All CommunityKnowledge basecolmstedUsers cancel
About colmsted
colmsted
Latest Contributions by colmsted
Topics colmsted has Participated In
Application and End Point Ignorant: Myt...
Created by colmsted in Networking Blogs
http://siliconangle.com/blog/author/mikerau/Originally published on Silicon Angle Michael Rau, Vice President, CTO, for the Borderless Network Architecture Cisco. | June 21st Countless science fiction books and movies, from "The Matrix" to "1984″ to "2001: A Space Odyssey" feature computers and networks that are completely omniscient with the power to see and hear everything users do. While today's networks may not talk back like the HAL 9000 or be run by sinister alien robots that want to use humans as a power source, next-generation networks today have the ability to understand the applications being run, see the end users of those applications, and even deduce what devices they are using. Innovations in next-generation networks are driving new sets of capabilities in three major areas: increasing visibility, prioritizing traffic, and optimizing performance. Cisco provides these three things combined in the AppVelocity Network Service. A 'good enough' network can't deliver these capabilities. Is Big Brother Watching Your Network? Isolating network from application performance issues is a classic challenge in IT. Big brother may not be watching, but if your ERP system is performing poorly, how can you tell if it's an application issue or other traffic on the network causing this performance problem? With a good-enough network, you can only roll out sniffers and probes and dig into the network traffic. But if you are troubleshooting a performance problem from the United States and the problem is in a branch office in Korea, it may be very difficult to get the necessary tools deployed in that branch office. A better answer is to provide integrated tools that allow for the capture and analysis of traffic to help detect and isolate problems. Cisco does this with a family of technologies that are all managed under the Cisco Prime Management umbrella. The first of these, the Network Analysis Module (NAM), is embedded hardware and software that can perform granular traffic analysis, rich application performance metrics, comprehensive voice analytics, and deep insightful packet captures to deliver a comprehensive performance assurance solution. In addition to NAM, Cisco router and switch products provide Network Based Application Recognition (NBAR) support. This allows the network device to detect traffic types so you can create strategies to prioritize traffic based on the application type. Network Traffic Jams Vendors of Good Enough Networks will saythey can prioritize traffic with basic Quality of Service (QoS)QoS. While QoS isa important element, it is only part of the solution. There are two other critical elements that are only provided by an Enterprise Next Generation Network. The first of these is NBAR mentioned above. NBAR provides built-in application intelligence in routers and switches that allows for the detection of application types on the network so the network administrator can build simplified rule sets to determine which traffic should be prioritized by QoS. Without NBAR, the typical network administrator is required to become a protocol by protocol expert at a bits and bytes level to create the right prioritization strategy. That approach doesn't scale. The second critical element is the ability to prioritize traffic when things aren't "business as usual." While QoS is good, it only provides prioritization as traffic is leaving a network element and that doesn't help when there are problems deeper in the network that are causing the application performance problem. This is particularly an issue in branch offices that are connected to the headquarters with multiple connections (i.e. multiple MPLS providers or one provider with broadband VPN backup). To help solve network performance in a reactive fashion, Cisco has built a features called Performance Routing (Pfr) which can detect issues such as high latency, jitter, packet loss, and make sophisticated decisions to help route around performance problems allowing critical applications and voice/video services from being severely impacted. It is the marriage of visibility and prioritization that provide a unique set of reliability enhancements for the enterprise next-generation network. How does a good-enough network deal with this? It doesn't! But what do I do when I just don't have enough bandwidth? Well that leads us to optimizing performance …. Optimizing Network Performance When bandwidth is an issue, the typical answer has been to throw more bandwidth at it. This would be the good-enough network approach. But some bandwidth (i.e. WAN) is expensive, so throwing bandwidth at the problem is a poor answer at best. Advanced compression services and protocol optimization that optimize bandwidth and accelerates performance is the better answer. Cisco provides this through its family of Wide Area Application Services (WAAS) which can be embedded into the ISR G2 family of access routers. For those customers only needing compression capabilities the G2 can offer this through WAAS Express, a software only option. For more sophisticated protocol optimization and compression capabilities, the G2 offers WAAS on the SRE hardware module. With the WAAS solutions, network traffic is classified and optimized with a sophisticated set of compression services and protocol optimizers. The result is increased bandwidth availability to branches and enhanced end-user experience and productivity. So it pays for itself in a very short period of time. Optimizing performance is not just about solutions in the branch, how do you bring the technology into the Data Centers where the applications reside? This is another advantage of an Enterprise Next Generation Network in that it looks at how services can be delivered in new and creative ways. With WAAS we have a great example of this delivering Data Center WAAS services through vWAAS as a service running on a virtual machine in the Data Center. This puts acceleration services closer to application and simplifies the deployment model. It may not be big brother or HAL watching, but an enterprise next-generation network knows more about the traffic on the network and is able to optimize the analysis, troubleshooting, prioritization, and performance of applications on the network. All of these are factors that are critical to the business value of the network and require significant vendor innovations embedded into the network. A good-enough network is only going to leave you blind to what is happening on your network and doesn't provide tools to solve real performance, endpoint, and application challenges. Another example of 'good enough' not really being good enough. Seven myths down…and we're done. For those of you who have been following this series, I hope it has given yourself something to think about in how you approach the architecture of the network. While the good-enough vendors sees the network as a utility for basic transport, we continue to drive the R&D investment in a network-generation enterprise network, creating a network to respond to the needs of business both today and in the future. Note: The seven myths are outlined in a recent white paper from Cisco:Debunking the Myth of the Good Enough Network. ... View more
design_architecture_blog
end_point
Myth # 6 of the Good-Enough Network: Ac...
