFF-LOAD CORPORATE WAN

• Real-time web filtering with Application Visibility & Control

• Advanced Malware Protection and Threat Analystics

CLOUD WEB SECURITY


Secure Connectivity

Web Filtering, Adv. Malware Detection & Threat Analystics

PrivateCloud

BranchPublicCloud

WAN1(IP-VPN)

WAN2(Internet)

InternetCisco

Cloud Web Security CWS

IWAN Tunnels for HQ/DC

Traffic

Secure Public Cloud and Internet

Access

CWS Encapsulated HTTP, HTTPS

ISR Cloud Connector to CWS datacenters

• Scalable security via DMVPN enforced locally

• Firewall/IPS support to protect for external threats

SECURE BRANCH EDGE

• Secure local Internet breakout with encapsulated traffic

• Improved application performance at lower costs

OFF-LOAD CORPORATE WAN

• Real-time web filtering with Application Visibility & Control

• Advanced Malware Protection and Threat Analystics

CLOUD WEB SECURITY


IWAN ManagementCloud-Based Management

• Speed: Eliminates manual building of WANs

• Agility: Quick configuration updates and IOS upgrades

• Dynamic: Compatible with onePK for app aware WANs

• Reduced OPEX: Automated WAN orchestration

• Cost Savings: Centralized hybrid WAN management

Automates Deployment and Lifecycle Management

On-Prem Management

Cisco Prime

• Lifecycle: Simplified deployment and configuration

• Configuration – Plug and Play deployment automation

• Health Assurance: Improved application delivery

• Compliance: Regulatory requirements and best practices

Enterprise and IntegratorLifecycle Management

Specialized Management

• Integrates with Cisco App Visibility and Control

• Monitor and analyze app-level traffic

• End-to-end flow visualization

• Troubleshoots hop-by-hop to pinpoint source

• Fix and verify QoS and App in realtime

Application Aware Network Performance Management


IWAN Management Evolution

Device Abstraction Layer

REST APIs

APIC-EM Services (Partial)

CLIOnePK/Openflow

PKI Svc

NetFlowSvc

PnPSvc

NetworkSvc

EventsSvc

Inventory

Svc

Traditional Management Systems

Cis

co P

rim

e

Evolution

Apps

PartnersIWAN

Transport

PKI Automatio

n

SecurityIntelligent

Path Control

Cisco IWAN Apps

Application

Experience

PnPProvisionin

g

EarlyCY2015

Capacity Planning, Troubleshooting, Events, Change controlPrime

APIC-EM


Delivering theIntelligent Branch


Revolutionary Platform ArchitectureBuilt to Delivery the Intelligent Branch

Converged Branch with UCS® E-Series

Integrated compute Up to 8 cores, 48GB RAM, 3TB

HDD

ACI for IWANFast IT with EPIC-EM

Best of Breed SecuritySourceFire IPS, Scansafe

Virtualized + Services Aware ArchitectureAppliance like performance

LAN like PerformanceOver WAN with IWAN & AKC

Pay as You Grow2X Performance with License

4-10X Faster than G2Cisco ISR

4000


Cisco® 4451 with Cisco UCS® E-Series and SM-X Layer 2/3 Switch Module

“The 4451 is poised to address the gap between networking functions that are fully virtualized and those that are still embedded in dedicated networking devices…transforming a product line that began as a way to connect remote sites to corporate networks and the Internet into a small-scale data centre in a box.”

—Kurt Marko, Best of Interop Judge

Best of Interop Networking WinnerCisco 4451 ISR Converged Branch Infrastructure


ISR G2 and 4000 Series PlatformsPricing and Performance

3925 (100 Mbps)$95003RU

3945 (150 Mbps)$13,000

3RU4431 (500 or 1000 Mbps)

$11,000 to $13,0001RU

3945E (350 Mbps)$18,000

3RU

3925E (250 Mbps)$15,0003RU

4451 (1 or 2Gbps)$18,000 to $20,000

2RU

2921 (50 Mbps)$36952RU

2951 (75 Mbps)$75002RU 4351 (200 or 400 Mbps)

$8000 to $95002RU

2911 (35 Mbps)$26952RU

4331 (100 or 300 Mbps)$3300 to $4800

1RU

1941 (25 Mbps)$1595

2RU

2901 (25 Mbps)$19951RU

4321 (50 or 100 Mbps)$1995 to $2995

1RUDesktop


Hosting Business Critical Application

Server Virtualization Consolidate physical servers

to reduce costs Improve application uptime

and failure recovery time Shorten time-to-deployment

for new apps

Blade Form Factor Eliminate wires, components

and save space Rapidly provision hardware

with plug-and-play modularity Right-size hardware profile for

the lean branch office

Network | Compute | Storage

Clinic in a

Box

Bank in a Box

School in a Box

Store in a

Box


Compute and Storage ServicesSca

labili

ty

Feature Richness

CISCO UCS-E140S

• Intel 4 Core Processor• 8-16GB RAM• 200GB-2 TB Storage• 2HHD

CISCO UCS-E180D

• Intel 8 Core Processor• 8-48 GB RAM• 200GB-3TB Storage• 3HHD

CISCO UCS-E160D

• Intel 6 Core Processor• 8-48 GB RAM• 200GB-3TB Storage• 3HHD

CISCO UCS-EN120S

• Intel 2 Core Processor• 8-16 GB RAM• 500 GB – 2 TB

Storage• 2HHD

Local Compute:Bare metal or hypervisor

Local Storage:Backup

Enterprise Applications: VDI, Physical Security, PoS

Network Services: vWLC, vWAAS

Hypervisor Support:VMWare, Hyper-V, and Citrix Certified


Security ServicesNETWORK / USER

CONTEXT

How

WhatWho Where

When

CONSISTENT POLICY ACROSS WIRED, WIRELESS and VPN

POLICY MANAGEMENT AND ENFORCEMENT

IdentityServicesEngine

TrustSec


Solving Customer Challenges with an Intelligent Network


Delivering Omni-Channel Retail Solutions

Reduction in mobile app response time38➛6SECONDS

Increase in bandwidth utilisation2-4x Decrease in communications expenses30-40%


Retail Customer CTO

“We have put [Cisco IWAN with Akamai Connect] in the Saks Fifth Avenue store that has only 1.5Mbps and we have better performance… than in our head office on Madison Avenue that has a 100Mbps+ connection.”


