Cisco Unified Access Cisco Mobility Vision, Strategy, and Portfolio Jeevan Patil Senior Product Line Manager Wireless Networking Group

Agenda 1 2 3 4 5 Cisco’s Mobility Vision Mobility Differentiators Mobility Roadmap 4 Controller and Access Point Portfolio 5 Mobility Services Portfolio

Cisco Mobility Innovation Leadership Led Every Major Change in Mobility/WLAN for 15 Years 802.11ac Wave 2 802.11ad Hotspot 2.0 Local Services Discovery IPv6 802.11ac Virtualization App visibility Unified Policy and Network Management 802.11n and Spectrum Intelligence Controller and Coordinated Access Points Autonomous Access Points Cisco participates or is an officer on nearly every enterprise applicable IEEE standard – Cisco does not shy away from standards: CCX is an engine to get adoption and drive into standards-body with customer weight. 11r, 11u, 11w being some of the latest WFA…. WFA voice certification (11k,11v), AP Mechanical Design Standards Leadership (IEEE, WFA, WBA) RF resiliency, WLAN Scale, High Client Density 1997 2015 Wi-Fi Requirements

Cisco Mobility Differentiators Mobility/RF Innovation Predictability and Reliability Policy and Network Management Award Wining Design Purpose-Built Wi-Fi Chipset with 4x4 MIMO, with robust platform No Open Vents Who? What? When? Where? How? ClientLink Best-in-class performance to a/g/n clients CleanAir Chip level proactive and automatic interference mitigation ISE Control Standards First to introduce 802.11r, 802.11w and 802.11ac VideoStream All these intensive technologies translate to: 1- CleanAir/Client Link: End-user get the Best Experience on your BYOD devices 2- WLC/RRM/Bandselect/VideoStream: Automate, simplify, & Reduce the load on your IT Wireless Management. 3- AP have purpose-built IC WiFi chipset to afford these technologies. 4- ISE: For one-policy implementation across devices 5- Prime Infrastructure: One Management Optimized multicast to unicast Stateful fail-over Sub second failover to hot standby controller AVC Classification and policies on 1000+ Apps Prime Infrastructure Visibility MSE and Thinksmart Analytics that aid business decisions Meaningful Interaction with your customers

Detect | Classify | Locate | Mitigate Cisco CleanAir Technology Industry’s First Chip Level Proactive interference mitigation CleanAir Radio ASIC Detect Wi-Fi and non-Wi-Fi interference sources Assess impact to Wi-Fi performance Proactively change channels when interference occurs Monitor air quality 100 63 20 97 90 35 Detect | Classify | Locate | Mitigate Unique alert per interference, not per AP Fully integrated into Radio Resource Monitoring(RRM) and with location analytics Detects Off-channel interference, radar jammer 3rd security monitoring module offers a cost-effective management of full spectrum

Cisco ClientLink 2.0 Technology Advanced BeamForming improves wireless client performance BEFORE Manual RF Management AFTER Beam Directed Towards Client Resulting in a Consistent Experience and Better Performance Beacon Rate Connection Rate 450 Mbps 300 Mbps 150 Mbps 65 Mbps 6 Mbps 450 Mbps 300 Mbps 150 Mbps 65 Mbps 6 Mbps Similar to more or less bars when you’re close or far away from the cell tower. Less bars = your data rate goes down. Similarly with WiFi the closer you are to the AP the better performance. Cisco AP, even when you’re further away from AP you still get better performance than anyone else in the industry; i.e. best possible throughput at any point. Highest data-rates for 802.11a/g/11n clients over the coverage area leads to: Lower coverage holes Transferring data at higher throughput conserves client battery life of smartphone 100+ clients supported per radio in hardware

Cisco VideoStream Technology Wired-Like Video Delivery over Wireless BEFORE Manual RF Management AFTER Dynamic RF Management Global Enterprise Without VideoStream (VS): ESPN or CEO’s address get same priority and can have issues on your wireless network. You would want to prioritize the CEO’s address to show in best possible way over your wireless network. CEO Meeting M&A Negotiation Sports Event CEO Meeting M&A Negotiation Sports Event Cisco supports 40+ Videostream sessions per Access Point 2600, 3600 (2x competition) Tested for 30x Less Bandwidth Consumed

AP3600: Investment Protection 802.11ac Wave 1 Module Availability in 1HCY13 Field upgradable 802.11ac module 5 GHz radio module, 802.11ac Wave 1 1.3 Gbps PHY/~900 Mbps MAC (throughput) Three spatial streams, 80 MHz, 256 QAM AP3600 maintains dual-band support 2.4 and 5 GHz Supporting b/g/n on 2.4 GHz base radio, a/n on 5 GHz base radio, and AC on 5 GHz module radio CleanAir and ClientLink 2.0 maintained 15.4W < Power requirement with the 802.11ac module installed < 20W 11ac module (3rd radio): 3x3:3 (5 GHz). NTE: $500 Self contained power, interface, antenna.

