Cisco ONE Advanced Security Customer Presentation SCRIPTED Customer

Cisco ONE Advanced Security Customer Presentation [SCRIPTED] Customer Presentation September 2016

How To Use This Presentation Remove This Slide Before Presenting • Use this presentation to pitch Cisco ONE Advanced Security offers to customers – primary audience - network buyer, secondary audience – security buyer • First, please read the section in this deck titled “Internal Only Important Sales Information: Must Read” • Familiarize yourself with the 4 buying programs and where to position Cisco ONE Advanced Security • There are 2 slides that provide the summary of the offers in section “ 2 slide overview” • The rest of the deck contains an introduction & 3 sections one each for Data Center, WAN/Edge & Access. • • • Each section is self-contained The slide “Security Disrupters and Trends” has 2 options – one high level and one detailed. Use one or the other depending on your audience You can present either all 3 sections together or specific sections of interest. Each slide is scripted. Use in slideshow mode for animations © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2

2 slide overview © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3

The Need For Simplicity In Security Sophisticated Attacks No Place Spared DC | WAN | Access | Endpoints Solution Complexity 30+ Solutions Deployed On Average Gaps In Solutions Customers Are Less Secure Than Ever © 2016 Cisco And/Or Its Affiliates. All Rights Reserved. Cisco Confidential © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 4

Cisco ONE Advanced Security Making It Easier To Protect The Inside And Perimeter Of Your Organization Data Center WAN and Edge Advanced Malware Protection Access Secure Remote Access And Client VPN Centralized Identity And Context Based Access Blocks Over 280 M+ Out Of Policy Websites Advanced Malware Protection Visibility, Compliance And MDM Support Virtualized Firewall Services Blocks Over 280 M+ Out Of Policy Websites Intrusion Prevention Simple Predefined Offers Intrusion Prevention Access To Latest Threat Intel. & Features © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VPN & Secure Endpoint Flexible© 2016 Cisco and/or its affiliates. All. Investment Protection rights reserved. Cisco Confidential 5 And Integrated For Midterm Upgrades

Option 1 Security Disrupters and Trends Customers Are Less Secure Than Ever 50+ Different Vendors Complexity Is Making Customers More Vulnerable Active Adversaries Aren’t Going Away Sophisticated, Distributed Attacks Global Cybercrime Market Is $450 B – $1 T Security Is A Board Level Concern Security Has Been A CIO Top 5 Spending Priority Since 2006 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 6

Option 2 Security Disrupters and Trends Increasing Attack Surface Dynamic Threat Landscape Complexity & Fragmentation Mobility/BYOD New Attack Vectors 3. 3 Devices Per Knowledge Worker 1 Malicious Traffic Visible On 100% Of Corporate Networks 5 Multiple Data Locations & Platforms Cloud 545 Cloud Apps Per Organization 2 Internet Of Things 15 Billion Devices By Sophisticated Cybercriminals Or Nation States Global Cybercrime Market: >$450 B 3 20151 Digitization Of Information $11 B Estimated Payment Card Fraud 4 Source: (1) Cisco IBSG (2) Skyhigh Networks Industry Report (3) CNBC (4) The Nilson Report Aug 2013 (5) Cisco 2014 Security Report (6) Ponemon Institute Study (7) Trust. Wave 2014 State of Risk Report 63% Of Surveyed Businesses Do Not Have A Fully Mature Method To Control And Track Sensitive Data 7 High Operational Costs & Lack Of Flexibility 54% Of Breaches Remain Undiscovered For Months 6 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7

Cisco Threat Centric Security Model Attack Continuum DURING BEFORE Network AFTER Detect Block Defend Discover Enforce Harden Endpoint Mobile Point in Time Scope Contain Remediate Virtual Cloud Continuous © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8

Let Us Look At Security In 3 Key Areas Data Center Branch – WAN & Edge Access © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9

Secure Data Center © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10

Why is Data Center Security So Important Without integrated security, our customer’s data centers are at risk 60% of data is stolen in HOURS START HOURS 85% 54% of data center intrusions aren’t discovered for of data center breaches remain undiscovered for WEEKS MONTHS 51% increase in companies reporting a $10 M loss or more in the last YEARS © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11

What If You Could Detect & Stop Known & Unknown Threats Get Visibility Into All Data Center Traffic: Users, Apps, Files & Threats Detect Stealth Malware & Other Malicious Activity Sooner Protect Against Multi-Vector Attacks Reduce complexity Across the Attack Continuum at Scale Continuous Business Operations Reduce Risk Data & Application Integrity Fast Recovery After Attack © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12