The Challenge• International rollout of omnichannel Web app as first step of new in-store digital experience strategy

• iPads often found in drawers vs sales associates’ hands due to omnichannel application performance issues

• WAN bandwidth could not be increased due to location and budget constraints

The Benefits• Objects served out of cache offloaded WAN and improved application performance

• Improved performance key driver for employee adoption and expansion of in-store digital experience strategy

Retail

65% Load Time reduction

Up to 400MB offloaded from

WAN daily


The Challenge• Low bandwidth direct to Internet network links at remote branches

• Application performance issues due to constrained networks

The Benefits• Objects served out of cache offloaded network links and improved performance

• Deferred direct-internet-access link upgrade

Education40% Avg. Load Time reduction

Up to 90% of data served from cache


The Challenge• Low bandwidth direct to Internet network links at remote branches

• Application performance issues due to constrained networks

The Benefits• Objects served out of cache offloaded network links and improved performance

• Deferred direct-internet-access link upgrade

Service Provider40% Avg. Load Time reduction

Up to 90% of data served from cache


The Challenge• Software and app updates continue to grow,

consuming network bandwidth• iOS 7 Update was ~700MB• iOS 8 Update was ~1.1GB

The Benefits• Split tunneling ensures updates go direct to

CDN, bypassing Enterprise WAN and Data Centre

• Cache computer and mobile OS and application updates locally on the branch router

• Caching can be configured to continue even if the initial update fails to complete

Enterprise

Updating only 3 iPads resulted in 2.67GB of WAN offload


Opportunity Enable iPad for HD catalog and line breaking Employee video training RFID tags drive digital signage

Challenge Re-energize customer in-store experience Improve mobile application performance Drive customers to highest margin products

80%Improvement in content delivery

3xCustomer time in store

Customer SuccessThe Future of Shopping for a Global Luxury Retailer


Opportunity Enable lower cost connectivity Enhanced security across broadband

Challenge MPLS WAN Costs 14,000 bank branches worldwide

40%Reduction in WAN costs

Customer SuccessIncrease Bandwidth at a Lower Cost for a Large Bank


Opportunity No touch provisioning Utilize broadband and 4G Seamless Rich Content delivery

Challenge Global temporary work sites across 6 continents MPLS provisioning too slow Heavy CAD content difficult to deliver uniformly

6 mos 1 day

For 160 global sites

Customer SuccessPop-up Sites with Global Resource Management


Opportunity Reliable Connectivity between Ships

and Land for Voice & Data Exceed Security Standards

Challenge Simultaneous Connectivity:

Satellite/Radio and LAN Carrier Services Meet Strict Government Compliance

30 - 40%Reduction in Secure Telecom costs

Customer SuccessDecrease Communication Costs for European Coast Guard


Intelligent Branch Solutions

• No local servers• Full reliance on WAN• Simplicity, low cost• No service guarantees

Serverless Branch

Data Center/Cloud

WAN/Internet

Branch Office

Lean Branch

Data Center/Cloud

WAN/Internet

Branch Office

• 4-5 local servers• Full reliance on WAN except for mission-critical applications

• All servers local• No reliance on WAN• Complexity, high cost• Service guarantees

Full-Service Branch

Data Center/Cloud

WAN/Internet

Branch Office


Architectural Advantage

• Multi-core Services aware architecture

• Powerful compute & storage module

• Performance on demand

• WAN Cost saving with IWAN Arch

• LAN Like Performance over WAN

• Reduce Truck Rolls

• OS Consistency across campus & WAN : IOS-XE

• Deterministic performance

• Reduce downtime with OIR

Fast IT with:

• Cisco Prime

• EPIC-EM

• Eco-System Partners : Glue, Live Action etc


Delivering Customer Value

https://express.salire.com/signin.aspx?t=Cisco

No additional support costs for UCS E-series

Deployment Costs

Hypervisor Capital Hardware Capital

Shipping Costs

Multiple hardware vendors

Router + UCS-E

2K

6K

10K

14K

18K

DELIVERS THIS

Reduced truck rolls by spinning a VM instead of an appliance

Power coolingsavings

80%

TO THIS

Cisco ISR 4000 With UCS E-Series

WAN Optimisation

Security

Switch

Wireless

Voice

FROM THIS

Traditional Branch IT

Server

Router

















Delivering Business OutcomesREDUCE COSTS AND

COMPLEXITYIMPROVE SECURITY

UNCOMPROMISED USER EXPERIENCE & MOBILITY

Elevate defense at branchEnable direct Internet Access

Scale Security

Best of breed defense99% efficacy

Advanced Threat Defense

Empowered employeesInstant application response

Increase Productivity

Elevated customer engagementIncrease Dwell time

Greater Revenue

Ensure quality experienceOff-load WAN to slow costs

Maximize WAN Investment

Meet time to market needsEliminate repetitive, error prone

tasks

Automate IT

mark krischer january 2015 en perfect pitch the intelligent branch

Documents

cisco confidential

cisco andor

intelligent branch slide

branch offices

education slide

wan optimization slide

branch office network

branch office growth