WIXLIB

CREDANTData Security Partner GuideFebruary 2012 Series

PrefaceWho Should Read This GuideHow to Read CommandsThis Cisco Smart Business Architecture (SBA) guide is for people who fill avariety of roles:Many Cisco SBA guides provide specific details about how to configureCisco network devices that run Cisco IOS, Cisco NX-OS, or other operatingsystems that you configure at a command-line interface (CLI). This sectiondescribes the conventions used to specify commands that you must enter. Systems engineers who need standard procedures for implementingsolutions Project managers who create statements of work for Cisco SBAimplementationsCommands to enter at a CLI appear as follows:configure terminal Sales partners who sell new technology or who create implementationdocumentationCommands that specify a value for a variable appear as follows: Trainers who need material for classroom instruction or on-the-jobtrainingCommands with variables that you must define appear as follows:ntp server 10.10.48.17class-map [highest class name]In general, you can also use Cisco SBA guides to improve consistencyamong engineers and deployments, as well as to improve scoping andcosting of deployment jobs.Commands shown in an interactive example, such as a script or when thecommand prompt is included, appear as follows:Release SeriesLong commands that line wrap are underlined. Enter them as one command:Cisco strives to update and enhance SBA guides on a regular basis. As wedevelop a new series of SBA guides, we test them together, as a completesystem. To ensure the mutual compatibility of designs in Cisco SBA guides,you should use guides that belong to the same series.All Cisco SBA guides include the series name on the cover and at thebottom left of each page. We name the series for the month and year that werelease them, as follows:month year SeriesFor example, the series of guides that we released in August 2011 arethe “August 2011 Series”.You can find the most recent series of SBA guides at the following sites:Customer access: http://www.cisco.com/go/sbaPartner access: http://www.cisco.com/go/sbachannelFebruary 2012 SeriesRouter# enablewrr-queue random-detect max-threshold 1 100 100 100 100 100100 100 100Noteworthy parts of system output or device configuration files appearhighlighted, as follows:interface Vlan64ip address 10.5.204.5 255.255.255.0Comments and QuestionsIf you would like to comment on a guide or ask questions, please use theforum at the bottom of one of the following sites:Customer access: http://www.cisco.com/go/sbaPartner access: http://www.cisco.com/go/sbachannelAn RSS feed is available if you would like to be notified when new commentsare posted.Preface

Table of ContentsWhat’s In This SBA Guide. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1Overview of Cisco Borderless Networks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2Business Benefits. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3CREDANT Product Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4CREDANT Deployment Workflow. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5How to Contact Us. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7ALL DESIGNS, SPECIFICATIONS, STATEMENTS, INFORMATION, AND RECOMMENDATIONS (COLLECTIVELY, "DESIGNS") IN THIS MANUAL ARE PRESENTED "AS IS," WITH ALL FAULTS. CISCO AND ITS SUPPLIERSDISCLAIM ALL WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OFDEALING, USAGE, OR TRADE PRACTICE. IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THE DESIGNS, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCHDAMAGES. THE DESIGNS ARE SUBJECT TO CHANGE WITHOUT NOTICE. USERS ARE SOLELY RESPONSIBLE FOR THEIR APPLICATION OF THE DESIGNS. THE DESIGNS DO NOT CONSTITUTE THE TECHNICALOR OTHER PROFESSIONAL ADVICE OF CISCO, ITS SUPPLIERS OR PARTNERS. USERS SHOULD CONSULT THEIR OWN TECHNICAL ADVISORS BEFORE IMPLEMENTING THE DESIGNS. RESULTS MAY VARYDEPENDING ON FACTORS NOT TESTED BY CISCO.Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposesonly. Any use of actual IP addresses in illustrative content is unintentional and coincidental. Cisco Unified Communications SRND (Based on Cisco Unified Communications Manager 7.x) 2012 Cisco Systems, Inc. All rights reserved.February 2012 SeriesTable of Contents

