Zero to One Device Provisioning and Discovery with PnP Connect

What is PnP Connect?

Cisco Plug and Play Connect (a component of the Cisco Network Plug and Play solution) is a secure and scalable cloud-based service that provides a discovery mechanism for a network device to discover it on-premise Cisco DNA-Center or DNAC-Cloud. It’s the go-to solution for simple day-zero provisioning across all Cisco Enterprise platforms (routers, switches, and wireless access points).

What drives the necessity for this solution?

Installing and deploying the vast number of networking devices that reach their data center, branch networks, and campus rollout are costly for enterprises and campus deployments. Any computer usually has to be pre-staged by a professional installer and equipped with a CLI configuration via a console connection that allows it to connect to the rest of the network. This method is expensive, time consuming, and vulnerable to error. Due to these factors, customers would like to increase the speed and reduce the complexity of the deployment without compromising the security.

For PnP solutions we have the following 3 major pillars:

1. The solution should be simple, as that is critical for automation. For this our device should be able to call home to our controller, and this path should be robust.

2. The solution should be secure. We know some vendors have ZTP provision but that is traditional and not secure, specially through WAN connections. In PnP, the device gets secured connection via HTTPS solution and this gives the image to device. SUDI authentication is an added layer on top of this. When device calls home, a challenge is sent over the tunnel, and device will un-sign the certificate with a private key and it will be determined if the device is legit.

3. The solution has to have a consistent workflow for all kind of devices. Hence, we needed a simple secure unified and integrated solution that eases new branch rollouts or provisioning existing deployments.

What are the PnP solution components?

1. First, we need a server or orchestrator that makes the device do what it needs to do. This could be running on DNAC.

2. Second, the PnP agent is embedded in Cisco devices and communicates to the Cisco Network Plug and Play application using the open plug and play protocol over HTTPS during device deployments. The PnP agent attempts to obtain the IP address of the PnP server it wishes to connect with. The agent interacts with the PnP server to conduct deployment-related activities after a server is identified and a connection has been created.

3. PnP Server communicates with the PnP agent on the device using PnP protocol.

PnP protocol is the main connection. From that connection they will start using PNP schema (XML schema) to tell each other what they need to do and from there we provision the image or config.

4. If the device is not able to communicate to the server using DHCP or DNS it can use the PnP connect cloud-based service. This is the PnP Connect solution we launched that redirects device to the on prem DNAC.

How does PnP connect work?

PnP connect is a highly automation-based pre -provision workflow. Under this solution all the configurations that are to be pushed, site hierarchy and software image details are associated to a certain Serial Number of a device. All of this information will be linked to the device using the Smart Account. We can put our smart account information in our order when we buy it.

If you order plug and play network devices through Cisco Commerce Workspace (CCW), these network devices are automatically registered with Plug and Play Connect as long as a Cisco Smart Account is assigned to the order and you include the NETWORK-PNP-LIC option for each device that you want to use with Cisco Network Plug and Play. This option causes the device serial number and PID to be automatically registered in your Smart Account for plug and play.

There is also an option to manually add the device. The users can import a device from a CSV file or enter the devices information manually.

We also need to register DNAC as the default controller for the Smart Account, which will port all the SNs to DNAC. So, we will not need to import separate CSV files. Now, when device boots up their SN will get mapped and it will be sent to the mapped on-prem DNAC and all of configurations that were supposed to be pushed will be done accordingly in association to site.

The flexibility and efficiency that is achieved by using PnP connect is what makes it the true-blue solution.

Continue reading

One Architecture on Multiple Devices with No Compromise

Service providers, web scale companies, and equipment manufacturers have long struggled with networks comprised of multiple unique architectures driving up huge operational complexity and cost. Power-hungry routers, feature-limited web scale switches, and an ever-expanding footprint have them seeking new alternatives. Unfortunately, it seems the only solution is to wait for another chip family release once every 24 months.

Well, we have some good news. Those days are over. In December of 2019, we made a bold announcement about how we’ll forever change the economics of the Internet. Two of the key elements in that announcement were the introduction of Cisco Silicon One and a new business model. For the first time in the industry, customers can buy our state-of-the-art silicon and discrete optics parts directly from us.

