Cisco Cloud Strategy

Hybrid Cloud
Presenter Dmitry Dukhan

Role Director, Hybrid Cloud Sales and Services.
Sep 2014
Agenda
Cloud concepts and taxonomy
IT from builder to broker
Visibility (through the clouds)
Private clouds
Legacy clouds
Public clouds
Gluing it all together
Cisco Intercloud Fabric for Business
The Cisco Intercloud
Next steps
2013-2014 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
Agenda
Private clouds
Legacy clouds
Public clouds
Next steps
Cisco Confidential
Cloud concepts
Cloud Services
Traditional IT
Automation
Automation and
and
Orchestration
Orchestration
Private
Cloud
Public
Cloud
Cisco Confidential
Agenda
Private clouds
Legacy clouds
Public clouds
Next steps
Cisco Confidential
From builder to broker

LoBs
IT as a
Service
Today IT is under fire:
70-80% operations
Proliferation of Public cloud
Complexity of technology
Shrinking budgets
Automation
Automation and
and
Orchestration
Orchestration
Private
Cloud
Public Cloud
Public
Cloud
Cisco Confidential
Agenda
Private clouds
Legacy clouds
Public clouds
Next steps
Cisco Confidential
Business Demands Leading to Shadow IT, Lack of

Visibility
We want to
5-10X
More
..host
..host an
an
application
application
..share
..share
documents
documents
Unknown
..collaborate
differently
with
with
customers.
customers.
Known
On Premise:
Applications &
DC/Private Cloud
Public Cloud
Services
Cisco Confidential
Gaining Begins
Complete
VisibilityVisibility
of Publicof
Cloud
Cisco
Journey
By Gaining
Your with
Cloud
Cloud Consumption Services
Usage
Cisco Cloud Usage
Collector
Customer
Network
Cisco Cloud
Consumption
Web Portal
Cloud
Benchmarking
- Consumption
Analytics
- Spend Data
- Vendor Profile
Salesforce.com
Salesforce.com
Webex
Webex
5-10X
More
SaaS
Discovered
Cloud
Services
Box
Box
Force.com
Force.com
Windows
Windows Azure
Azure
II
Terremark
Terremark
PaaS
Authorized
Authorized CSP
CSP
Unauthorized
Unauthorized
CSP
CSP
IaaS
Cisco Confidential
Cloud Consumption Assessment

Gain Visibility of Public Cloud Usage, Costs & Risk
Financial Analysis
Risk Profile
Identifies financial impact of

cloud consumption
Initial cloud risk profile
Cloud Visibility
Categorized list of cloud
vendors & detailed usage
Vendor categorization
Addition of new vendors
from discovered services
Overall cloud spending

Potential cost savings
strategies
Highlight financial & brand
exposure
Outlines multiple cost
avoidance scenarios
Risk ranking for each Cloud

Service Provider
Analysis by category
Recommendations for risk
mitigation
Cloud Services Management

Initial assessment of a cloud service management processes
Stakeholder interviews & initial governance maturity assessment

Cloud management workshop to provide best practices for managing CSPs
Cisco Confidential
10
Agenda
Private clouds
Legacy Clouds
Public clouds
Next steps
Cisco Confidential
11
UCS Integration with Redhat

Avoid Vendor Lock In
Unified
Management
180+ development partners

Highest adoption of any cloud O.S.
Most elastic way to implement cloud
Cloud
Connectors
Nexus
SecureX
CRS
ISR
Network
Management
Nexus
ASR
UCS
Elastic Approach to Computing
Security
Automation
Orchestration Multi Cloud Multi Tenant Portal
Policy
Cisco Validated Design

Cloud
Unified
Unified Cloud
Intelligen
Intelligen
Data
Data
tt
Center
Center
Network
Network
Cloud Enablement
Services
Lew Tucker
Cloud CTO
OpenStack
Vice Chair
Tested, controlled, bugs fixed

OpenStack Requires followership as a full time job Sv
Sv
Cisco carefully assesses all updates to OpenStack, cs
cs
UDC CIN
CIN
regardless of their source, prior to deployment.UDC
Cisco Confidential
12
UCS: Automation with OpenStack

