Cisco® multiservice access routers and integrated services routers offer a wide variety of WAN connectivity modules to accommodate the range of application needs in customer networks. The new Cisco 1-Port G.SHDSL WAN Interface Card (part number WIC-1SHDSL-V3) offers G.SHDSL-based WAN connectivity for modular routers deployed in small to medium-sized branch offices (Figure 1).

OVERVIEW

Figure 1. Cisco 1-Port G.SHDSL WAN Interface Card (part number WIC-1SHDSL-V3)

FEATURE SUMMARY

• Offers symmetrical WAN speeds up to 2.3 Mbps over a single copper pair and up to 4.6 Mbps over two copper pairs

• Based on ITU Recommendation G.991.2 (accepted worldwide)

• Supports Dying Gasp; uses power status bit (section 7.1.2.5.3 of G.991.2) for signaling

• Supports Wetting Current (Section A.5.3.3 of G.991.2)

• Supports G.SHDSL Annex A (U.S. signaling) and Annex B (European signaling)

• Multiple G.SHDSL WICs configurable per Cisco 1800, 2800, and 3800 and Cisco 1700, 2600XM, and 3700 router chassis

• Offers toll-quality voice over data with ATM Adaptation Layer 2 (AAL2) on Cisco 2800, 3800, 2600, and 3700 series routers; and AAL5 and voice over IP (VoIP) on the Cisco 1800, 2800, 3800, 1700, 2600, and 3700 series routers

• Supports extensive ATM classes of service (CoS) and IP quality of service (QoS)

• Operates back to back or with DSL access multiplexer (DSLAM)

• Sustains up to 23 virtual circuits per WIC

SYSTEM REQUIREMENTS

• The WIC is supported on all modular Cisco integrated services routers-the Cisco 1841, 2801, 2811, 2821, 2851, 3825, and 3845. It is also supported on the older multiservice routers-the Cisco 1721, 1751, 1760, 2600XM, 2691, 3725, and 3745 routers.

• The new WIC is supported on these access routers using the Cisco IOS IP Base feature set and up. For the Cisco 1700 Series, the minimum Cisco IOS Software feature set required to support the card is IP/ADSL or IP Base.

• The routers listed previously need to run Cisco IOS Software Release 12.4(3) Mainline and above or 12.4(2)XA to support the new WIC. The interface is also supported in Cisco IOS Software Release 12.4(3rd)T and above.

• The system requires no additional flash or DRAM memory other than the specified minimum memory for the Cisco IOS Software releases listed.

• No slot placement restrictions are placed for the new interface card on any of the platforms.