802.11ac D3.0 balloted 802.11ac Dx.0 ratified Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 2011 2012 2013 2014 Author's Original Notes: Estimates only 80 MHz 256QAM 1-3 SS Wave 1 certified 160 MHz 1-4 SS MU-MIMO? Wave 2 certified 9

Cisco Aironet 802.11n + 802.11ac Access Point Portfolio Best in Class Mission Critical 3600 Enterprise Ready 2600 High Client Density HD Video/VDI Investment Protection 11ac Migration Comprehensive Security TELEWORKER Ready Any Device / BYOD Optimized Client Scalability RF Interference Mitigation 1600 600 Enterprise-class Performance Voice/Video/Multimedia Basic Connectivity Deployment Flexibility SP WiFi, Emerging, Teleworker

redundancy ports connected via standard ethernet Wireless Controller Redundancy No SSID outage with stateful switch over New in 7.3 5500, WiSM2, 7500, 8500 Series Backup Controller (Requires L2 Adj.) redundancy ports connected via standard ethernet 5508 $20,000 WiSM2 $25,000 Flex7500 $40,000 Active WLC Hot-Standby WLC 8500 $60,000 2500 (7.4 Release) $2,000 7.3 support the following controller for redundancy (5500, WiSM2, 7500, and 8500) Redundant controller is attached back-to-back to Primary active WLC via Layer2 link. Standby Controller picks up all the configurations from Primary controller. Even if your WLC dies, you don’t lose your SSID. Secondary controller is at a reduced price for the base HW. 1:1 wireless stateful failover capability in appliance and integrated controllers SSID is always beaconing (even after primary controller is down) Subsecond WLAN network convergence

Cisco’s Application Visibility & Control New in 7.4 Identify standard ports, L7 Deep Packet Inspection and Heuristics BEFORE Application View & Control based on Firewall sessions AFTER Network Based Application Recognition - NBAR2 Deep Packet Inspection and App ID Wireless LAN Controller Visibility to the port level interaction but not the applications running within the port Netflix = 50% YouTube = 15% WebEx = 10% Citrix = 9% exchange= 8% HTTP = 75% SMTP = 15% FTP = 2% Telnet = 1% SNMP = 3% Traffic First Generation Firewall NBAR2 LIBRARY Deep Packet inspection POLICY Packet Mark and Drop Netflow v9 export Typically you’ll need to put Firewall behind the Controller to provide you the kind of data being used on your WLAN. In 7.4 adding NBAR2 library (1000 type applications) to WLC to do DPI and provide you much more insight into what applications are being used per VLAN, per SSID, per Client. This comes at no additional charge. This is done in SW. New apps. do not require that we re-compile; rather just add the application signature. Classify 1000+ applications with sub-classification within applications: e.g. Lync – desktop share, video/voice, file transfer Apply Granular policies - Per SSID, Device, Campus, Building, Floor Real-time troubleshooting on the Wireless LAN Controller Wired-wireless consistent export to standard netflow collectors

Controller Product Portfolio New Multi-Architecture Capable 8500 (SP Wi-Fi) WiSM-2 (Campus) 5500 (Campus) Features/Performance 2500 (Branch) SRE– WLCM2 FlexConnect New Flex 7500 Top: Broadest WLC portfolio in the industry: 2500: Branch 5500: Campus/WiSM2 8510: SP-WiFi/Large enterprise; 6000 AP and 64,000 clients. Deployed in Network Core or SP network. Bottom: Virtual Controller/7500: Support thousands of branches. 7500 in data center or VC for Controller-less architecture. Virtual Controller Scale (Number of Clients, APs) Roadmap is highly confidential and reflects current plan. Subject to change without notice