Cisco ONE Advanced Security: Threat Defense for Data Center Fire. POWER Services on Fire. POWER & ASA* Virtualized Advanced Firewall Services Next Generation Intrusion Prevention Block Out-of-policy Websites Advanced Malware Protection Cisco ONE Advanced Security: Threat Defense for Data Center Virtualize ASA Firewall for Segmented Policies With Security Context* Multi-vector Known & Unknown Threat Prevention & Mitigation With Sourcefire Next Gen IPS Detect, Block Stealth Malware And Zero Day Attacks With AMP Reputation & Category Based Filtering Of 280 M+ web sites In 80+ Categories © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential ** Security Context available on ASA platform (not Fire. POWER) | ASA Software image updates covered as part of Smart. Net | Fire. Sight Management Center is recommended and must be purchased separately 13

Cisco ONE Advanced Security: Threat Defense for Data Center Delivers Comprehensive Security Capabilities Cisco ONE Advanced Security: Threat Defense for Data Center Threat Centric Security Model Capabilities for Secure Data Center Fire. POWER Services on Fire. POWER & ASA Security Context* Attack Continuum Mitigate and protect data center resources across the attack continuum Multi-layered threat defense in a single device • Full contextual visibility of users, infrastructure, applications, and content • Multi-vector threat & breach detection with automated defense response • © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential *Security Context available on ASA platform (not Fire. POWER) 14

Customer Case Study Beachbody, LLC Challenge • Disparate network without standardized platform hindered growth • Isolated data, security, and telecom did not allow single-pane network view • Manual configuration and management of firewalls required intensive time Solution • Built a new data center with following security capabilities • Cisco ASA 5585 -X Next-Generation Firewall • Cisco Identity Services Engine • Cisco Trust. Sec Results • Reduces data center footprint by 50 percent • Automates management in virtualized environment with simplified rule set • Simplifies security management and operations, while leaving room for future growth © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15

Cisco ONE Advanced Security: Threat Defense for Data Center Subscriptions* Detailed Licenses Required Hardware (Purchased Separately) ASA 5585 -X Subscriptions Fire. POWER 9300/4100 Subscriptions • ASA 5585 -X Fire. POWER (IPS, URL, AMP) • Security Context • Fire. POWER 9300/4100 Fire. POWER Threat Defense (IPS, URL, AMP) • ASA 5585 -X Appliance • Fire. POWER 9300 or 4100 Appliance *Includes software support (signature updates, license © 2015 portability & access to on-going innovation) Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17

Cisco ONE Advanced Security Benefits Simple Predefined Offers Access to Latest Threat Intel. and Features © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Flexible Investment Protection for Midterm Upgrades © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18

Cisco ONE Adv. Security Subscription Savings Illustration For Data Center: Cisco ONE Software vs. A La Carte Annual Price for ASA 5585 S 10 F 10* $ 35, 000 $ 30, 000 $ 25, 000 $ 20, 000 $ 15, 000 $ 10, 000 $ 5, 000 $- 1 yr term A La Carte 3 yr term 5 yr term Cisco ONE Prices may vary for other platforms Upfront Savings with Cisco ONE Software © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19

Secure WAN & Edge © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 20

Why is Branch Security Important 80% Cloud/ Saa. S Digital Signage Thin Client Apps Io. T Remote Experts Rich Media Content Branch More Users 73% Growth in in mobile devices More Devices from 2014– 2018** 20– 50% Mobility Omni-channel Experience Guest Wi-Fi Of employee and customers are served in branch offices* More Apps Increase in Enterprise bandwidth per year through 2018** “By 2016, 30% of advanced targeted threats–up from less than 5% today–will specifically target branch offices as an entry point. ” Source: Gartner: How to Cost-Justify WAN Optimization *Tech Target, Branch Office Growth Demands New Devices, 2013 | **US The Census Bureau of the Department of Commerce, 2015 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 21

What If You Could Secure Connectivity Branch Threat Defense Allow secure remote access, site to site Defend against threats such as malware, intrusions & denialof-service attacks Protect data from eavesdropping, unauthorized access and tampering Meet regulatory compliance requirements Secure Direct Internet Access © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 22

Cisco ONE Foundation for WAN That Delivers Foundational Security Capabilities Cisco ONE Foundation for WAN Secure IWAN (DMVPN, Integrated Firewall, ACL & Trust. Sec) Capabilities for WAN Intelligent WAN Enable Secure hybrid WAN Secure connectivity across the WAN • Secure direct internet access • Basic VPN services & Perimeter Control • © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 23

