Cisco 2811 - Voice Security Bundle Router Manual page 25

Cisco 1800 Series (Fixed-Configuration)
Benefits and Advantages
continued
The Cisco 1800 Series fixed-configuration routers
help enable a network infrastructure for SMBs and
enterprise small branch offices, providing access
to the Internet, corporate headquarters, or other
remote offices, while securing and protecting
critical data with integrated Cisco IOS Software
security features and capabilities. They also help
businesses reduce costs by enabling deployment
of a single device to provide multiple services
Security Features
Cisco IOS Firewall
• Stateful firewall with URL filtering
• Per-user authentication and authorization
• Real-time alerts
• Transparent firewall
• IPv6 firewall
VPN
• Advanced Encryption Standard (AES) 128, 192, and 256
• Triple Data Encryption Standard (3DES), and DES encryption
• Embedded hardware-based VPN acceleration on the motherboard
• Cisco Easy VPN remote and server support
• Dynamic Multipoint VPN (DMVPN)
• Group Encrypted Transport VPN (GET VPN)
Onboard USB Port
• USB 2.0 ports (2) (Cisco 1811 and 1812 models only)
IPS
• More than 700 IPS signatures supported in Cisco IOS Software, with the ability to load and enable
selected IPS signatures
URL Filtering
• Local URL filtering in Cisco IOS Software based on external server (Websense and N2H2)
• Stateful firewall contains URL filtering
Cisco SDM
• Cisco Router and Security Device Manager (SDM)
IOS WebVPN (SSL VPN)
• Secure remote access for mobile users without installing PC client software
• Integrated into the router—no separate appliance required
• Cisco 1801 and 1812 supports up to 10 users
• Requires IOS WebVPN feature license FL-WEBVPN-10
• Requires an IOS security feature set (IOS security feature set is included in all secure router bundles)
46
(integrated router with redundant link, LAN switch,
firewall, VPN, IPS, wireless technology, and Quality
of Service [QoS]) typically performed by separate
devices. Cisco IOS Software allows this flexibility,
providing the industry's most robust, scalable,
and feature-rich internetworking support, using
the accepted standard networking software for the
Internet and private WANs.
Security Application Example
Branch Office
VPN Tunnel
Cisco 1811/1812 Router with
IOS Firewall, NAC, IPsec VPN,
and IPS Enabled
Wireless
Integrated Wireless LAN Capability
Cisco 1800 Series of fixed-configuration routers
includes models with an integrated wireless access
point, providing secure router and secure wireless
LAN services in one device, helping businesses
reduce total cost of ownership with simplified
WLAN deployment and management capabilities.
The integrated wireless access point supports
IEEE 802. 1 1a/b/g simultaneously to provide high-
speed wireless capability and flexibility to support
2.4 GHz and 5 GHz dual-band simultaneous
operation, making them ideal choices for hotspot
deployments and wireless office solutions. WiFi
Certified client devices including Cisco Aironet,
WiFi Certified and Cisco Compatible client devices
are fully supported.
The Cisco 1800 Series routers with integrated
wireless access points are WiFi certified and
support WPA and WPA2 providing secure mutual
authentication and encryption via Cisco IOS
Software features to meet the strict demands of
Cisco 1800 Series (Fixed-Configuration)
Headquarters Office
Internet
today's businesses. These products also provide
support for multiple BSSIDS (8) and multiple
wireless VLANs (16 with 8 encrypted) that can
be configured to provide additional security,
segmentation, and separation of user groups.
When using the routers in conjunction with the
Cisco Service Selection Gateway (SSG) and
Subscriber Edge Services Manager (SESM),
managed service providers can incorporate
service-based authorization and accounting,
and service and subscriber management for
customizable, on-demand wireless services such
as hotspots. Additional features such as Universal
Client mode allow the router to wirelessly connect
to an AP (such as an outdoor wireless Mesh
network) and local authentication allow users to
maintain wireless connectivity to the router in the
event that a remote authentication server goes
down. Quality of Service (QoS) via WiFi Multimedia
(WMM) is also supported.
47