The 10Tbps Cisco Silicon One Q100 is the first device in a family of chips that mark a fundamental shift in the routing silicon market. Whereas it once took at least five pieces of routing silicon to build a complete system, this can now be accomplished with just one. More than ever before, customers have the freedom to innovate at their own pace. We designed the new Cisco Silicon One architecture to be endlessly scalable, enabling faster iterations of future generations. Naturally there were skeptics – after all, this defied the norm.

Today, less than 10 months later, we’re proud to announce six new 7nm additions to the Cisco Silicon One portfolio: three highly efficient web scale switching devices, and three high-scale and deep-buffered routing devices covering an expanded performance range between 3.2Tbps and 12.8Tbps. The Cisco Silicon One portfolio now covers the entire space from service provider and web scale routers all the way to the Top of Rack (TOR) switches and everything in between. With one architecture, one Software Development Kit (SDK), and one P4 forwarding code, Cisco Silicon One unifies the network across routing and web scale switching.

The Cisco Silicon One Q200 extends our market leadership in routing silicon with a 7nm high performance, large scale, run-to-completion P4 engine and deep buffers. At 12.8Tbps, it enables customers to build a 32x400GE 1RU router with a single piece of silicon while others on the market require between two and 10 pieces of silicon. This dramatic difference alters the fundamental economics of building fixed-box routers.

Multiple Q200 devices can then be interconnected to create massive multi-petabit systems with a fully scheduled Ingress Virtual Output Queueing (VOQ) fabric. The Q201 and Q202 extend the portfolio down to enable lower bandwidth and less expensive 64x100GE and 32x100GE 1RU systems. Cisco Silicon One now covers the entire routing market, from 3.2Tbps to multiple petabits.

Today we also expand the market addressability of Cisco Silicon One in a big way by adding purpose-built devices for the web scale switching market. The Q200L is a 7nm 12.8Tbps web scale switching device featuring high performance, run-to-completion P4 engines and a fully unified on-die buffer. The Q200L is also foot-print compatible with the Q200, which enables one hardware design to support a 32x400GE router with the Q200 or a 32x400GE web scale switch with the Q200L, simplifying the development costs for our customers.

Although the leading switching devices are at rates of 12.8Tbps (and soon 25.6Tbps), we found that many customers are searching for highly efficient 3.2Tbps and 6.4Tbps to play different roles in their network. Because Cisco Silicon One is built with a scalable, slice-based architecture, we can easily create fully optimized, lower-speed devices from the same architecture. The Q201L at 6.4Tbps enables a highly efficient 64x100GE web scale switch and Q202L at 3.2Tbps can be used to build a 32x100GE web scale switch.

The efficiency of the Cisco Silicon One architecture combined with 7nm creates a truly unique offering in the web scale switching market.

Cisco Silicon One erases the hard-architectural boundaries that have existed for decades in the industry between routing and web scale switching devices by providing a single architecture that optimally spans both market segments. Customers can port one SDK and address multiple markets, while network operators need only train their support staff once to troubleshoot one architecture across their entire network. But in the end, this unique level of convergence wouldn’t be so interesting if each of the devices weren’t best of breed themselves. What sets Cisco Silicon One apart from the competition is how it brings convergence without compromise.

Cisco Silicon One was created by the team that built the silicon carrying more than 90 percent of the world’s Internet traffic and we believe this clean sheet architecture will serve the industry for the next several decades. To do this, we had to solve many of the problems that other architectures stumble over, but just as important, we’ve created an architecture that is highly efficient and scalable.

The impacts of a unifying architecture are clearly visible today. Most silicon vendors announce new silicon once every few years, whereas today we’re announcing six new devices in less than a year, just as we promised back in December 2019.

But as exciting as these new devices are, this is just the beginning. We’ve started a journey and we have more devices on the way. Stay tuned because there will be exciting news ahead!

Source: cisco.com

Continue reading

Deploying World-Class Rural 4G/5G Networks Just Got a Lot Easier

Rural areas need fast, reliable mobile connectivity just as much as cities. As service providers know, actually delivering that is far from simple. With new service opportunities that come with 5G, the demand picture for new rural investment is more attractive than it was with 4G. However, with sparse populations and long distances between population centers, making the numbers work is still challenging.