Mobility Services Engine (MSE) Overview Advanced Spectrum Capability Indoor Location / Context-Aware System wide Interferer details Event correlation Visualization of interferer zone of impact Interferer notification Track & Trace interferers & Layer 1 threats Real time location tracking Tracking probing & associated clients, RF tags & wired endpoints Geo fencing / Zone based alerts Location Analytics Wireless Intrusion Prevention Mobile Concierge* Detection & Mitigation of security penetration attacks Detection & Mitigation of denial of service attacks Capability supported in Monitor Mode & data serving AP (Enhanced Local Mode -ELM) Detecting Presence Delivering location based services Core component of our Portfolio; 1 RU, can place in network Core to manage multiple locations with one box. Needed: Better Birds eye view on what’s happening in your network (Spectrum Usage & Interfrence): e.g. PCI (Retail), HIPPA (Healthcare) for wIPS Location tracking: e.g. RF ID Mobile Concierge: coupling business services with Location. CleanAir: Is further improved on. Physical & Virtual Appliance MSE tracks up to 50,000 endpoints & supports 10,000 Monitor Mode or ELM AP * Roadmap © 2009, Cisco Systems, Inc. All rights reserved. Presentation_ID.scr

Analytics that aid business decisions New in 7.3 Which area did people spend time at? Peak times in the store? New or repeat customers? Most frequently used paths in the venue % of shoppers who walk by without entering

FY13 Roadmap - WNG WLAN Infrastructure Cisco Confidential—NDA Only Committed In Planning May 2012 September 2012 Q1 CY13 Q2 CY13 Release 7.2MR1 7.3 7.4 8.0 AP 2600 802.11n G2 AP1600 802.11n G2 AP3600 11ac module Outdoor AP Internal Antenna Outdoor AP Uni Band Antenna AP3600 Security Module Mid-Market 1 Box Solution Outdoor AP Honeywell integration WLC 8500 Target customer - SP Application visibility and control (AVC) IPv6 infrastructure Profiling and Policy on WLC Virtual Controller Bonjour Gateway 802.11r L2 Fast Roaming Scale Flex7500 6K APs WLAN Infrastructure Unified Access Voice Enterprise Certification** HA – Client SSO HA - AP SSO HA Licensing HA SSO over any L2 connection Scale WLC 2500 From this point on, we can be a bit more interactive with audience. Virtual Controller: Improving the flexibility of deployment and ease of use. Statefull Switchover (SSO) & High-Availability (HA) with reduced pricing: Increased reliability. Wired-like experience. UA: Umbrella of AP, WLC, Switches (up to 6k). Similar to what Borderless Network was a few years ago. NGWC is now called Converged access and is a deployment mode of Wired & Wireless. 8.0 Full IPv6 on WLC, AP, MSE, & Prime Native Profiling & Policy management on WLC for mid-market (is that a cheaper type of ISE???) HA enchanced with Client SSO. Client Sessions are not impacted even if WLC fails. ISE -Flex integration Flex / Local Mode parity with ISE FlexConnect Split Tunneling AP-based firewall HA Licensing, N:1 802.11r – Flex Modes LAG on Flex7500, WLC 8500, WLC 2500 802.11w Mgmt Frame Protection Bi-directional rate-limiting Local and FlexConnect support on RAP PMIPv6 – AP-Based Voice/Video: 11n CAC Guest Anchor on WLC2500 FIPS, CC, UCAPL PMIPv6 on WLC **Voice Enterprise Certification targeted on a special release – FCS beyond 7.4

FY13 Roadmap - WNG Mobility Services Cisco Confidential—NDA Only Committed In Planning May 2012 September 2012 Q1 CY13 Q2 CY13 S/W Release 7.2MR1 7.3 7.4 8.0 Unified Access – WLAN Infrastructure High Availability Improved location accuracy for CleanAir Mobile Concierge aWIPS Prevention Virtual Appliance Location Analytics II MSE 3355 Scaling Location Analytics I Scalability Improvements FIPS, CC, UCaPL Automated Switched port tracing MSE ELM Signature Parity Global Forensics Location Support for FLEX Better Rogue Classification, Containment, Detection AP 3600 Security Module Rogue Contain Enhancements II Rogue Detection Enhancements Better Attack Mitigation for aWIPS (Location) aWIPS Rogue Contain Enhancements Channel Scanning Optimization WiFi Direct detection & Classification New Signatures PI releases NCS 1.1 (7.2, 7.2 MR1) PI 1.2 (7.3 Support) PI 2.1 (7.4 Support) PI 2.2 (8.0 Support) Northbound REST API AVC, Day 1 Device Support MSE Virtual Appliance (in 7.3 introduced the 3355; better scaling & things like advanced wISP capability) Mobile Concierge: Will address in next slides PRIME Address Prime in the separate PRIME session. Branch Router Mgmt (ISR / ASR) Prime 3rd Party Support IPv6 Support Mobile Concierge Support IPv6 Support Prime 360 Experience Guest Services Rougue Rules Customization Wired Config & Image Management FIPS, CC, DoD Certification Reporting Enhancements ISR / ASR Mgmt Integration Next Gen GUI FIPS Certification Support One Box Solution