Cisco 1711 Datasheet page 3

Integrated Network Security
Cisco 1711 and 1712 routers deliver integrated network security solutions that enable organizations to protect
productivity gains and reduce costs.
Standard integrated security services include hardware-accelerated IP security (IPSec) Triple Data Encryption
Standard (3DES) encryption for wire-speed site-to-site VPN, as well as stateful inspection firewall and the Cisco IDS
for network protection. These features provide secure connections via the Internet to connect geographically
dispersed offices, business partners, and remote users while providing security, traffic prioritization, management,
and reliability equal to that of private networks.
VPNs
VPNs enable companies to securely connect their branch offices, mobile workers, and business partners over public
networks, dramatically lowering costs compared to a private line. By taking advantage of the vast, shared
communications infrastructure of the Internet or a shared service provider backbone, companies avoid the service
charges of traditional private networks.
The Cisco 1711 and 1712 routers deliver hardware-assisted VPN functionality encrypting data using the strongest
encryption available, 3DES at 15 Mbps. The Advanced Encryption Standard (AES) is also supported by Cisco IOS
Software. Using high-performance VPN encryption and tunneling technologies, Cisco 1711 and 1712 routers can
establish secure tunnels across the Internet to the corporate network. The virtual network connection lasts only as
long as it is needed, so enterprises no longer pay for idle capacity on costly leased lines. Using a Cisco 1711 or 1712
router, a VPN can scale to support up to 100 concurrent tunnels or sites in a partial or fully meshed, fully secure
global communications Web.
Firewall and IDS
With an always-on broadband connection to the Internet, it is essential to protect the internal network against
unwanted intrusion or malicious Internet attacks. The integrated stateful inspection firewall enables secure Internet
access by internal users while defending the internal network against denial-of-service (DoS) attacks and other forms
of unauthorized access.
Cisco 1711 and 1712 routers integrate robust firewall and IDS features for every perimeter of the network. The
router adds greater depth and flexibility to Cisco IOS Software security solutions such as authentication and
encryption with state-of-the-art security features including stateful, application-based filtering, Context-Based Access
Control (CBAC), DoS protection, dynamic per-user authentication and authorization, defense against network
attacks, Java blocking, and real-time alerts.
Advanced Security
Advanced security features supported on the Cisco 1711 and 1712 routers include Cisco Easy VPN Server and Cisco
Easy VPN Remote, Cisco Security Device Manager (SDM), Cisco AutoSecure, and Firewall Websense URL Filtering.
Cisco Easy VPN software allows simple deployment and management of VPNs. Using the Cisco Easy VPN Server
feature with the hardware encryption module, routers can establish VPNs initiated by remote workers running VPN
client software on PCs. This functionality helps businesses increase productivity by empowering employees to access
information and applications at any time. Additionally, using the Easy VPN Remote feature, enterprise customers
can configure site-to-site VPNs with security policies pushed from corporate headquarters to enterprise small branch
offices, reducing IT supports costs.
Cisco Systems, Inc.
All contents are Copyright © 1992–2003 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement.
Page 3 of 8