WEBVTT

1
00:00.000 --> 00:06.480
So now that we've discussed the different umbrella components and how the

2
00:06.480 --> 00:07.120
traffic is

3
00:07.120 --> 00:12.080
passed between those components, let's focus in a little bit here on the Cisco

4
00:12.080 --> 00:13.240
Secure Access

5
00:13.240 --> 00:18.080
Service Edge or SASE architecture.

6
00:18.080 --> 00:21.890
This is important to understand, both from the standpoint of what is the

7
00:21.890 --> 00:22.720
architecture

8
00:22.720 --> 00:28.130
itself and how do the Cisco components fit into that architecture and then we

9
00:28.130 --> 00:28.800
'll talk

10
00:28.800 --> 00:33.530
about the different advantages that the architecture brings to the enterprise
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

10
00:28.800 --> 00:33.530
about the different advantages that the architecture brings to the enterprise

11
00:33.530 --> 00:34.280
network.

12
00:34.280 --> 00:41.720
So let's go ahead and jump in and take a closer look at the SASE architecture.

13
00:41.720 --> 00:47.090
So to begin, let's talk about how Cisco themselves actually define their

14
00:47.090 --> 00:48.400
architecture.

15
00:48.400 --> 00:55.340
And the way they describe it is it's combining our VPNs, our SD-WAN services,

16
00:55.340 --> 00:56.840
and our cloud-based

17
00:56.840 --> 01:01.080
security services into one common architecture.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

17
00:56.840 --> 01:01.080
security services into one common architecture.

18
01:01.080 --> 01:06.750
Of course, the cloud-based security services we're referring to here is

19
01:06.750 --> 01:07.080
umbrella.

20
01:07.080 --> 01:10.990
But before we actually get into all of the different Cisco components, let's

21
01:10.990 --> 01:12.000
talk about

22
01:12.000 --> 01:15.320
the SASE architecture itself.

23
01:15.320 --> 01:19.000
And this has been built around three major principles.

24
01:19.000 --> 01:21.080
We'll break these down one by one.

25
01:21.080 --> 01:24.720
The first one is the ability to connect.

26
01:24.720 --> 01:29.290
And connect, just like it sounds, is simply referring to connecting your

27
01:29.290 --> 01:30.360
networks to the
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

27
01:29.290 --> 01:30.360
networks to the

28
01:30.360 --> 01:35.400
various SAS applications out there on the web.

29
01:35.400 --> 01:39.400
Of course, connecting basically involves your networking.

30
01:39.400 --> 01:44.620
So this is going to be things like your LAN and WAN, SD-WAN itself, which of

31
01:44.620 --> 01:45.480
course is

32
01:45.480 --> 01:47.640
part of WAN.

33
01:47.640 --> 01:55.450
So remote access for remote users and ZTN or Zero Trust networking, all

34
01:55.450 --> 01:56.680
different ways

35
01:56.680 --> 02:02.280
that we can connect our enterprise out to these applications.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

35
01:56.680 --> 02:02.280
that we can connect our enterprise out to these applications.

36
02:02.280 --> 02:07.160
Of course, we don't want to allow that connection to just happen without having

37
02:07.160 --> 02:08.080
control over

38
02:08.080 --> 02:09.080
it.

39
02:09.080 --> 02:12.720
So the second principle is to have control.

40
02:12.720 --> 02:17.980
And this is sort of right out of the definition for SASE, which is we want that

41
02:17.980 --> 02:18.840
control to

42
02:18.840 --> 02:24.160
be simplified and we're going to be doing it through policy enforcement.

43
02:24.160 --> 02:25.160
How?

44
02:25.160 --> 02:29.170
Well, we're going to do things like segmentation to keep traffic separate and

45
02:29.170 --> 02:30.000
isolated only
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

46
02:30.000 --> 02:32.800
with the components it needs to speak with.

47
02:32.800 --> 02:35.760
We already talked about DNS security.

48
02:35.760 --> 02:37.520
That's going to be part of this as well.

49
02:37.520 --> 02:39.840
Of course, the firewall.

50
02:39.840 --> 02:44.280
Also, the cloud access security broker.

51
02:44.280 --> 02:47.720
Remember we talked about that back during the introduction.

52
02:47.720 --> 02:53.240
This is what provides that visibility over SASE usage.

53
02:53.240 --> 02:59.340
And remember, it also helps stop that usage of shadow IT or unauthorized

54
02:59.340 --> 03:01.480
devices and services.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

54
02:59.340 --> 03:01.480
devices and services.

