思科移动办公解决方案.pptx

1、思科移思科移动办动办公解决公解决方方案案Song LiCisco Confidential2 2013-2014 Cisco and/or its affiliates.All rights reserved.思科防火墙/VPN网关集成设备SOHOROBO中小企业企业中端市场容量可在广泛的企业网络之间扩展远程访问和站点到站点VPN 支持简单的网络集成集成的负载均衡(5510+)和 HA通用标准(EAL4)和 FIPS 认证ASA 5512-X/15-X最多 250 个 VPN 会话5512-X 最大 VPN 200Mb/s5515-X 最大 VPN 250Mb/sASA 5525-X最多 75

2、0 个 VPN 会话5525-X 最大 VPN 300Mb/sASA 5505最多 25 个 VPN 会话最大 VPN 100Mb/sASA 5545-X5545-X最多 2500 个 VPN 会话5545-X 最大 VPN 800Mb/sASA 5555-X多达 5000 个 VPN 会话5555-X最大 VPN 900Mb/sASA 5585-20/40/60多达 10,000 个 VPN 会话最大 VPN2/3/4GB/s细分市场广泛ASA 5585-10多达 50,000 个 VPN 会话最大 VPN1GB/sCisco Confidential3 2013-2014 Cisco an

3、d/or its affiliates.All rights reserved.SSL VPNsThe Magic Quadrant is copyrighted 2009 by Gartner,Inc.and is reused with permission.The Magic Quadrant is a graphical representation of a marketplace at and for a specific time period.It depicts Gartners analysis of how certain vendors measure against

4、criteria for that marketplace,as defined by Gartner.Gartner does not endorse any vendor product or service depicted in the Magic Quadrant,and does not advise technology users to select only those vendors placed in the Leaders”quadrant.The Magic Quadrant is intended solely as a research tool,and is n

5、ot meant to be a specific guide to action.Gartner disclaims all warranties,express or implied,with respect to this research,including any warranties of merchantability or fitness for a particular purpose.This Magic Quadrant graphic was published by Gartner,Inc.as part of a larger research note and s

6、hould be evaluated in the context of the entire report.The Gartner report is available upon request from Cisco.Cisco Confidential4 2013-2014 Cisco and/or its affiliates.All rights reserved.移动:新趋势MiniMiniPCPCNetworked PCNetworked PCInternet PCInternet PCMobile InternetMobile Internet1960s1960s1980s19

7、80s1990s1990s2000s2000s2010s2010s生产力Cisco Confidential5 2013-2014 Cisco and/or its affiliates.All rights reserved.任何地点任何人任何时间任何设备安全、可靠、无缝全新的无边界企业体验Cisco Confidential6 2013-2014 Cisco and/or its affiliates.All rights reserved.始终开启的安全和保护办公消费电子化改善的远程访问体验远程办公面临的难题将办公室内的安全性和策略延伸到移动用户更多更广泛的移动终端的支持统一办公室内与办

8、公室外的用户体验思科机密 2011 思科和/或其附属公司版权所有。版权所有。6ASA5585-10主用ASA5585-10备用网通电信L3 Switch专线ADSLInternetASA5505小型办公室公司分部ASA5525IPsecIPsecIPsecIPsecPPPOESSLSSL加密加密SSLSSL加密加密思科移动办公接入ISRWEB应用电子邮件文件资源访问办公电话会议视频通话TeleWorker热点InternetIPsecIPsecData CenterWAASAppliancesWAAS广域网加速广域网加速VDI/VXICisco Confidential8 2013-2014

9、Cisco and/or its affiliates.All rights reserved.Security ContextPosture Connectivity 多合一终端安全服务多合一终端安全服务AnyConnectVPN 对最新的OS,AV检查与修复Web 安全,加密，安全访问永久在线的vpn连接/无客户端访问/802.1X 用户/设备类型/使用方式的扩展 Wired Wireless Celluar Secure Access简化管理简化管理Cisco Confidential9 2013-2014 Cisco and/or its affiliates.All rights r

10、eserved.User Devices and Infrastructure应用服务设备客户端Microsoft WindowsMac OS XLinux桌面电脑移动终端Apple iOSiPhone and iPad HTC Motorola Samsung Version 4.0+HTC Lenovo Motorola Samsung Version 4.0+无客户端浏览器方式BB10(future)Smartphones Playbook*Note:Not all features supported on Cisco IOS Software routers+AndroidSmart