Integrated, Policy-Based Infrastructure Management
Single touch deployment
across 1000s nodes
HYPERVISOR
Physical Server
Provisioning (BMaaS)
Virtual Server
Provisioning
Cisco Services Solutions for OpenStack
OpenStack
Deployment
Automation
5
Virtual & Bare

metal services
(BMaaS
Integration)
Configuration
Automation
New UCS Product Lines for scale-out &

OpenStack Platforms
Dense storage
Dense compute
server (storage
server (compute
nodes)
nodes)
Optimized
workload
placement
Cisco Confidential
13
UCS Infrastructure for OpenStack (UCSo)

+ Policy + ACI
Starter Kit
Advanced
Advanced (ACI)
Upto Thousands
of VMs
Single Portal IaaS
& Paas
VPDC, FWaaS,
LBaaS, VPNaaS,
BMaaS
Application
Centric
Infrastructure
Policy
Management
Tight Integration
Between ACI &
Application
Containers**
UCS C220, 240, M3, FI,

N9k (Standalone)/N7k; Netapp/Colussa**, CSR,
N1K, VPX, ASAv
OpenStack CVD
300 500 VMs
Easy Install
(Foreman)
VPDC
Cisco Confidential
14
Application Policy Management Requires Automation

Existing Application Policy Management
without ACI
Application Policy Management with

ACI
Security
policy
Load
Balancing
policy
Virtualizati
on policy
(6 weeks per application)
(minutes per application)
Network
policy
APIC
Storage
policy
Converged Network,
Compute and Storage
Application Centric
Adaptive Security
Automated Proactive
Actions
Predictive Analytical
Models
Cisco Confidential
15
Cisco OpenStack Private Cloud
Infrastructure as a Service
COPC Service
High Availability
Dynamic Capacity
Virtualized Networking
Distributed Storage
Enterprise Auth
Enhanced UI
24/7 Proactive Support

Monitoring
Capacity Planning
Live SW Updates
COPC OpenStack
Hardware, Networking & Data Center Agnostic

Cisco Confidential
16
Consumption Supported Private Cloud
Unified
Management
Cloud
Connectors
Nexus
SecureX
CRS
ISR
Nexus
ASR
UCS
Utility
Utility Model
Model
Enabled
Enabled
Cloud
Unified
Unified Cloud
Intelligen
Intelligen
Data
Data
tt
Center
Center
Network
Network
Cloud Enablement
Services
Cisco Confidential
17
Agenda
Private clouds
Legacy Clouds
Public clouds
Next steps
Cisco Confidential
18
Cisco Data Center and Cloud Management

PRIME
PRIME SERVICE
SERVICE CATALOG
CATALOG Cloud
Cloud management
management portal
portal private,
private, public,
public, hybrid
hybrid cloud
cloud
UCS
UCS DIRECTOR
DIRECTOR
Unified
Unified infrastructure
infrastructure Automation
Automation for
for compute,
compute, storage,
storage, network
network
physical
physical &
& virtual
virtual
UCS
UCS CENTRAL
CENTRAL
APIC
APIC
UCS
UCS MANAGER
MANAGER
Single
UCS domain
Multiple UCS
domains
Manages
Application Centric
Infrastructure (ACI)
and Nexus fabric
Heterogeneous &
Integrated
Infrastructure
Cisco Confidential
19
Cloud Operations (3rd Party Billing,

Assurance, Resource Mgmt)
ONE Enterprise Cloud Suite

SPoG (Physical / Virtual / Hybrid / HyperScale)
Self-Service Portal
PSC
Integrated Infrastructure Management

UCS-D
Virtual Application
Container Services
Hybrid Capabilities
ICF-B
Multi-Vendor Compute, Network, Storage, and

Virtualization
COPC
COPC
or
or
UCSO
UCSO
C97-733661-00 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
20
Agenda
Private clouds
Public clouds
Next steps
Cisco Confidential
21
Public Cloud: Giants and Intercloud partners
Data
Sovereignty Security
Control
Easy
Choice
Economics
Speed
Scale
Cisco
Intercloud
Fabric
Software
Cisco Confidential
22
Agenda
Private clouds
Public clouds
The Cisco InterCloud
Next steps
Cisco Confidential
23
Providing Solutions to
Partner
Public and
Cisco Intercloud
Fabric
DC/Private
Clouds
3rd Party Public

