Datasheet

Data Sheet
© 2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 7 of 15
Table 3. Secure Networking: Feature and Benefits
Feature Benefit
Cisco IOS Software
Firewall
Sophisticated security and policy enforcement provides features such as stateful, application-
based filtering (context-based access control), per-user authentication and authorization, real-time
alerts, transparent firewall, and IPv6 firewall.
SSL SSL provides security for Web transactions by handling authentication, data encryption, and
digital signatures.
Onboard VPN Encryption
Acceleration
The Cisco 1861 supports IPsec DES; 3DES; and AES 128, 192, and 256 cryptology by using an
optional security image.
Network Admission
Control (NAC)
A Cisco Self-Defending Network initiative, NAC seeks to dramatically improve the ability of
networks to identify, prevent, and adapt to threats by allowing network access only to compliant
and trusted endpoint devices.
Multiprotocol Label
Switching (MPLS) VPN
Support
The Cisco 1861 supports specific provider edge functions plus a mechanism to extend
customers’ MPLS VPN networks out to the customer edge with a Virtual Route Forwarding (VRF)
firewall and VRF IPsec. For details about the MPLS VPN support on the different integrated
services routers, please check the feature navigator tool at:
http://www.cisco.com.
IPS Flexible and high-performance support is offered through Cisco IOS Software. IPS offers the
ability to load and enable selected intrusion detection system (IDS) signatures in the same
manner as Cisco IDS Sensor Software.
Advanced Application
Inspection and Control
Cisco IOS Firewall includes HTTP and several e-mail inspection engines that can be used to
detect misuse of port 80 and e-mail connectivity.
Cisco Easy VPN Remote
and Server Support
The Cisco 1861 eases administration and management of point-to-point VPNs by actively
pushing new security policies from a single headend to remote sites.
DMVPN DMVPN is a Cisco IOS Software solution for building IPsec + Generic routing encapsulation
(GRE) VPNs in an easy and scalable manner.
GET VPN GET VPN is a Cisco IOS Software solution that simplifies securing large Layer 2 or MPLS
networks requiring partial or full-mesh connectivity by providing tunnel-less VPN connectivity.
URL Filtering URL filtering is available externally with a PC server running the URL filtering software.
Standard 802.1x Support
on Integrated Switching
Standard 802.1x applications require valid access credentials that make unauthorized access to
protected information resources and deployment of unsecured wireless access points more
difficult.
Network Address
Translation (NAT)
NAT simplifies and reduces costs associated with global IP address allocation and management.
Only a single registered IP address is required to support all users on an entire LAN
infrastructure.
Wireless Support: Features and Benefits
The Cisco 1861 Integrated Services Router supports an optional integrated WLAN access point for
highly secure WLAN connectivity. The minimum Cisco IOS
®
Software release for the support of
Wireless LAN is the 12.4(22)T release.
Table 4. Wireless Features and Benefits
Feature Benefit
WLAN connectivity The 802.11b/g integrated access point can be used to provide integrated WLAN connectivity to
mobile clients—voice and data—resulting in mobility and enhanced productivity for users.
The integrated 802.11b/g access point in the Cisco 1861 supports up to 54-Mbps connections.
Wireless IP phones allow users to be mobile and more productive.
Enhanced security Enhanced security is provided with support for Wi-Fi Protected Access (WPA and WPA2),
including authentication with 802.1x and Cisco LEAP, Protected Extensible Authentication
Protocol (PEAP), dynamic Wired Equivalent Privacy (WEP), or static WEP.
WLAN VLANs and 802.1q/e are also supported; the 802.1e features prioritize voice and video
traffic with queuing.
Employee and guest WLAN access is through separate VLANs.