55
03:01.480 --> 03:08.200
This also includes the secure web gateway and possibly the use of encryption.

56
03:08.200 --> 03:13.000
All of this together, controlling what is allowed to talk to what in a very,

57
03:13.000 --> 03:13.760
very secure

58
03:13.760 --> 03:18.280
fashion using all of these different components.

59
03:18.280 --> 03:21.920
And our final principle is to converge.

60
03:21.920 --> 03:25.640
This is sort of going with this concept of combining here.

61
03:25.640 --> 03:30.480
The idea is we want to take our network and security, connect it all to a multi
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

61
03:25.640 --> 03:30.480
The idea is we want to take our network and security, connect it all to a multi

62
03:30.480 --> 03:32.120
-cloud environment

63
03:32.120 --> 03:38.520
and be able to do it to a scale large enough to handle enterprise networks.

64
03:38.520 --> 03:42.880
Part of the simplification and advantage of this is being able to do this

65
03:42.880 --> 03:43.800
through a single

66
03:43.800 --> 03:44.800
vendor.

67
03:44.800 --> 03:49.360
Of course, in this instance, we're clearly talking about Cisco.

68
03:49.360 --> 03:52.400
We also want it to be able to be cloud managed.

69
03:52.400 --> 03:54.760
That's going to add to the simplification as well.

70
03:54.760 --> 03:58.630
We can do all of the management through a web interface, which we will see a

71
03:58.630 --> 03:59.200
little bit

72
03:59.200 --> 04:00.800
later.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

72
03:59.200 --> 04:00.800
later.

73
04:00.800 --> 04:06.820
It's being offered as a service, of course, as a service from Cisco, but SaaC

74
04:06.820 --> 04:07.720
itself is

75
04:07.720 --> 04:11.240
offered as a cloud-based service.

76
04:11.240 --> 04:16.310
This is part of what allows umbrella to leverage Cisco's global network to get

77
04:16.310 --> 04:16.840
all of those

78
04:16.840 --> 04:21.670
different signatures and basically do its job in a much more effective manner

79
04:21.670 --> 04:21.960
because

80
04:21.960 --> 04:25.880
of the information available to umbrella.

81
04:25.880 --> 04:29.940
So here we did give some specific examples of each of these, however,

82
04:29.940 --> 04:30.920
understand that
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

82
04:29.940 --> 04:30.920
understand that

83
04:30.920 --> 04:37.160
the three major principles are the connect, the control, and the convergence.

84
04:37.160 --> 04:41.400
So let's take a look at how Cisco implemented this into their architecture.

85
04:41.400 --> 04:45.920
Cisco's architecture actually has the following components.

86
04:45.920 --> 04:51.610
First, we have networking, which again is following right along with connecting

87
04:51.610 --> 04:51.720
.

88
04:51.720 --> 04:56.440
This is where we're going to include things such as SD-WAN, doing site-to-site

89
04:56.440 --> 04:57.680
VPNs, zero

90
04:57.680 --> 05:02.970
trust networking, four remote users, and various other components that connect
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

90
04:57.680 --> 05:02.970
trust networking, four remote users, and various other components that connect

91
05:02.970 --> 05:03.800
all of this

92
05:03.800 --> 05:05.320
together.

93
05:05.320 --> 05:08.320
Also of course, we have the security component.

94
05:08.320 --> 05:10.760
And we've already talked about several of these pieces.

95
05:10.760 --> 05:16.040
Of course, we have the cloud-delivered firewall, we have intrusion prevention,

96
05:16.040 --> 05:16.800
we've spoken

97
05:16.800 --> 05:22.300
about our DNS security, the cloud access security gateway, the secure web

98
05:22.300 --> 05:23.120
gateway, and

99
05:23.120 --> 05:28.000
of course, many other components, some of which we've already talked about.

100
05:28.000 --> 05:30.400
And finally, visibility.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

100
05:28.000 --> 05:30.400
And finally, visibility.

101
05:30.400 --> 05:33.880
We need to be able to see what's going on in our network.

102
05:33.880 --> 05:39.220
So part of the solution is going to be to offer end-to-end visibility, both

103
05:39.220 --> 05:40.600
into performance

104
05:40.600 --> 05:42.640
and security metrics.

105
05:42.640 --> 05:46.300
So we need to be able to see what's going on from the network perspective as

106
05:46.300 --> 05:47.800
well as security.

