Cisco Cisco AnyConnect Secure Mobility Client v2.x Information Guide
Finally, New Charter needed to develop role-based access for its corporate
network. “We had a supplier come in to do a bit of work for us, and it took us
several hours to realize that all he’d done was disconnect the PC at the desk he
was working at and connect his own laptop. This, of course, goes totally against our
policy and highlighted that we need to ensure that people can’t just come along and
connect to our network,” says Fishwick.
network. “We had a supplier come in to do a bit of work for us, and it took us
several hours to realize that all he’d done was disconnect the PC at the desk he
was working at and connect his own laptop. This, of course, goes totally against our
policy and highlighted that we need to ensure that people can’t just come along and
connect to our network,” says Fishwick.
Security Solution
New Charter has long used Cisco products to help create a secure, reliable
network. “The thing that makes Cisco security products great is that you put them
in, and they run, and they run, and they run. You can turn them on and forget about
them,” says Fishwick.
network. “The thing that makes Cisco security products great is that you put them
in, and they run, and they run, and they run. You can turn them on and forget about
them,” says Fishwick.
At the center of its security infrastructure, the organization uses the latest firewall
platform, leveraging the Cisco® ASA 5545-X Next-Generation Firewall with Intrusion
Detection and Prevention. The organization also uses the Cisco Cloud Web Security
Connector for ASA to extend web security and control without additional hardware
expense.
platform, leveraging the Cisco® ASA 5545-X Next-Generation Firewall with Intrusion
Detection and Prevention. The organization also uses the Cisco Cloud Web Security
Connector for ASA to extend web security and control without additional hardware
expense.
Cisco AnyConnect® is deployed to allow corporate tablet users to connect to the
New Charter VPN. Cisco Identity Services Engine (ISE) is also being implemented,
proscribing which users and devices can access which parts of the network; it is a
key component of the organization’s bring-your-own-device policy.
New Charter VPN. Cisco Identity Services Engine (ISE) is also being implemented,
proscribing which users and devices can access which parts of the network; it is a
key component of the organization’s bring-your-own-device policy.
Fishwick never lets go of the organization’s Cisco equipment. He finds it useful
when working to integrate new housing sites into the New Charter network. “There
can be a lot of head scratching as we try to figure out why the systems aren’t
integrating. Recently we resolved an integration problem by using some older Cisco
routers. I had the equipment just hanging around in the cupboards, and I configured
them for the sites,” he says. “They worked perfectly the minute we deployed them.
That’s Cisco for you.”
when working to integrate new housing sites into the New Charter network. “There
can be a lot of head scratching as we try to figure out why the systems aren’t
integrating. Recently we resolved an integration problem by using some older Cisco
routers. I had the equipment just hanging around in the cupboards, and I configured
them for the sites,” he says. “They worked perfectly the minute we deployed them.
That’s Cisco for you.”
The New Charter team also uses Cisco Catalyst® switches, as well as Cisco
Wireless LAN Controllers, and Cisco Wireless Access Points.
Wireless LAN Controllers, and Cisco Wireless Access Points.
Business Results
The new 5545-X Next-Generation Firewall platform is helping New Charter to
improve its bandwidth capabilities. “The compression code in the ASA is helping
us with bandwidth issues. It’s a much better user experience,” says Fishwick. “The
compression assists the data throughput, whether a user is coming from within the
organization or from outside via a web browser. This means the user isn’t waiting for
a screen refresh or for a full page to load.”
improve its bandwidth capabilities. “The compression code in the ASA is helping
us with bandwidth issues. It’s a much better user experience,” says Fishwick. “The
compression assists the data throughput, whether a user is coming from within the
organization or from outside via a web browser. This means the user isn’t waiting for
a screen refresh or for a full page to load.”
The improved user interface and instant visibility are other features Fishwick cites
as important improvements. “We can log in, more easily provide alerts, and the
throughput updates are tremendous.”
as important improvements. “We can log in, more easily provide alerts, and the
throughput updates are tremendous.”
The Intrusion Detection System (IDS) and Intrusion Prevention System (IPS)
capabilities keep the New Charter network secure and available. “It provides
protection from the outside world, and it is a big bad world out there,” Fishwick says.
“It’s surprising to look at the potential intrusions and see where in the world they’re
coming from. We’re not even a very large network, but people try daily to hack in.”
capabilities keep the New Charter network secure and available. “It provides
protection from the outside world, and it is a big bad world out there,” Fishwick says.
“It’s surprising to look at the potential intrusions and see where in the world they’re
coming from. We’re not even a very large network, but people try daily to hack in.”
Customer Case Study
Darren Fishwick
Telecommunications and Network Manager
New Charter Housing Trust
2 © 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.