cisco思科产品简介

Sensor Target
• 可堆叠L2 交换机,up to 9 • 全千兆/4SFP/POE • 可用于ServerFarm
C3560
1) L3 switch 2) NON-Stack 3) 背板带宽32G 4) 接入层交换机 5) 小型网络核心 6) POE
Smi/Emi
C3560-E
1) L3 switch 2) NON-Stack 3) 背板带宽64G 4) 接入层交换机 5) 小型网络核心 6) POE Smi/Emi
CSC-SSM
• Comprehensive malware protection
• Advanced content filtering • Integrated message
security • Customization and tuning
capabilities • Ease of management and
Cisco产品简介
Agenda
• 交换机产品系列 • CISCO路由器产品介绍 • Firewall产品介绍 • IPS产品介绍 • MARS产品介绍
交换机产品系列
大型生产网络
Catalyst交换机产品系列 产品选择要点: • 100 Mbps或1000 Mbps速率需求 • 是否需要主干连接和交换机互连
Smi/Emi
C4500
WS-C4503 WS-C4506 WS-C4507R WS-C4510R
背板带宽64G,不支持堆叠
C4500-E
WS-C4503-E WS-C4506-E WS-C4507R-E WS-C4510R-E
背板带宽320G, 不支持堆叠
C4500/C4500-E SE
WS-X45-Sup 6-E
Sensor
Management System
Target
Inline-Mode Protection: IPS
An alert can be sent to the management console.
Management System
The sensor resides in the data forwarding path.
up to 8gbps
• Firewall: 20G Firewall和NAT服务 • 40K/sec Netflow事件记录 • 介于7200vxr与7600/6509之间,做wan汇聚
3200路由器
3200路由器特性
• 定位于户外及恶劣环境 • 支持无线功能 • ISR
Firewall介绍
automatic update capabilities
CSC-SSM模块平台
Hardware CSC-SSM-10
CSC-SSM-20
Appliances Supported
• Cisco ASA 5510 Adaptive Security Appliance • Cisco ASA 5520 Adaptive Security Appliance
通过AnyConnect VPN Client.
FWSM
• Designed for campus data center and service provider environments
• Runs in Cisco Catalyst 6500 Series Switches and 7600 Series Routers
1 A network device sends copies of packets to the sensor for analysis.
2
If the traffic matches a signature, the signature fires.
Switch
32 The sensor can send an alarm to a management console and take a response action such as resetting the connection.
IDS/IPS介绍
Cisco Sensor Family
Performance (Mbps)
600
250
200
80
45
IPS 4215
IPS 4240
IPS 4255
IPS 4260
10/100 TX
10/100/1000 TX
IPS 4270
10/100/1000 TX 1000 SX
Promiscuous-Mode Protection: IDS
• Up to 1 million concurrent connections • Up to 5.5-Gbps throughput • Supports 100 security contexts
• 256 interfaces per security context • 1000 VLANs (maximum per FWSM) • Supports active/standby failover
C6500-E series
• POE • 端口密度 • 用户端口类型需求 • L3功能
C4500/C4500-E series
C3560/C3560-E C3750/C3750-Eseries
线速/干线 解决方案
C2960/C2975 series
CE 500/C2918
桌面/工作组 解决方案
C2918
ISR router
Cisco Cisco 1841 2801
Small Medium Branch Branch
Cisco 2811
Medium Branch
Cisco 2821
Medium Branch
Cisco 2851
Medium Branch
Cisco 3825
Enterpris e Branch
Model: Catalyst 2918-24TT-C Catalyst 2918-48TT-C Catalyst 2918-24TC-C Catalyst 2918-48TC-C
基本功能: 1) 支持一般的交换功能 2) 不支持RPS
3) 不支持SNMP 4) 无POE 5) 只针对中国用户只有中 文GUI
FWSM
IDSM2
C6500 Ethernet Module 2
WS-X6816-GBIC
WS-X6748-SFP
WS-X6748-GE-TX
POE
GBIC/SFP
Cisco router产品介绍
Cisco路由器系列
产品选择要点:
• 所需路由功能的强弱 • 端口密度/变换的需求 • 性能
电信核心部分解决方案
15000 CRS Series
7600 Series ASR 1000
• 通常的用户端口
800 Series
1800 Series
2800 Series
C7200VXR 3800 Series
核心部分解决方案
分支机构解决方案
小型公司解决方案
SOHO解决方案
ISR router
1841
2800
3800
• Cisco ASA 5510 Adaptive Security Appliance • Cisco ASA 5520 Adaptive Security Appliance • Cisco ASA 5540 Adaptive Security Appliance
CSC-SSM Licensing
Cisco 3845
Enterpris e Branch
AIM-VPN
Router Module
WIC-2T NM-16ESW
Wireless/CUE
Router Module(Cont.)