Clouds
Powered
Partner Clouds
SaaS
OI
OpenBlock
Cisco Confidential
Cisco Confidential
24
Cisco Intercloud Fabric
No Vendor
Lock-in
Heterogeneou
s
Infrastructure
Hybrid Cloud
Any
Hypervisor
to any
Provider
Open
Ecosyste
m
OPEN
Customer
s
End-to-end
Security
Unified
Managemen
t
Compliance
3rd Party
Cloud
Providers
Cisco
Intercloud
Fabric
Software
CHOICE
OI
and
Cisco
Powered
Services
PT
Cisco Confidential
25
Security Considerations: Summary

Data in Transit b/w Enterprise DC and
Encryption algorithm AES-128-GCM, AES-
Public SP Cloud
128-CBC, AES-256-GCM (Suite B), AES-256CBC
Key Management, Data Encryption and

Hashing
Hashing algorithm SHA-1, SHA-256, SHA-
Inter VM Security in the Public SP Cloud

Intercloud Driver
Key Management, Data Encryption and
Hashing
384
All data in motion is cryptographically
isolated and encrypted
Layer 3 Security FW via IC CSR
Enterprise owns the keys
LayerENTERPRISE
2 Security FW
via IC VSG
CLOUDS
Intercloud
Fabric Director
PROVIDER CLOUDS
Intercloud Fabric Secure Extender
Intercloud
Switch
Intercloud
Extender
VMM
VM
Enterprise to Cloud & VM to VM within Cloud
VM
S2S Data Tunnel
Access
Data
Tunnel
VM
with
ICD
Other
Tenants
Cisco Confidential
26
26
Cisco Intercloud Fabric Overview
Choice of Provider Clouds with Consistency, Control &

Compliance
Provider Clouds
Customer DC or Cloud
vSphere
Intercloud
Fabric for
Business
Hyper-V
Openstack/KV
M
CloudStack/Xe
n
2014 Cisco and/or its affiliates. All rights reserved.
Intercloud
Fabric
Provider
Platform
Cloud
Providers
&
Cisco Cloud
Services
Brokere
d
Service
s
End User
& IT
Admin
Portals
Azure APIs
Secure Extension
Network, Compute &
Storage
EC2 APIs
Cisco Confidential
27
Agenda
Private clouds
Public clouds
The Cisco InterCloud
Next steps
Cisco Confidential
28
Connecting all clouds: Cisco Intercloud

Native Cloud
Applications
Big Data &

Analytics
Enterprise
Workloads
VMDC Roadmap
Open Stack, ACI, NFV,
CIAC
Collaboration
& Video
Enterprise
Private
Cloud
HCS
WebEx
Meraki
IaaS
PaaS
Microsoft
Suite
aaS
Security
Cisco
Powered
Partner
Clouds
vDesktop aaS
CiscoCloud
Services
Analytics
HANA aaS
vDesktop aaS
public
clouds
IaaS
PaaS
NFV
IOE Apps
Cisco Confidential
29
A transparent Run Time sharing workloads

Application freedom
Partners
Big Data
Customer
s
SaaS
Apps
Devices
Social
Innovatio
n
API
API
A
P
I
API
Integration
Integration Bus
Bus
SDK
API
Telco
Real Time
Network
Public
Java/TomCat/.Net
Docker
Single Application
Run Time
Communication
Communication Bus
Bus
SDN
Private
Wireless/Cellular
Co-Lo
Big Data
Mobil Web
Industrial
HPC
SaaS
Hybrid
Cisco Confidential
30
DC/Private
Clouds
3rd Party Public

Clouds
Powered
Partner Clouds
SaaS
OI
OpenBlock
76%
IT will act as a
broker
of cloud services across
internal and external
clouds for LOBs
2013-2014 Cisco and/or its affiliates. All rights

reserved. Cloud Study 2013)
(Cisco-Intel
49%
Configured hybrid clouds

with private, hosted
and public models
(451 Research 2014
Survey of 2002 customers)
Cisco Confidential
Cisco Confidential
31
DC/Private
Clouds
3rd Party Public