107
05:47.800 --> 05:51.720
We need to see if breaches are being attempted, if everything's being protected

108
05:51.720 --> 05:51.920
.

109
05:51.920 --> 05:56.880
We need to have reporting and metrics to be able to see what's happening.

110
05:56.880 --> 06:02.070
So to summarize some of the advantages here, what does SASE actually provide to
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

110
05:56.880 --> 06:02.070
So to summarize some of the advantages here, what does SASE actually provide to

111
06:02.070 --> 06:03.200
the enterprise

112
06:03.200 --> 06:04.360
network?

113
06:04.360 --> 06:09.860
First, it provides a cloud networking and security stack that's actually

114
06:09.860 --> 06:11.000
delivered as

115
06:11.000 --> 06:13.720
a service in the cloud itself.

116
06:13.720 --> 06:18.720
Again, in this case, Umbrella being delivered by Cisco.

117
06:18.720 --> 06:23.820
And the other cool thing is this doesn't have to act as a replacement for more

118
06:23.820 --> 06:24.800
traditional

119
06:24.800 --> 06:30.000
enterprise-grade solutions for things like security and overall networking.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

120
06:30.000 --> 06:35.640
It's going to work on top of those to add even more security to our network.

121
06:35.640 --> 06:39.640
So what are the things that it actually brings to the table that possibly we

122
06:39.640 --> 06:40.400
didn't have

123
06:40.400 --> 06:41.400
before?

124
06:41.400 --> 06:48.490
First, it establishes secure connections for accessing applications, data, and

125
06:48.490 --> 06:49.560
the internet

126
06:49.560 --> 06:55.390
for both remote workers, fixed locations, internet-facing devices, really any

127
06:55.390 --> 06:55.840
sort of

128
06:55.840 --> 06:59.240
workload that we have on our network.

129
06:59.240 --> 07:07.070
We also gain end-to-end observability to applications over any network or cloud
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

129
06:59.240 --> 07:07.070
We also gain end-to-end observability to applications over any network or cloud

130
07:07.070 --> 07:07.120
.

131
07:07.120 --> 07:13.440
It also offers optimized performance to ensure the fastest, most reliable, and

132
07:13.440 --> 07:15.000
secure connection

133
07:15.000 --> 07:16.840
to the cloud.

134
07:16.840 --> 07:22.830
It also implements Zero Trust Network Access by verifying user identities and

135
07:22.830 --> 07:23.640
checking

136
07:23.640 --> 07:29.720
device health to secure application access on a per-session basis.

137
07:29.720 --> 07:34.880
And finally, it's going to increase your organization's agility.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

137
07:29.720 --> 07:34.880
And finally, it's going to increase your organization's agility.

138
07:34.880 --> 07:40.380
It leverages the cloud to simplify your infrastructure and to achieve scal

139
07:40.380 --> 07:41.600
ability, which is what's

140
07:41.600 --> 07:44.200
going to give us that agility.

141
07:44.200 --> 07:49.120
So overall, SASE brings a lot of things to the table.

142
07:49.120 --> 07:54.870
And again, Umbrella is Cisco's overall product family that fits into this

143
07:54.870 --> 07:56.120
architecture to

144
07:56.120 --> 07:59.520
be our secure internet gateway.

145
07:59.520 --> 08:05.240
So in this video, we simply talked about the SASE architecture, what it's meant
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

145
07:59.520 --> 08:05.240
So in this video, we simply talked about the SASE architecture, what it's meant

146
08:05.240 --> 08:06.480
to do,

147
08:06.480 --> 08:10.210
what it's meant to provide to the enterprise network, the advantages that it

148
08:10.210 --> 08:10.760
brings to

149
08:10.760 --> 08:12.400
the enterprise.

150
08:12.400 --> 08:16.490
And of course, we talked about some of the Cisco components that fit into this

151
08:16.490 --> 08:17.360
architecture

152
08:17.360 --> 08:21.360
as part of the Cisco Secure Access Service Edge.

153
08:21.360 --> 08:27.760
Next, let's take a look at how Umbrella, as a secure internet gateway, fits in

154
08:27.760 --> 08:28.680
to our SD

155
08:28.680 --> 08:30.280
WAN architecture.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

155
08:28.680 --> 08:30.280
WAN architecture.

156
08:30.280 --> 08:34.960
So let's take a look at how we bring these features together in SD WAN.

157
08:34.960 --> 08:44.960
[BLANK_AUDIO]