Cisco ONE Advanced Security: Threat Defense for WAN & Edge Fire. POWER Services on ASA, Any. Connect Plus Remote Access Next Generation Intrusion Prevention Advanced Malware Protection Block Out-of-policy Web Sites Cisco ONE Advanced Security: Threat Defense for WAN & Edge Secure Remote Access & Client VPN With Any. Connect Plus Multi-vector Known & Unknown Threat Prevention & Mitigation with Sourcefire Next Gen IPS Detect, Block Stealth Malware And Zero Day Attacks with AMP Reputation & Category Based Filtering of 280 M+ websites in 80+ Categories © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential ASA Software image updates covered as part of Smart. Net Fire. Sight Management Center is recommended and must be purchased separately 24

Cisco ONE Advanced Security: Threat Defense for WAN & Edge Delivers Expanded Security Capabilities Cisco ONE Advanced Security: Threat Defense for WAN & Edge Threat Centric Security Model Fire. POWER Services on ASA Any. Connect Plus Attack Continuum Capabilities for Secure Branch Protect branch against targeted attacks Multi-layered threat defense in a single device. • Visibility Into Applications and Devices • Secure Mobile, Remote Access • Multi-vector threat & breach detection with automated defense response • © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 25

Customer Case Study Swanson Health Products Challenge • Protect business and sensitive customer information from network security threats • Help ensure security protections do not reduce productivity • Simplify security management Solution • Deployed Cisco ASA 5585 -X Adaptive Security Appliance with Next-Generation Firewall Services Results • Selectively gave employees access to different websites needed for jobs • Improved compliance with Payment Card Industry (PCI) security standards • Reduced help desk calls regarding website access by 50 percent © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 26

Cisco ONE Advanced Security Benefits Simple Predefined Offers Access to Latest Threat Intel. and Features © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Flexible Investment Protection for Midterm Upgrades © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 27

Cisco ONE Advanced Security: Threat Defense for WAN & Edge Subscriptions* Detailed Licenses Required Hardware (Purchased Separately) ASA 5500 -X Subscriptions • ASA 5500 -X Fire. POWER (IPS, URL, AMP) • Any. Connect Plus • ASA 5506, 5508, 5516, 5525, 5545, 5555 Appliance *Includes software support (signature updates, license © 2015 portability & access to on-going innovation) Cisco and/or its affiliates. All rights reserved. Cisco Confidential 28

Cisco ONE Adv. Security Subscription Savings Illustration For WAN & Edge WAN: Cisco ONE Software vs. A La Carte Annual Price for ASA 5555* 10% Savings with Cisco ONE Software $ 25, 000 $ 20, 000 $ 15, 000 $ 10, 000 $ 5, 000 $- 1 yr term A La Carte 3 yr term 5 yr term Cisco ONE *Prices may vary for other platforms Upfront Savings with Cisco ONE Software © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 29

Secure Access © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 30

It’s harder than ever to see who is on your network and what they are doing ? ? ? of surveyed organizations are not “fully aware” of the devices accessing their network of companies say their mobile devices were targeted by malware in the last 12 months 90% And you can’t protect 75% what you don’t see © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 31 © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 31

What If You Could Ensure Access From Anywhere Gain Greater Visibility Keep Users and Devices Secure Deliver a Solution That’s Easy to Use Enable secure access to the enterprise network for any user, from any device, at any location Provide IT with full visibility into users & devices Main Data & Application Integrity Through User and Device Protection Provide a seamless user experience without creating complexity © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 32

Cisco ONE Advanced Security: Policy & Threat Defense for Access Integrated Policy Based Secure Access Identity & Device Based Secure Access Endpoint Security Advanced Compliance Cisco ONE Advanced Security: Policy & Threat Defense for Access Centralized Identity Visibility, Compliance VPN & Secure & Context Based Access from Anywhere (ISE-Plus*) & MDM Support (ISE-Apex) Endpoint (Any. Connect Apex) © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential * Note: Cisco ONE Foundation is not a pre-requisite for Cisco ONE Advanced Security offer (Exception: ISE-Base is required for ISE Plus) 33

Cisco ONE Advanced Security: Threat Defense for Access Delivers Comprehensive Security Capabilities Cisco ONE Advanced Security: Policy & Threat Defense for Access Identity Services Engine (ISE) Plus & Apex Any. Connect Apex Threat Centric Security Model Attack Continuum Capabilities for Secure Access Secure Applications & Data Through Context Based Access based on Identity & Context (Device, Location) • Broad Visibility into Users, Devices & Traffic • End Device Compliance • © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 34