Clouds
the cloudOI
Services to build, Private
Cloud, Hybrid Cloud, and Cloud
Bursting
OpenBlock
76%
Powered
SaaS)
The
Challenge
Partner Cloudsfor Cisco
Unlock Value for our Customers in
IT will act as a
broker
of cloud services across
internal and external
clouds for LOBs
2013-2014 Cisco and/or its affiliates. All rights

reserved. Cloud Study 2013)
(Cisco-Intel
49%
Configured hybrid clouds

with private, hosted
and public models
(451 Research 2014
Survey of 2002 customers)
Cisco Confidential
Cisco Confidential
32
OpenStack
Defined
Cisco
Cisco On
On OpenStack
OpenStack
Private
Private Cloud
Cloud on
on OpenStack
OpenStack
Private
Private Cloud
Cloud Services
Services for
for
OpenStack
OpenStack
Hybrid
Hybrid Cloud
Cloud on
on Intercloud
Intercloud
for
for Business
Business
Public
Public Cloud
Cloud on
on OpenStack
OpenStack
Public
Public Cloud
Cloud Services
Services for
for
OpenStack
OpenStack and
and Intercloud
Intercloud
Fabric
Fabric for
for Business
Business
Hybrid
Hybrid Cloud
Cloud Services
Services for
for
Intercloud
Intercloud for
for Business
Business
Cisco Confidential
33
Agenda
Private clouds
Public clouds
Next steps
Cisco Confidential
34
Next Steps
Cloud Consumption Assessment
Domain 10 Assessment
InterCloud Demo
UCS infrastructure for Openstack Demo
Engage with Cisco, here and locally to

create a comprehensive strategy
More Information: rmacban@cisco.com,

ddukhan@cisco.com, pmaravei@cisco.com
Questions: Your Account Team
Cisco Confidential
Cisco
Confidential
Cisco
Confidential
35
Thank you.
INTERESTING USE CASES
Cisco Confidential
37
VM in public cloud booting off of Private Cloud

Instance
Cisco Confidential
38
Load Balancing VIP from Private to Public

VIP in Private
Servers in private behind VIP
Servers in Public (but through the private interlink)
Load Balance all behind VIP as if all in same DC.
Cisco Confidential
39
Puppet server controlling puppet in cloud

separated by L3
Heat with Cielometer and spinning VMs between clouds

requires L2 or L3 connectivity for control. But if no floating
IP then need L2 Tunnel and Dual defaults.
Cisco Confidential
40
Data Collection
Cisco Confidential
41
NetFlow v5/v9
Egress Routers
How Cloud Consumption Works

UDP
Customer Supplied
Hardware/VM
CUSTOMER
Collector
Collector
Software
Software
Flow Record
Web Portal to
Analyze Cloud
Usage
Interface id
Source IP
Destination IP
Protocol
Source UDP/TCP Port
Destination UDP/TCP Port
ToS
Data Amount
DB
DB
(PII)
(PII)
HTTPS
Multi-tenant
Cloud-based
Assessment Server
Assessment
Assessment
Software
Software &
&
Analytics
Analytics
Destination IP
Protocol
Port
Number of unique
Source IPs
Data Amount
HTTPS
DB1
DB1
DB2
DB2
DBn
DBn
Cisco Confidential
42
Web Proxy Architecture: Cloud Consumption

Services
CUSTOMER
Web Proxy
Personally
Identifiable
Information
(PII) in log files,
eg. source IPs
Cloud Consumption
Collector
X
X
PII redaction &

anonymization utility
Highly Secure &

Controlled Server
FTP
OK
PII (source IPs)

replaced with
tokens in log
files
HTTPS
Cloud
Consumption
Server
Collector Server
Cisco Confidential
43
Examples of Analyses
Delivered
Cisco Confidential
44
Cloud Usage: Total CSPs and Service Type

Total Number of CSPs
129
51%
15
6%
110
43%
Total Number of Corporate CSPs
IaaS
SaaS
PaaS
19
36%
3
6%
IaaS
Saa
S
31
58%
Split based on Corporate vs Non-Corporate CSPs. Observed with customers and adheres to the
80:20 rule
IaaS CSPs majorly discovered under Corporate category
Cisco Confidential
45
Cloud Usage: Traffic and Service Type

Overall CSPs Traffic (GB)
Corporate CSPs Traffic (GB)

IaaS
1,264.1 21.9
50%
1%
1,262.7
50%
Saa
S
IaaS
576.7
37%
13.7
1%
Saa
S
951.4
62%
The split based on Overall traffic shows IaaS and SaaS being majorly leveraged
This is again typical and observed across customer engagements
Cisco Confidential
46
Cloud Usage: Category

