Cisco 850 Series Manual page 14

Cisco 1800 Series (Fixed-Configuration)
Benefits and Advantages
continued
The Cisco 1800 Series fixed-configuration
routers help enable a network infrastructure
for SMBs and enterprise small branch offices,
providing access to the Internet, corporate
headquarters, or other remote offices, while
securing and protecting critical data with
integrated Cisco IOS Software security features
and capabilities . They also help businesses
reduce costs by enabling deployment of a single
Security Features
Cisco IOS Firewall
• Stateful firewall with URL filtering
• Per-user authentication and authorization
• Real-time alerts
• Transparent firewall
• IPv6 firewall
VPN
• Advanced Encryption Standard (AES) 128, 192, and 256
• Triple Data Encryption Standard (3DES), and DES encryption
• Embedded hardware-based VPN acceleration on the motherboard
• Cisco Easy VPN remote and server support
• Dynamic Multipoint VPN (DMVPN)
• Group Encrypted Transport VPN (GET VPN)
Onboard USB Port
• USB 2 . 0 ports (2) (Cisco 1811 and 1812 models only)
IPS
• More than 700 IPS signatures supported in Cisco IOS Software, with the ability to load and enable
selected IPS signatures
URL Filtering
• Local URL filtering in Cisco IOS Software based on external server (Websense and N2H2)
• Stateful firewall contains URL filtering
Cisco SDM
• Cisco Router and Security Device Manager (SDM)
IOS WebVPN (SSL VPN)
• Secure remote access for mobile users without installing PC client software
• Integrated into the router—no separate appliance required
• Cisco 1801 and 1812 supports up to 10 users
• Requires IOS WebVPN feature license FL-WEBVPN-10
• Requires an IOS security feature set (IOS security feature set is included in all secure router bundles)
24
device to provide multiple services (integrated
router with redundant link, LAN switch, firewall,
VPN, IPS, wireless technology, and quality of
service [QoS]) typically performed by separate
devices . Cisco IOS Software allows this
flexibility, providing the industry's most robust,
scalable, and feature-rich internetworking
support, using the accepted standard networking
software for the Internet and private WANs .
Security Application Example
Branch Office
VPN Tunnel
Cisco 1811/1812 Router with
IOS Firewall, NAC, IPSec VPN
and IPS Enabled
Wireless
Integrated Wireless LAN Capability
Cisco 1800 Series of fixed-configuration routers
includes models with an integrated wireless
access point, providing secure router and secure
wireless LAN services in one device, helping
businesses reduce total cost of ownership with
simplified WLAN deployment and management
capabilities . The integrated wireless access
point supports IEEE 802 . 1 1a/b/g simultaneously
to provide high-speed wireless capability and
flexibility to support 2 . 4 -GHz and 5-GHz dual-
band simultaneous operation, making them ideal
choices for hotspot deployments and wireless
office solutions . Wi-Fi Certified client devices
including Cisco Aironet, Wi-Fi Certified and Cisco
Compatible client devices are fully supported .
The Cisco 1800 Series routers with integrated
wireless access points are Wi-Fi certified and
support WPA and WPA2 providing secure mutual
authentication and encryption via Cisco IOS
Software features to meet the strict demands of
Cisco 1800 Series (Fixed-Configuration)
Headquarters Office
Internet
today's businesses . These products also provide
support for multiple BSSIDS (8) and multiple
wireless VLANs (16 with 8 encrypted) that can
be configured to provide additional security,
segmentation, and separation of user groups .
When using the routers in conjunction with the
Cisco Service Selection Gateway (SSG) and
Subscriber Edge Services Manager (SESM),
managed service providers can incorporate
service-based authorization and accounting,
and service and subscriber management for
customizable, on-demand wireless services such
as hotspots . Additional features such as Universal
Client mode allow the router to wirelessly
connect to an AP (such as an outdoor wireless
Mesh network) and local authentication allow
users to maintain wireless connectivity to the
router in the event that a remote authentication
server goes down . Quality of Service (QoS) via
Wi-Fi Multimedia (WMM) is also supported .
25