Download Cisco VWIC2-1MFT-T1/E1

Cisco 1800 Series (Cisco 1841 Router Modular)
Cisco 1800 Series (Cisco 1841 Router Modular)
Security Features continued
Benefits and Advantages continued
intuitive, Web-based device manager that offers
easy router configuration and monitoring, startup
wizards for quick deployment and lock-down,
smart wizards to help enable security and routing
features, Cisco Technical Assistance Center
(TAC)-approved router configurations, and subjectrelated educational content.
Integrated Services
By providing integrated services, as well as great
modular density and high performance, the
Cisco 1841 router provides security, versatility,
scalability, and flexibility for multiple applications
to the small- to-medium-sized business, small
enterprise branch office, and the service provider
customer edge. The Cisco 1841 router easily
accommodates several network applications, such
as secure branch-office data access (including
NAC for antivirus defense), VPN access and firewall
protection, business-class DSL, IPS support,
inter-VLAN routing, and serial device concentration.
The Cisco 1841 router provides customers with
the industry’s most flexible, secure, and adaptable
infrastructure to meet both today’s and tomorrow’s
business requirements for maximum investment
protection.
• Requires IOS WebVPN feature license FL-WEBVPN-10 or FL-WEBVPN-25
• Requires an IOS security feature set (IOS security feature set is included in all secure router bundles)
Network Foundation Protection
• Control Plane Policing (CPP)
• Access Control List (ACL)
• AutoSecure
• Command-Line Interface (CLI)
• Secure Shell (SSH)
• Committed Access Rate (CAR)
URL Filtering
• Local URL filtering in Cisco IOS software based on external server
Onboard USB 1.1 Port
• Single onboard USB 1.1 port
• Secure token and Flash memory support
Security Features
Security Solutions
• Network Admission Control (NAC)
IPsec VPN
• Advanced Encryption Standard (AES) 128, 192, and 256; Triple Data Encryption Standard (3DES);
and DES cryptology support
• Embedded hardware-based VPN acceleration on the motherboard
• Cisco Easy VPN remote
Optional Security Modules
• VPN and Encryption Advanced Integration Modules (AIM-VPN/SSL-1)
Cisco Router and Security Device Manager (SDM)
• Ships by default
• Cisco Easy VPN server
• Dynamic Multipoint VPN (DMVPN)
Certifications
• Virtual Tunnel Interfaces (VTI)
• ICSA IPsec
• Common Criteria IPsec (EAL4) (in process)
• 802.1x
• ICSA Firewall
• Common Criteria Firewall (EAL4+) (in process)
• FIPS 140-2, Level 2 (in process)
• VPN QoS—Preclassification support
• Support for up to 800 IPsec tunnels using the AIM-VPN/SSL-1
Security Example
Multiprotocol Label Switching (MPLS) VPN Support
• Support for VRF-lite and VRF aware IPsec
Corporate
Headquarters
Cisco IOS IPS
Large
Branch
Office
• Inline ability to drop packet, reset connection, locally shun, or send an alarm
PSTN
• Dynamically load and enable selected attack signatures in the same manner as Cisco IPS Appliances
Cisco IOS Firewall
• Feature rich, stateful firewall
• VRF-aware firewall
• Per-user authentication and authorization
• Advanced Application Inspection and Control
– HTTP inspection engine
– E-mail inspection engines (SMTP, ESMTP, IMAP, POP)
• Real-time alerts
• Transparent firewall
• IPv6 firewall
IOS WebVPN (SSL VPN)
Cisco 7200
(VoIP-enabled)
V
SS7
IMT
V
PRI
Cisco 3800
(VoIP-enabled)
SP IP VPN Core
Small
Branch
Office
Branch
Office
• Secure remote access for mobile users without installing PC client software
• Integrated into the router—no separate appliance required
• Cisco 1841 supports up to 25 users
54
Cisco 1841
Cisco 2800
Branch office Network Admission Control (NAC) helps ensure that every endpoint complies with network security
policies before being granted access, protecting the network from viruses and worms.
55