Cisco CISCO857-K9 User Manual - Page 11

Cisco 870 Series Security Features Cisco 870 Security Features • Stateful inspection firewall • Intrusion Prevention System (IPS) • Antivirus support through Network Admission Control (NAC) and enforcement of secure access policies • URL Filtering Cisco 870 VPN Features • Hardware-accelerated 3DES for IPSec • Hardware-accelerated AES for IPSec • Cisco Easy VPN Client and Server • IPSec 3DES termination/initiation • IPSec pass-through • Point-to-Point Tunneling Protocol (PPTP) pass-through • L2TP pass-through • 802.1X • Secure HTTP (HTTPS), FTP, and Telnet authentication proxies • Dynamic Multipoint VPN (DMVPN), SSL VPN, and Group Encrypted Transport (GET VPN) WLAN Features WLAN Hardware • 802.11b/g • Wi-Fi and Wireless Multi-Media (WMM) Certified • Automatic rate selection for 802.11b/g • Field-replaceable external antennas • Antenna diversity • WECA interoperability • Default antenna gain: 2.2 dBi • PoE (optional external adapter for inline power) for IP phones or external wireless access points WLAN Software Features • Maximize throughput or maximize range option • Software configurable transmit power • SSID Globalization • SSIDs =10 • Wireless VLANs =10 • Encrypted Wireless VLANs =4 • MBSSIDs =2 • Universal Client Mode WLAN Security Features • 802.1X • 802.11i • Wi-Fi Protected Access (WPA) and AES (WPA2) • EAP Authentication: Cisco LEAP, PEAP, EAP-TLS, EAP-FAST, EAP-SIM, EAP-MD5, EAP-TTLS • Static and dynamic Wired Equivalent Privacy (WEP) • Temporal Key Integrity Protocol (TKIP)/SSN Temporal Key Integrity Protocol/Simple Security Network encryption • MAC authentication/filter • User database for survivable local authentication using LEAP and EAP-FAST • Configurable limit to the number of wireless clients • Configurable RADIUS accounting for wireless clients • PSK (Pre Shared Keys) (WPA-SOHO) 18 Network Example Teleworker Small Offices or Small Businesses Cisco 870 Series Corporate Headquarters Cable Internet DSL Metro Ethernet When to Deploy Deploy the Cisco 870 Series when you need the following in a small remote office, or teleworker and small business sites: • Secure, concurrent services for broadband connection • High-speed VPN solution • Advanced security with firewall, VPNs, IPS, NAC, DMVPNs, Easy VPNs • Integrated 802.11b/g with replaceable diversity antennas • Four-port 10/100 managed switch • Easy to set up solution with Cisco SDM and remote management capabilities Series Distinctions Cisco 870 Series WAN Technologies LAN Switch Network Security Upgradeability • Cisco 871 - 100 MB Ethernet • Cisco 876 - ADSL over ISDN (ADSL2/ADSL2+) • Cisco 877 - ADSL over analog telephone lines (ADSL2/ADSL2+) • Cisco 878 - G.SHDSL (2- and 4-wire support) Managed 4-port 10/100Base-T switch with autosensing MDI/MDX (Media Device In/Media Device Crossover) for auto-crossover Firewall, IPSec and AES High Speed Encryption, IPS, Antivirus through Cisco NAC, IPSec, and AES High Speed Encryption, Cisco Easy VPN, DMVPN, DMZ, GET VPN Cisco IOS Software upgrades and updates, memory upgrades 19