Originally posted on Silicon Angle by Michael Rau, Vice President, CTO, for the Borderless Network Architecture Cisco. Did you know that when building an enterprise IT network, about 20% of a typical budget is spent acquiring hardware while a whopping 80% goes toward operating costs? But looking at just the acquisition costs is akin to buying a new cell phone and only considering the cost of the actual phone. The reliability of the carrier's network, services they offer, technical support, and monthly fees are all factors to consider. Yet some industry watchers and vendors simply look at acquisition and maintenance costs when calculating the total cost of an enterprise IT network, ignoring functionality that may improve productivity or business opportunities that are lost when the network goes down. If you have higher integration costs, more downtime or serious security breaches, that 20% you saved on upfront costs will be more than offset by increases in the 80% of operating costs. That's why capital and operational expenditures don't provide a true total cost of ownership (TCO) picture. The initial CAPEX doesn't factor into what the network can do beyond delivering basic data – things like additional end user productivity or additional capabilities that applications and services can deliver. While "good enough" network vendors ignore these costs, enterprise "next generation" network vendors promote a systems approach that not only reduces networking costs related to the 80% of the pie, but also drives IT service improvements and new business opportunities. Next-generation networks can deliver secure services to any device anywhere, are capable of streaming video concierge services to customers from anywhere in the world, and can deliver virtual desktop solutions to branch offices. The Network: A Holistic Entity This is the approach endorsed by industry experts: "The integration of the network with business processes and applications requires that organizations treat the network as a holistic entity by taking a systems approach," said Zeus Kerravala of the Yankee Group Research. Tactical networks require that a customer cobble and assemble a variety of point products. However, next-generation network vendors like Cisco understand the costs involved in integration and invest in testing and documenting systems to ease network IT acquisition, configuration, and deployment. Cisco's Smart Business Architecture (SBA) offers a set of pretested and pre-integrated solutions that work together. You can't necessarily say that about your network if it's pieced together using multi-vendor solutions. Reducing Downtime; Increasing IT Beauty Rest A tactical network doesn't look toward the future, whereas Cisco sees the network as a platform that must be supported with ongoing software innovations that can deployed with technologies like in-service software upgrade (ISSU) technology eliminating the downtime costs associated with software upgrades. It can deploy an upgrade in less than 200 milliseconds, all without having to take the network down in order to do so. In some mission-critical situations, such as global financial trading systems, the network simply can't be taken down because it would be too costly. With ISSU, upgrades happen without interrupting production. So an Enterprise Next Generation Network offers investment protection through its ability to be extended through hardware and software innovation over the life of the investment while protecting reliability through advanced operational features. Truly the best of both worlds. Today's Networks Need To Do It All These days, we're asking our networks to do more. To be more productive, employees need to access data from any device, from anywhere. We're holding more video calls so we can interact with employees and customers around the globe – and save on travel and lodging expenses. Networks are delivering new virtualization services, virtualized desktops, and helping us reduce overall operating expenditures. Unfortunately, the value of these services and features can be lost in financial calculations that focus merely on capital acquisition costs. Although some IT decision make these decisions based solely on their capital budget, that isn't the entire picture as it leaves out the complete financial impact. When the true total cost of ownership is taken into account, the tactical "good enough" network quickly becomes the more expensive network. Six myths down…one to go. Stay tuned for the final myth number seven next week. What are some of the "good enough" myths that you've been hearing in the industry? Note: The seven myths are outlined in a recent white paper from Cisco: Debunking the Myth of the Good Enough Network. ... View more
capital_expense
good_enough
Myth # 5 of the Good-Enough Network: "B...
