Cisco Connect Ottawa 2018 multi cloud

Cisco Connect Ottawa
Canada • 2 October 2018
Global vision.
Local knowledge.

Brian Hanson
Nigel Gocan
Wesley Toman
Cisco Multicloud Portfolio

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Source: IDC CloudView, April, 2017, n=8,293 worldwide respondents, weighted by country, company size and industry
Evaluating or using
public cloud
85%
Taken steps towards a
hybrid cloud strategy
87%
Plan to use
multiple clouds
94%
Among cloud users
It’s a multicloud world

Transforming management of multicloud
complexity
FRAGMENTED
COMPLEX
NO DATA CONTROL
SaaS
SaaS
SaaS
SaaS
SaaS
SaaS
SaaS
Other
Public
Clouds
Azure
AWS
SaaS
PrivatePrivate

Our Multicloud Approach
Helping customers to connect, protect, and consume their clouds
ManagementNetworking Security AnalyticsMulticloud
Software

Multicloud
Portfolio
Cloud
Connect
Cloud
Protect
Cloud
Advisory
Cloud
Consume

Cisco Multicloud Portfolio — Use Cases
• Define cloud strategy
• Build onboarding approach
• Create business case for
connect, protect, consume
• Optimize cloud applications
• Gain visibility into application
performance and spend
• Migrate to cloud and manage
the full application lifecycle
• Deliver container
management for
Kubernetes-based app
environment
Cloud
Consume
Cloud
Advisory
• Securely extend private
network to public cloud
• Optimize the performance of
cloud connectivity
• Secured branch access
to SaaS
• Protect endpoints
• Protect cloud applications
and data
• Protect workloads
• Identify threats in user and
device behavior
Cloud
Connect
Cloud
Protect

Cloud
Consume
Cloud
Protect
Cloud
Connect
Cloud
Advisory
Multicloud
Portfolio
Advisory Services
• Cloud Migration
• Cloud Connect
• Cloud Protect
• Cloud Consume
(Delivered by AS/Cisco Partners)
• CloudCenter
• AppDynamics
• Container Platform
• Tetration
• CWOM
Cloud
Consume
Cloud
Advisory
• CSR 1000v
• vEdge + Umbrella
• Meraki vMX
• Umbrella
• Cloudlock
• Cloud Email Security
• Stealthwatch Cloud
• Duo 2FA
• Tetration Cloud
• AMP for Endpoints
Cloud
Connect
Cloud
Protect

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cloud Connect

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public#CLUS
Cloud Connectivity Challenges
On-Prem Datacenters
Remote Branches
Public Cloud
• Complexity & Dependency
• Inconsistent security policies between
private & public
• Performance and ambiguity for best
path to reach the cloud
Applications
Users
Cloud
Connect
TECSEC-2070 10

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cloud Connect – Connecting to the cloud Cloud
Connect
Web
Database
Application Web
Remote
Branches
Public Cloud
Securely
extend and optimize
network to cloud
Direct internet access
from branches
Public Cloud
Data Center or CoLo
Optimize network routing
in clouds, SaaS
SaaS
Cloud to cloud

Public Cloud Connectivity Options

Cloud WAN Architecture
Branch
HQ
Data Center Enterprise
WAN
Public Cloud
IAAS/SAAS
SP/CoLo/ CXP
Provider
Internet
Gateway
Internet
Branch
ASR1K
ASR1K
ISR 4K
ISR 4k
vEDGE
vEDGE
vEDGE
vEDGE
ASR1K
vEDGE
CSR1kv
vEDGE
3
2
vMX
vMX
1

CSR1000v for all public clouds
• Extend Enterprise Architecture to Cloud
• Consistent operational model (AAA, CLI)
• Common routing fabric securely extended to cloud (BGP,
EIGRP, OSPF, P2P IPSec, DMVPN, etc)
• Secure DirectConnect and ExpressRoute circuits
• Enable Colo connectivity
• Across Region/Cloud Provider Interconnection
• Distribute applications globally
• Accessibility across on-prem and cloud locations
• Overcomes VPN tunnel limitation on AWS and Azure
• Monitor/Analyze/Shape traffic in Public Cloud
• Security(vFW, VRF, AVC, ETA)
• Assurance(IP SLA, BFD, QoS)
• Scale to hundreds of VPC across regions/accounts (Transit
VPC)
• Monitoring and troubleshooting with known common tools

Deployment Models
INET
AZ1 AZ2
R
VGW
AZ1 AZ2
R
VGW
Standard IPSec + BGP
AZ1 AZ2
R
INETMPLS
Application VPC Gateway
VGW IGW
Direct
Connect
Transit Hub Router
CSR1000v
vEdge Cloud
MPLS
Transit VPC

