You are on page 1of 71

Cisco Meraki overview

Simplifying across IT with Cloud Management

• A complete cloud managed IT


solution
• Wireless, switching, security, SD-
WAN, intelligent network insights,
endpoint management, and security
cameras
• Integrated
375k+ hardware,
5M+ software, 5.5M+ and
cloud
Unique servicesMerakionline
customers devices Active Meraki
dashboard users

• Leader in cloud-managed IT
• Among Cisco’s fastest growing 2
Cloud-managed Applications on the Rise
AVG. NUMBER OF SaaS APPS PER ORGANIZATION SaaS SPENDING FORECAST, 2016 – 2020

• Global SaaS

1
95% spending is forecast

8 1 INCREASE to increase by over


95% to $75.7B
2 6 [Source: Gartner, 2017]
[Source: BetterCloud 2017 State of the SaaS-Powered Workplace]

PERCENTAGE OF ENTERPRISES ESTIMATING W HEN 80% OF


THEIR BUSINESS APPS WILL BE SaaS

73%

• Percentage of enterprises
(1,000+ employees) estimating
the majority of their apps will be
[Source: BetterCloud 2017 State of the SaaS-Powered Workplace] SaaS by 2021

3
Cambridge, MA
MIT Roofnet

4
Meraki Stats
Unparalleled Scale

375,000+ 1.75M+ 650,000+


Meraki Dashboard Customers Meraki Networks MX Online

290,000+ 5M+ 14,900+


MR Customers -> Assurance (Wireless Health) Meraki Nodes Online SD-WAN Customers

Retail, Hospitality, Accelerated Innovations


Consistent growth,
Fin Services,
primarily driven by Zero touch deployments
Healthcare are top
Recurring Revenue Large install base to
verticals
target for MI
5
Simplifying powerful technology to free passionate people to focus
on their mission and reach groups previously left in the darkness

TECHNOLOGY THAT SIMPLY WORKS

6
The Beauty of the Cloud

Lower IT
Instant IT
Costs
Deploy sites in minutes Less IT Resources &
with Zero Touch Greater Manageability –
Automation Up to 67% Cost Savings
Agility

Full Business On-Demand


Visibility Scalability
Monitoring and Engagement of SaaS Cloud Architecture
Locations, Users, Devices & built for infinite Scale
Apps

7
The Meraki Full Stack

MR MX MI
Access Points SD-WAN & Security Insight
Appliances

MS Systems Manager MV
Ethernet Switches Endpoint Security Cameras
Management

A COMPLETE CLOUD MANAGED IT PORTFOLIO


SINGLE PANE OF GLASS MANAGEMENT

8
Secure and reliable architecture

Secure out-of-band management: No


user traffic flows through the cloud
Reliable: Network stays up if
connection to cloud is lost
Scalable: Supporting customers with
thousands of sites, millions of clients
Future-proof: New features
delivered seamlessly from the cloud

Reliability and security information at meraki.cisco.com/trust

9
Out-of-band cloud management
Intuitive
● Simple browser-based dashboard User Traffic Management Data
● Cloud-hosted centralized management platform

Scalable
● Unlimited throughput, no bottlenecks
● Add devices or sites in minutes
ISP
Reliable
● Highly available cloud with multiple data centers
● Network functions even if connection to cloud is interrupted
● 99.99% uptime SLA
Security Appliances

Secure
● No user traffic passes through Meraki cloud
● Can fully support a HIPAA- / PCI-compliant network (level 1 certified) Security Cameras

● Third party security audits, daily penetration testing Switches

● Automatic firmware and security updates (user-scheduled)

Reliability and security information at meraki.cisco.com/trust


Access Points
Systems Manager

10
Zero-touch installation and configuration
Deployments 1 2 3 4
Made Configure wireless Mount and plug in APs automatically Aps self-optimize RF
network settings in access point pull configurations for peak performance
Simple dashboard from the cloud

Customer Site

Unbox & Plug-in

11
Increasingly Valuable IT Investment

Over-the-web feature delivery with quarterly updates


Granular control over firmware versions

12
Product Families

13
MR Wireless Access Points
Feature Highlights
Application traffic shaping
Enterprise security
WIDS / WIPS
Built-in location analytics
Integrated BLE beacon models
Wireless Health
Built-in and customizable RF
profiles

• 11 models including indoor/outdoor, high performance (802.11ac Wave 2), and value-priced
• Enterprise-class silicon including PoE, multigigabit ethernet, voice/video optimization
• Lifetime warranty on indoor APs