siliconANGLE » Myth # 5 of the Good-Enough Network: "Basic Warranty" Myth Originally authored on Silicon Angle by Michael Rau |Vice President, CTO, for the Borderless Network Architecture Cisco. June 7th Last weekend, I bought a laptop. Before I decided on which model I wanted, I visited a few vendors' sites and looked at their warranties. Some came with a basic one-year warranty covering only manufacturer defects; others offered full support via phone day or night and physical sites where I could drop my laptop for repair. And I could pay extra for the extended three-year warranty. I quickly realized, the initial cost of the hardware was only one factor in my purchase. If I needed help down the line, I had to know that I'd have support then, too. The same goes for our enterprise networks, the lifeblood of our businesses. Sure, you can buy a "good-enough" network that comes with a basic — or "lifetime" — warranty, but what happens when you need additional support? If your network goes down, will you have the support you need to get back up and running quickly? Will that initial capital you saved buying less expensive equipment save you money in the long run? If your network is not back up and running quickly, what will that cost your business? Most networks come with limited support and maintenance. With vendors such as HP, a warranty service call is limited to answering only the most basic questions. More often than not, they will ask questions along the lines of, "Have you tried rebooting your switch?" If that doesn't work, the vendor simply ships a replacement. There's no effort made to troubleshoot the problem. In fact, the majority of warranties do not include troubleshooting at all. Yet network and configuration issues account for 70% of support center calls where service is often provided on a first-come first-served basis, with no effort to prioritize calls. If you want more in-depth support you have to purchase that extended support contract – which is not free. When it comes to network support and services all vendors are not created equal. Vendors such as Cisco realize that customers need more than basic support because the network is critical for business. Those vendors design next-generation networks with more robust warranties, and they also provide access to large, qualified support staff so issues get resolved quickly, the first time. In addition, we deliver smart services — software-enabled technical and professional services that proactively seek out, diagnose, and remediate issues before they even become problems. This can dramatically improve the uptime of networks as well as the user experience. And this will save a business money in the long run: less down time equals more productivity. Those basic warranties don't make up for the business cost of downtime. Companies lose an average of 3.6% of revenue per year to downtime, according to an Infonetics Research report "The Costs of Enterprise Downtime." Unplanned downtime also damages the reputation of the business, a significant cost even if it is difficult to quantify. If a company makes that narrow TCO calculation of upfront discounts on products and maintenance, they are not looking at the total operating environment that they're actually creating and overall TCO. When you're designing your network, look for vendors with software-enabled services that leverage robust intellectual capital built from years of supporting customers' networks, as well as knowledge gained from multiple scenarios and customer environments where the vendor is deployed. These services provide actionable insights to help you proactively prevent problems and extract more value. Remember, all service contracts and warranties are not created equal. You essentially get what you pay for. Unfortunately, you never realize how good a service contract is until you need it. Be prepared and look at the fine print. Five myths down…two to go. Stay tuned for myth number six next week. What are some of the "good enough" myths that you've been hearing in the industry? Note: The seven myths are outlined in a recent white paper from Cisco: Debunking the Myth of the Good Enough Network. --------------------------------------------------------------- Read the other myths... ... View more
netwok
technical_support
Myth # 4 of the Good-Enough Network: "J...
Originally posted by Silicon Angle by Michael Rau | June 1st Just 50 years ago, personal computers, corporate networks, and email didn't exist. So sending a note meant getting out your trusty pen and paper, writing a letter, then dropping it in a mailbox and hoping it would arrive within a couple of weeks (hard to believe, right Gen Y's?). Today, it takes mere seconds for an email to get to a recipient. New innovations and inventions in the technology industry mean the flow of information has changed the method and speed at which we communicate. And the standards governing the technology industry help ensure there is security, interoperability, and a framework in place. As we innovate, old standards evolve and new ones are created. Imagine if we used the post office standards from 1890 to govern the way email is sent. If that were the case, we'd probably be putting postage stamps on our email messages. Standards vs. Innovation Cisco has a deep respect for industry standards and participates in many standards bodies. As we've learned, vendors interpret and deploy standards differently in their equipment. These differences may result in integration challenges. While industry standards are extremely important, relying only on existing standards as you plan for future technology needs is misguided. When companies lock themselves into standards-based networks, they miss out on a higher-level of service innovation and occasionally underestimate the integration cost involved in making the components of a standards-based system work together. Yes, standards should be used, but businesses looking for a competitive edge need to look for solutions that are also innovative. Businesses are always looking for innovative