Cisco SD-WAN
Direct Internet Access and Gateways
Remote Site
SD-WAN
Fabric
ISP2
ISP1
Loss/
Latency
!
Data Center
MPLS
Regional
Data Center
• Detect application performance through
DIAs and gateways
- Customer/SP owned and
operated
- Security, performance, reliability
• WAN Edge routers chose best
performing path
- Per-Application, Per-VPN
• Automatic failover in case of
performance degradation
• Fully automated
Quality Probing

Key Benefits
Key Benefits
▪ CSR 1000v
▪ vEdge + Umbrella*
▪ Meraki vMX
Cloud
Connect
* Umbrella license is not included

Cloud Consume

Cisco Multicloud Portfolio — Products Mix
Cloud
Consume
Cloud
Protect
Cloud
Connect
Cloud
Advisory
Multicloud
Portfolio
Advisory Services
• Cloud Migration
• Cloud Connect
• Cloud Protect
• Cloud Consume
• AppDynamics
• CloudCenter
• CWOM
• Tetration
Cloud
Consume
Cloud
Advisory
• CSR 1000v
• vEdge with Umbrella*
• Umbrella
• Meraki Systems
Manager
• Cloudlock
• Tetration Cloud
Cloud
Connect
Cloud
Protect
* Umbrella license is not included

Cloud Consume Solution Overview
Data Center
Public Cloud IaaS Providers
Application Application Application Application Application
Cisco
AppDynamics
Cisco
CloudCenter
Manage
Deploy
Model
Cloud
Consume
Container
as Service
Cisco Cloud Platform
Cisco Tetration
Analytics™
Workload
Optimization
Powered by Turbonomic
Application

Digital Transformation
A car manufacturer is
also a software and e-
commerce company
The busiest bank
branch is the mobile
app on the 7:15 a.m.
train
Education publishing is no
longer about text books
The world’s largest taxi
company owns no vehicles
Every
business is
becoming a
software-
defined
business
Cloud
Consume

What is AppDynamics?
Cloud
Consume
• Application Performance Management
• End User Monitoring
• Infrastructure Visibility
• Business Performance Monitoring

How does AppDynamics solve problems?
Cloud
Consume
• Dynamic Application Map
• Triage & Root Cause Analysis (RCA)
• Monitor Every Single Click
• Real-time Baseline Performance
• Automated Code Level Diagnostics
• Context & Unlock Business Intent

Clouds are All Different
• Software-Defined Datacenter SDx and
cloud APIs, each different
• “Knobs” are all different in each
environment
Two Intractable Problems
1 2
<script> <script>
Data
Center
SDX
API
Private
Cloud
SDX
API
Public
Cloud
SDX
API
Cloud
Consume
Cloud Management Is
Infrastructure Focused
• Infrastructure automation largely solved
but need separate tools and scripts for
application automation

A Unique Approach
• Infrastructure-centric
• Cloud-specific
workflows and scripts
• Labor/services
intensive
Unique Script/
Workflow
Script-Based
Unique Script/
Workflow
Unique Script/
Workflow
Application-centric
Cloud agnostic
Low TCO
Application Profile-Based
Cloud
Consume

Cloud Consume: Container Platform

Containerization Challenges and Trends
in a Multicloud World
Multiple Open Source
Solutions
Hybrid Environments
Container Complexity
Networking, Security and
Storage
Source: CNCF Survey, June’2017
Container Trends
1. Kubernetes is emerging as the leading container orchestration platform
2. Containers are being adopted heavily in on-premise data centers
Source: Jan 17, 2017 cncf.io blog

Cisco Container Platform
Hybrid Cloud Optimized
E.g: Google, …
Flexible Deployment Model
VM | Bare metal  HX, ACI | Public cloud
Integrated
Networking | Management | Security | Analytics
Native Kubernetes (100% Upstream)
Direct updates and best practices from open source community
Turnkey Solution
For Production-Grade Container
Environments
Easy to acquire, deploy and manage | Open and consistent | Extensible platform | World-class advisory and support

• Deploy Kubernetes clusters on
HyperFlex IaaS (VMware)
• Container Networking
(Contiv / ACI)
• Persistent storage (Flex Driver)
• Layer-4 and Layer-7 load
balancing
• High availability
• Authentication with Active
Directory
• Role based access control
• Communication between
containers and external
VMs / BMs
• UI – Kubernetes, API
• Security (policies, encryption)
• Add / remove Kubernetes nodes
• Lifecycle management (OS
updates, Kubernetes upgrades)
• Monitoring (Prometheus)
• Logging (EFK)
Cisco Container Platform Feature Set
Kubernetes-as-a-Service
Setup ManageConsume