If you’re a service provider serving rural regions, that’s the baseline you’re starting from. Now, add a need to overhaul existing infrastructure or add new cell sites, and things get even harder. At least, that’s how it used to be. Now, Cisco is making it much easier to bring 4G/5G connectivity to rural subscribers—even for service providers who’ve never dealt with mobile networks before.

With the Cisco Cloud Services Stack for Mobility, we’re providing best-in-class mobile packet core solutions that are pre-integrated, validated, and ready to deploy. You can expand your mobile footprint much more quickly and cost-effectively. By working with Cisco, you can ensure your network is secure, reliable, and delivering the performance your subscribers expect.

Overcoming Complexity

Service providers may have any number of reasons for updating rural infrastructure. Maybe you need to replace your existing technology stack. Maybe you’re preparing to roll out new 5G services. Maybe you’ve historically focused on wireline services, and you’re looking to 5G or CBRS as a cost-effective option to bring fixed-access broadband to residential customers.

In all cases, you’re likely looking at a virtualized solution—deploying mobile core components via cloud software running on general-purpose hardware. There are big benefits to this approach; it’s much more scalable, flexible, and cost-effective than buying and maintaining dedicated appliances. But, as service providers have discovered in recent years, assembling all the components and integrating them into your environment can be enormously complex. Here’s what you’re looking at:

1. Design and build your solution. Do you have the expertise in house to select and assemble all the right components? How long will it take you to test everything (not just at the component level, but as a complete system) for functionality, security, scalability, and performance? Keep in mind, there’s a good chance you’re using a unique combination of products and software versions that no one else has used before.

2. Plan your deployment. Will you be working with multiple vendors? Will they be able to automate and accelerate your rollout? If you run into issues, will you be able to call one vendor for help, or will you be playing phone tag with half a dozen or more?

3. Strategize how you’ll maintain and evolve the solution. Do you have the resources in-house to manage roadmaps for all the components in your stack—across potentially dozens of combinations of products and software versions? If issues crop up (and they inevitably will), how long will it take you to isolate which vendor’s product is causing the problem and get it fixed?

For all these reasons, rural service providers are shying away from the “DIY” route, looking instead for pre-integrated mobile core solutions. A number of vendors now offer them, and some even claim their solutions are “pre-integrated” with other vendors’ products. Even in those cases though, there is no guarantee that the vendor has a roadmap for that solution that it plans to manage. Nor can you be sure that integration testing has been conducted on the most current versions of all software components.

The vendor may have plugged some version of these components together and confirmed that they worked. They may have successfully deployed some variation of this solution in the past. But, unless they’re providing a formal reference architecture—with every component thoroughly tested and validated to operate as a single, secure solution—you’re taking a big risk. That could entail blown timelines, extra costs, and frustrating delays in your rollout. In the worst case, it could mean exposing your network and subscribers to a serious security vulnerability.

Introducing the Cisco Cloud Services Stack for Mobility

Now, Cisco is bringing rural service providers a pre-integrated, ready-to-deploy mobile core solution that’s fully tested and validated by the industry leader in network security. It’s the Cisco Cloud Services Stack for Mobility, and it’s changing the game for deployment-ready mobile connectivity in rural regions.

This cloud-based “packet core in a box” combines best-in-class components from Cisco—designed by Cisco experts, pre-integrated and validated as a secure building block for 4G/5G mobile core networks. The solution includes all the foundational components (SAE gateway, CUPS, MME, 5G non-standalone architecture) to run 4G and deploy new 5G NSA-based services. It’s the fastest path to offer new services such as fixed wireless access (FWA). And, the best part: it eliminates the long list of tasks and risks you’d have to worry about when building out the solution on your own—such as those illustrated in the table below.