11、phones Tablets ManagementASDMCSMCLISecure ConnectivityCisco ISR*Cisco ASACisco ASR*IEEE 802.1X SwitchesWeb SecurityCisco WSACisco ISEIdentity and Policy+Cisco NACCisco AnyConnect for CloudWeb Security支持多种类型平台和设备为指定的应用提供远程安全访问（基于user,role,device）(Per-App VPN)减少未授权应用访问公司资源的风险支持分组远程用户/终端的设置(employees,p

12、artner,contractor)简化IT部署VPNWWWSelectively Tunnels Traffic Through VPN支持多种访问模式下的安全检查与授权阻止未合规设备访问网络统一客户端，简化管理Cisco Confidential12 2013-2014 Cisco and/or its affiliates.All rights reserved.1212iPAD-虚拟桌面应用Cisco Confidential13 2013-2014 Cisco and/or its affiliates.All rights reserved.工业领先无缝接入按需接入，根据流量监测接

13、入设备启动自动接入VPNPC休眠VPN自动回复用户注销重新登入VPN会话保持Cisco Confidential14 2013-2014 Cisco and/or its affiliates.All rights reserved.3GLTE3G/Wifi无缝漫游公网地址变化虚拟地址保持不变业务影响最小智能终端无线环境无缝漫游Cisco Confidential15 2013-2014 Cisco and/or its affiliates.All rights reserved.门户认证检测(Captive Portal Detection)AnyConnectAnyConnect Sec

14、ure Mobility Solution Secure Mobility Solution 场景：机场/酒店/咖啡厅/城市热点 如果Anyconnect无法连接VPN，能够检测并提示用户需要网页认证.Cisco Confidential16 2013-2014 Cisco and/or its affiliates.All rights reserved.网络区域的自动识别Trusted Network Detection(TND)自动连接或者断开VPN 基于以下条件:在办公室 离开办公室多种认证选项 证书认证 双因子认证 用户名/密码认证IronPort WSA基于位置感知执行策略Trus

15、ted NetworkUntrusted NetworkCisco Confidential 2010 Cisco and/or its affiliates.All rights reserved.17DNS Server IPDNS Server IP68.87.78.13068.87.78.130DNS DNS 后缀后缀不可信的 DNS 配置信息DHCP Request网络区域的自动识别公司总部家庭办公DHCP Response可信网络不可信网络Cisco Confidential 2010 Cisco and/or its affiliates.All rights reserved.

16、18 Always On 延伸了终端设备的网络边界 Always On 确保安全策略保持有效 若ASA连接不可达：fail-open(直接访问网络)or fail-close(关闭网络访问)接入位置感知认证信息同步Security Enforcement Array安全策略一致性永久在线(Always On)应用场景：针对对安全要求很高的客户，要求只要使用网络必须接入VPN。Cisco Confidential19 2013-2014 Cisco and/or its affiliates.All rights reserved.客户端最佳网关选择(Optimal Gateway Select

17、ion)策略和门限条件可控 客户端自动检测最近的头端基于地理位置提供最佳使用体验 北京上海?天津Time=25msTime=24msTime=23msTime=33msTime=26msTime=35msCisco Confidential20 2013-2014 Cisco and/or its affiliates.All rights reserved.接入终端的策略遵从支持数百种产品的检测 防病毒、反间谍软件 个人防火墙 补丁等可定制各种检查 文件、进程、注册表 操作系统隔离与修复提供可视化的配置和管理界面Cisco Confidential21 2013-2014 Cisco and

18、/or its affiliates.All rights reserved.分支机构公司办公室家庭办公AnyConnect 安全移动客户端登录时重定向登录时重定向目录目录身份SaaS 单点 登录通过现有网络进行身份传递可见集中执行单一来源撤销2222最流畅的移动办公移动办公客户端优化汇总Wifi/3GVPN无缝漫游VPN网关自动最近选择内网区域自动识别休眠唤醒VPN自动恢复连接客户端认证数字证书VPN自动连接VPN按需自动接入ISP冗余VPN自动选择门户认证自动检测WIN用户登出VPN连接保持最简操作单的移动办公VPN永久在线客户端防火墙终端风险控制最安全的移动办公客户端操作客户端管理客户端配置集中控制客户端软件远程升级