Cisco Cisco Prime IP Express 8.2 White Paper

Page of 7
 
 
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. 
Page 3 of 7 
● 
A powerful IPAM system that automates and simplifies all IP management processes 
● 
Captive BYOD portal (included with DHCP, DNS, or the suites) that simplifies, accelerates, and tightly 
controls the onboarding of employee devices 
This comprehensive DDI solution can: 
● 
Lower operating expenses by automating previously manual IP address management and centralizing 
management processes. The solution integrates with and reuses Microsoft Active Directory to lower costs 
and provides an integrated BYOD server to accelerate provisioning 
● 
Deliver unparalleled performance and reliability with industrial-strength DNS and DHCP services that 
can support millions of devices and tens of thousands of queries per second 
● 
Reduce complexity by allowing you to manage all DNS, DHCP, and IPAM services across your 
environment through a single interface 
● 
Increase security and reduce risk by preventing DNS attacks, tightly integrating with internal and external 
authentication frameworks, and allowing for secure, role-based administration of core network connectivity 
services 
● 
Protect your investment by allowing easy integration with Microsoft Active Directory and authentication 
frameworks 
● 
Position your business for the future, with support for complex virtualized environments and tools to 
easily transition to IPv6 
Industrial-Strength DNS 
Scalable DNS services are mission-
critical in today’s enterprise networks. Cisco Prime IP Express DNS is a highly 
reliable, standards-compliant, dual-stack-capable DNS solution that delivers: 
● 
High performance: The same core Cisco technology used by service providers connecting millions of 
subscribers, Cisco Prime IP Express DNS delivers query throughput that far exceeds other solutions. Its 
distributed architecture can support millions of users through a centralized interface, and deliver 170,000 
DNS caching queries per second and 100,000 DNS authoritative queries per second. 
● 
Advanced DNS caching and security: The extremely fast DNS caching server validates high-volume 
recursive DNS queries using DNS Security Extensions (DNSSEC). The solution authenticates that DNS 
data has been signed and protects resource records against data spoofing, corruption, and DNS cache 
poisoning to prevent malicious DNS attacks. 
● 
Domain redirect: 
Enterprises can use DNS caching capabilities to create “black lists” of known malicious 
sites and automatically redirect users, with the ability to customize redirect messages (for example, “The 
web page you are attempting to reach is known to be malicious”). The solution also includes built-in 
NXDOMAIN redirect capabilities to assist users entering an invalid domain name. 
High-Performance DHCP 
Cisco Prime IP Express DHCP provides centralized, standards-compliant, high-capacity DCHP capabilities to 
support millions of devices in complex enterprise networks. It automatically tracks and controls users and devices 
with scalability and manageability far beyond what’s available in free and open-source DCHP systems.