Simplify and Accelerate Your Rollout

With a complete, validated mobile core stack, you’ll be able to bring new 4G/5G services to rural customers much more quickly, with less risk and lower costs—both upfront and over the life of the solution. At the same time, you and your stakeholders can move forward with confidence, even if this is your first foray into mobile services. By working with Cisco, you’re getting:

◉ A proven reference architecture for your mobile core, designed and integrated by the market leader in network security

◉ A comprehensive, feature-rich solution used in the world’s largest (T-Mobile USA) and most rapidly deployed (Rakuten) mobile networks

◉ A platform to underpin your end-to-end mobile network solution—not just the core—via the Cisco Open vRAN Ecosystem

◉ Expert assistance automating and accelerating your rollout from the Cisco Customer Experience team

◉ Single-point-of-contact support for your entire solution—no matter where the problem resides—from the award-winning Cisco Technical Assistance Center

Just as important, Cisco understands exactly what rural service providers are up against and what they need to succeed. In the United Kingdom, we have invested in the world’s most ambitious rural 5G trial to date, 5G RuralFirst (a project I’m happy to note that I kick-started back in 2018!). No other vendor comes close to this level of investment in rural networks.

Bottom line, mobile core technology may be complicated, but your network rollout and operations don’t have to be. Reach out to your Cisco account manager today. Let’s work together to bring next-generation services to your rural subscribers and accelerate your 4G/5G success.

Continue reading

Collaboration in the Age of AI: How Cisco is Pioneering the Use of AI and Emerging Technology Within Collaboration

Artificial intelligence (AI) has become all the rage. Just the mere mention of it makes us think of hi-tech and some futuristic state that promises simplicity and instant knowledge. According to research from O’Reilly, engagement with artificial intelligence technology grew 58% last year.* Additionally, the global artificial intelligence market is expected to grow nearly 50% in 2020, to a staggering $40.74 billion.** For the collaboration industry, their use brings hope of frictionless and instant connections.

Webex’s Rich History in AI Innovation

Cisco Webex has pioneered the use of AI within collaboration to bring this hope into reality. There is no other vendor in this space with a rich history in AI innovation like Webex.  All for the purpose of helping people to connect like never before from wherever they work, play, or learn. To enable a safe return to the office. And to make decisions about collaboration spaces and office floor plans. From your home to the board room, our, AI, and automation technology provide intelligent experiences and drive changes, that keep everyone safe and productive.

And it isn’t something that will happen in the future. It’s happening today; in fact, we’ve been doing it for years following our strategy to apply AI and Machine Learning (ML) to practical applications in collaboration. We identified the most important areas where machine learning would make a difference in collaboration solutions and have focused our efforts on relationship intelligence, audio & speech technologies, bots & assistant, and computer vision.

This involved the application of a range of AI-based technologies including:

◉ Conversational AI, a combination of natural language processing, dialog management, and question answering

◉ Wakeword speech technology

◉ Speech To Text (STT) and Text To Speech (TTS)

◉ Speech Transcription and Translation

◉ Noise detection and removal

◉ Face Recognition

◉ People Insights

To support the advanced machine learning techniques used in these technologies several of them were optimized to run on NVIDIA GPU’s. Additionally, these features were deployed in the cloud or directly on client devices in order to provide optimal processing and the best data privacy position for end users.

2017

After several years of research and development, this was the year Webex first introduced AI that could change the way we meet and interact. For example, two big challenges we noticed back then were how we could reduce distracting noises (sirens, doorbells, dog barking, etc.), and how to present the best view of the conference room for remote participants. As a result, we introduced the following:

◉ Machine learning-based noise detection – Webex used AI to recognize these loud and annoying noises in the background. Once detected, the system prompted you to mute your microphone or suppressed common noises such as typing on a keyboard or rustling papers.

◉ Best overview and Speaker Track camera framing of participants – Video systems in the past were able to detect and zoom in on different speakers using multiple moving cameras. Modern Webex Rooms added intelligence to do this digitally with fixed cameras. They automatically framed up attendees as they talk to provide closeups of where the conversation is happening. This dramatically improved the experience of remote participants.

