1. 1 © 2001, Cisco Systems, Inc. All rights reserved. Session Number Presentation_ID Cisco 11500 Series Content Services Switch Presenter Name Contact Information

2. 222 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Content Switching Overview Introduction to CSS11500 New Features and Benefits Positioning, Migration, and Related Products Agenda

3. 333 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Cisco Content Switching Target Applications and Results Internet AND Intranet Applications – E-commerce — business-to-business, business-to-consumer – E-business — marketing, sales, service, exchanges – Customer care — internal and external users – Workforce and supply chain automation – Advanced web hosting Results, Rewards, Returns – Improve performance of your Web site and Web applications – Enhance experience for customers, employees, and partners – Better use existing infrastructure and reduce infrastructure costs – Assure online transactions are executed accurately and completely – Improve Web site security and integrity – Transparent addition to existing network and systems – Relieve “find and fix” burden on Help Desk and support staff

4. 444 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Cisco Content Switching Traffic Direction Based on Content — Not Connections Supply-Side Analysis: What is current server load? Where is content located? Is the content available? Accurate? Is this site just one of many? Demand-Side Analysis: What content is requested? Who is requesting content? What access policies are in effect? Any special request handling required? Is this a secure or open transaction? Internet/ Intranet What content is requested? Who is requesting content? Is request special? Which server is best? http://www.stocks.com It’s all about SUPPLY and DEMAND! Is exchange secure? Which site is best?

5. 555 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Cisco Content Switching ApplicationsBronze Gold Overflow Servers Internet Local Load Balancing = improved utilization and availability (servers, Firewalls, caches) User Prioritization = switch and stick by cookie (Silver, Gold, Platinum) Client Device Discrimination = switch and stick by client device (PC, PDA, wireless) Intelligent Content Positioning = switch by file type (.html,.gif,.cgi) Security Optimization = all of the above in SSL (HTTPS) environment Global Server Load Balancing = pick best site based on load and proximity (Tokyo, Paris, New York) Silver

6. 666 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Hosting Solution Engine Hosting Solution Engine Data Center Load Balancing For Internet and Intranet Web Servers ISP-1ISP-2 Database Servers PIX ™ Firewall Secure Content Accelerator Content Switch Secure Content Accelerator

7. 7 © 2001, Cisco Systems, Inc. All rights reserved. Session Number Presentation_ID Introducing CSS11500

8. 888 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Requirements for Content Switches in 2002 Scalable/flexible architecture for current needs and future growth Availability: session and hardware redundancy Small form factor High port density Integrated Services (SSL acceleration) Broad set of L4-L7 features Broad product line for small, medium, and large data centers

9. 999 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Introducing Cisco 11500 Series Content Services Switch Leads in content switch features –Richest L4-7 services Meets real-world scaling requirements –Innovative distributed architecture Sets new high-availability standard –Adaptive session redundancy Scales Web security architectures –High-performance SSL Module Delivers unprecedented flexibility –Modular in performance, ports, and services Protects investment –Upgradeable modules, memory, disks, software

10. 10 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Servers, Caches Firewalls, VPNs Cisco Content Switching Product Line Decision Points CSS 11050CSS 11503 CSM for Catalyst® 6500 StandaloneStandaloneStandaloneIntegrated ApplianceModularModularModule CSS 11506 Max density 1 GE, 8 FE 6 GE/2 GE,32 FE 12 GE/ 2 GE,80 FE 8-178 GE, 46-528 FE Site activity/intensity LowMediumHighHighest Hardware scalability Hardware redundancyNoNoYesYes SSL accelerationExternalInternalInternalFuture Blade CS management Session redundancyFutureYesYesYes Layer 2/3 networking Load balancingServers, Caches, Firewalls Form factor

11. 11 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Mini-Chassis 3-slot/2RU with 20 Gbps switch fabric Up to 3 modules--each with session processor, forwarding engine and policy engine Switch Control Module with 2 GE IO Modules (2GE, 8FE, 16FE) or service modules (Session, SSL) Integrated Switch Module Up to 32 FE plus 2GE Up to 6 GE Integrated AC or DC Hard Disk or Flash SCM, IOM, Service, memory, disk same as 11506 Cisco 11503 Content Services Switch

12. 12 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Cisco 11506 Content Services Switch Mini-Chassis 6-Slot/5RU with 40 Gbps Switch Fabric Up to 6 modules--each with session processor, forwarding engine and policy engine Switch Control Module with 2 GE (Redundant SCM in Standby) IO Modules (2GE, 8FE, 16FE) or Service Modules (Session, SSL) Redundant Switch Modules Up to 80 FE plus 2GE Up to 12 GE Redundant AC or DC Hard Disk or Flash

13. 13 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID CSS11500 Modules Switch control module 2 PCMCIA Disks 2 GE (SX/LX SFP GBIC) Console/Management 2-port GE (SX/LX SFP GBIC) 16-port FE 10/100BaseT 8-port FE 10/100BaseT Session Accelerator Module SSL Module

14. 14 © 2001, Cisco Systems, Inc. All rights reserved. Session Number Presentation_ID New Features and Benefits

15. 15 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID CSS11500 Innovative Distributed Architecture ForwardingEngineSessionProcessorForwardingEngineSessionProcessor ForwardingEngineSessionProcessorForwardingEngineSessionProcessor ForwardingEngineSessionProcessorForwardingEngineSessionProcessor 1. Client Initiates 2. Spoof 3. Client GET 4. Select Server 5. NAT 6. FastPath 7. Server Responds Performance scales with number of modules Load is balanced among processors Module

