Cisco DNA 软件 SD-WAN 和路由表

根据目的 IP 地址将数据包路由到特定的下一跳 IP 地址，从而实现高可用性。

使您的开发和运营团队能够轻松地持续交付应用。

利用模型驱动的可编程性，您可以自动配置和控制网络设备，由思科 vManage 管理。

配置 MACsec，用于对支持 MACsec 的设备之间的数据包进行身份验证和加密，由 Cisco Catalyst Center 设备进行管理。

借助模型驱动的遥测，您可以通过流式传输网络设备中的数据来监视网络，并持续提供对运行状况统计信息的近乎实时的访问。

VRF、NAT、OSPF、EIGRP、DNS、DHCP、BGP、IS-IS。

MACsec-128、VPN、ZBFW、PKI、ACL、思科 Umbrella 连接器、Snort IPS。

基本服务质量 (QoS)（分类、策略管制、重新标记、调度）、PBR、AVC、NBAR、IPSLA、DPI 可视性 (Full Flexible NetFlow)。

思科统一边界要素 (CUBE) 连接器。

TACACS+、NETCONF、AAA、RESTCONF、gRPC、YANG。

在日常维护期间支持运营连续性和保持可用性，以及执行灾难恢复 (VRRP/HSRP)。

帮助确保硬件和软件的真实性，建立供应链信任，并大幅缓解会损坏软件和固件的中间人攻击。

路由器之间使用组播，以便它们跟踪相互之间需要转发哪些组播数据包，以及哪些数据包需要转发到直连局域网。

Support operational continuity, and maintain availability during routine maintenance and disaster recovery (VRRP/HSRP).

VRF、思科 TrustSec（SGT、SGACL）。

BGP、HSRP、IS-IS、MPLS、VPLS、GLBP。

MACsec-256、ALG for ZBFW、VASI、URL 过滤、AMP 和 Threat Grid 连接器、思科 Umbrella 云应用发现（仅可视性）、SSL 代理。

SMU 补丁、SGT、ETA、ISSU、mDNS Bonjour、EPC、Web 缓存。

SRST，支持语音模块。

基本广域网优化、基本安全和灵活的拓扑（中心和分支、全网状/部分网状）、动态路由、VNF 生命周期管理。

在云或本地部署的单一集中管理控制台，用于管理资产清单、发现、拓扑、站点自动化、网络设置、设备凭证更新、完整性验证、模板编程、报告和即插即用 (PnP) 应用。支持物理和虚拟分支机构自动化、0 日、2 日、N 日的简化工作流程。在 ENCS 和思科 UCS E 系列、思科 VNF 协调（ISRv、vEdge、vASA、NGFW 和 vWAAS）上进行 NFV 调配。

具有应用感知能力的企业防火墙、带签名更新的 Snort IPS、自动化思科 Umbrella DNS 监控。

前向纠错和数据包复制。

此下一代流监控技术可优化网络基础设施、降低运营成本、改进容量规划，以及检测安全事件。

具备由软件服务支持的许可证移植，可确保软件许可证能够不受硬件升级和更换影响，始终保持最新状态，而且无需支付额外费用。

重叠隧道功能在 IPv4 数据包中封装 IPv6 数据包，以在 IPv4 基础设施（核心网络或互联网）上进行传输。

根据业务意图为应用创建和分配特定于网络或设备的策略，并且可以动态调整这些策略以保障服务（即自适应 QoS）。

通过版本控制自动管理软件升级，并能够在整个网络中部署配置。

有助于在任何硬件设备（思科设备或第三方设备）上实现分支机构虚拟化。无需升级硬件，即可支持现有分支机构迁移。

控制面板包括每个网络设备或客户端运行状况的整体视图、每个网络设备的运行状态和对任何通信问题的补救建议、网络中所有应用的整体运行状况，以及一些专门针对业务相关应用问题和相应补救建议的板块。

使网络设备能够发送近乎实时的遥测信息。Full Flexible NetFlow、EEM、路由器监控（基本）、VNF 监控（ISRv、vWAAS）、ENFV（ENCS、UCSE）、拓扑、预定义报告和自定义阈值。

Cloud onRamp for IaaS and SaaS.