2018

The rise of small, agile teams meant that collaboration wasn’t just happening in traditional conference rooms. Every shared space was effectively turning into a huddle room. Whatever space people met in, they wanted the same easy join/start/share experience.  So, our engineers not only made the conference room look even better to remote participants, but also improved the experience of people in those rooms. Webex Rooms systems have a modern hardware architecture that includes NVIDIA GPUs. This architecture allowed us to build sophisticated computer vision applications and bring AI-driven features to market faster. These included:

◉ Face detection and people count – Webex Room devices used computer vision and a collection of sensors to determine how many people are in the room, unlocking powerful room utilization insights for customers

◉ Presenter tracking – By detecting people and faces, Webex Room cameras could automatically follow the active speaker if they paced or moved about the room, so they always stayed in frame

◉ Conversational AI on devices (Webex assistant) – Webex brought to market the first voice-activated assistant to help you call someone, start meetings or share your screen without touching anything

◉ Automated pair and share: The Webex app connected to your Webex video devices wirelessly through ultrasound, and that’s when the magic happened. The proximity sensors in Webex Rooms could detect when you walked into a room, and the prompt on the screen would welcome you by name. And your Webex app could automatically pair to that device in order to share content without ever touching cables or fiddling with remote controls or cables!

2019

As the remote collaboration experience became better, what people wanted next was building a better, more intimate connection to the people they were meeting with on the screen. How could we shave off the 10 minutes of going around the room for introductions, and yet help you feel you already knew everyone you were meeting with?

◉ Relationship intelligence (People Insights) – Webex brought to market People Insights to provide users with comprehensive, real-time business and professional profiles of meeting participants, giving users context and increased insight about the people they meet with…either before the meeting or during the meeting.

◉ Facial recognition with name labels – To go along with facial detection, we launched facial recognition. Adhering to strict data privacy rules, those who opted in for this feature were able to have the camera system recognize their face and then display their name label under their face to all remote participants.

◉ Proactive collaboration assistant – With advancements in natural language abilities, Webex Assistant became even smarter. Previously, it was able to respond when spoken to and carry out actions. But now it could also proactively start a conversation. For example, when it was time for a meeting, Webex Assistant would wake up and ask the user if they want to join.

2020

This was/is the year where work from home become mainstream, and #RemoteWork started trending on social streams. Working from home presents some unique challenges and it became clear that new innovations were needed to make it easier to work from anywhere, without distraction. This has been a watershed moment for needing AI in collaboration, as more people dealt with all sorts of background and noise distractions.  How did Cisco Webex respond? With intelligent technology for the hybrid workplace:

◉ Background blur AND virtual replacement options across any device or OS – While other vendors offered this, Webex was the first to offer both blurring and virtual background across any device or operating system

◉ Mask-friendly People Counting: Webex Room devices are able to detect & count people regardless of which way they are facing, even if they are wearing masks! This information can now also be used for social distancing alerts based on room capacity.

◉ Noise Removal WITH Speech enhancement – Solving for background noise has become table stakes. With the recent acquisition of BabbleLabs, Webex has taken the technology to reduce meeting interruptions to the next level. This noise removal technology, powered by AI, goes beyond noise suppression by 1) distinguishing speech from background noise, 2) removing background noise in real-time, and 3) enhancing your voice to elevate communication, independent of language.

◉ A personal in-meeting assistant (expanding Webex Assistant in Meetings) – Now you have a personal collaboration assistant in every meeting! The Webex voice assistant expands beyond Room devices, to any Webex meeting, and uses advanced speech recognition and natural language understanding to turn talk into action.

◉ Real-time closed captioning – See what is being said, even if you are in a place that makes it hard to hear what is being said.

◉ Capture action items and highlights – Users can simply tell Webex to highlight certain points in a meeting or to create action items.

◉ Searchable and editable meeting transcript – After the meeting see the transcript, edit it, search within it, and easily share it. It automatically captured for you.

◉ Speaker labeling in transcripts– names are shown on notes, highlights, and transcripts to let you know who said what.

When working from home, many people are faced with spotty Wi-Fi or bandwidth constrained home networks that just aren’t as robust as corporate networks. We improved Webex performance in such conditions by applying machine intelligence in a few core areas:

◉ Video Super-resolution – When there isn’t enough bandwidth to deliver HD video, Webex intelligently applies adaptive super-resolution. We’re able to deliver HD-like quality even when receiving 360p or lower resolution video.

◉ Region of interest encoding – Webex can intelligently identify the most important regions in a video frame, like a person’s face. When bandwidth is limited, Webex can still deliver high-quality video by making sure that the important parts of the frame look better, whereas other parts like backgrounds might be slightly lower quality.