14
Meraki MR Wireless Access Point Models
General High
Hospitality Entry Level Purpose Performance Future Proof

Indoor
MR30H MR20 MR33 MR42 MR42E MR52 MR53E
2 Stream, 4-Radio 2 Stream, 2-Radio 2 Stream, 4-Radio 3 Stream, 4-Radio 3 Stream, 4-Radio MR53 4 Stream, 4-Radio
802.11ac Wave 2 802.11ac Wave 2 802.11ac Wave 2 802.11ac Wave 2 802.11ac Wave 2 4 Stream, 4-Radio 802.11ac Wave 2
Integrated 4-port switch 802.11ac Wave 2 Multigigabit
1 PoE-out port Multigigabit (MR53)

Outdoor
MR70 MR84
MR74
2 Stream, 2-Radio 4 Stream, 4-Radio
2 Stream, 4-Radio
802.11ac Wave 2 802.11ac Wave 2
802.11ac Wave 2
Multigigabit

4-Radio = 2.4GHz client serving radio, 5GHz client serving radio, Dual-band scanning radio, BLE radio
15
Benefits of 802.11ax
Higher Throughput
Up to 4.8 Gbps

High Density
High performance + clients

Enhanced Reliability
8X8 Deterministic capacity

Longer Battery Life


Up to 67%

16
Introducing MR45/55

High Downstream and Upstream Throughput

High Receiver reliability or lower latency

MU-MIMO: Ability to transmit to or receive


from up to 8 clients simultaneously

8x8:8
8 Transmitters 8 Receivers 8 Spatial Streams

17
Recent Wireless Innovation

Native Umbrella TCP FastACK L3 Fast Secure Wi-Fi Location


Integration Roaming Enhancements

Seamless DNS protection Up to 38% increase About 40ms 26% improvement in accuracy

18
MR dedicated radio tames hostile RF environments
Air Marshal
Dual-band full-time WIPS

Automatic neutralization of wireless threats

Intuitive and flexible remediation

Auto RF
Interference detection

Automatic channel and power configuration

Optimized wireless throughput

19
User analytics and engagement

Built-in location analytics


dashboard

Optimize marketing and Analyze capture rate, dwell time, and new/repeat visitors to measure the impact of
business operations advertising, promotions, site utilization, etc.
Built-in location Integrated in the WLAN; no extra sensors, appliances, or software
analytics
Extensible API Integrate location data with CRM, loyalty programs, and custom applications for targeted
real-time offers

20
Bluetooth beacons

Asset tracking
Keep track of BLE devices within the
wireless environment
Mobile App Integration
Interact more personally with
customers through mobile apps

21
What is smart?
RF Analytics

Location Analytics

Anomaly Detection

22
MX SD-WAN and Security Appliances

Feature Highlights
Zero-touch site-to-site VPN
Policy and performance based (WAN)
routing
Intrusion detection/prevention
Content filtering
Advanced Malware Protection (AMP)
Application firewall

Several models scaling from small branch to large campus


Complete networking and security in a single appliance

23
Why customers choose the Cisco Meraki MX
Powerful security that’s easy to implement
• Robust suite of Cisco Security technologies
• Intuitive GUI-based configuration
• Seamless updates from the cloud

Exceptional scalability
• Zero-touch provisioning with cloud brokered VPN
• Easy centralized management with built-in remote
troubleshooting tools
• Multi-location configuration templates

Industry-leading visibility
• Fingerprints users, applications, devices, and threats
• Monitor one location or an entire deployment
• Unified monitoring and reporting with other Cisco Meraki
technologies

24
A complete connectivity and threat management solution

Security Networking Application Control


● Next generation firewall ● 3G / 4G failover ● Bandwidth shaping
● AES encrypted VPN ● Branch routing ● URL content filtering
● Intrusion prevention (IPS) ● WAN balancing and ● Quality of Service control
● Malware protection failover
Geo-IP firewalling ● High Availability
● Intelligent path control

25
Meraki Security & SD-WAN Portfolio
Teleworker Small Branch

Z3 Z3C MX64/65 MX67/68 MX67C/68CW


~5 users ~50 users ~50 users ~50 users
802.11ac Wave 2 Wireless & PoE 802.11ac Wireless* & PoE 802.11ac Wave 2* & PoE 802.11ac Wave 2* & PoE
FW throughput: 100 Mbps FW throughput: 250 Mbps FW throughput: 450 Mbps FW throughput: 450 Mbps
CAT 3 LTE (Z3C) CAT 6 LTE

