Cisco Cisco ASA for Nexus 1000V Series Switch Guía De Información
Solution
Now Swanson has granular control over who can visit which websites, and which
website features they can use. The solution is a Cisco ASA 5585-X Adaptive
Security Appliance with Next-Generation Firewall Services. It combines firewall,
malware protection, and social media protection in one device. “With the Cisco Next-
Generation Firewall, we can allow access to certain sites for some employees and
block access for other users,” says Kennedy. “Combining firewall and web filtering in
one device simplifies management. And our networking team is already familiar with
Cisco products, so we didn’t need to spend time learning a new solution.”
website features they can use. The solution is a Cisco ASA 5585-X Adaptive
Security Appliance with Next-Generation Firewall Services. It combines firewall,
malware protection, and social media protection in one device. “With the Cisco Next-
Generation Firewall, we can allow access to certain sites for some employees and
block access for other users,” says Kennedy. “Combining firewall and web filtering in
one device simplifies management. And our networking team is already familiar with
Cisco products, so we didn’t need to spend time learning a new solution.”
The network security team used a friendly interface to give employees the types of
Internet access that they need to do their jobs. For example, employees who work
on the company’s Facebook page can now access the site, but they cannot use
games or chat. Employees who work on email campaigns can visit their webmail
accounts, but cannot upload or download files. Employees in the call center and
other departments that work with payment card information also cannot email
certain types of files.
Internet access that they need to do their jobs. For example, employees who work
on the company’s Facebook page can now access the site, but they cannot use
games or chat. Employees who work on email campaigns can visit their webmail
accounts, but cannot upload or download files. Employees in the call center and
other departments that work with payment card information also cannot email
certain types of files.
Everyone can access the web, but Cisco Web Security Essentials (WSE) restricts
access to sites with bad reputations, based on a reputation score that factors in
country of origin, time in business, and dozens of other factors. The IT team decided
to allow only a few employees to visit websites hosted in two countries with a high
percentage of infected sites. “It’s simple to create and modify access policies,”
Kennedy says.
access to sites with bad reputations, based on a reputation score that factors in
country of origin, time in business, and dozens of other factors. The IT team decided
to allow only a few employees to visit websites hosted in two countries with a high
percentage of infected sites. “It’s simple to create and modify access policies,”
Kennedy says.
Swanson also takes advantage of other Cisco security solutions to help keep the
business up and running. Cisco Intrusion Prevention System (IPS) alerts the IT team
to unusual activity on the network and can block these activities. And Cisco ACE
Application Control Engine balances website traffic between multiple servers to help
make sure that customers have a good experience even when traffic is highest.
business up and running. Cisco Intrusion Prevention System (IPS) alerts the IT team
to unusual activity on the network and can block these activities. And Cisco ACE
Application Control Engine balances website traffic between multiple servers to help
make sure that customers have a good experience even when traffic is highest.
Customer Case Study
2 © 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Jason Kennedy
Network Systems Administrator
Swanson Health Products