Cisco Catalyst Center (formerly Cisco DNA
Center) is a network management system that leverages AI to connect,
secure, and automate customer’s network operations. It harnesses the Catalyst family of switching and wireless through AI-enabled
automation that simplifies the IT experience and streamlines complex network
operations. Offering
operational flexibility, Cisco Catalyst Center can be deployed on-premises on a
physical appliance or in a VMware virtual environment, or in a…
N/A
Cisco SD-Access
Score 8.7 out of 10
N/A
Cisco's Software-Defined Access (SD-Access) provides automated end-to-end segmentation to separate user, device and application traffic without redesigning the network. Cisco SD-Access automates user access policy so organizations can make sure the right policies are established for any user or device with any application across the network.
Cisco Catalyst Center does a good job configuring the switches and forming the fabric using recommended configuration and specific switch setup. Managing switches through inventory is another job Cisco Catalyst Center does well. On the other hand managing access to infrastructure (host onboarding for example) is one tedious job. To set 48 access ports on a switch takes more time than it would take an engineer connected to a switch using CLI.
It's well suited in our corporate offices, where all our business users resides and where we can control all their accesses. What doesn't really fit well is when we have our branch fronts, where all the software domain access features aren't utilized to its fullest, due to the fact that customers and users don't really need to have all the security features that SDA provides.
I think it abstracts the technical detail of what actually needs to be configured on the devices. So you can specify the intent and it'll do complex technical commands on the devices. You do not necessarily need to know I'm from a technical background, so I do know that, but on a scale, it's very easy just to click a few buttons and say what you want and it'll just do it for you.
Setting golden images is tricky and cant always get it to work as advertised. Takes a couple times. Having a recent problem where it stopped working and Cisco TAC only explanation is that 3850 is no longer supported.
When I initially set up, couldnt find documentation. I set up a lot of IP addresses and assigned them to DNA. Cant find where these are located.
Troubleshooting with TAC, they always want me to run some scripts that I have no clue how to do.
Ability to be able to access configuration backups would be great.
Cisco DNA Center is going to help us in security, simplicity and ease of administration. Cisco DNA Center is complete management and control platform that simplifies and streamlines network operations. Cisco DNA Center offers a single dashboard for every core function in your network. With this platform, IT can become more nimble and respond to changes and challenges faster and more intelligently.
El soporte de CISCO DNA Center es muy bueno, responden a mis dudas pero no he tenido oportunidad de reportar un incidente o determinar un tiempo de respuesta critico. The support of CISCO DNA Center is very good, they answer my questions, but I have not had the opportunity to report an incident or determine a critical response time.
As far as my experience with SD-Access -I'd say things that can be improved are - better functionality with ISE, ease to understand licensing and better documentation for configuration (add-ons, etc), and licensing.
The software upgrades and ability to integrate with the wireless telemetry data set Cisco DNA Center ahead. However the automation with Change Control, Intent and better path mapping (even across MPLS and WAN Circuits) make NetBrain a needed tool to get that gives you that visibility and flexibility. Solarwinds has the ablity to view Netflow which would be an interesting add to DNA Center or an easier path to get or integrate with Stealthwatch.
Automation, pushing template-based configuration to multiple devices in one push saves time and manpower. Assurance helps trace issues related to devices, clients, and provide the troubleshoot as the best practices. Segmentation, with the use of the SGT tags, we are able to achieve segmentation and micro-segmentation securely.
Initial cost is pricy, but management needs to understand the value this provides so make them aware
Reporting could be improved in more detail in our opinion, but it gives a great overview of your environment. High level overview for managers would be greatly appreciated with as little or much detail as needed for certain Cisco gear.
Does not work as well with some older Cisco equipment because they want you to buy new, again the cost impact comes into play.