FEATURES AND BENEFITS SUMMARY

Table 1. G.SHDSL WICs with Cisco Access Routers Features and Benefits

Feature	Benefits
Flexibility
Cisco IOS Software Support	· Provides the industry's most robust, scalable, and feature-rich internetworking software support using the accepted standard networking software for the Internet and private WANs · Constitutes part of the Cisco Systems® end-to-end network solution, including multiprotocol routing (IP, Internetwork Packet Exchange [IPX, AppleTalk, and IBM/Systems Network Architecture [SNA]) and bridging
Integrated Voice and Data Networking
Voice and Data Integration	· Reduces long-distance toll charges by allowing the data network to carry interoffice voice and fax traffic · Works with existing handsets, key units, and private branch exchanges (PBXs), eliminating the need for a costly phone-equipment upgrade · Supports critical IP QoS features in Cisco IOS Software · Provides traffic management with ATM CoS
Digital Voice Interfaces	· Provides toll-quality, award-winning derived VoIP; software-support VoIP/AAL5 and voice over ATM (VoATM)/AAL2 (Cisco 2800, 3800, 2600, and 3700 only); and AAL5
Analog Voice Interfaces	· Supports analog voice for VoATM/VoIP over AAL5
Standards-Based H.323 Signaling	· Allows an ecosystem of third-party vendors to develop applications for a complete solution; allows rapid low-cost deployment of VoIP
Digital Signal Processors (DSPs) and Voice-Compression Codecs G.711, G.729a, G.723.1, and G.726	· Provide hardware-based compressed voice to fit significantly more voice lines over a single copper pair without breaking the end-to-end delay budget
Sub-Cell Multiplexing (AAL2) (Cisco 2800, 3800, 2600, and 3700 only)	· Helps enable multiple voice channels to share an ATM cell, leading to efficient bandwidth utilization
Modular Architecture
Variety of WICs, Voice Interface Cards (VICs), and Network Modules	· Offers added flexibility and investment protection · Provides easy migration from Frame Relay or asymmetric DSL (ADSL) to SHDSL
Multiple Platform Support	· Supports G.SHDSL WICs across a variety of Cisco platforms, including the Cisco 1841, 2800, 3800, 1700, 2600, 2600XM, 2691, and 3700 series routers · Reduces cost of maintaining inventory, and allows reuse of modules
Security with VPN and Integrated Firewall
Hardware-Based Encryption	· Helps enable creation of VPNs by providing industry-standard data privacy, integrity, and authenticity as data traverses the Internet or a shared public network · Offers hardware-based VPN encryption through onboard processor or Advanced Integration Module (AIM) VPN card
Triple Digital Encryption Standard (3DES) IP Security (IPSec), Advanced Encryption Standard (AES), Generic Routing Encapsulation (GRE), Layer 2 Tunneling Protocol (L2TP), and Layer 2 Forwarding (L2F)	· Offers choice of standards-based tunneling methods to create VPNs for IP and non-IP traffic · Offers full interoperability with public certificate authorities and IPSec standards-based products · Constitutes part of the scalable Cisco end-to-end VPN solution portfolio
Cisco IOS Firewall	· Cisco IOS Firewall includes context-based access control for dynamic firewall filtering, denial-of-service (DoS) detection and prevention, Java blocking, and real-time alerts · Allows internal users to access the Internet with secure, per-application-based, dynamic access control while preventing unauthorized Internet users from accessing the internal LAN
Network Address Translation and Port Address Translation (NAT/PAT)	· Hides internal IP addresses from external networks · Prevents certain DoS attacks from outside networks · Allows multiple users access with a single IP address
Password Authentication Protocol/Challenge Handshake Authentication Protocol (PAP/CHAP), Microsoft CHAP (MS-CHAP), RADIUS, and TACACS+	· Supports all leading user identity verification schemes
Route and Router Authentication	· Accepts routing table updates from only known routers, helping ensure that no corrupt information from unknown sources is received
Internet Key Exchange (IKE) and X.509v3 Digital Certification	· Helps ensure proper identity and authenticity of devices and data · Supports Certificate Enrollment Protocol (CEP) with certification authorities (CAs) such as Verisign and Entrust
ATM Features
ATM Traffic Unspecified Bit Rate (UBR), Non-Real-Time Variable Bit Rate (VBR-nrt), Real-Time Variable Bit Rate (VBR-rt), and Constant Bit Rate (CBR) with Traffic Shaping	· Helps ensure QoS guarantees for real-time traffic, with ability to send traffic over the appropriate virtual circuit to provide ATM-level shaping and ensure that no head-of-line blocking occurs between circuits of different or equal traffic classes
Up to 23 Virtual Circuits per WIC	· Helps enable more sessions at a time; is relevant for small and medium-sized businesses and small branch offices with 50 to 200 employees · Supports per-virtual circuit queuing in Cisco IOS Software releases 12.2(2)XK, 12.2(4)XL, 12.2(13)T, 12.2(8)YN, and subsequent releases (per-virtual circuit queuing not supported in Cisco IOS Software releases 12.2(4)T, 12.2(8)T1, or 12.2(11)T)
Point-to-Point Protocol (PPP) over ATM	· Helps ensure compatibility with existing network
F5 OAM Continuity Check (F5OAMCC) and Loopback	· Supported in Cisco IOS Software releases 12.2(4)XL, 12.2(11)T2, 12.2(8)YN, and subsequent releases
Interim Local Management Interface (ILMI)	· Supported in Cisco IOS Software releases 12.2(4)XL, 12.2(13)T, 12.2(8)YN, and subsequent releases
PPP over Ethernet Client	· Meets service provider requirements and eliminates the need for additional network software on LAN-connected client PCs
RFC 2684 Routing	· Supports RFC 2684 Routing
ATM Oversubscription for DSL	· Allows bandwidth oversubscription to be configured for VBR and UBR+ service classes · Supported in Cisco IOS Software releases starting with 12.4(2)XA; also available in Release 12.4(3rd)T and above
Multiqueue	· Multiqueue for DSL lines helps enable a priority and a regular (nonpriority) queue for traffic streams · Supported in Cisco IOS Software releases starting with 12.4(2)XA; also available in Release 12.4(3rd)T and above
Device Integration
Integrated Router, Voice Gateway, Firewall, and VPN in a Single Device	· Reduces costs and simplifies management

