Intuitive Network: la Rete Enterprise per il Digital Business che anticipa le azioni, blocca le minacce ed evolve in continuazione

1. Intuitive
Network: la Rete
Enterprise per il
Digital Business che
anticipa le azioni,
blocca le minacce ed
evolve in
continuazione

2. Ciao!
Io sono Marco VOI
EN Specialist di Cisco
mvoi@cisco.com

3. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Digital business moves at the speed of software.
What about your network?

4. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
The network is the
cornerstone of digital
success or failure

5. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Digital disruption
Lack of business
and IT insights
63 million new devices
online every second
by 20201
Complexity
Slow and error-
prone operations
3X more spending on
network operations
than on the network2
Security
Unconstrained
attack surface
6 months to
detect breach3
1 Gartner report - Gartner’s 2017 Strategic Roadmap for Networking
2 McKinsey study of network operations for Cisco – 2016
3 Ponemon Research Institute Study on Malware Detection, Mar 2016
Unprecedented demands on the network

6. Constantly
protecting
Constantly
adapting
Constantly
learning
The new
network
Support 100x more
devices, apps, users
Respond instantly to business
demands with limited
staff and budget
See and predict issues and
threats and respond fast
Our vision for the new network

7. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
“Intent-based networking systems
monitor, identify, and react in real time
to changing network conditions.”
– Gartner
Rewriting the networking playbook
with intent-based networking

8. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Intent-based networking with Cisco
Digital business
Intent Context
Security
Learning
Network
Powered by intent. Informed by context.
SecurityMobile IoT Multicloud

9. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco’s intent-based
networking
Shift IT time to business focus
Savings in network
provisioning time
67%
Improved issue
resolution
80%
Reduced security
breach impact
48%
Reduced operating
expenses
61%
*Source: Internal TCO analysis with large enterprise customer (actual results may vary)
** CapEx reduction based on converging IoT networks

10. Software-Defined Access
Cisco DNA Center
Network Data Platform for Assurance
Cisco® Catalyst®
9000 Series Switches
Enhanced Network as a Sensor with
Encrypted Traffic Analytics
Cisco ONE™ Software subscription licensing | Cisco DNA Advisory, Technical, Support Services
1
2
3
4
5

11. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Business imperatives
How do you defend
against threats?
Security
Ransomware
How do you scale for
the mobility and IoT
explosion?
Scale
IoT
How do you deliver
a great user
experience?
Assurance
Mobility
How do you manage
across a multicloud
world?
Cloud
SaaS

12. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Security

13. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
DataAvailability
Evolution of security threats

14. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialCompletely automated | Policy follows identity | Reduces lateral threat movement
Guest virtual network
Group 5 Group 6
IoT virtual network
Group 3 Group 4
Employee virtual network
Group 1 Group 2
Users
Devices
Apps
Drag policy
to apply
IT simplicity
• No VLAN, ACLs, or IP address
management required
• Single network fabric
• Define one consistent policy
Security
• Simplified microsegmentation
• Policy enforcement
Secure segmentation and onboarding:
Cisco Software-Defined Access

15. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Seeing and acting on ALL threats
How do you provide security while maintaining privacy?
Encrypted traffic
Nonencrypted
traffic
of organizations are victims
of malicious activity*
80%
of attacks used encrypted
traffic to evade detection*
41%
*Source: Ponemon Institute – Hidden threats in encrypted traffic

16. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco ConfidentialC97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Machine learning
identifies malware
Infrastructure view of the data
Google search
Firefox self-repair
Bestafera malware
Encrypted Traffic Analytics
Malware in
encrypted traffic
Security
AND privacy
Detection:
99.99% accuracy

17. 111011011000001
000111100111101
001000100001
Intent-based
network
Cisco
Stealthwatch®
NetFlow with
enhanced
telemetry at
line rate
Machine
learning Spot malware in
encrypted traffic
Cisco® ISE
(Identity Services Engine)
Cognitive Threat
Analytics
Automated policy
enforcement for
segmentation through
Cisco DNA Center™
*Source : Identifying Encrypted Malware
Traffic with Contextual Flow Data, Oct 2016
Threat detection
accuracy*
0.01%
False positives*
99.9%
See and act on threats - Now for encrypted traffic

18. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
IoT

19. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
“Shadow” Internet of Things
coming to every business
63M network
connections
per second
by 2020

20. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Box by box
Manual | Error prone
Automation
Scalable | Simple
Mass scalability | User, device, and IoT segmentation | Policy-based automation
4
hours
5
minutes
5
hours
5
minutes
ProvisionPolicy2
hours
15
minutes
Design
Automate IoT deployments at scale
Software-Defined Access

21. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Comparison of total workflow time
The old method The new method
Total workflow for One deviceFifty devices
25minutes50days11hours

22. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
IoT networking for the extended enterprise
Extended
enterprise
Buildings,
campuses,
branches
HQ,
data centers
Use cases
Warehouse
Distribution centers
ATMs, kiosks
Outdoor deployments
Roadways
Airports
Ports
Rail yard
Public safety, first
responders

23. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Assurance

24. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Where is IT spending their time?
Finding the source of an issue is a complex, end-to-end problem
WAN
Office site Network services data center
Client density
Client firmware
AP coverage
RF noise/
interference
WLC capacity
WAN QoS,
routing, ...
WAN uplink usage
Authentication
End-user
services
Configuration
Addressing
Impacts join/roam
Impacts join/roam
Impacts
quality/
throughput
Impacts both*
Impacts both*
Impacts
both*
Impacts
both*
Impacts
both*
Impacts quality/throughput
Impacts quality/
throughput
Impacts join/roam
Access
points
Local WLCs
ISE
DHCP
Mobile clients
Cisco®
Unified CM
Cisco
Prime®
43%of IT time is spent
troubleshooting;
#1 consumer of time
Source: Cisco DNA Customer Survey, June 2016

25. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Turn data into insights: End-to-end assurance
Onboarding
and
connectivity
Configuration
compliance
Visibility and
performance
Network
health
Office site Network services
data center
WAN
Local
WLCs
Access
points
Mobile
clients
DHCP
Cisco®
Unified
CM
NMS
SFCDC
SNOW
BOX
Cloud apps
Machine learning predicts issues before they impact the business

26. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
IT services leader
Case study
Challenge
• Invest in digital to improve experience
• Deliver services faster to open
revenue streams
• Simplify through hyper-automation
Business outcomes
• Time-to-market: Move resources
faster, from 1 week to minutes
• Workforce mobility: Policy follows users
• Client security and data privacy
maintained through segmentation
• SaaS simplicity: Higher
Office 365 uptime
New resource deployment
One week to minutes
Solution: Cisco DNA Center™, Identity Services
Engine, and Catalyst® 9000 platform

27. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Global
pharmaceutical
Case study
Challenge
• Enable researchers across 5 companies
to collaborate
• Maintain security policy
Business outcomes
• Cost savings: Consolidated 5
companies in new site to 1 network
• Simplified segmentation: Easy to
maintain groups and policy
• Employee productivity: Increased
collaboration across researchers over
high-performing Wi-Fi
Secure collaboration
Five companies and one network
Solution: Cisco DNA Center™, ISE, and Catalyst®
9000 platform

28. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cloud

29. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Innovations overwhelming the WAN
Data center | IaaS
SaaS | vDC
Expensive bandwidth
Up to 30%
infrastructure spend in WAN
Device proliferation Apps moving to cloud
Millions of connections
every second40% 20x 4xWAN OpEx
savings
improved application
experience
more
bandwidth
Viptela® advantage

30. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco® SD-WAN
Users
Devices
Things
DC
IaaS
SaaS
vDC
Applications
AnalyticsCloud delivered
Top use cases:
•SD-WAN
•Cloud onramp
Need simplicity, lower cost, application experience

31. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Viptela integration plan
Support and scale the
current sales motion
Viptela® SD-WAN on
strategic ISR platform
Deliver end-to-end experience
with full Cisco DNA™ integration
DeploymentscenariosBenefits
vEdge 4000 ISR + vEdge SW
DNA
Center™
+ SD-WAN
4000 ISR + vEdge SW
vManage
vEdge
vManage
vEdge
Platform integrationNo integration Management integration
Phase 2Phase 1 Phase 3

32. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
reduction in
WAN costs40%
Solution: Cisco® SD-WAN (Viptela®)
Global retailer
Customer story
Challenge
• Reduce OpEx and CapEx costs across
1600 stores
• Re-energize customer
in-store experience
• Improve mobile application performance
• Securely manage 7 segments
Business outcomes
• 26x bandwidth improvement
• 5x improvement in store conversions
• $20M saved over 3 years

33. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Introducing software subscription licensing
For the intuitive network
Faster access to innovation Predictable CapEx -> OpExAgility to scale up or down
*Also available a la carte
Cisco ONE™ Suites | A la carte
Essentials Suite
Advantage Suite

34. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
The journey to the new network
Cisco and partner services help you make your transformation
Infrastructure readiness
Open and programmable
Policy-based automation
Simplify and scale network deployment for
cloud, mobile, IoT
Intent-based network
Constantly learning, adapting, protecting
Analytics for assurance
Predictive performance with machine learning
Secure foundation
Rapid threat detection and mitigation

35. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
DNA Center appliance
Automation software module
Assurance software module
Intent-based network – Cisco DNA components
DNA Center™
Policy Design
Provision Assurance
Router Wireless LAN
controller
Access
point
Switch
Cisco® Identity Services Engine
Cisco DNA™ ready
hardware and non Cisco
DNA ready hardware

36. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco Catalyst 9000 platform
World’s most advanced enterprise switches
Cisco Catalyst
9300 Series
Fixed access
Cisco® Catalyst®
9400 Series
Modular access
Cisco Catalyst
9500 Series
Fixed core
Programmable Mobile ready
Cloud ready
Design
Integrated security
IoT ready

37. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Intent-based network with Cisco DNA
ready platforms
ASR-1000-X
ASR-1000-HX
4430 ISR
4450 ISR
WirelessRoutingSwitching
AIR-CT5520
AIR-CT8540
Wave 2 APs (1800, 2800, 3800)
Wave 1 APs* (1700, 2700, 3700)
Cisco® Catalyst® 9400 Series
Cisco Catalyst
9300 Series
Cisco Catalyst 9500 Series
Catalyst 4500E Catalyst 6000 Series Cisco Nexus® 7700
Cisco Catalyst 3850 and 3650 Series
AIR-CT3504
CSR 1000V
*With caveats

38. C97-740151-00 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco DNA Center roadmap
Q1 FY18 Q2 FY18 Q3 FY18 Q4 FY18
SD-Access
20%
Cloud
readiness
Assurance and
virtualization
40%
Cloud
readiness
SD-WAN and cloud
ready
Cloud offering
integrated with
Viptela®, Cisco®
Defense Orchestrator,
and Tetration
1st
Cisco DNA™
cloud offers
Integrated
automation and
analytics for
access, WAN,
NFV
SD-Access fabric
automation
and base lifecycle
management
Centralization of
policy and
process
integration on
DNA Center™
70%
Cloud
readiness
Policy and
ecosystem

39. That’s all folks!
Ci sono domande?
mvoi@cisco.com