Application dependency and cluster grouping
Bare-metal, VM,
and switch
telemetry
Cisco Tetration
Analytics™ platform
Unsupervised
machine learning
Behavior analysis
On-premises and cloud workloads (AWS)
Bare-metal
and
VM telemetry
VM telemetry
(AMI …)
BM VM
BMVM
VM BM
BMVM
BM
VM BM
VMVM
Bare metal and VM
BM VM VM BM
Brownfield
 
BM VM VM BM
 
Network-only sensors,
host-only sensors, or both (preferred)
BM VM VM VM BM
Cisco Nexus® 9000 Series 

Cloud Consume:
Workload Optimization Manager

Decision engine
for
data center and multicloud
environments
• Software that continuously
analyzes workload
consumption, costs, and
compliance constraints and
automatically allocates
resources in real time
• It optimizes workload
performance by giving
workloads the resources they
need when they need them
Cisco Workload Optimization Manager
Dynamic optimization and decision automation

Key Benefits
 Better utilization of IT resources in context of business goals and cost
control
 Accelerate multicloud adoption by managing app lifecycle including rapidly
creating application profiles and deploying to target cloud environments with
one click
 Visibility into application behavior and dependencies, with built in
benchmarking of application performance and policy-driven application
deployment in target environments
 Deep visibility and insights into app performance, down to line of code level
across both server and client sides – allows to innovate and identify issues
that could impact business outcomes before they become a problem
 Better utilization of developer time by enabling valuable resources (e.g., app
developers, IT experts) to focus on application development and delivery
instead of monitoring and firefighting
 Fully curated, open container management for production-grade
Kubernetes, reducing complexity
▪ CloudCenter
▪ AppDynamics
▪ Container Platform
▪ Tetration
▪ Workload Optimization
Manager
Key Benefits
Cloud
Consume

Cloud Protect

A Multitude of Threats for the Multicloud World
Compromised
Accounts
Misconfigured Public
Cloud Settings
Lack of Cloud Visibility

Cisco Cloud Security
Cloud Security Assessment Services
Umbrella (SIG)
Duo
Network Access control
Security when
Going to the Cloud
Stealthwatch Cloud
Cloud Policy
Tetration Cloud
Virtual NGFW/NGIPS
Security for
Public Cloud
Cloudlock
Cloud Email Security
Security for
SaaS Apps

Security when
Accessing the
Cloud
- Umbrella
- Duo

Where does Umbrella fit?
Malware
C2 Callbacks
Phishing
HQ
Sandbox
NGFW
Proxy
Netflow
AV AV
BRANCH
Router/UTM
AV AV
ROAMING
AV
First line
Benefits
Block malware before
it hits the enterprise
Contains malware
if already inside
Internet access is faster
Provision globally in minutes

Cisco Talos feeds
Cisco WBRS
Partner feeds
Custom URL block list
Requests for “risky” domainsIntelligent proxy
URL inspection
File inspection
AV Engines
Cisco AMP
ENFORCEMENT

Visibility challenge
CIO
“I know about ~40 cloud
apps but there are others
that we aren’t aware of…
maybe double that number.”
Expectations Reality
“We use 3 or 4
collaboration apps.”
~1,200 cloud apps in use
> 20 collaboration apps in use

Shadow IT - App Discovery
Visibility
Optimization
and
enablement
App and risk
insight

Duo Security

The new IT reality
It’s more difficult to establish trust with users and devices
1
Apps are managed
on-premises plus
via IaaS and SaaS
2
Employees, contractors, others
access these apps with
BYOD and mobile devices
3
Attackers most often breach
data by directly accessing
these apps via compromised
passwords and devices

Any User, Any Device, Any Application, Any Location
New expectations for being able to deliver trust
Verify device
via compliance check
and agentless
inspection
Verify user
via multi-factor
authentication
Establish Trust
Intent-based
networking
Wherever there is an
access decision on your
network (on-prem or
VPN) or off your network
Trust-based
policy
Single sign-on
to multiple apps via
Cisco or 3rd-party
Adaptive Access
Users
Devices
Apps

Security for
SaaS Apps
- Cloudlock
- Cloud Email Security (CES)

Security for SaaS Apps
How can I protect the
number one threat vector?
What are my users
doing here?
What sensitive data
do I have here?
Are users accessing cloud
apps off the network?
How do I know if an admin’s
account is compromised?