NM-HDV2
WS-1ADSL
ASR 1000
1002
1004
1006
ASR 1000
• bandwidth: up to 20 Gbps • Embedded hardware-based encryption:
SSL VPN功能
Optimized Network Access • Broad Operating System Support • Wide Range 0f Deployment and Connection Options • Ease of Client Administration • Consistent User Experience • Advanced IP Network Connectivity • Default 2,可以外购License
Network location
5505 Base
5510 Base
5520
5540
5550 5580-20 5580-40
Small Business, Branch Office, Enterprise Teleworker
Internet Edge
InterneLeabharlann Baidu Edge
Internet Edge
Internet Edge, Campus
Data Center, Campus
Data Center, Campus
Maximum firewall and IPS
throughput (Mbps)
150 Mbps
300 Mbps 450 Mbps 650 Mbps 1.2 Gbps 5 Gbps 10 Gbps
ASA Family
Price
ASA 5520
ASA 5540
ASA 5580
ASA 5510
ASA 5505
Gigabit Ethernet
SOHO ROBO
SMB
Enterprise
SP
Functionality
ASA性能及市场定位
Cisco ASA 5500 Series Model/License
CE500
Model: • Catalyst Express 500-24TT • Catalyst Express 500-24LC • Catalyst Express 500-24PC • Catalyst Express 500G-12TC
说明:
1) POE
2) 20-250User 3) 只有GUI 4) 类似2918,英文
WS-C4013+
WS-C4515
WS-C4516
C4500 Line Card
C6500-E Chassis
Catalyst 6503-E Catalyst 6506-E
Catalyst 6509-E Catalyst 6513-E
SuperEngine/VSS
VSS
C6500 Service Module
• 150 Mbps with Cisco ASA 5510 • 225 Mbps with Cisco ASA 5520
• 375 Mbps with Cisco ASA 5520 • 500 Mbps with Cisco ASA 5540
• 450 Mbps with Cisco ASA 5520 • 650 Mbps with Cisco ASA 5540
产品照片
ASA5505 ASA5550
ASA5510/20/40 ASA5580-20/40
AIP-SSM
• Accurate inline prevention technologies
• Multivector threat identification
• Unique network collaboration
• Powerful management, event correlation, and support services
AIP-SSM性能
Feature
AIP SSM-10
AIP SSM-20
AIP SSM-40
Concurrent Threat Mitigation Throughput (Firewall and IPS Services)
C2960
WS-C2960-8TC-L WS-C2960-24TT-L WS-C2960-48TT-L WS-C2960-24TC-L WS-C2960-48TC-L WS-C2960G-24TC-L WS-C2960G-48TC-L WS 2960-24PC-L
Edge Switch
C2975
C3750
1) L3 switch 2) Stack,up to 9 3) 背板带宽32G 4) 中大型分布层交换机 5) 小型网络核心 6) POE
Smi/Emi
C3750-E
1) L3 switch 2) Stack,up to 9 3) 背板带宽64G 4) 中大型分布层交换机 5) 小型网络核心 6) POE 7) 10G Uplink