Overall CSP Categories
Content Delivery Network

37%
Office Productivity
Cloud
Social
Drive/Storage
Networks
19%
Others
3%
3%
7%Marketing & Sales
Compute
Content Management
8% 10%13%
Corporate CSP Categories

Others
Telecom
3%
Cloud 1%
Drive/Storage
Content Delivery Network
44%
2%
Collaboration
Office Productivity
2%
32%
Finance and Accounting
Compute
12%
2%
Service Management
2%
CDN and Office productivity take the major overall CSP share. (Akamai, Kaltura, Google and
Microsoft)
Office Productivity, Compute and Cloud storage: CSPs referenced under this category needs further
Cisco Confidential
review leveraging Scansafe data
47
Assessing Risk of Cloud Consumption

Risk = f(CSP Profile, Relative Usage, Relative Business Criticality,
Authorization)
Cisco Confidential
M Monitor ; I Investigate ; A - Assess
48
Example: Financial Model

Designed to show what-if dynamic financial model
Annual Spend
$786
$786
Total
K
K
$713
$713
Top 10 K
K
Cisco Confidential
49
Customer Success: GNB Cloud Consumption

Assessment
Customer
Challenge
AS delivered
Heavily restricted internet/cloud service

usage for employees to avoid risk
Employees pushing for additional cloud
XYZ team led the engagement
services to improve productivity
and delivered
Partner delivered
First phase of the XYZ solution
AS involvementgrew
as with Cisco Services
Partnered
for Cloud
delivered
Solutions
Consumption Assessment to understand their

current cloud usage, cloud costs and risk, and
employee needs
Delivered collaboratively for OnX
XYZ opportunity
Partner Sat: 4.5/5.0
Cisco Cloud Consumption Servicesenables us

to make informed decisions to better manage
Despite 90% of public internet traffic being
our risks, costs and offer better services to
AS Revenue $K
AS Revenue $K
blocked:
taxpayers. This robust, new cloud portfolio
Product
Revenue
Identified 220+ CSPs
were used
less $M
ASreaping
Revenue
allows us to start
the$K
benefits of our
Impact on
than 1% were authorized by IT
Product
Revenue
cloud initiative Expected
faster. Cisco
is playing
a key $M
role
Spend for segment of government was
Customer
in guiding our staff in assessing opportunities as
nearly $200K/yr, projected over $750K
we execute our unique cloud strategy.
across all segments
Helped manage risk so they can authorize
-Christian Couturier, CIO, Government of New
more cloud services to meet employee
Brunswick, Canada
needs
Cisco Confidential
50
Customer Success: Lubrizol Cloud Consumption

Assessment
Establish a cloud governance model to:
Retain control over cloud adoption and make more informed decisions
Customer Reduce risks and costs

AS delivered Implement stronger cloud management
XYZ teampractices
led the engagement
Challenge
and
delivered
Develop an over-arching security vision to support Cloud and network
Partner delivered
expansion
AS involvement grew
as
Improve
business agility
Solutions
2014
Customer Sat: TBD in Q1FY15
Repeatable Best Practice :
XYZ opportunity
Blended on-shore / off-shore

delivered
A comprehensive report and read out showing cloud usage by analyzing current
consumption patterns of services from public cloud providers
Identification and recommendations around Data Security, Compliance Risks
Exposure of confidential information that can lead to negative business impact
Focus on overall cloud spending and potential cost savings strategies through
detailed Financial analysis
AS Revenue $K
AS Revenue $K
Product Revenue $M
delivery framework for greater

customer engagement and
impact
This engagement s [a]
significant building block in our
quest to becoming Lubrizols
strategic partner & trusted
advisor. Projects associated
with and/or spring-boarding
from the Assessment:
Domain 10 Workshop
Network
AS Revenue
$K Capacity Assessment
Gain better agility with improved processes to govern Cloud Service Providers
iWAN Workshop
Expected Product Revenue $M
Implement quicker ways to select and launch cloud services to meet business
needs
Develop a high-level, phased roadmap to address the required cloud
transformation
Identification and recommendations around compliance and risk mitigation
strategies
Insight into overall cloud spending and potential cost savings & avoidance
Cisco and/or its affiliates. All rights reserved.
strategies
Select and launch cloud services to effectively meet lines of business
Impact:
Business
Outcome
Security Vision to Support the