Medium Branch Large Branch, Campus or Concentrator Virtual

MX84 MX100 MX250 MX450 vMX100 for AWS & Azure


~200 users ~500 users ~2,000 users ~10,000 users FW throughput: 750 Mbps
FW throughput: 500 Mbps FW throughput: 750 Mbps FW throughput: 4 Gbps FW throughput: 6 Gbps VPN & SD-WAN features

*Available with wireless models


(MX64W, MX65W, MX67W, MX68W, MX68CW)

26
Introducing the MX67/68 Security & SD-WAN Appliances
Designed to re-architect the branch with performance and simplicity

Higher Throughput Embedded LTE Better Wi-Fi

27
Benefits of Cellular, Now Integrated

Connect Remote
Sites

Limit downtime

SIM & LTE MODEM


INTEGRATED

28
MX Security Features & Capabilities

Malware Content Logging &


AMP IDS / IPS Firewall
Analysis Filtering Analytics

29
Threat Grid Cloud – Malware Analysis

Prioritize Threats
Easy to read threat report with threat
scores to help speed up incident
response

30
Intrusion Detection and Prevention (IDS/IPS)
Prevention or Detection

Connectivity: contains rules from


current and past two years and CVSS
score of 10

Balanced: contains rules from current


and past two years and CVSS score of 9
or greater

Security: contains rules from current


and past three years and CVSS score of
8 or greater

31
Firewall Rules
“Layer 3” Firewall Rule “Layer 7” Firewall Rule

32
Security Center
Events Over Time Most Prevalent Threats

Shows number of events matching Detection of IDS/IPS signatures and


configuring filters scanned of blocked files through AMP

33
Intuitive, next-generation firewall capabilities

Application aware
Content Filtering Geo-IP based firewall
firewall

34
How Do You Prepare for the Future?

MPLS

Cloud Applications Connectivity Options Security


• Higher branch bandwidth • Diverse uplink availability • Increased threat
requirements volume
• Cost savings available
• Challenge to monitor • Complex solution
• Increase network uptime
landscape
• Bring new sites online

35
SaaS on the Rise
AVG. NUMBER - SaaS APPS PER SaaS SPENDING FORECAST, 2016 – 2020
ORGANIZATION

95%
Increase

Global SaaS spending


is forecast to increase
by over 95% to
8 12 16
$75.7B
[Source: BetterCloud 2017 State of the SaaS-Powered Workplace] [Source: Gartner, 2017]

36
Strained Premium WAN Links

CURRENT M P L S
AVERAGE COST OF MPLS
HQ / DC BRANCH

M P L S
$600
PER MBPS PER MONTH
FUTURE
HQ / DC BRANCH
[Source: Network World, Next-Generation
Enterprise WANs, 2012]
● business critical
● non-critical

Legacy premium WAN links are coming under increasing strain as a result of growing
business SaaS and site-to-site traffic
Increasing the capacity of private WAN links is a cost prohibitive option for most
organizations

37
Future WAN Options
MPLS ONLY
Increase the capacity of an existing MPLS network
1 M P L S

HQ / DC BRANCH

R E D U C IN G C OS T
AUGMENTED MPLS

M P L S
Supplement an existing MPLS network with broadband
2 for increased bandwidth
B R O A D B A N D
Offload critical traffic from MPLS to broadband with policy
HQ / DC BRANCH based routing dynamic path selection

BROADBAND-BROADBAND
Dual high speed broadband connections
B R O A D B A N D
3 Load balance business critical traffic based on policy or
B R O A D B A N D
link performance
HQ / DC BRANCH

● business critical [PER MBPS PER MONTH]


● non-critical AVERAG E
PRICE O F WAN Broadband $15
CO NNECT IVIT Y
MPLS $600
MERAKI SD-WAN
[Source: Network World, Next-Generation Enterprise WANs, 2012]

38
Traffic monitoring and analytics

Network-wide traffic Client and application


Apply group policies
monitoring visibility

39
VPN health, bandwidth, and performance monitoring

VPN health monitoring Monitor performance Live uplink decisions

40
Email alerts from the cloud

SIMPLE

INTEGRATED

CUSTOMIZED

PERSONALIZED

41
MS Access & Aggregation Switches

Feature Highlights
Voice and video QoS
Layer 7 app visibility
Virtual and physical stacking
Multigigabit
Remote packet capture, cable testing

Gigabit access switches in 8, 24, and 48 port configurations; PoE available on all ports
Fiber aggregation switches in 16 and 32 port configurations
Enterprise-class performance and reliability including non-blocking performance