ways to collaborate with their end customers, ways to better manage their infrastructures, and ways to reduce complexity. This often means investing in next-generation technology that may not yet be standards-based. The good-enough network we've been talking about in the previous myths, the ones that are simply cobbled together with only cost of the parts in mind, advocates being "standards based." This approach often means that if a customer buys industry-standard servers, storage, and networking technology, they will save money. The theory being that the network will be easy to set up and everything will work together because it's worked in thousands of other businesses. While good in theory, the interoperability between different vendor implementations of the same standard and the lack of pre-standard innovations don't necessarily make for a scalable, reliable, and feature rich network to support the needs of the business. What is really needed is robust standards and innovations in the network that ultimately become the standards of tomorrow. Setting the Standard: Case Studies Let's look at a few examples of turning innovation into standards. Let's first consider the Cisco Discovery Protocol (CDP). Cisco developed CDP years ago as a way for the network to discover the device being plugged into it and to apply the appropriate configuration. Medianet was the next advance in CDP. And today, Link Layer Discovery Protocol (LLDP) is an industry standard based, in part, on Cisco's innovation. For the virtual data center, Cisco is developing innovations like Overlay Transport Virtualization (OTV), which allows a customer to combine two or more separate data centers into one virtual data center. Cisco also just introduced the Locator/ID Separation Protocol (LISP), which can move a virtual machine carrying workloads between data centers without having to change the address of the virtual machine. These innovations avoid the complexity of managing protocols such as Multiprotocol Label Switching (MPLS) and reduce other administrative tasks; and this, in turn, leads to quicker time to deployment–all of which saves money. What is interesting about LISP is amount of work that Cisco is simultaneously doing to support LISP standardization efforts through the IETF. LISP, like MPLS prior to it, is another example of Cisco developing innovations that can be deployed today while the standards effort is driven. In addition, Cisco has fundamentally changed the way networks are designed with Virtual Switching System (VSS) technology, which satisfies three major demands of networks for high availability, better capacity utilization, and simplicity. VSS combines two Cisco Catalyst 6500 Series Switches into one logical switch, with the immediate benefit of reducing the number of switches that have to be managed by half and doubling the redundancy. In addition, with VSS, the access layer device doesn't see the merged switches as two separate data paths, but as one giant pipe. The cost savings mean reduced device management expenses, improved uptime, and greater utilization. Yes, we do think standards are important. Whatever future technology a customer chooses to invest in, they should select a vendor who is committed to existing standards. But building next-generation network means also taking into account innovations that may not yet be based on a standard, but will increase speed, efficiency, and improve business operations overall. Innovations that will bear fruit both now and down the road. Just think, if we didn't ever look past existing standards, we might still be sending letters the way our grandparents did. And you'd be reading this article on paper instead of online. Four myths down… three to go. Stay tuned for myth number five next week. What are some of the "good enough" myths that you've been hearing in the industry? Note: The seven myths are outlined in a recent white paper from Cisco: Debunking the Myth of the Good Enough Network. ... View more
cisco_expert
The Basic QOS Myth: Myth# 3 of the Good...
This blog was originally posted on Silicon Angle by Michael Rau, Vice President, CTO, for the Borderless Network Architecture Cisco. Video conference calls, TelePresence, and even YouTube videos were mere science fiction just a decade ago. Now, thanks to many technological advances, we can easily talk to anyone across the globe in high-definition video from the comfort of our home or office. That is, if your network is truly ready for the demands of video. If you've ever experienced fuzzy, choppy, or pixilated video, you know how annoying that can be. A network needs to be both fast and intelligent with enough bandwidth to handle video feeds, but also be smart enough to properly route network traffic so that video and data can flow. With video projected to quadruple IP traffic by 2014 to 767 exabytes, according Cisco Visual Networking Index Forecast, this may be why so many IT managers are afraid of the strains it will put on their networks. Is Your Network Ready for Video? Good-enough networks (those that are cobbled together with the cheapest equipment) operate on the notion that data is data—just ones and zeroes—while enterprise next-generation networks are built on innovative products that adjust in real time to the application being delivered and the endpoint device on which it appears. With data, you can usually miss a few packets – if email takes a few seconds to download, it's not a big deal. But with video, you can't miss. If a video cuts out or a call has static, the experience is frustrating and you might as well go back to using a landline or sending an email. The argument for a Good Enough network is that it can provide hop by hop Quality of Service (QOS) service to protect the video traffic. Unfortunately, basic QOS doesn't offer the fine grain controls and visibility to successfully manage large scale video deployments. Something greater is needed to truly allow the network to respond to the demands of video. Keeping up with video's explosive growth means companies need