Cisco Systems, Inc.
All contents are Copyright © 1992–2003 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement.
Page 2 of 10
(SCCP), Real-Time Streaming Protocol (RTSP), and Media Gateway Control Protocol (MGCP). Additionally, Cisco
PIX Security Appliances provide security services for Telephony Application Programming Interface (TAPI) and Java
Telephony Application Programming Interface (JTAPI)-based applications, when these applications use Computer
Telephony Interface Quick Buffer Encoding (CTIQBE) as the network transport mechanism—such as Cisco
SoftPhone and Cisco Customer Response Solution (CRS). This allows businesses to securely take advantage of the
many benefits that converged data, voice, and video networks provide, including improved productivity and new
competitive advantages. By combiningVPN with the rich stateful inspection firewall services that Cisco PIX Security
Appliances provide for these converged networking standards, businesses can securely extend voice and multimedia
services to home office and remote office environments for additional cost savings and the other benefits converged
networks bring.
Site-to-Site VPNs Extend Networks Economically to Remote Sites and Business
Partners
Using the standards-based site-to-site VPN capabilities provided by Cisco PIX Security Appliances, businesses can
securely extend their networks across low-cost Internet connections to business partners and remote and satellite
offices worldwide. Built upon the Internet Key Exchange (IKE) and IP security (IPsec) VPN standards, Cisco PIX
Security Appliances encrypt data using 56-bit Data Encryption Standard (DES), 168-bit Triple DES (3DES), or up to
256-bit Advanced Encryption Standard (AES) encryption. Cisco PIX Security Appliances can also participate in
X.509-based Public Key Infrastructures (PKIs), and provide easy, automated certificate enrollment using the Simple
Certificate Enrollment Protocol (SCEP)—another Internet standard Cisco Systems helped pioneer. Certain Cisco PIX
Security Appliance models also support hardware VPN acceleration, delivering up to 440 megabits per second
(Mbps) of 256-bit AES encrypted throughput, as well as support for up to 2000 IKE security associations.
Cisco Easy VPN Enables Highly Scalable, Easy-to-Manage VPN Deployments
The innovative Easy VPN capabilities found in Cisco PIX Security Appliances and other Cisco solutions—such as
Cisco IOS
®
routers and Cisco VPN 3000 Series Concentrators—deliver a uniquely scalable, cost-effective, and
easy-to-manage remote-access VPN architecture. Built upon the foundation of dynamic policy distribution and
effortless provisioning, Easy VPN eliminates the operational costs associated with maintaining remote-device
configurations typically required by traditional VPN solutions. Easy VPN enables Cisco customers to enjoy the
numerous benefits that VPNs provide—increased employee productivity by taking advantage of high-speed
broadband connectivity, and significantly reduced operational costs by eliminating expenses associated with legacy
dialup architectures—without the problems commonly found with other remote-access VPN solutions.
Using the Cisco PIX Security Appliance robust, remote-access VPN concentrator services, enterprises can securely
extend their networks to traveling employees, teleworkers, and remote offices for anytime, anywhere access to vital
corporate resources. Acting as Cisco Easy VPN Servers, Cisco PIX Security Appliances support the wide range of
software- and hardware-based Cisco Easy VPN Remote products. Cisco PIX Security Appliances enforce the latest
VPN security policies by dynamically pushing these policies to Easy VPN Remote users as they connect.
Certainmodelsof Cisco PIX SecurityAppliancescanalsoact as “hardware VPNclients”usinginnovative,embedded
Easy VPN Remote features, transparently providing secure access to a corporate network for all devices in a remote
network protected by a Cisco PIX Security Appliance. This dramatically simplifies the initial deployment and
ongoing management of VPNs deployed to remote offices and teleworker environments by eliminating the need to