42
Complete Campus Switching Portfolio

Multiple models
Scaling from access to campus aggregation

Enterprise-class performance and reliability


Including non-blocking backplane performance,
PoE+ support on all ports, 10/40GbE uplinks, and
voice and video QoS

Cloud managed Virtual stacking Layer 7 visibility Layer 3 Voice & Video Network Remote Live Enterprise
scalability QoS Topology Tools Security

43
Why customers choose Meraki switches
Intuitive, centralized management
• No training, no complex command line
• Visualize and manage all switch ports in the
Meraki dashboard with Virtual Stacking
• Packet capture and other diagnostics tools

Easiest to deploy, manage, and configure


• Single pane of glass visibility into all devices
• Zero-touch provisioning for multi-site deployment
• Seamless updates from the cloud

Industry-leading visibility
• Fingerprints users, applications, and devices
• Network-wide monitoring and alerts
• Complete solution: APs, switches, security, EMM,
communications and cameras

44
MS switches: models
General Purpose Stackable
Access

MS120-8 MS120 MS210 MS225


8G Ports & 2 1G SFP uplinks 24, 48G Ports & 4 1G SFP 24, 48G Ports & 4 1G SFP 24, 48G Ports & 4 10G SFP+
124W PoE+ uplinks uplinks uplinks
Integrated power supply 370W PoE+ 370/740W PoE+ 370/740W PoE+
Fanless operation Cisco RPS 2300 compatible Physical stacking (80G) Physical stacking (80G)
Static routing Static routing

Stackable High Stackable


Performance Distribution

MS410 MS425
MS250 MS350
16, 32 1G SFP port models 16, 32 10G SFP+ port models
24, 48G Ports & 4 10G SFP+ 24, 48G Ports & 4 10G SFP+ uplinks
10 gigabit SFP+ uplinks 40 gigabit QSFP+ uplinks
uplinks Multigigabit & UPoE (350-24X)
Physical stacking (160G) Physical stacking (160G)
370/740W PoE+ Physical stacking (160G)
Dynamic routing Dynamic routing
Physical stacking (80G) Dynamic routing
Dynamic routing

45
Integrated event logs, alerts, and anomaly detection

Deep Reporting and Analytics


• Use detailed network reporting to make
informed decisions about infrastructure
expansion, staffing, and site planning

• Integrate raw, real-time data with business


intelligence systems

• Perform in-depth analysis using built-in API to


export comprehensive event logs

46
Advanced network-wide security

Lock down wired LAN access Reduce response times Built-in troubleshooting tools
• 802.1X access policies require • Email alerts for faster responses to • Packet capture
either user or device-based critical events
authentication
• Per-port monitoring
• Multi-tenant dashboard and mobile
• Use ACLs to filter unwanted app provide on-the-go admin
services, clients, and network access • Detailed event logs
access
• Time-based port scheduling • Diagnostic tools: Ping, throughput,
automates port shut-down during cable test, traceroute (MTR), and
• Enable port access only to off-hours
whitelisted devices more

47
Avoiding downtime, client disruption

Dynamic Routing
Physical Stacking DHCP and IP Services
with Gateway Redundancy
• Stacking supported on many • Built-in routing resilience with • Support multiple DHCP relay
models OSPF definitions

• Immediate failover to warm spare • Adapts to detected link failures • DHCP snooping
if hardware goes offline
• Visual interface reduces • Dynamic ARP Inspection
• Clone switch configurations opportunities for errors

48
The rise of AX access points

▪ AX access points (Wi-Fi 6) will continue


to arrive next year across the entire
industry.

▪ Analysts expect AX access points will


comprise the majority of AP sales by
2020.

▪ AX access points will dominate the


market by 2022.
Dell’oro Group: Wireless LAN Five Year Forecast Report, 2018-2022

49
Prepare for AX with Meraki Switches

Next-Gen APs require more capable switches to handle


the increased traffic.