IP QUALITY OF SERVICE

Table 2. Supported IP QoS Features

INTEROPERABILITY

Table 3. DSLAM Interoperability

Table 4. Primary Differences Among 1-Port G.SHDSL WAN Interface Cards

PLATFORM SUPPORT

Table 5. Platform Support Details

Table 6. Maximum Number of G.SHDSL WICs per Platform

SOFTWARE REQUIREMENTS

Table 7. Minimum Cisco IOS Software Release Required for New WICs

Table 8. Product Number and Ordering Information

Table 9. Hardware Specifications

SAFETY, EMC, TELECOM, NETWORK HOMOLOGATION, POWER, ENVIRONMENTAL REQUIREMENTS, AND REGULATORY APPROVALS

• For Cisco 1721 and 1760:

• For Cisco 1800 Series (modular):

• For Cisco 2600XM and 2691:

• For Cisco 2800 Series:

• For Cisco 3700 Series:

• For Cisco 3800 Series:

G.shdsl WAN Interface Card

for the Cisco 1700 Series

The Cisco 1700 Series with a single-pair high-bit-rate digital-subscriber-line (G.shdsl) WAN interface card (WIC) is the industry's first multiservice router to deliver business-class broadband service with scalable performance, flexibility, and security for small-medium businesses and small enterprise branch offices. Together with the integrated G.shdsl WIC (WIC-1SHDSL), the Cisco 1700 is the perfect solution for a variety of businesses that require high-speed business-class DSL access on a secure, high-performance modular platform. (See Figure 1.)

Figure 1 Single-Port G.shdsl WIC (WIC-1SHDSL)

Combined with the WIC-1SHDSL, the Cisco 1700 delivers cost-effective, high-speed, symmetrical bandwidth at a lower monthly cost than most traditional WAN circuits. This provides businesses with the necessary bandwidth for such critical traffic as voice and videoconferencing, and allows customers to take advantage of the cost savings of integrating voice and data traffic on the same WAN link. Service providers can benefit by offering differentiated service levels through service-level agreements (SLAs) at a more competitive price.

The G.shdsl standard (ITU G.991.2) represents the first DSL standard accepted worldwide and is the latest in DSL technology. The G.shdsl WIC is based on ITU recommendation G.991.2 and, therefore, allows for better interoperability with third-party vendors. For more information on G.shdsl technology and the Cisco suite of DSL products, see the following URL or contact your local representative:

http://www.cisco.com/warp/public/779/servpro/solutions/dsl/gshdsl.html

Feature Summary

The Cisco 1700 combined with the WIC-1SHDSL provides:

•Symmetrical WAN speeds (up to 2.3 Mbps) over a single copper pair

•Multiple G.shdsl WICs per Cisco 1700 chassis

•Support for voice over IP (VoIP) over DSL with IP quality of service (QoS)