16. 16 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID CSS11500 Adaptive Session Redundancy (ASR) RouterCSSL2 Switch Server Internet L2 ISC Link Interbox stateful failover per content rule Specify content rules worthy of replication (rule must have VIP) Establish flows (pushed to FastPath) Backup flows to standby over Interswitch communication (ISC) link If one rule (or one box) fails, standby picks up specified flows Data flow continues after TCP retransmit State: IP/Port for client/server URL/Cookie Failover Time: Configurable 3 seconds recommended Redundancy Optimized for Performance

17. 17 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Content Switching and SSL Problem Servers impaired: SSL increases processing load and hides L5+ info necessary for load balancing and sticky Solution Offload SSL processing from servers to SSL proxy Benefit Improves server scalability Increases server utilization/availability through L5+ load balancing and sticky Simplifies management SSL Clients Servers CSS11500 SSL Module

18. 18 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID CSS11500 Integrated SSL Module Leading SSL price- performance Scalable CSS11506: Up to 5 modules CSS11503: Up to 2 modules Integration adds Enhanced security Improved manageability Specifications (per module): SSL 3/TLS 1 Broadcom 5821 512 MB dedicated SRAM

19. 19 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID CSS11500 Management Options CLI Embedded device management GUI CiscoWorks 2000 CiscoView Hosting services engine SNMP, RMON, log files Programmatic management API

20. 20 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID CSS11500 Key Feature-Benefit Summary BenefitFeature Adaptive Session Redundancy Distributed Architecture Modular Performance IO, Disk, Memory Integrated SSL Module Redundant SCM, SM, Disk, Power, Fan Availability optimized for performance Availability optimized for performance Flexibility to replicate per flow Flexibility to replicate per flow Scalability on Scalability on Optimal price-performance Optimal price-performance Deployment flexibility Deployment flexibility Pay as you grow Pay as you grow SSL scalability SSL scalability SSL manageability SSL manageability Availability Availability

21. 21 © 2001, Cisco Systems, Inc. All rights reserved. Session Number Presentation_ID Positioning, Migration and Related Products

22. 22 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Servers, Caches Firewalls, VPNs Cisco Content Switching Product Line Decision Points CSS 11050CSS 11503 CSM for Catalyst 6500 StandaloneStandaloneStandaloneIntegrated ApplianceModularModularModule CSS 11506 Max Density 1 GE, 8 FE 6 GE/2 GE,32 FE 12 GE/ 2 GE,80 FE 8-178 GE, 46-528 FE Site activity/intensity LowMediumHighHighest Hardware scalability Hardware redundancyNoNoYesYes SSL accelerationExternalInternalInternalFuture Blade CS management Session redundancyFutureYesYesYes Layer 2/3 networking Load balancingServers, Caches, Firewalls Form Factor

23. 23 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Migration Encourage customers to move to CSM and CSS11500 in 2002 CSS 11050 is lead product on low end Continued sales and support of CSS 11150 Development –Continues on CSM and CSS11500 –Limited new features on CSS11150 –No new features on LD LD  CSS 11050 or CSS 11503 Sell up CSS 11050  CSS 11503 CSS 11150  CSS 11503 CSS 11800  CSS 11506 or CSM SCA 11000 for customers adding only SSL to existing CSS deployments

24. 24 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Servers, Caches Firewalls, VPNs Advantages of CSM/CSS over LocalDirector Decision Points LD 417 CSM for Catalyst 6500 StandaloneStandaloneIntegrated FixedModularModule CSS 11500 Max density 2 GE, 6 FE 12 GE/ 2 GE,80 FE 8-178 GE, 46-528 FE Site activity/intensity LowHighHighest Hardware scalability Hardware redundancyNo YesYes SSL accelerationNA InternalFuture Blade Session redundancy Box AdaptiveAdaptive Long-lived F\flows Load balancingServers, Caches, Firewalls Form factor L5+ LB features

25. 25 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Content Switching Module Content switching option for customers preferring an integrated switching module High-performance layer 4-7 load balancer of servers, firewalls, caches and more Single-slot line card for Catalyst 6500 and Cisco 7600 Internet Router Custom network-processor-based hardware Full L4-L7 switching feature set – generic header parsing, stateful redundancy, HTTP 1.1 support

26. 26 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Cisco 11000 Series Secure Content Accelerator Decrypt SSL (e.g., https) sessions so that L5-7 content switching can be processed Offload SSL from back-end Web servers, ensuring peak performance level Optional back-end server SSL support for secure client-to-server 200 tps and 5000 sustained SSL connections per single RU Dual 10/100Mbps Redundant power supply included Handle all certificate information and key negotiation during SSL session Centralize key/certificate management Cisco SCA 11000

27. 27 © 2001, Cisco Systems, Inc. All rights reserved. Presentation_ID Hosting Solution Engine — A turnkey management solution for Cisco powered data centers that enables SPs and hosting clients to autonomously perform daily duties on the shared network infrastructure for reliable e-business delivery Benefits to Customers — Provides autonomous e-business management to individual business groups while maintaining centralized IT operations –Enterprises: Improves operational efficiency between system managers and network admins; provides remote manageability while utilizing colocation facilities or e-business hosting services –Service Providers: Reduces network and service capital and operational costs while supporting new content services New Features –Granular customer domain partition down to switch ports for authorized user access to shared Cisco devices –Robust Layer 4-7 service configuration and activation for Cisco server load balancing devices –Upper layer NMS/OSS integration with SYSLOG, trap, email notifications and domain-based historical data XML export –Web-based historical data reports with easy personalization Industry Impact –Industry’s only turnkey solution for managing content networking infrastructure and services, including customer self-monitoring and SLA verification Cisco 1105 Hosting Solution Engine 1.3