◉ AV1 Next-Gen Video Compression – AV1 is a new, next-gen video codec with an extensive toolset that delivers state-of-the-art compression performance. Last summer, in an industry-first demonstration we not only showed live encoding of 720p30 camera video at half the bandwidth of H.264 but also high frame rate share encoded at 1080p30 using around 2/3 of the bitrate of H.264 encoding 720p30, all on a commodity laptop. We’ve been making steady progress on this technology and soon you will see us implement it in Webex meetings, further reducing the amount of bandwidth required for a high-quality experience. 

What About my Data Privacy?

Webex brings powerful artificial intelligence and machine learning to your collaboration experience, at home or at the office, to help to foster relationships, enhance customer interactions, and build high-performance teams across boundaries. But what about data privacy? How are my data privacy rights being protected?

Our AI/ML initiatives are guided by a few core principles:

◉ Don’t retain data if you don’t have to

◉ If you do, keep it for the shortest possible time

◉ Be transparent about data usage

◉ Provide edit and deletion controls

◉ Empower end-users and admins

Continue reading

Get Ready to Crack Cisco CCNP Enterprise 300-425 Certification Exam

 

Cisco CCNP Enterprise 300-425 Exam Description:

The Designing Cisco Enterprise Wireless Networks v1.0 (ENWLSD 300-425) exam is a 90-minute exam associated with the CCNP Enterprise and Cisco Certified Specialist - Enterprise Wireless Design certifications. This exam certifies a candidate's knowledge of wireless network design including site surveys, wired and wireless infrastructure, mobility and WLAN high availability. The course, Designing Cisco Enterprise Wireless Networks, helps candidates to prepare for this exam.

Cisco 300-425 ENWLSD Exam Overview:

• Exam Name: Designing Cisco Enterprise Wireless Networks

• Exam Number: 300-425 ENWLSD

• Exam Price: $300 USD

• Duration: 90 minutes

• Number of Questions: 55-65

• Passing Score: Variable (750-850 / 1000 Approx.)

• Recommended Training: Designing Cisco Enterprise Wireless Networks (ENWLSD)

• Exam Registration: PEARSON VUE

• Sample Questions: Cisco 300-425 Sample Questions

• Practice Exam: Cisco Certified Network Professional Enterprise Practice Test

Related Articles:

• 300-425, ENWLSD Certification: Study Guide & Career Benefits

• A Developed Plan of Action for Cisco 300-425 ENWLSD Exam Preparation

Continue reading

Stop playing whack-a-mole and put threats to rest with Cisco Stealthwatch Cloud

I was recently able to grab some time with a Cisco customer to hear about their experience with Cisco Stealthwatch Cloud, a SaaS-based Network Detection and Response (NDR) solution. Aspire Technology Partners, a Managed Security Service Provider, explained their use of the product for one of its customers that was in a dangerous situation involving some slippery malware floating around in the network. As I worked on this case study, I couldn’t help but think of one thing in particular…The North Carolina State Fair.

I am a relatively new North Carolina resident. Prior to working from home, I was no stranger to the commute up I-40 to building 9 of Cisco’s RTP campus. As I found my way around my new home state, I kept hearing that the NC State Fair is a rite of passage for new residents. I decided to check it out. What an experience that was. I got to see a monster truck show, a lot of farm animals and the world’s largest pumpkin. I also ate more fried food on a stick than my heart could handle. We also got to play whack-a-mole, a game that requires you to smash each mole as they poke their heads out of the machine with a mallet. As you progress, you earn points for each successful ‘whack’. Unfortunately, you can never really win since they never stop popping up.

Without an NDR tool like Stealthwatch Cloud in place, the modern Security Operations Center (SOC) is effectively doing the same thing. Their endpoint and perimeter solutions, while critical to network safety, are playing whack-a-mole: stomping on malware and isolating devices as they become infected while still knowing that the network is still at risk. Without east-west monitoring and visibility into encrypted traffic, businesses are susceptible to subsequent attacks once malware has established a foothold on the network. If your security team can’t identify how threats are accessing the network, malware could stay hidden for months…or even years.