Cloud and Network Expansions
SAP HANA Pilot
- Carl DAbato: Enterprise Account

Manager
Cisco Confidential
51
Customer Success: UNSW Cloud Consumption

Assessment
Gain comprehensive visibility and a holistic view into cloud usage for Cloud
Service Providers (CSPs) by analyzing the current consumption usage
patterns
AS delivered Reduce risks and costs
XYZ team led the engagement
XYZ opportunity
and delivered
Partner delivered
Customer Sat: 4.6/5.0
AS involvement grew as
delivered
Customer
Challenge
A comprehensive report showing cloud usage by analyzing current

consumption patterns of services from public cloud service providers
Identification and recommendations around compliance and risk
mitigation strategies
Insight into overall cloud spending and potential cost savings &
avoidance strategies
AS Revenue $K
AS Revenue $K
Solutions
Impact:
Business
Outcome
Repeatable Best-Practice : Mapping of

Department/Faculty User IDs and
Source IPs to track CSP usage
We can use the Risk Analysis to have

follow-up discussions with
stakeholders in various UNSW
departments. Also, the What-If
analysis based on Cloud Consumption
AS Revenue
$K
Product Revenue $M
data has
potential value for our cloud
strategy
decision-making.
Expected
Product
Revenue $M
Outlined the opportunities for hybrid cloud solution with services such as
- Stuart Freer: IT Operations
Compute and Storage serviced in-house
Director
Detailed recommendations and best practices around risk mitigation

strategies
Identified vendor consolidation opportunities for Compute and Storage
services
Cisco Confidential
52

Cisco Cloud Strategy

Загружено:

Сведения о документе

Авторское право

Доступные форматы

Поделиться этим документом

Поделиться или встроить документ

Параметры публикации

Этот документ был вам полезен?

Это неприемлемый материал?

Авторское право:

Доступные форматы

Cisco Cloud Strategy

Загружено:

Авторское право:

Доступные форматы

Hybrid Cloud

Presenter Dmitry Dukhan

2013-2014 Cisco and/or its affiliates. All rights reserved.

From builder to broker

Today IT is under fire:

2013-2014 Cisco and/or its affiliates. All rights reserved.

Business Demands Leading to Shadow IT, Lack of

2013-2014 Cisco and/or its affiliates. All rights reserved.

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cloud Consumption Assessment

Identifies financial impact of

Initial cloud risk profile

Overall cloud spending

Risk ranking for each Cloud

Cloud Services Management

Stakeholder interviews & initial governance maturity assessment

2013-2014 Cisco and/or its affiliates. All rights reserved.

UCS Integration with Redhat

180+ development partners

Elastic Approach to Computing

Cisco Validated Design

2013-2014 Cisco and/or its affiliates. All rights reserved.

Tested, controlled, bugs fixed

UCS: Automation with OpenStack

Cisco Services Solutions for OpenStack

Virtual & Bare

New UCS Product Lines for scale-out &

UCS Infrastructure for OpenStack (UCSo)

UCS C220, 240, M3, FI,

2013-2014 Cisco and/or its affiliates. All rights reserved.

Application Policy Management Requires Automation

Application Policy Management with

(minutes per application)

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco OpenStack Private Cloud

24/7 Proactive Support

Hardware, Networking & Data Center Agnostic

Consumption Supported Private Cloud

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Data Center and Cloud Management

Cloud Operations (3rd Party Billing,

ONE Enterprise Cloud Suite

Integrated Infrastructure Management

Multi-Vendor Compute, Network, Storage, and

2013-2014 Cisco and/or its affiliates. All rights reserved.

Public Cloud: Giants and Intercloud partners

2013-2014 Cisco and/or its affiliates. All rights reserved.

2013-2014 Cisco and/or its affiliates. All rights reserved.

3rd Party Public

Cisco Intercloud Fabric

2013-2014 Cisco and/or its affiliates. All rights reserved.

Security Considerations: Summary

Encryption algorithm AES-128-GCM, AES-

128-CBC, AES-256-GCM (Suite B), AES-256CBC

Key Management, Data Encryption and

Hashing algorithm SHA-1, SHA-256, SHA-

Inter VM Security in the Public SP Cloud

isolated and encrypted

Layer 3 Security FW via IC CSR

Enterprise owns the keys

Enterprise to Cloud & VM to VM within Cloud

S2S Data Tunnel

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Intercloud Fabric Overview