•Support for IP QoS map to ATM class of service (CoS)

•Back-to-back operation or operation via DSL access multiplexer (DSLAM)

•Support for up to 23 virtual circuits per WIC

Key Benefits: Business Class DSL

Symmetrical, High-Speed, Cost-Effective Bandwidth

Based on the ITU G.991.2 global industry standard, the Cisco G.shdsl solution delivers symmetrical data rates from 192 kbps up to 2.3 Mbps. Speeds vary, depending on the loop length and line conditions. More traditional WAN links, such as leased-line and ISDN, provide similar service, but often at a much higher monthly cost. The G.shdsl WIC delivers symmetrical connectivity and provides the necessary bandwidth for business applications such as VoIP, videoconferencing, and toll bypass at a lower monthly charge.

The dual WAN ports on the Cisco 1700 Series platforms allow for flexibility in installing WAN access lines. Multiple G.shdsl WICs can be configured per router chassis to provide additional bandwidth through a second WAN link, and supply connectivity to additional sites or service providers. With the broad array of WICs available for the Cisco 1700 platform, flexible configurations, including asymmetric DSL (ADSL), dial, ISDN, E1/T1, and Frame Relay are also possible. Secondary WAN links can, therefore, be used to provide more available bandwidth or redundancy for mission-critical applications.

Business-Class Security

The Cisco 1700 can be optimized for virtual private networks (VPNs). VPNs allow for secure use of any shared network incorporating the same policies and levels of security and performance as a private network. The Cisco 1700 Series provides VPN security through optional hardware-based encrypted tunneling at Triple Digital Encryption Standard (3DES) IP Security (IPSec) speeds of up to wire speed (T1/E1). VPN capability over G.shdsl allows for secure access to corporate networks without the costs and limitations associated with point-to-point links.

In addition, the Cisco 1700 Series incorporates Cisco IOS^® Firewall Technology (Cisco Secure Integrated Software) supporting stateful firewall and intrusion-detection functionality. With an always-on DSL connection, Internet security is a critical component in protecting corporate resources from malicious attacks.

Integrated Voice and Data over G.shdsl

Service providers increase revenue by building differentiated service options based on premium, standard, or best-effort service classes. This requires a QoS mechanism to differentiate service levels and prioritize traffic accordingly. The Cisco 1700 with G.shdsl WIC provides ATM CoS features that enable service providers to manage their core ATM network infrastructures and deliver scalable, cost-effective services with QoS guarantees to their customers. Permanent-virtual-circuit (PVC) traffic shaping and queuing allow further optimization of the existing bandwidth between customers and various services.

Many customers require IP QoS to differentiate between high- and low-priority traffic. The Cisco 1700 with G.shdsl WIC supports VoIP over DSL with IP QoS map to ATM CoS. These enhanced QoS features enable data and voice traffic to be transmitted on the same virtual circuit, thus allowing for further reduction of monthly recurring WAN charges.

Support for Analog and Digital Voice Interfaces

Cisco 175x (1750 and 1751) routers feature one voice-interface-card (VIC) slot and two WAN/voice-interface-card (WIC/VIC) slots. Cisco 1751 VICs include dual-port foreign exchange station (FXS), foreign exchange office (FXO), ear and mouth (E&M), and direct inward dial (DID), all of which provide the analog voice interface to legacy telephony equipment (phones, fax, private branch exchange [PBX], and key telephone system [KTS]) and the Public Switched Telephone Network (PSTN). It provides users a cost-effective way to migrate toward a packet-based multiservice infrastructure without deeming legacy telephony equipment obsolete. Cisco 1751 supports digital voice with dual-port ISDN Basic Rate Interface (BRI) NT/TE VIC (network and user-side Q.931 BRI). This enables users to easily connect ISDN PBXs and KTSs to a multiservice network with a minimum of configuration changes on the PBX. In addition, users can immediately take full advantage of multiservice capabilities, such as telephony toll-bypass applications and full gateway integration within Cisco AVVID (Architecture for Voice, Video and Integrated Data). The Cisco 1750 does not support digital voice interfaces (BRI) or analog DID, but does support the other voice interfaces referenced in this section.