Aspire Technology Partners was working with a customer who deployed an Incident Response (IR) team to contain a threat, believed to be ransomware, that was surfacing all over their network. The Aspire SOC team decided to deploy Stealthwatch Cloud to track the malware through east-west traffic monitoring. Here are a few reasons why Stealthwatch Cloud was critical to not only detecting the threat, but also stopping it dead in its tracks:

Stealthwatch Cloud deploys almost instantly

The Aspire SOC team deployed Stealthwatch Cloud on the customer’s private network in just 2 hours. This allowed the team to immediately start digging through east-west flows to hunt down the threat.

Stealthwatch Cloud detects threats behaviorally

Stealthwatch Cloud uses the network itself as a sensor, and offers both automated threat detection and the ability to search manually for threats. The team needed to identify the foothold of the attacker, and with comprehensive visibility provided by Stealthwatch Cloud, was able to discover that the malware found its way into the network via a vulnerable 3rd party device. No endpoint or agent-based solution could have figured this out.

Built-in remediation methods enable quick response to threats

Stealthwatch Cloud offers a wealth of integrations with 3rd party and Cisco solutions that allow users to go one step further and communicate across their organization, pivot into other tools to carry on an investigation and much more. Alerts come alongside their supporting observations that contain bits of context that users can leverage as they continue to investigate. A simple firewall rule blocked out this malware for good.

So, stop playing whack-a-mole, unless you’re at the fair. Even with proper agent-based and perimeter protection, your network may still be at risk. You can fill that gap and gain comprehensive visibility on-prem or in the cloud with Stealthwatch Cloud.

Continue reading

The Must-Know Techniques to Prevent IT Downtime

Everyone in IT knows the feeling. It’s the little voice in your head that pings you out of nowhere, and asks:

“Have I covered everything? Are we as prepared as we should be for an outage? How much does our resiliency plan have to change?”

You’re certainly not alone. Over the past three years, 96% of IT leaders have experienced at least one significant outage. In the same period, the average U.S. organization experienced 10 IT blackouts or brownouts.

Outages have become alarmingly close to common. Thankfully, there are strategies you can introduce to prevent unexpected downtime before it happens – and get the reassurance of comprehensive network insight to preempt issues.

The true cost of IT outages

When an organization’s network goes down, the effects can be anywhere from inconvenient to catastrophic. In total, IT outages cost North American businesses $700 billion every year.

These losses aren’t confined to revenue. Losses can impact internal productivity, mitigation costs, and even the brand. Just one hour’s downtime can cost an average of $250,000 to $300,000, depending on the size of an organization and its industry.

In the new era of ‘the customer experience’ – where expectations for a superior experience and network access continue to grow – the stakes for staying connected have never been higher.

The basics of incident prevention

The biggest challenge in preventing brownouts and blackouts is identifying root causes in advance and preempting their effects. To achieve this, your organization needs proactive processes to monitor your network, identify risks, and take preemptive actions.

However, monitoring can be difficult for understaffed IT teams, who are focused on the delivery of immediate business goals. Monitoring takes time, and automation is required to identify risk faster, accelerate remediation and reduce the chance of error.

There is another way. Cisco Business Critical Services (BCS) augments your team with analytics and expertise. By investing in experts who’ll continuously engage with your IT professionals and share proactive recommendations to prevent incidents, your teams can get greater visibility into their IT infrastructure to improve uptime, performance, and availability.

Become an expert by learning from others

It’s one thing to understand what could go wrong in your organization. The next step is learning from other businesses’ experiences, and how their outages can help prevent yours.

Thanks to advances in predictive analytics and machine learning, businesses now have access to global intelligence to predict weak points in their own networks. For example, Cisco’s BCS experts draw on their anonymized and proprietary database collected and aggregated from over 30 million devices worldwide.

By cross-referencing our data with your devices, we can help you identify and mitigate vulnerabilities before they impact your organization. Empowered by Cisco intellectual capital, our expertise – powered by analytics, insights, and automation – can help your IT teams avoid costly downtime.

How to review an outage

Likewise, if an outage does take place, a consistent, proactive approach is critical to reaching a positive outcome. As part of Cisco BCS Advantage, our Expert Incident Review recommends best practices to shore up your own incident review framework, then practice it, to improve your network stability and performance:

Turn adversity into opportunity

Network brownouts and blackouts are costlier than ever. But with incident prevention, regular reviews, access to Cisco experts, analytics, insights, and more, IT decision makers are well-positioned to deliver an always-on network.

Continue reading