to take a closer look at their bandwidth and endpoints. For an optimal user experience, video requires a network that is media-aware and can track and optimize video flows end-to-end. This way, video applications are treated like a presidential motorcade that requires other traffic to stop as it whizzes by. Cisco's Medianet technology understands the video endpoint, whether it's a smart phone or a TelePresence unit. Additionally, products can auto-configure and tag the video flow with metadata so it can be prioritized across the routing and switching infrastructure, saving many hours of configuration and providing an optimal user quality. Network administrators have an easy tool to inject synthetic video traffic into the network for preplanning video deployments. For real-time troubleshooting, tools like Cisco Mediatrace can inspect the video flow on a hop-by-hop basis as it traverses the network to identify congestion or other potential problems. Providing even greater visibility to the underlying capabilities of Medianet is a management tool called Cisco Collaboration Manager which simplifies the management and troubleshooting of video traffic. Take, for example, an airport that is installing 6000 IP video surveillance cameras for better security. Setting up a new camera system on a good-enough network would be a nightmare because each device needs to be configured individually: tracking down each IP camera and locating where it is in network, and then configuring it individually. Medianet includes a feature called Media Services Interface (MSI), which automatically identifies devices and sets up the configuration and policies associated with each camera. This is an intelligent network adapting to our needs rather than the other way around. MSI also provides an advanced signaling interface that allows for the creation of robust Call Admission Control (CAC) capabilities. MSI combined with the Resource Reservation Protocol RSVP, gives network managers the tools they need to build and manage large scale deployments or real time traffic. In some cases, video congestion just can't be solved by "throwing bandwidth at the problem" and this is where the advanced QOS and CAC features of Medianet come into play. We encourage organizations to look for built-in capabilities for advanced CAC and QOS across platforms. This results in significant savings and your network adapts to whatever traffic is coming through, not just video. While you may not see these savings if your focus is only on network connectivity or initial costs, you will as soon as you try to roll out any services or applications across the network. Saving Lives (and Getting Smarter) with Networking and Video Doncaster & Bassetlaw Hospitals, a six-hospital network in the U.K., deployed Cisco TelePresence so that a stroke specialist at one location could examine a patient at another. The high-resolution video and audio allowed the doctor to observe stroke signs, like a droopy eyelid or slurred speech, more accurately than on a conventional video conferencing system. "In medicine, saving time ultimately saves lives," said Andrew Clarke, IT manager for the hospital group. Each minute a stroke goes untreated, two million of the brain's total three billion cells are lost. The TelePresence system saves the hospital from 15 to 60 minutes in diagnosing strokes and this precious time is crucial in saving patients' lives. Remote virtual expert support would not be possible or as reliable without the underlying resilient, media-aware next generation network…" On the West Texas A&M University campus, CIO James Webb describes the transformation to a fully video-enabled campus as a "P2V effect," plumbing-to-visual, meaning that the technology being implemented is visible to the end-users (no longer behind the scenes). This means students, instructors, administrators, and staff can fully take advantage of the new technology. For WTAMU, it was clear that a Medianet architecture from Cisco would enable them to realize and scale the power of video. Next-generation teaching, learning, security, and communications on campus were realized thanks to Cisco DMS, MXE, and VSM. These tools offer the school the ability to leverage the network architecture to provide video solutions for the entire campus. Most importantly, the school can now provide the flexibility for students and faculty to be creative in their approach to education. Webb wanted a 21st century enterprise video solution that was scalable and could integrate with the school's existing IT infrastructure and could allow individual departments to manage and control their own content. "The IT department has really focused on moving from an infrastructure and operations perspective to more innovation and highly visible creative solutions that break down the silos across the campus," said Webb. "We now have the ability to streamline information into the campus and provide the students the information that they need." The pervasive video framework throughout the campus allows the school to target messages to students, according to Webb. He says the school has now incorporated video through its web presence, learning-management systems, created new digital-signage systems, video-enabled smart classrooms, and video conferencing. Colleges, hospitals, and even nonprofits are benefitting from a network that can intelligently and adeptly handle today's traffic–whether it be video or data – and grow to enable tomorrow's needs. The next-generation network is not a barrier, but a way to save lives, inspire a new generation of leaders, and ensure that data can travel safely and efficiently. Can you say that about your network? Three myths down… four to go. Next week, we'll cover the next myth: "application and endpoint ignorant ." What are some of the "good enough" myths that you've been hearing in the industry? Note: The seven myths are outlined in a recent white paper from Cisco: Debunking the Myth of the Good Enough Network. ... View more
Routing Protocols
Security as a Bolt on: Myth # 2 of the ...