Cisco Cloudlock addresses organizations’ most critical
cloud security use cases
Discover and Control
User and Entity
Behavior Analytics
Cloud Data Loss
Prevention (DLP)
Apps Firewall
OAuth Discovery and
Control
Shadow IT
Data Exposures
and Leakages
Privacy and
Compliance Violations
Compromised
Accounts
Insider Threats

Example: Protect Data in Office 365
See what users are
uploading
See what users are sharing
Prevent data loss via
outgoing email
Protect sensitive
content in transit
Do I know what my
users are uploading to
Office 365?
Do I know how sensitive
information is being
shared?
Is sensitive data
inadvertently
getting out?
Are my users encrypting
emails appropriately?

Cloud Email
Security (CES)

Automatically Remove Risky Files: Auto-remediation
Combat stealthy malware that evades initial detection
Cisco Email Security
Cisco
AMP Cloud
Office 365
Is the attachment malicious?
Clean - deliver the email
Malicious
Auto-remediate

Superior Threat Intelligence with Cisco Talos
Monitors 600 billion emails per day to provide more broad visibility
Sender analysis File analysis URL analysis

Security For the
Public Cloud
(Workloads and Infrastructure)
- Stealthwatch Cloud
- Cloud Policy

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential
Microsoft
Azure
Amazon
Web
Services
Google Cloud
Platform
Cloud security is a shared responsibility
Server-side encryption
Operating systems
Applications & data
Network and security group
configuration
Identity & access management
Client-side data encryption
& data integrity authentication
Customer
Responsible for security “IN” the cloud
Hardware
Storage
Database
Networking
Regions
Cloud Services
Availability zones
Cloud Provider
Responsible for security “OF” the cloud

Effective security is dependent on the ability to see
everything in your network
Network
Users
HQ
Data Center
Admin
Branch
SEE
every conversation
Understand what
is NORMAL
Be alerted to
CHANGE
KNOW
every host
Respond to
THREATS quickly
Roaming Users
Cloud

Stealthwatch Cloud makes it easy to address
cloud security challenges
Get complete & automatic
visibility of activity in the
public cloud
Detect threats
Automatically using
entity modeling
Simple to deploy and
easy to manage

Amazon Account
Amazon Web Services Architecture
SaaS Portal
API
Permissions allow
Stealthwatch Cloud
to read AWS
services
Role Created for
Stealthwatch Cloud
in Account
Stealthwatch
Cloud
Amazon VPC
Amazon
CloudWatch
CloudTrail
GuardDuty
Inspector
Inspector
Lambda
Config

Cloud Advisory
Services

Cloud Advisory Services for Multicloud
Entire
Cloud
Services
Portfolio
Adoption Srvs &
Implementation
Strategy & Analysis for
Roadmap, Gap & Proof
of Value for Use Case
of Cloud Protect
(2 weeks)
Proof of Value
Implementation
Cloud
Protect
3
Adoption Srvs &
Implementation
Strategy & Analysis
for Roadmap, Gap &
Proof of Value for Use
Case of Cloud
Connect (2 weeks)
Proof of Value
Implementation
Cloud
Connect
2
Adoption Srvs &
Implementation
Strategy & Analysis for
Roadmap, Gap & Proof of
Value for Use Case of
Cloud Consume
(2 weeks)
Proof of Value
Implementation
Cloud
Consume
4
Adoption Srvs &
Implementation
Strategy & Analysis
for Roadmap, Gap &
ADM Strategy (2
weeks)
Proof of Value
Implementation
Cloud
Advisory
1
CLOUD ADVISORY

Summary

Cloud
Consume
Cloud
Protect
Cloud
Connect
Cloud
Advisory
Multicloud
Portfolio
Advisory Services
• Cloud Migration
• Cloud Connect
• Cloud Protect
• Cloud Consume
• CloudCenter
• AppDynamics
• Tetration
• CWOM
Cloud
Consume
Cloud
Advisory
• CSR 1000v
• vEdge + Umbrella
• Meraki vMX
• Umbrella
• Meraki Systems
Manager
• Cloudlock
• Tetration Cloud
• Duo 2FA
Cloud
Connect
Cloud
Protect

Cisco Connect Ottawa 2018 multi cloud

Cisco Connect Ottawa 2018 multi cloud

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Cisco Connect Ottawa 2018 multi cloud

Similar to Cisco Connect Ottawa 2018 multi cloud (20)

More from Cisco Canada

More from Cisco Canada (20)

Recently uploaded

Recently uploaded (20)

Cisco Connect Ottawa 2018 multi cloud