Cisco Systems C897VAK9 Network Router User Manual


 
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 4 of 16
Cisco 890 Series Routers come with a comprehensive security solution that protects organizations’ networks from
known and new Internet vulnerabilities and attacks while improving employee productivity. Security suite also
includes the following:
FlexVPN: Large customers deploying IPsec VPN over IP networks are faced with high complexity and high
cost of deploying multiple types of VPN to meet different types of connectivity requirements. Customers
often have to learn different type of VPNs to manage and operate different types of networks. And when a
technology is selected for a deployment, migrating or adding functions to enhance the VPN is often
avoided. FlexVPN was created to simplify the deployment of VPN, to address the complexity of multiple
solutions, and as a unified ecosystem to cover all types of VPNs: remote access, teleworker, site-to-site,
mobility, managed security services, and others.
NGE: Traditional encryption standards (Internet Key Exchange Version 1 [IKEv1], Secure Hash Algorithm1
[SHA-1], etc.) were developed more than a decade ago. They are no longer considered as secure as
before. Next-Generation Encryption is meant to refresh the existing security protocols to the next level
based on the standard Suite-B algorithms, such as, SHA-2, AES-Galois Counter Mode(AES-GCM), Elliptic
Curve Diffie-Hellman(ECDH), Elliptic Curve Digital Signature Algorithm(ECDSA), IKEv2, etc. NGE will offer
customers secure network communications systems that will be reliable for the next decade.
Cisco ScanSafe Web Security: Cloud Web Security is a cloud-based service designed to prevent zero-day
malware from reaching corporate networks, including roaming or mobile users. The Cisco ScanSafe Cloud
Web Security solution requires no hardware, initial capital costs, or maintenance and provides unparalleled
real-time threat protection (Figure 3). This solution is scalable and easy to maintain, and is ideally suited for
small businesses and enterprise small branch offices.
Figure 3. Typical Cisco Integrated Services Router Web Security with Cisco ScanSafe Deployment
Metro Ethernet Connectivity
Cisco 890 Series Routers are ideal for service provider deployments as Metro Ethernet customer premises
equipment (CPE). The routers also provide failover protection and load balancing. The 8-port managed switch
provides enough LAN ports for connecting multiple devices, and the optional PoE capability can supply power to
IP phones or other devices. The Cisco 890 Series provides significant value to customers by simplifying
deployment of Ethernet WAN services with end-to-end OA&M, service-level agreement (SLA) monitoring and