"Remote" with a Cisco router

With the latest news about the rapid spread COVID-19 virus Many companies are closing their offices and moving employees to work remotely. Company Cisco understands the necessity and importance of this process and is ready to fully support our customers and partners.

Organization of secure remote access

The optimal solution for organizing secure remote access to corporate resources is the use of specialized devices and software. At the same time, one should not forget about the most common class of devices - Cisco routers. These devices are available in many organizations and therefore can effectively support the business in an environment where remote work of employees has become mandatory.

Current models for Cisco corporate customers are routers of the series ISR 1000, ISR 4000, ASR 1000, as well as the virtualized series Cisco CSR1000v.

What do Cisco routers offer for secure remote access?

For creating Remote Access VPN technology is recommended Cisco FlexVPN, which allows you to create and share different types of VPN (Site-to-Site, Remote Access) on the same device.

The most common and in demand are two ways to use Cisco FlexVPN for remote access (Remote Access):

• IKEv2 IPSec VPN - supported on Cisco ISR 1000, ISR 4000, ASR 1000, CSR1000v. Setting: IOS/IOS-XE router for IKEv2 VPN

• SSL VPN - supported on Cisco CSR1000v, as well as on some models of previous generations of Cisco routers. Customization:
  IOS-XE router for SSL VPN (CSR only)
  IOS router for SSLVPN

• The general principles and capabilities of FlexVPN (and not only) are well reflected in the Cisco Live 2020 session BRKSEC-3054

• The main VPN client that supports these technologies and is installed on computers and mobile devices is Cisco AnyConnect Secure Mobility Client. Downloading and using this software requires the purchase of appropriate licenses.
  • If you are an existing Cisco customer but do not currently have enough AnyConnect licenses to use with Cisco routers, please contact us at [email protected] indicating the domain to which your Smart-Account is registered. If you do not have a Smart-Account yet, you will need to create one here (more in Russian)

Customer support during COVID-2019

Cisco invites you to spend your quarantine and self-isolation time productively and invest your time in knowledge. Next week 23 to 27 March 2020 of the year we organize an engineering marathon “Corporate networks – everything is in order. Deep dive" for engineers and network experts, which is an excellent opportunity for deep immersion in modern technologies for all those who have long wanted to get into Cisco courses, but for some reason could not.

More about the Marathon and registration

Additionally, we encourage everyone to review the following helpful Cisco resources:

• www.cisco.com/c/m/en_us/covid19.html
• www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/215331-anyconnect-implementation-and-performanc.html
• Free offer Cisco for Secure Remote Access
• Step by step guide how you can quickly deploy the most scalable Remote-Access VPN access scheme based on AnyConnect and Cisco ASA - VPN Load Balancing Cluster.

Be healthy and take care!

Source: habr.com