Cisco 850 Series Manual page 34

Cisco 3800 Series
Security Features
continued
Cisco IOS Firewall
• Feature rich, stateful firewall
• Per-user authentication and authorization
• Real-time alerts
• Transparent firewall
• IPv6 firewall
• VRF-aware firewall
• Advanced Application Inspection and Control
– HTTP inspection engine
– E-mail inspection engines (SMTP, ESMTP,
IMAP, POP)
URL Filtering
• Onboard with an optional content-engine
network module
• Local URL filtering in Cisco IOS software based
on external server
Onboard USB 1.1 port
• 2 onboard USB 1 . 1 ports
• Secure token and Flash memory support
IP Telephony Features
IP Phone Support Optional integrated power supply with inline power, 802 . 3 af
support, 360W of inline power
Analog Voice Support Up to 88 FXS and 56 FXO ports
Digital Voice Support Up to 720 calls
Packet Voice Digital Signal Processor (DSP) 4 PVDM slots on motherboard, local conferencing and
Module (PVDM) Slots on Motherboard transcoding
Cisco CallManager Express Up to 240 phones for the Cisco 3845 router, and up to
168 phones for the Cisco 3825 router
Up to 720 phones for the Cisco 3845 router, and up to
SRST
336 phones for the Cisco 3825 router
Voice Mail and Automated Attendant Up to 250 mailboxes with up to 16 concurrent sessions using
Cisco Unity™ Express Network Module
Voice Interfaces FXS, FXO, Direct Inward Dial (DID), E&M, Centralized Automated
Message Accounting (CAMA), Basic Rate Interface (BRI), T1,
E1, Primary Rate Interface (PRI), Q . S IG, channel associated
signaling (CAS)
62
Security Solutions
• Network Admission Control (NAC)
• Voice and Video Enabled IPsec VPN (V3PN)
Optional Security Modules
• Intrusion Prevention System Advanced
Integration Modules (AIM-IPS-K9)
• VPN and Encryption Advanced Integration
Modules (AIM-VPN/SSL-3)
• Network Admission Control Network Modules
(NME-NAC-K9)
Cisco Router and Security Device Manager (SDM)
• Ships by default
Certifications
• ICSA IPsec
• ICSA Firewall
• Common Criteria IPsec (EAL4) (in process)
• Common Criteria Firewall (EAL4+) (in process)
• FIPS 140-2, Level 2
Network Example
Branch Office
3700/3800
IP
Internet
IP
Branch Office
2600/2800
The figure above shows the Cisco 3800 Series routers converge voice, video, and data across a secure IPsec
VPN network with high-quality, reliable performance . DMVPN creates tunnels on-the-fly based on user traffic .
V3PN functionality provides QoS, multiprotocol, ease of provisioning, and secure connectivity .
When To Deploy
Deploy the Cisco 3800 Series when you need:
• The highest performance and densities for
concurrent data, security, voice, and advanced
services with headroom for growth
• Higher availability and resiliency with OIR,
redundant system, and inline power options
• Higher WAN or voice densities with an additional
(fourth) HWIC
• Low density (up to 96 ports), integrated 10/100
switching with PoE support; up to 48 ports with
Cisco Inline Power
• Efficient, robust Error Correction Code (ECC)
DDR SDRAM memory to detect and correct
SDRAM errors without user intervention
• Integrated security services as part of Cisco
Self Defending Network, which enable network
device protection, threat defense, secure
connectivity, and endpoint protection and control
Cisco 3800 Series
Regional Office
VPN QoS
V3PN
Voice
Video
IP
IP
Branch Office
1700/1800
• Integrated PVDMs, industry-leading call
processing and autoattendant solutions, and
high-density voice cards and modules that
speed IP Communications and give customers a
choice of telephony interface devices
• Advanced management for security, routing,
QoS, and switching services with Cisco Router
and Security Device Manager (SDM) 2 . 0
• Secure integrated call processing, voice mail
and automated attendant, flexible telephony
interfaces, redundancy for centralized call
processing, with robust DSP support, including
local call conforming and transcoding
63