Standards-Based Voice Technology

The voice functionality of the Cisco 1700 with the G.shdsl WIC, which is based on H.323 standards, enables third parties to develop applications to a standard protocol. This results in an ecosystem of compatible voice applications such as enhanced call control via gatekeepers, service billing, and network management. Such an ecosystem provides a complete solution for rapid deployment of intranet voice services for branch offices and enterprise teleworkers.

DSLAM Interoperability

The G.shdsl is based on the Globespan chipset and operates either back to back or connected to a Cisco 6160 and 6260 DSLAM. Interoperability testing with third-party vendors' DSLAMs is likely to be conducted on an ongoing basis. Additional information on this will be provided when testing is completed.

Customers can deploy G.shdsl WICs in a back-to-back configuration to take advantage of existing copper wiring in a building, campus, or neighborhood where DSLAM aggregation equipment is either not needed or not financially justified. In back-to-back mode, one side of the connection is configured in server mode and provides functionality similar to that of a DSLAM.

Quality of Service

IP QoS

The Cisco 1700 with the G.shdsl WIC supports the integration of voice and data over the same G.shdsl circuit using VoIP, thus allowing for further reduction of monthly recurring WAN charges. Enhanced QoS is offered through mapping of IP QoS to ATM CoS features. Table 1 lists the QoS features and their benefits.

Table 1  Features and Benefits of Cisco 1700 with G.shdsl WIC

These features are supported on a per-virtual circuit basis (mixing of voice and data traffic) and supported on a virtual-circuit bundle in process/fast/Cisco Express Forwarding (CEF) switching modes for differentiated services (DiffServ) and CAR. MLP using LFI over ATM is supported on a single virtual circuit on the ATM interface, and in process and fast switching modes.

Managed Services/Applications

1. Managed Internet access

2. Managed VPN service

3. Managed VoIP service

4. Back-to-back deployment in a campus environment

Scenario 1—Managed Internet Access

Figure 2 Managed Internet Access with WAN Backup

The modularity and flexibility of the Cisco 1700 Series with G.shdsl WIC is highlighted in Figure 2. Service providers can provide the end customer with a managed service using the G.shdsl as the primary WAN access using ISDN as a secondary line for backup. The customer also has the flexibility to select a second G.shdsl line using a different Internet service provider (ISP).

Scenario 2—Managed VPN Service over G.shdsl

Figure 3 Secure VPN through the Internet over G.shdsl

Service providers can deliver a managed VPN service for business customers that takes advantage of the huge cost-saving opportunities of VPN technology by deploying VPNs over G.shdsl. Symmetrical bandwidth and high bit rates allow customers to deploy mission-critical applications to remote sites at an affordable cost without the fear of compromising data security. The Cisco 1700 G.shdsl solution, along with an optional hardware encryption module, can deliver hardware-encrypted data at wire speeds (T1/E1). VPN technology with IPSec 3DES combined with integrated Cisco IOS Firewall technology gives branch offices the added security needed for an "always-on" connection to the Internet.

Scenario 3—Managed VoIP Service

Figure 4 Intranet Toll-Quality Voice

Service providers can deliver a managed VoIP service to their customers by taking advantage of the Cisco 1700 combined with the WIC-1SHDSL. This solution enables interoffice voice calls to be sent across the DSL network and thus avoid the long-distance toll charges incurred from a long-distance carrier, local exchange carrier (LEC), or Post, Telephone, and Telegraph (PTT). Customers lease an ATM virtual circuit between one or multiple sites and use VoIP over DSL to pass intranet voice traffic between sites.

