We’ve been talking for a while about Cisco ACI’s leadership in SDN security features (like here), and in the design of our fine-grained security policy enforcement between individual workloads, sometimes called microsegmentation. Today, here at Interop, Las Vegas, Cisco is reaffirming its thought leadership in data center security and SDN automation with a couple of announcements, including the integration of Cisco FirePOWER next generation intrusion prevention system (NGIPS) into the ACI security framework. In other news, another ACI ecosystem security partner was announced last week at the RSA Security Conference: Fortinet, who will be integrating their Fortigate firewall platform with ACI.
The Cisco ACI + FirePOWER solution enables real-time detection, mitigation and remediation for advanced security threats inside the data center by combining granular application visibility and control, threat detection, advanced malware protection (AMP) capabilities of FirePOWER NGIPS with ACI microsegmentation, advanced security service insertion, and L4-7 policy automation. To quickly summarize how this all comes together and a sample use case for ACI security, we created the following video:
Available in June, 2015, new ACI advanced security works to protect data centers before, during, and after attacks, dynamically detecting threats and automating incident responses. The Cisco FirePOWER family of security appliances consists of industry-leading NGFW, NGIPS appliances offering best-in-class threat effectiveness, superior visibility and global threat intelligence.
FirePOWER + ACI = Automated Security with Advanced Protection Across Attack Continuum for Physical and Virtual
Read More »
Tags: ACI, Advanced Malware Protection, FirePOWER, Fortinet, interop, pci, security
It’s that time again. The champions of OpenStack are gearing up for the next Summit: May 18-22 in Vancouver, where Cisco is a Premier Sponsor and our objective is to demonstrate the depth of our commitment to OpenStack as developers, operators, and users.
This is only my third Summit, but I’m noticing some changes here in our preparations at Cisco. For one thing, our engineers are presenting nearly 30 sessions—more than triple the last Summit. That makes sense if you think about the growth of OpenStack and the increasing interest in issues related to enterprise deployment and production environments. Internally, Cisco uses OpenStack for a variety of cloud applications and services and has a lot to share about high availability, scalability and operations for OpenStack.
Of course, Cisco architects will be presenting their perspectives on OpenStack networking topics, including sessions on implementing IPv6, adding enterprise functions to Open vSwitch, availability of Neutron extensions and ML2 drivers, and the innovative use of Network Function Virtualization to create cloud VPNs. You can see the full list on the Cisco at OpenStack Summit website, to mark your schedule in advance.
Cisco will also have a special sponsored track on Tuesday to share details on our OpenStack strategy and breadth of solutions. Presenters will be joined by Cisco customers: Shutterfly, Sprint and Key Information Systems. Attendees at sponsored track sessions will be eligible to win a new MacBook or one of seven iPad minis.
We’re bringing ‘Engineers Unplugged’ back to our booth in the Expo Hall and recording short whiteboard videos to let OpenStack contributors share what they’re working on. Stop by the booth to view a Cisco demo and receive a free Vancouver Summit t-shirt. The roster of demos includes how Cisco Application Centric Infrastructure enables faster, easier, and more accurate provisioning of infrastructure to scale applications in the cloud.
Finally, keep an eye out for Cisco’s social media scavenger hunt with fun prizes, details to be posted on Twitter: #OpenCisco, #OpenStackSummit.
See you in Vancouver.
Tags: ACI, Cisco, cloud, lew tucker, Neutron, OpenStack, openstack summit, vancouver
In the last episode of our myth-busting series, Cisco SDN expert Frank D’Agostino and I are debunking the myth of the bargain priced white-box switch. White boxes aren’t a new subject in the market, but customers are just now starting to evaluate them for return on investment. So, where to start? When considering a white-box deployment, it is crucial to do all of the math. You must consider both the capital costs and the ongoing operational costs of this type of solution.
Two independent reports show that the up-front cost savings of a white-box switch are marginal as compared to those of traditional vendors. Deutsche Bank published “Whitebox Switches are Not Exactly a Bargain” in 2013, while Forrester Research recently released a study titled, “The Myth of White-Box Network Switches,” (February 20, 2015).
While the cost of a white-box and traditional switch are fairly similar from a capital expenditure point of view, Cisco analysis shows that white-box switches are more expensive when you include operational expenditures, such as the integration of third party software, tools and support costs. In fact, these real-life deployment factors can result in a total cost of ownership for Cisco that is approximately 20-30 percent less expensive than the full deployment of white-box switches.
Bottom line: White-box switches have hidden costs that make them more expensive than traditional switches when fully deployed. When you add up the cost of hardware, third-party software, integration and support, they are clearly no bargain. Check out our video conversation for more on this topic.
Tags: ACI, Cisco, Frank D'Agostino, rob lloyd, SDN, White Box
Following up on my blog post announcing our intent to support VMware vSphere 6.0 environments with Cisco Nexus 1000V, I am happy to announce that we now have the supported release available for use.
Starting with release 5.2(1)SV3(1.4), Cisco Nexus 1000V for vSphere will support VMware vSphere 6.0 environments. Customers can download the release on Cisco.com portal for Nexus 1000V for vSphere.
Cisco Nexus 1000V for vSphere, Hyper-V and KVM environments is continuing to be sold and supported by Cisco. If you have an expiring VMware support contract for Nexus 1000V, please contact your Cisco account team about continuing product support through Cisco support organization.
Check out the video below for more in-depth discussion about Cisco Nexus 1000V support across multiple hypervisors and attend our webinar on April 21st 2015.
Tags: ACI, KVM, Microsoft Hyper-V, N1KV, Nexus1000V, VMware vSphere
Cisco and Microsoft’s relationship is growing stronger year over year. Our technologies, products, and integrated infrastructure solutions continue to provide an optimum Data Center for your Microsoft workloads.
Now, this isn’t my first time going to Tech Ed, ooops I mean Microsoft Ignite, however, it is a special year for me! I will be presenting “Top 10 Reasons to Migrate from Windows Server 2003 to Windows Server 2012R2 with Cisco Unified Computing System (UCS)” on Monday May 4th 6:50pm during the welcome reception in Lounge A. If you are there, please come watch and meet the experts who will be joining me at the show.
Here is a sneak peak:
Need more 3 reasons to come see us?
- This year we have lots of great demos and theater presentations for you, such as Cisco UCS Mini, Cisco Cloud Services Router (CSR) 1000V, Cisco InterCloud Fabric (ICF).The latest and greatest demo is Application Centric Infrastructure , which will be highlighted in a presentation, “Microsoft Cloud Meets Cisco’s Application Centric Infrastructure (ACI)” on Tuesday 1:30pm.
Read More »
Tags: #CiscoACI, ACI, Cisco, CiscoUCS, Microsoft, MSIgnite, WS2003, WS2012R2