What’s In This SBA GuideAbout SBACisco SBA helps you design and quickly deploy a full-service businessnetwork. A Cisco SBA deployment is prescriptive, out-of-the-box, scalable,and flexible.About This GuideThis additional deployment guide includes the following sections: Business Overview—The challenge that your organization faces.Business decision makers can use this section to understand the relevance of the solution to their organizations’ operations.Cisco SBA incorporates LAN, WAN, wireless, security, data center, applicationoptimization, and unified communication technologies—tested together as acomplete system. This component-level approach simplifies system integrationof multiple technologies, allowing you to select solutions that solve yourorganization’s problems—without worrying about the technical complexity.For more information, see the How to Get Started with Cisco ons/Enterprise/BorderlessNetworks/Smart Business Architecture/SBA Getting Started.pdf Technology Overview—How Cisco solves the challenge. Technicaldecision makers can use this section to understand how the solutionworks. Deployment Details—Step-by-step instructions for implementing thesolution. Systems engineers can use this section to get the solution upand running quickly and reliably.This guide presumes that you have read the prerequisites guides, as shownon the Route to Success below.Prerequisite GuidesENTYou are HereBNDesign OverviewInternet EdgeDeployment GuideCisco Data SecurityDeployment GuideCREDANT Data SecurityPartner GuideRoute to SuccessTo ensure your success when implementing the designs in this guide, youshould read any guides that this guide depends upon—shown to the leftof this guide on the route above. Any guides that depend upon this guideare shown to the right of this guide.For customer access to all guides: http://www.cisco.com/go/sbaFor partner access: http://www.cisco.com/go/sbachannelFebruary 2012 SeriesWhat’s In This SBA Guide1

Overview of CiscoBorderless NetworksThe Cisco Smart Business Architecture—Borderless Networks forEnterprise Organizations offers partners and customers valuable networkdesign and deployment best practices; helps organizations to deliver superior end-user experiences using switching, routing, security and wirelesstechnologies; and includes comprehensive management capabilities for theentire system. Customers can use the guidance provided in the architectureand deployment guides to maximize the value of their Cisco network in asimple, fast, affordable, scalable and flexible manner.Figure 1 - CREDANT Data Security Integrated into the SmartBusiness Architecture—Borderless Networks for EnterpriseOrganizationsFebruary 2012 SeriesModular design means that technologies can be added when the organization is ready to deploy them. Figure 1 shows how the CREDANT data security solution integrates into the Borderless Networks architecture.This guide is part of a comprehensive data security system designed tosolve customers’ business problems, such as protecting intellectual property and sensitive customer information assets, and meeting compliancerequirements. The guide focuses on Cisco’s partnership with CREDANTTechnologies to deliver affordable endpoint encryption as a part of Cisco’sbroader data security system.Overview of Cisco Borderless Networks2

Business BenefitsThe globalization of information has forever changed the security landscape.Information is exchanged in less than a millisecond. Financial services companies process transactions involving billions of customer financial records.Healthcare providers store and access information on life-threateningillnesses and confidential patient records. For better or worse, our new, moredigitized world exposes sensitive corporate, personal, and employee datato loss or theft at the corporate endpoint. As a result of this profound shift incomputing, the regulatory and compliance landscape has evolved as fast asthe technological landscape.In the United States, Canada, and Europe, national regulatory standardsincreasingly supplement local reforms as the government pressures industries and businesses of all sizes to protect consumers’ personal information. Inmany cases, the penalties for non-compliance can be crippling. No companyor industry is exempt from data tampering. And without proper measures,none can escape the risk of fines, loss of reputation, or possible bankruptcy.Data encryption isn’t just a best practice. It is an imperative for survival in theglobal, digitized marketplace. Companies failing to meet their compliancerequirements and adequately protect against a data breach face fines andother costs extending into the tens of millions of dollars. Yet every organization is unique. The right combination of data encryption solutions must bedefined by the existing infrastructure, regulatory requirements and business practices. By partnering with Cisco and CREDANT, organizations canbegin to adopt a holistic approach to data security—encrypting data on thenetwork, at the gateway, via VPN, or at rest at the endpoint.February 2012 SeriesProtecting sensitive information is critical, and with CREDANT, organizations gain flexibility in how they choose to protect sensitive information.Encryption technology is built on well established standard algorithms, butthe solutions built on that technology include a variety of software- andhardware-based encryption options to meet different business needs.As there is a wide range of options to secure critical corporate data, thereis also a wide range of criteria to consider when deciding how to bestprotect your business. Power users or developers tend to be very sensitive to even the smallest impact on system performance. Less technicallysavvy end users will likely inundate the help desk with calls for assistanceif they encounter a solution that forces them to change the way they work.Executives may carry more sensitive information than end users and thusrequire different security policies. Traveling employees naturally incur morerisk of data loss for a number of reasons than do employees working on adesktop system in a secure office. These are just a few of the criteria thatorganizations must navigate when choosing the right solution or solutionsfor their business.Business Benefits3