Security as a Bolt on: Myth # 2 of the Good-Enough Network Originally published on Silicon Angle by Michael Rau | May 17th Imagine that it's a warm sunny day and you're sitting on a glorious white-sand beach. You relax and gaze out at a group of surfers as they paddle to catch a wave. As you gaze down at your watch, you realize it's time for your 2 p.m. conference call. No need to dash back to the office to call in or access important documents you'll need; you simply grab your smart phone and dial into the meeting. While many of us don't have the luxury of working on the beach–not to mention the fact that sand and sunscreen may not be the best elements for your electronics–many of us are able to work remotely without ever setting foot in an office. In fact, 60% of employees believe they don't need to be in the office to be productive and efficient, according to the Connected World Report, 2010. And two-thirds of employees believe they should be able to access either work or personal information using company devices at any time from any location. With a workforce that's scattered around the globe and telecommuting happening from all sorts of far-reaching places or even satellite offices, how does a company create consistent and secure access to the network? Not to mention security over wired, wireless, and VPN technologies. IT managers also have to contend with the multitude of devices, from smart phones, to iPads, and even personal laptops – all of which are connecting to the network. These are the things that keep many CIOs awake at night. So how do IT departments address employee telecommuting and security at the same time? Bolt-On Network Security I recently blogged about the "good enough" network myth number one, "the single-purpose network." Today, we're continuing on to myth number two: "bolt-on security." Bolt-on security typically consists of one or more point products that don't really communicate with each other and don't share information, which makes it difficult to create consistent security across the entire IT environment, a sort of Frankenstein network. A network like this can leave a company exposed to costly security incidents. These security threats are real: incidents of customer data being leaked to the public are becoming more and more commonplace and it only needs to happen once because a security threat like this can ruin a company's reputation and forever erode customer trust. Network security has to keep pace with an ever-changing mobile workforce's needs and an increased threat profile. And it doesn't help that security risks are everywhere. There's been a 46% increase in the spread of malware on mobile devices in 2010 while at the same time, 20% of workers have left devices unattended, and 46% have let others use their devices, according to the Connected World Report, 2010. But with all these risks out there, so many "good enough" networks that are cobbled together with inexpensive equipment employ the bolt-on security method. This leaves the network (and valuable data) open to hackers. So how do you resolve these security issues? Integrated Architecture and a Network That Knows Its Users First of all, you need pervasive visibility and control that uses the network to enforce security policies. An integrated architecture means that security is part of a network that spans from an organization's buildings at its corporate headquarters to employees' homes where they tunnel in via VPN to employees' personal devices on wired or wireless connections, not to mention data that's being accessed through private or public clouds. To be considered secure, a network should have pervasive visibility and full context-awareness so security happens across the network, for every user and every device. An important aspect of Cisco's SecureX architecture is context-aware policy with distributed enforcement delivered through the Cisco Identity Services Engine (ISE). As the industry's only network-wide policy engine appliance, ISE creates, distributes, and monitors policies based on a contextual language to determine the who, what, where, when, and how. Here's how it works: As an employee brings in a device that the enterprise doesn't control, SecureX can identify the device, the user, and discern which privileges to grant. A truly smart and integrated network can detect devices, profile users, and then start to apply security policies. For example, Bob in Marketing can access marketing materials, but not the payroll server. Linda in Finance can't access financial information from a coffee shop wi-fi connection; however, that same location-based policy will allow her to access this information at her office behind the firewall. Transparency is another important aspect of a next-generation network, giving IT managers the freedom to customize the network to a company's needs as well as the tools they need to diagnose potential security threats on the spot is of paramount importance. With a smart network, you can establish policies for each device and user, but also share these policies with all points on the network, and instantly update information when a new device appears on the network. Keeping Data Secure, Wherever It Is As cloud becomes more and more mainstream, the network can be the facilitator or the impediment in the effort to securely adopt cloud capabilities. A broad premise-to-cloud security architecture guarantees security on the infrastructure in a much more dynamic environment. With the flick of a switch across a widely distributed network, it becomes easy to intelligently redirect web traffic to enforce granular security and control policies. When planning your network, look for vendors who look at security holistically and understand that threats have multiple vectors. Build a holistic security strategy with firewalls, VPN clients, Web content security, and a centralized, global threat correlation engine that delivers critical intelligence and protection. But if you do decide to try bolt-on security, remember, a chain is only as strong as its weakest link and a network is only as secure as its vulnerabilities. Two "good enough" network myths down… five to go. Look for myth # 3: "the application and end point ignorant" myth as I cover that next week. But until then, what are some of the "good enough" myths that you've been hearing in the industry? Note: The seven myths are outlined in a recent white paper from Cisco: Debunking the Myth of the Good Enough Network. ... View more
The Single-Purpose Network: Myth of the...
Originally Published in Silicon Angle, by Michael Rau, Vice President, CTO for the Borderless Network Architecture Cisco. Did you know that by 2015, there will be nearly one mobile-connected device for every person on Earth? That will mean 7.2 billion people with 7.1 billion devices, according to the Connected World Report, 2010. Aside from being an interesting factoid, this statistic underscores the importance of the next-generation network—after all, without a solid, reliable network to support those billions of devices, they would be nothing but useless bits of hardware. Last week, I blogged about the The Seven Myths of the Good Enough Network and now I'd like to delve deeper into myth #1–The Single-Purpose Network Myth–as it relates to mobile devices. Businesses and IT departments are being asked to provide more and more connectivity options for new mobile devices, but they are also under increasing pressure from limited resources and budgets. A network that is just "good enough" is only going to exacerbate these constraints because it is built to serve the single purpose of connecting users to resources in silos of connectivity whether it be wired, wireless, or VPN. A single-purpose network also doesn't address the consolidation of other isolated networks into a single converged platform. Examples of these networks include building control, card access control, and video surveillance systems. As mobility demands on the enterprise increase, it becomes critical that an end user is consistently managed as they access the network, whether over a wired, wireless, or VPN connection. Cisco's