Customer Case Study Vy. Star Credit Union Challenge • To protect customer's financial information, Vy. Star needed a way to control network access • The secure connection had to be easy for employees-and fast Solution • Before allowing a device to connect, Cisco Identity Services Engine authenticates the user and device • It also checks that the device is running the latest security software • Employees find it easy to connect to the VPN using Any. Connect Secure Mobility Client Results • The network team has tight control over who and what can connect to the network • And connecting is just as fast and simple as it was before © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 35

Cisco ONE Advanced Security Benefits Simple Predefined Offers Access to Latest Threat Intel. and Features © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Flexible Investment Protection for Midterm Upgrades © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 36

Cisco ONE Advanced Security: Policy & Threat Defense for Access Subscriptions* Detailed Licenses Required Hardware (Purchased Separately) ISE and Any Connect Subscriptions • ISE Apex • ISE Plus • Any. Connect Apex • ISE appliance *Includes software support (signature updates & access© to on 2015 Cisco and/or its affiliates. All rights reserved. going innovation) Cisco Confidential 37

Cisco ONE Adv. Security Subscription Savings Illustration For Access: Cisco ONE Software vs. A La Carte Annual Price for Catalyst 2 K/3 K for 2 Qty of C 1* 10% Savings with Cisco ONE Software $ 1, 200 $ 1, 000 $ 800 $ 600 $ 400 $ 200 $1 yr term 3 yr term A La Carte 5 yr term Cisco ONE * Prices vary for other platforms © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 38

Advanced Services © 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 39

Services for Cisco ONE For Advanced Security Making it easier to consume the value of Cisco’s software Simplified Professional Services Specifically Designed To: • Quick-Start Services Adoption, Change Management, and Optimization Services • • Provide expert business guidance along with deep security expertise Help assess and analyze risks and evolve security strategy to stay ahead of industry disruptions Update and align security infrastructure to adopt BYOD, Cloud, and Io. T Improve efficiency and increase network security and reliability Support incident investigation and remediation with access to security investigators and engineers 24/7/365 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 40

Cisco ONE Advanced Security: Threat Defense for Data Center Protecting the Inside and Perimeter of Organization üAdvanced malware protection üIntrusion prevention üBlocks over 280 M+ out of policy websites üVirtualized firewall services AMP NG IPS URL Filtering Security Context Data Center Supported on ASA 5585 -X and Firepower 4100/9300 Appliance (purchased separately) Subscription includes software licenses & software support (software & signature updates, midterm upgrade credits) © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 42

Cisco ONE Advanced Security: Threat Defense for WAN & Edge Protecting the Inside and Perimeter of Organization üAdvanced malware protection üIntrusion prevention üBlocks over 280 M+ out of policy websites üSecure remote access and client VPN AMP NG IPS URL Filtering Anyconnect Plus WAN and Edge Supported on ASA 5506, 5508, 5516, 5525, 5545, 5555 Appliance (purchased separately) Subscription includes software licenses & software support (software & signature updates, midterm upgrade credits) © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 43

Cisco ONE Advanced Security Protecting the Inside and Perimeter of Your Organization üCentralized identity and context based access üVisibility, compliance and MDM support üVPN and secure endpoint ISE Plus ISE Apex Anyconnect Apex Access Supported on ISE physical/virtual appliance (purchased separately) Subscription includes software licenses & software support (software & signature updates, midterm upgrade credits) © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential © 2016 Cisco and/or its 44

Any. Connect – Way more than VPN Any. Connect features Basic VPN Advanced VPN Endpoint Compliance Inspection Service Enterprise Access Threat Protection Network Visibility Cisco Any. Connect Integration with other Cisco solutions ISR ASR / CSR Adaptive Security Appliance (ASA) Identity Services Engine (ISE) Cloud Web Security Services (CWS + WSA) Switches and Wireless Controllers Advanced Malware Protection Net. Flow Collectors © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 45

Introducing Cisco Identity Services Engine (ISE) A centralized security solution that automates context-aware access to network resources and shares contextual data Physical or VM Network Door Identity Profiling and Posture Access Policy Who Traditional What Guest Access When Where How Compliant Network Resources Cisco Trust. Sec® BYOD Access Role-Based Access Threat Containment ISE px. Grid Controller Context © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 46

Context Enhances Protection Across the Attack Continuum ISE When BEFORE Where Who How What DURING AFTER • Gain visibility into who and what is on your network • Provide threat context to network behavioral analysis • Grant access on a “need to know” basis • Contain through network elements and security ecosystem • Get better forensics and prepare for the next attack by sharing information with ecosystem partners © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 47