Cisco Cisco Prime LAN Management Solution 4.2 Information Guide

Page of 4
The auction sites only need one piece of equipment: a Cisco Integrated Services 
Router Generation 2 (ISR G2). “Cisco is the only vendor that can support the routers 
in all of our worldwide offices,” says Milojević. The Cisco ISR G2 supports two 
connections: Internet and Multiprotocol Label Switching (MPLS) WAN. Ritchie Bros. 
uses the Internet connection for web traffic, and the MPLS connection for everything 
else. 
Cisco IWAN helps to make the business even more secure, in two ways. First, web 
requests from every auction site are now sent directly to Cisco Cloud Web Security. 
They no longer have to travel over the MPLS WAN, so they don’t slow down any of 
the company’s business applications. “We evaluated three web security solutions, 
and Cisco Cloud Web Security gives us the best protection because of its large 
threat database,” Milojević says. SenderBase is the world’s largest email and web 
traffic monitoring network. Hundreds of analysts and automated systems research 
emerging threats 24 hours a day by monitoring more than one-third of the world’s 
email and web traffic. 
Second, Cisco IWAN also provides Cisco IOS® Firewall services. “Each location  
only needs one device, the Cisco ISR G2, for connecting to Cloud Web Security,  
the Internet, our MPLS network, and for firewall services,” says Milojević. “This  
saves space, power, cooling, and management costs.” The company’s head  
offices in Canada and Europe use Cisco ASA Next-Generation Firewalls for  
secure Internet access.
Ritchie Bros. also takes advantage of other Cisco security solutions. Mobile 
employees can securely connect to the company network from anywhere, with any 
device, using Cisco AnyConnect® Secure Mobility Client. They just download the 
free application to their personal smartphone or tablet. When a Canadian employee 
travels to Germany and wants to access a corporate application, for instance, the 
smartphone app connects to the company’s closest VPN hub. Then it opens a 
secure connection to the employee’s home office. 
And before any mobile device can even connect to the network, the network verifies 
that the device meets security requirements and that the person using the device is 
authorized. The technology that makes it possible is Cisco Identity Services Engine 
(ISE), integrated with the MaaS360 mobile device manager (MDM) from Fiberlink, a 
Cisco partner.
Results
Secure Web Access Protects Business
Now when a Ritchie Bros. Auctioneers employee or visitor tries to visit a website 
with a low reputation score, Cisco Cloud Web Security blocks the request. That 
means the company can confidently offer guest Wi-Fi access at all auction sites. 
Customers like being able to connect with their phones or tablets to browse the web 
and check email. They can also bid online for items at other auction sites, increasing 
sales. At one auction site, as many as 500 people have connected over Wi-Fi at the 
same time.
Customer Case Study
2   © 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Dragan Milojević 
Senior Network Security Specialist 
Ritchie Bros. Auctioneers