Enterprise Next-Generation Network has a unified architecture, similar to what was used in unifying the data center infrastructure. The unification at the access layer brings together wired, wireless, and VPN with a common set of provisioning, management, and policy capabilities that allows the end customer to deploy the technologies and services they need. With Cisco Prime for Unified Management and Cisco Identity Services Engine (ISE), businesses gain complete visibility into endpoint connectivity―regardless of device, network, or location—and can monitor security policy compliance across the entire wired and wireless network. This means that an enterprise's next-generation network can serve multiple purposes: machine-to-machine connectivity (as may be required for new sensor networks), inventory management reading RFID tags on materials as they move through the supply chain, or assisting a hospital staff to locate wheelchairs or crash carts. And, of course, the network can allow your increasingly mobile workforce to work from anywhere, on any device, and anytime securely, reliably, and seamlessly. A unified network strategy not only delivers greater ROI, it allows the business to keep up with all the different connectivity options and also allows the end user to work dynamically while not only in the office but also on the road and in their home. Not only is ROI enhanced by a unified network strategy, but the consolidation of management and policy across all forms of access allows a business to meet the growing connectivity needs of the end users in a fashion that also keeps a close eye on controlling operating expenses. It becomes the best of both worlds: satisfied end users and operating expenses are in line with expectations. But there are also other opportunities for a unified network. Imagine being able to power down the heat and energy in conference rooms that aren't being used. Lights, devices, and heat are turned on as soon as the conference room is needed, and precious resources are conserved when rooms aren't in use. With a next-generation network, companies can begin to make the building intelligent and reap the benefits of energy savings Cisco customers like Panduit are doing just that. By using the network and energy-control capabilities, such as Energywise, they can manage power consumption of network-attached devices. "By enabling real-time monitoring of our electrical consumption, the Cisco Connected Real Estate framework contributed to energy costs per square foot that are $0.63 lower than the average non-connected building, saving US$176,000 annually and more than $880,000 over five years," says Darryl Benson, Global Solutions Manager, Panduit. If you're investing in networks for a single purpose, you're missing opportunities to use the power of the network to improve carbon footprint, save energy costs, and provide unified management and policy for wired, wireless, and VPN networks. One myth down…six to go. What are some of the "good enough" myths that you've been hearing in the industry? Note: The seven myths are outlined in a recent white paper from Cisco: Debunking the Myth of the Good Enough Network. Read the White Paper: When Good Enough Isn't Good Enough View the IPTV Broadcast Replay: Debunking the Myth of the Good Enough Network ----------------------------------------------------- Please Submit Your Comments! Also a Blog of interest : ... View more
product_information_blog
The Seven Myths of the Good Enough Netw...
Cisco Blog > The Platform The Seven Myths of the Good Enough Network Originally Published by Mike Rau Mike Rau | April 27, 2011 at 2:15 pm PST There is a debate raging in the IT industry about the role of the network. In the same week that a gaming company's network was hacked and the personal information of 60 million customers was leaked, there is a debate raging about whether the network matters. In the same moment that the iPad is being adopted by 65% of the Fortune 100 — obliterating conventional wisdom about how corporate networks support consumer devices and mobility —there is a debate raging about whether the network matters. On one side we have newcomers to the networking industry and some industry commentators who believe that the value of a network should be determined only by the cost of its components. They argue that customers should focus squarely on acquisition cost, not the value of their network assets. They argue that customers should focus on capital cost, not network capability and innovation. They believe the network has become a utility; that 'good' is good enough. We all understand that negotiating the best price for goods and services always makes good business sense. But this debate is about more than that. The debate is about making a choice between a tactical network where getting the lowest possible price up front is paramount – and a strategic network investment that enables customers to adapt quickly to new business imperatives and to handle the increased demands on their business. This debate has fueled numerous myths and misperceptions in our industry. Here are the seven most misleading Myths of the Good Enough Network. 1. The Application and Endpoint Ignorant Myth: Good Enough Networks typically operate on the notion that data is data—all just ones and zeroes. More sophisticated next generation networks are built on innovative products that adjust to the application being delivered and the endpoint device on which it appears. 2. Basic QoS Myth: If a company has no plans for video applications or rolling out virtual desktops, a Good Enough Network and basic QoS may suffice. If, however, the business wants to take advantage of voice, video or mission critical applications then they need to invest in the QoS capabilities available in an Enterprise Next-Generation Network. 3. Single Purpose Myth: Customers investing in networks for a single purpose are missing opportunities to use the power of the network to improve carbon footprint, save energy costs, and provide unified management for wired and wireless networks. 4. Basic Warranty Myth: Service contracts and warranties are not created equal. You usually get what you pay for. Unfortunately, you never realize how good a service contract is until you need it. Be prepared and look at the fine print. 5. Security as a Bolt-On Myth: Network security has to keep pace with an ever-changing threat profile and the increased use of mobile devices. When different security elements don't share information, it magnifies the challenge of creating consistent security across the entire IT environment and can leave the customer exposed to costly security incidents. 6. Acquisition Cost Myth: When building an IT network, about 20 percent of the budget is for acquiring the hardware and 80 percent is for operating costs. If customers don't assess the complete financial impact, building a tactical network can quickly become the more expensive network. Perhaps even more importantly, companies that settle for tactical networks will miss out on the business benefits and customer engagement enabled with a next-generation network. 7. Just Look for Standards Myth: While industry standards are extremely important, relying only on existing standards as you plan for future needs is misguided. When companies lock themselves into standards-based, good-enough networks, they miss out on higher-level service innovation. Have you had any experience with any of these "good enough networking" myths? What are some of the other myths that you've hearing in the industry? If you're interested in learning more about the seven myths Cisco recently held a 45-minute webcast hosted by Cisco EVP of Worldwide Operations, Rob Lloyd, and Bob Cagnazzi, CEO of NYC-based BlueWater Communications. Cisco also recently released a white paper designed to debunk the myths of the good enough network. Read the White Paper: When Good Enough Isn't Good Enough View the IPTV Broadcast: Debunking the Myth of the Good Enough Network What do you think? Are there other Myths you've experienced? ... View more
troubleshooting_blog
The Seven Deadly Network Sins: Common M...
