Nothing Special   »   [go: up one dir, main page]
Scribd Logo
Upload

Welcome to Scribd!

  • 39 views

    Cisco Trustsec Services: Protect Network Access and Assets

    Uploaded by

    Promise Kumalo
    Trustsec

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PDF, TXT or read online from Scribd

    Cisco Trustsec Services: Protect Network Access and Assets

    Uploaded by

    Promise Kumalo
    39 views2 pages
    Trustsec

    Original Title

    TrustSec_AAG

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Trustsec

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    39 views2 pages

    Cisco Trustsec Services: Protect Network Access and Assets

    Uploaded by

    Promise Kumalo
    Trustsec

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    You are on page 1of 2

    Cisco TrustSec Services At-A-Glance

    Cisco TrustSec Services


    SUCCESSFULLY DEPLOY AN INTEGRATED INFRASTRUCTURE ACCESS ENFORCEMENT SOLUTION USING 802.1X AND ISE

    Protect Network Access and Assets


    One of the most pressing security challenges is the explosion of consumer IT devices. This challenge, combined with the need for global collaboration and the move to cloud and virtualization, means that a traditional organizational network boundary is a thing of the past. Cisco TrustSec recognizes this fundamental change and tells you who and what is connecting to your wired or wireless network, while providing industry-leading control of what users can do and where they can go. Cisco TrustSec is a component of Cisco SecureX, a next-generation security framework that brings together flexible solutions, products, and professional and technical services to address and enforce consistent security policy throughout the distributed network. Cisco SecureX blends global threat intelligence and contextual awareness to address evolving security challenges.

    The IEEE 802.1X standard simplifies interoperability and compatibility of authentication methods and, when used in conjunction with Cisco TrustSec, it helps you increase control over security access. Figure 1 shows a Cisco TrustSec deployed with ISE.
    Figure 1. Cisco TrustSec Infrastructure
    AnyConnect 3.0 or 802.1X Supplicant Guest Users IP Phones IP Cisco Catalyst Switch Stop Cisco Catalyst Switch Campus Network Stop Wireless LAN Protected Controller Resources Cisco Nexus Identity Services Engine

    Increase your control over guest access rights by helping you enable the capabilities and features that best meet your requirements Improve the day-to-day practicality of your secure access solution by helping you better manage the balance between supporting collaboration while protecting organizational information and assets

    For More Information


    For more information about this and other Cisco Security Services, contact your local account representative or visit www.cisco.com/go/services/security.

    802.1X

    Stop Directory Service

    Users, Endpoints

    NetworkAttached Device

    Enable the Cisco TrustSec Solution


    Services from Cisco and our certified partners can help you more quickly and cost-effectively deploy a fully integrated authentication and access solution. Service activities include: Technology Readiness Assessment: Determines the readiness of your current network for a Cisco TrustSec 802.1x solution and compares your existing infrastructure and usage policies against the controls necessary to achieve a successful Cisco TrustSec implementation. Additionally, the assessment determines which network devices can support 802.1x currently and where there are gaps in the network from an 802.1x perspective. Design Development Service: Based on your requirements, Cisco designs the best combination of Cisco TrustSec capabilities and features to achieve your authentication and access control objectives. Includes a high-level and a detailed design defining the solution architecture from endpoint to policy servers, including traffic flow, workstations, and guest services.

    Cisco TrustSec Services


    The Cisco TrustSec solution includes intelligent, personalized professional services to help you adapt the implementation to meet your unique requirements. Through a discovery process that begins with understanding your business objectives, we help you integrate a Cisco TrustSec solution into your architecture and incorporate network services onto that platform.

    Cisco TrustSec Deployment


    Cisco TrustSec is deployed as an integrated 802.1X infrastructure-based system that extends access enforcement throughout the network. Central to Cisco TrustSec is the Cisco Identity Services Engine.

    Cisco Identity Services Engine


    The Cisco Identity Services Engine (ISE) is a nextgeneration identity and access control policy platform that enables organizations to enforce compliance, enhance infrastructure security, and simplify service operations. The ISEs unique architecture allows organizations to gather real-time, contextual information from networks, users, and devices to make proactive governance decisions by enforcing policy across the network infrastructure.

    Benefits
    Cisco TrustSec Services help you successfully deploy a system that gives you increased control over your assets and information by supporting managed, unmanaged, and unknown assets as well as employees, guests, and contractors. Cisco TrustSec can help you: Gain visibility across the network by discovering and mapping your network security devices Decrease deployment time by applying leading practice tools and processes

    2012 Cisco and/or its affiliates. All rights reserved. This document is Cisco public.

    Cisco TrustSec Services At-A-Glance

    Cisco TrustSec Services


    SUCCESSFULLY DEPLOY AN INTEGRATED INFRASTRUCTURE ACCESS ENFORCEMENT SOLUTION USING 802.1X AND ISE Cisco TrustSec Services use leading practices and expertise to help you to: Identify network areas where you need to focus to deploy a Cisco TrustSec solution Plan how to gain control of user access onto your network Gain full network visibility and knowledge of what is on your network and whether it should be on your network Reduce risk, delays, and the total cost of Cisco TrustSec solution deployments Optimize your solution after network implementation for further expansion and performance stability ISE Implementation Plan: Engineers create an implementation plan that provides the steps to be taken and a schedule of activities. This can be used with the detailed configuration templates to plan a pilot deployment. We can also create 802.1x test case templates and customer-specific test cases to run in a lab test environment to validate your 802.1x design prior to pilot deployment. Implementation Engineering Support: We support you in the implementation phase with consulting, support, and assistance utilizing the test validation, detailed design, and implementation plan to facilitate a successful Cisco TrustSec 802.1x ISE deployment. Training and Knowledge Transfer: Training and knowledge transfer prepare your staff to effectively operate, maintain, manage, and tune your Cisco TrustSec security solution. Cisco Optimization Service for Security, formerly known as Security Optimization Service (SOS): This service provides in-depth Cisco TrustSec 802.1x subject matter expert support for a variety of needs that might arise, including change management strategy development, assessing a new area of the network for readiness, architecture assessments, and design reviews. Network Optimization Service (NOS): For customers with a current NOS contract, Cisco provides limited 802.1x support for incremental changes or design support for your existing Cisco TrustSec solution.

    ISE Design and Proof of Concept Service: Provides high-level and low-level design development that meets the technology requirements and design goals of your Cisco TrustSec 802.1x deployment. We provide a technology readiness assessment prior to design development, lab-based proof-of-concept testing, and remote design support to validate that the solution will successfully meet your needs.

    Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R) C45-691596-01 04/12

    2012 Cisco and/or its affiliates. All rights reserved. This document is Cisco public.

    You might also like