Scenario 4—Back-to-Back Deployment in a Campus Environment

Figure 5 Back-to-Back G.shdsl Deployment in a Campus Environment

Many businesses today require data and voice connectivity between multiple buildings in a campus environment. Often copper wire is the only means to interconnect each facility to the campus main building. G.shdsl technology allows customers to link up two Cisco 1700s with WIC-1SHDSL cards back to back over standard 26 AWG telephone wire and provide up to 2.3-Mbps WAN connectivity between the two facilities. This setup allows for the deployment of data, voice, and video over the existing copper wire infrastructure without a costly infrastructure upgrade. Multiple WIC-1SHDSL pairs can be used to allow for additional bandwidth between each facility.

G.shdsl WIC Business Class DSL Features and Benefits

Table 2  Features and Benefits Summary

G.shdsl WIC Business Class DSL Feature Highlights

Scalable Bandwidth

•Delivers from 192 kbps to 2.3 Mbps bandwidth (symmetrical)

•Rate adaptable using G.hs (handshake)—automatically selects optimal speed setting

Longer Reach Than Other DSL Technologies

•Provides 2.3 Mbps at up to 11,000 feet on 26 AWG (subject to line conditions)

•Operates at distances up to 22,000 feet

•Repeatable for even greater distances

•Spectral "friendly" technology gives less interference with other transmission technologies

Voice Support

•Support for VoIP over DSL with QoS using H.323 signaling

Cisco IOS Software and Platform Support

•First supported in Cisco IOS Software Release 12.2(4)XL

•Supported on Cisco 1720, 1750, 1751 at FCS

•Functions in built-in VIC/WIC slots

Country Support

•Complies with ITU G.991.2 standard

•Worldwide-accepted technology

Memory and Software Requirements (Recommendation for 12.2(4)XL)

A base IP/DSL image can be used to run the G.shdsl WIC on the Cisco 1700 platforms at a minimum. In addition to the base IP/DSL image, the DSL feature (`y7' image) is also available in all Plus images. In order to run the enhanced QoS features, a Plus image is required.

Table 3  Memory and Software Image Requirements

Product Number and Ordering Information

Table 4  Cisco Product Numbers and Descriptions

The Cisco 1750 and 1751 can be configured with the G.shdsl WIC.

Hardware Specifications

Table 5  Hardware Specifications

Cisco 1700 Platform-Specific Technical Specifications

Refer to the Cisco 1700 data sheets for additional information on mechanical, environmental, and agency certifications. See the following URLs for Cisco 1700 data sheets:

For the Cisco 1720 data sheet and technical specifications, refer to the following URL:

http://www.cisco.com/warp/public/cc/pd/rt/1700/prodlit/1720_ds.htm

For the Cisco 1750 data sheet and technical specifications, refer to the following URL:

http://www.cisco.com/warp/public/cc/pd/rt/1700/prodlit/1750_ds.htm

For the Cisco 1751 data sheet and technical specifications, refer to the following URL:

http://www.cisco.com/warp/public/cc/pd/rt/1700/prodlit/c1751_ds.htm

EXECUTIVE SUMMARY

MARKET OVERVIEW

SERVICES DESCRIPTION

• Managed firewalls-Firewalls protect internal and external network borders by restricting the types of network protocols and traffic allowed across the network border. Firewall appliances, which the service provider manages remotely, include dedicated hardware and software platforms located on your business premises.

• Managed intrusion detection systems (IDSs)-Intrusion detection determines when inappropriate access to your network, systems, services, applications, or data has occurred or is underway. Intrusion detection services rely on network-based or host-based monitors, and often match monitored traffic or activity against profiles of known attacks.

• Managed IP-VPNs-VPNs are secure, end-to-end, private network connections over third-party networks, such as the Internet or extranets.

• Managed antivirus protection-This service most often involves checking for viruses at the gateway or firewall as well as in e-mail messages and attachments, and in file transfers. Automatic updates may be included in the service provision.

• Managed endpoint threat protection-This service detects and prevents anomalies from occurring on endpoint devices, such as desktops and servers.