Originally published by: Alexandra Krasne | April 25, 2011 at 11:09 am PST We've all settled for less in our lives. Maybe you bought a pair of shoes that were a little tight, but the sale price was way too good to pass up. Or perhaps you got a brand-new digital camera that wasn't exactly the one you wanted, but last year's model way a much better price. While everyone loves getting a good deal, sometimes buying the less expensive option means sacrificing quality. You'd pay good money to make those blisters on your feet disappear and when those pictures of your daughter's graduation don't come out, you curse yourself for spending less. When it comes to the network, saving a few dollars up front may sound good, but losing the ability to capitalize on trends such as video, mobility, and cloud just don't add up. (And may cause headaches down the road.) In fact, research shows that over the long run, it may not even be the most cost efficient. Building a tactical network based on low-cost point products and services increases the total cost of ownership for most organizations by at least 20 to 35 % over a three-year time frame, according to the white paper "Debunking the Myths of A 'Good Enough' Network." The white paper findings also indicate that a network is only as reliable as its weakest link. And saving a bit of money on a router may be offset by the cost of an outage – and then some. That's just one of the seven deadly network sins. What are the other seven deadly network sins? And what should you know about a multi-vendor approach to building business-critical networks? Tune into our webcast, hosted by Rob Lloyd (Cisco's executive vice president of worldwide operations) to find out. The webcast will also feature executives from The Royal Bank of Scotland and Cisco Gold Partner BlueWater Communications Group. To register… Date and time: Wednesday, April 27, 2011, 8:00 a.m Pacific Time (11:00 a.m. Eastern Time; 4:00 GMT) Where: Visit this page to register. A replay of the webcast will be available approximately 24 hours after the webcast at the same location. We'll also post a recap right here on the blog. Do you agree? Let us know. ------------------------------------------------------------------ For a humorous perspective: "Sometimes you want your network fast. But sometimes you want your network slow. When slow and cheap is your goal, there's NetNoGo". Check out the Next Blog ... View more
colloboration
rob_lloyd
Discussions colmsted has Participated In
TKBs colmsted has Participated In
Blogs colmsted has Participated In
Events colmsted has Participated In
Videos colmsted has Participated In
Application and End Point Ignorant: Myth# 7 of the Good-Enough Network
http://siliconangle.com/blog/author/mikerau/Originally published on Silicon Angle Michael Rau, Vice ...
Myth # 6 of the Good-Enough Network: Acquisition Cost
Originally posted on Silicon Angle by Michael Rau, Vice President, CTO, for the Borderless Network A...
Myth # 5 of the Good-Enough Network: "Basic Warranty" Myth
siliconANGLE » Myth # 5 of the Good-Enough Network: "Basic Warranty" Myth Originally authored on Sil...
Myth # 4 of the Good-Enough Network: "Just Look for Standards"
Originally posted by Silicon Angle by Michael Rau | June 1st Just 50 years ago, personal computers, ...
The Basic QOS Myth: Myth# 3 of the Good-Enough Network
This blog was originally posted on Silicon Angle by Michael Rau, Vice President, CTO, for the Border...
Security as a Bolt on: Myth # 2 of the Good-Enough Network
Security as a Bolt on: Myth # 2 of the Good-Enough NetworkOriginally published on Silicon Angle by M...
The Single-Purpose Network: Myth of the Good-Enough Network
Originally Published in Silicon Angle, by Michael Rau, Vice President, CTO for the Borderless Networ...
The Seven Myths of the Good Enough Network
Cisco Blog > The PlatformThe Seven Myths of the Good Enough NetworkOriginally Published by Mike RauM...
The Seven Deadly Network Sins: Common Misperceptions About Good-Enough Networks
Originally published by: Alexandra Krasne | April 25, 2011 at 11:09 am PSTWe've all settled for less...
Total Helpful Votes Received 5
Helpful Votes From
Helpful Count
Lisa Latour