prod_brochure0900aecd805aeb81
6Pages

Solution Brief Application Intelligence and Integrated Security Using Cisco Catalyst 6500 Supervisor Engine 32 PISA Overview ® ® The Cisco Catalyst 6500 Series Supervisor Engine 32 Programmable Intelligent Services Accelerator (PISA) is the next generation supervisor engine for the Cisco Catalyst 6500 Series of modular switches, delivering industry-leading deep packet inspection, application awareness, security, availability, and manageability services for the networks of small and medium-sized businesses, enterprises, and service providers. This whitepaper outlines the benefits of implementing Application Intelligence and Integrated Security using Supervisor Engine 32 PISA and highlights the steps required to implement this solution. Over the past five years, the proliferation of peer-to-peer (P2P) and instant messaging traffic has had a profound effect on networks and is continuously increasing bandwidth requirements. The resulting effect on operations is significant. This traffic not only compromises the experience of the majority of the users, but affects the quality of new services as well, especially services that are sensitive to the effects of latency, congestion, and jitter—voice and video. This traffic, along with other noncritical applications, can overwhelm the network and jeopardize delivery of critical application traffic. Clearly, an innovative solution for controlling traffic is required—one that is capable of deep packet inspection to identify such applications and take appropriate action to help ensure application fluency. Additionally, malicious attacks against networking environments are increasing in frequency and sophistication. To counter these attacks, functionality is needed that is flexible in terms of both classification and mitigation capabilities. Many of the tools available today were not designed with deep packet inspection as a requirement; instead, they were designed to provide matching for predefined fields in well-known protocol headers. If an attack uses a field outside the limited range of inspection of these features, one is left without a defense against the attack. By integrating Supervisor Engine 32 PISA into the network infrastructure, enterprises and service providers can unobtrusively control P2P and instant messaging traffic and protect their network against increasingly sophisticated malicious attacks. Secure Application Intelligence and Integrated Security: PISA Advantage Application Intelligence and Integrated Security is delivered using the Cisco Catalyst 6500 Supervisor Engine 32 PISA platform, which provides deep packet inspection and services acceleration at multigigabit speeds. This platform enables enterprises and service providers to identify and control application traffic, apply quality-of-service (QoS) parameters to differing application traffic streams, and provide protection against malicious attacks. The platform is based on an adaptable, programmable architecture that allows the solution to grow with the dynamic needs of the enterprise or service provider. As new techniques for network intrusion or application compromise are created, the programmable nature of the Cisco Catalyst 6500 Supervisor Engine 32 platform helps ensure that the network administrator has the ability to quickly react to the changing environment. The enterprise’s or service provider’s investment is always protected. All contents are Copyright © 1992–2007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 1 of 6

Solution Brief Solution Components Application Intelligence and Integrated Security solution on the Cisco Catalyst 6500 Supervisor Engine 32 PISA could include some or all of the following components: ● The Cisco Catalyst 6500 Supervisor Engine 32 PISA, available in eight Gigabit Ethernet uplink or two 10 Gigabit Ethernet uplink options along with the associated set of Cisco Catalyst 6500 Ethernet and WAN interfaces ● ® Cisco IOS Software Release 12.2(18)ZY–based Internet operating system for Cisco Catalyst 6500 Supervisor Engine 32 PISA supporting Network-Based Application Recognition...

Solution Brief Solution Management The solution comes with support for graphical user interface (GUI)–based QoS Policy Manager (QPM), which centralizes and automates NBAR policy management. Moreover, QPM dramatically increases the speed and accuracy of defining, validating, configuring, and deploying NBAR policies. In addition, flexible Configuration option in the Cisco Security Manager (CSM) allows network administrators to push down configuration files containing FPM policies to multiples switches. (See Figure 3.) Figure 3. Supervisor Engine 32 PISA Management Model Benefits and...

Solution Brief Mission-critical applications, such as Oracle, Citrix, Microsoft Exchange, or the new breed of Webbased applications, must perform well to help ensure your success in today’s fast-paced ebusiness environment. Bottlenecks can occur in many places, including the network. These bottlenecks often occur even though you have budgeted what you thought was more than adequate bandwidth for each application. What often happens is that employees use new Internet applications, such as streaming audio and video or downloading of new programs. These applications can quickly consume your...

Solution Brief Web-based applications often load slowly. With Cisco Catalyst 6500 Supervisor Engine 32 ● PISA, applications can be identified by MIME type and be given priority in the network. Some classes of content, such as JPEG pictures, consume large amounts of bandwidth, ● but might not be considered critical Web-based information. In such cases, you can control the amount of bandwidth consumed by such types of content. Improve Multiservice Performance Multiservice networks allow you to combine your data, voice, and video requirements into one unified network. Unfortunately, each of...

Americas Headquarters 170 West Tasman Drive Asia Pacific Headquarters Europe Headquarters Cisco Systems International BV Cisco has more than 200 offices worldwide. Addresses, phone numbers, and fax numbers are listed on the Cisco Website at www,cisco,com/go/offices. ©2007 Cisco Systems. Inc. All rights reserved. CCVR the Cisco logo, and the Cisco Square Bridge logo are trademarks of Cisco Systems. Inc.: Changing the Way We Work, Live, Play, and Learn is a service mark ot Cisco Systems. Inc.: and Access Registrar Aironet, BPX, Catalyst. CCDA. CCDR CCIE. CCIP. CCNA. CCNP CCSR Cisco, the Cisco...