50
mGig = Multi-Gigabit
Ethernet
Attain speeds of up to 10G using existing cabling

51
Prepare for AX with Meraki Switches
History of Access Point Data Rates

AP data rates have increased on wired networks over time


to generate greater network traffic

52
Prepare for AX with Meraki Switches
History of LAN bandwidth

LAN bandwidth needs to keep pace with increasing throughput from


APs
53
Prepare for AX with Meraki Switches
History of LAN bandwidth

Keeps your network ready for future demands

54
Prepare for AX with Meraki Switches
Introducing Meraki MS355

High mGig port-count access switching


55
Prepare for AX with Meraki Switches
High mGig port-count switch

▪ Connect up to 24 AX APs for high


capacity, high bandwidth connectivity

▪ Available in 24- and 48- port models

▪ 2 x 40G QSFP+ uplinks

▪ 4 x 10G SFP+ uplinks

▪ 400G of stacking bandwidth

▪ Dynamic Layer 3 routing

MS355 ▪ PoE+/UPoE support

56
Prepare for AX with Meraki Switches
MS355-24X ▪ MS355-24X
▪ 8 x mGig
▪ 16 x 1G
▪ 4 x 10G, 2 x 40G

MS355-48X ▪ MS355-48X
▪ 16 x mGig
▪ 32 x 1G
▪ 4 x 10G, 2 x 40G
MS355-24X2
▪ MS355-24X2
▪ 24 x mGig
▪ 4 x 10G, 2 x 40G

MS355-48X2 ▪ MS355-48X2
▪ 24 x mGig
▪ 24 x 1G
▪ 4 x 10G, 2 x 40G
Gig mGig 10G 40G
57
Band Together with the MS450

The MS450 aggregation switch


bands together with our
mGig-capable MS355 access switch
58
Band Together with the MS450
MS450 Capabilities:
● Connect up to 12 MS355s
● Higher bandwidth uplink connects to core/data center switch
● Stack up to 8 units for high-availability deployments
● Ample switching capacity for the entire network

59
Band Together with the MS450
MS450 Features:
● 12 x 40G QSFP+ ports
● 2 x 100G QSFP28 uplinks
● 400G of physical stacking bandwidth
● 1.36 Tbps of switching capacity

60
Band Together with the MS450
Use Cases:
● High density deployments
● High volume video conferencing
● High volume video applications (Netflix, Prime, Hulu, etc.)
● Onsite and remote server connections

Applicable Industries:
● Edu/K-12 ● MSPs
● Government ● Hospitality
● Manufacturing ● Health Care
● Professional Services ● Retail/Restaurant

61
Systems Manager, Endpoint Management

Feature Highlights
Device posture reporting
Rapid provisioning
Integration with Apple’s DEP and VPP
Streamlined network integration
Intelligent group policies and tagging

Device management tool controls iOS, Android, Mac, and Windows devices
Cloud-based: no on-site appliances or software; works with any vendor’s network
Seamless integration with Apple’s Volume Purchase Program and Device Enrollment Program
for effortless app deployment

62
Meraki Systems Manager

Endpoint Management Solution from Cisco

iOS, Android, Windows, mac OS, Chrome OS

Native Network Integration

Cloud ONLY

63
Endpoint Management

Provision Monitor Secure


Device setup Global visibility Recover or wipe missing devices
Grant WiFi, VPN, email access Audit apps and security profiles Cisco and Meraki integrations
Push apps and software Track stolen/lost devices Enforce conditional network and data
Apply restrictions Troubleshoot remotely access

64
Why Systems Manager

Easy-to-use Cloud Dashboard: No hosting requirements, installation


costs, or downtime for updates

Support and Licensing: No setup fees, latest and greatest feature set,
transferability of licenses

Multiple Platforms: iOS, Mac, Android, Windows

Native Network Integration: the only MDM / EMM with native integration
with wireless, switching, and security networks

65
Cisco Apple Partnership

66
Cisco Security Connector

Deployed and managed by Systems Manager

67
Deployment Programs

Apple Android

Device Enrollment Program (DEP) Android Enterprise (Android for


and Apple School Manager (ASM) Work)

“Supervision” for advanced control


and automatic enrollment Device Owner Mode for advanced
control

68
Apple School Manager - Apple Classroom

69
App Licensing Programs

Volume Purchase Playstore Apps for Android


Program Enterprise

Free and paid app management Integration with Google for Work Play Store

Silently push apps Push and manage apps in Device Owner


mode and BYOD
Migrate from Apple ID management

Recover/uninstall managed apps

70
Cisco Black Belt Education Framework
PERFORM

Stages SE Pre-sales SE Deployment SE Support Partner Sales

Value Proposition
Stage 1 Demo Solution POC Solution Tac Engagement
and Competitive

Focused Cross Architecture


Stage 2 Design Solution, PO Deploy Solution
Architecture Support Selling

TRANSFORM
Software
Cross Architecture & Solution & Advance Architecture Development
Stage 3 Application Application and Application Practice &
Development Deployment Support Application
Integration

Recertification and Ongoing Education

© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential * Rewards Subject to availability

https://salesconnect.cisco.com/#/program/PAGE-15444

You might also like