• Managed authentication-Authentication monitors and directs processes and technologies to verify the identity of a user attempting to gain access to systems or applications.

• Managed content filtering-Filtering is used to isolate and block content deemed inappropriate by internal policies or regulatory policies.

• Vulnerability assessment-Involves security risk assessments, network scanning, and probing to reveal network, operating system, or application vulnerabilities in Internet-facing systems.

BUSINESS REQUIREMENTS

• Increased security threats-High-profile feats of hackers and intruders have heightened awareness of network security breaches and security risks. Managed security service providers have the manpower for 24-hour monitoring of the changing security landscape.

• "Day Zero" damage-Rapidly spreading attacks occur too fast for reactive products to halt them immediately. Managed security service providers have automated security systems with warning mechanisms and proactive capabilities.

• Growing use of Internet and remote access-As businesses increase their investment in the Internet, intranets, extranets, and remote access connectivity, they concurrently increase their exposure to network security threats. Managed security service providers can secure the full range of business connectivity options.

• Dynamic technology-Managed security service providers can acquire and keep pace with the latest network security technology. Small and midsize businesses often do not have these in-house capabilities, while enterprises can reduce the cycle of continually investing in new security technologies and training.

• Growing complexity of e-business models-Complex e-business models require complex network security solutions. Businesses are finding initial investment costs high for implementing security in house and costly maintenance requirements for adapting existing solutions. Out-tasking security services is one potential avenue for controlling and reducing IT costs.

• Lack of customer confidence-Business customers and partners understand the risks, and they are raising network security concerns. Managed security offerings can bolster perceived security of business extranets.

• Regulatory issues-Regulatory agencies have begun to require industries to improve network security postures by specific timeframes. Examples include the e-signature law, which makes online contracts with electronic signatures as binding as hard-copy versions, requiring comprehensive authentication capabilities; the Safe Harbor Agreement for compliance with data privacy requirements in the European Union; and the Health Insurance Portability and Accountability Act (HIPAA) for healthcare organizations. Managed security service providers have experience meeting regulatory requirements.

• Reliability-The most important benefit of network security is reliability-businesses in today's marketplace cannot afford to take chances with their security coverage. A managed security service provider's reputation depends on delivering reliability day in and day out. Organizations require the 24-hour support and state-of-the-art expertise provided by out-tasking security services.

• Focus-Out-tasking security services allows an organization to focus its workforce, infrastructure, and IT resources on core business capabilities and strategic initiatives, while using the expertise and advanced technologies of a reliable managed service provider.

• Lower costs through economies of scale-Out-tasking security products and software, which can be costly and complicated to implement and manage, can decrease the total cost of network ownership. For this reason, managed security providers can deliver the latest technologies and expertise to their customers at a lower cost.

• Faster deployment-Managed security service providers are in the business of implementing network security solutions quickly and efficiently.

• Reduced IT costs-Managed security service providers can cut expenditures by offering financial and network performance guarantees through service-level agreements (SLAs).

CASE STUDY

Providing Network Security to a Global Nutritional Health Company

Decision Tree

• Organizational structure-Evaluate the types of offices and network infrastructure that your organization possesses. Consider your headquarters, branch, and remote offices-locally, nationally, and globally-LAN, MAN, or WAN networks; and mobile and offsite workforce, and the number of workers supported.

• Network access and availability-Inventory your bandwidth, application, and usage requirements for both internal and remote workers.

• Information assets-List your computer and server hardware, applications, and critical data.

• Industry requirement-Assess the industry-specific needs of your organization. For example, financial institutions and banks often incur greater network security risks.

Table 1 Assessing Your Network Security Profile

Figure 1 Decision Tree for Evaluating Networking Requirements and Managed Security Services

Table 2 Assessing Your Managed Service Provider

Table 3 Out-Tasking Strategies

Financial Analysis

CISCO POWERED NETWORK PROGRAM

FOR MORE INFORMATION

• VPN services

• Business voice services

• Metro Ethernet services