SD-WAN 实施被限制为五十 (50) 台或更少的设备，而 VLAN 被限制为两 (2) 个。

SD-WAN 实现和 VLAN 实现均不受限制。

提供有关故障关联、客户交叉基准评估和应用性能评分的实时信息。基于情报数据（应用/带宽预测、分支机构扩展分析以及策略更改假设方案）进行未来规划。对网络中运行的应用进行体验质量评分，从而根据您网络上的最新更改来量化性能。

面向 IaaS 和 SaaS 的 Cloud onRamp。

面向主机托管的 Cloud onRamp。

思科 AMP、URL 过滤、思科 Umbrella 应用发现。

Cisco Umbrella Insights and Cisco Threat Grid.

软件支持服务还可在订用软件堆栈中提供许可证可移植性和持续创新，包括 24 小时 TAC 支持服务。

TAC 提供的智能网络支持服务、24 小时硬件和网络软件堆栈支持。

Monitor and re-direct traffic. License is required for both manual/CLI configuration or automation through Cisco Catalyst Center.

Packet capture for analysis. License is required for both manual/CLI configuration or automation through Cisco Catalyst Center.

Gain application visibility and control through Next-Generation Network-Based Application Recognition. License is required for both manual/CLI configuration or automation through Cisco Catalyst Center.

Provides a single integrated solution for comprehensive lifecycle management of the wired or wireless access, campus, and branch networks, and rich visibility into end-user connectivity and application performance assurance issues.

Packet capture for analysis. License is required for both manual/CLI configuration or automation through Cisco Catalyst Center.

Gain application visibility and control through Next-Generation Network-Based Application Recognition. License is required for both manual/CLI configuration or automation through Cisco Catalyst Center.

Provides a single integrated solution for comprehensive lifecycle management of the wired or wireless access, campus, and branch networks, and rich visibility into end-user connectivity and application performance assurance issues.

Gain application visibility and control through Next-Generation Network-Based Application Recognition. Does not require Cisco Catalyst Center. Not supported on Cisco Catalyst 9200 Series switches.

Encrypted Traffic Analytics detects malware within encrypted traffic. Manufacturer user description validates the IoT device, extends trust, and applies policy to the device. Does not require Cisco Catalyst Center. Not supported on Cisco Catalyst 9200 Series switches.

Gain complete security and threat containment, managed by Cisco DNA Center.

Detect malware within encrypted traffic. License is required for both manual/CLI configuration or automation through Cisco Catalyst Center.

Enables policy-based automation with secure segmentation, complete visibility, and delivery of new services quickly on SD-Access devices, managed by Cisco DNA Center only.

Enhanced limited lifetime hardware warranty.

Software Support Service that also offers license portability and ongoing innovation in the software stack, including 24-hour TAC support.

Automated provisioning of a new Cisco switch using the Zero Touch Provisioning functionality built into the switch.

Provides detailed reporting with full URL addresses, user and network identity, allow or block actions, plus the external IP address. Also permits content filtering by category or specific URLs to block destinations.

Provides app discovery, details and risk information, plus the ability to block the use of offensive or inappropriate cloud applications in the work environment. Apply granular controls to block specific user activities (e.g., file uploads to Box and Dropbox, attachments to Gmail, post/shares on Facebook, Twitter, etc.).

Prevent the download of specific file types via policy. Block risky files (executables which may cause instability, risk data leaks) or block media/video files (bandwidth hogs, possible copyright issues).

Advanced anti-virus and anti-malware protection powered by Cisco Talos threat intelligence. Cisco’s Advanced Malware Protection engine searches billions of events per day and blocks over 20 billion threats each day.

Advanced file sandboxing using static and dynamic threat intelligence to detect and report on malicious files that make it through Cisco's AMP inspection.

Provides visibility and control for Internet traffic across all ports and protocols, IPsec tunnel support for secure traffic routing to cloud infrastructure, automated reporting logs, and customizable IP, port, and protocol policies displayed in a secure dashboard.

思科 Umbrella Insights 和思科 Threat Grid