Subscribe
Cisco DNA Software
SD-WAN and Routing Matrix
Network Essentials Network Advantage Cisco DNA Essentials Cisco DNA Advantage Cisco DNA Premier
License type Perpetual software with typical routing Perpetual software with full routing 3- or 5-year term subscription Includes Cisco DNA Essentials, Includes Cisco DNA Advantage,
capabilities, bundled with Cisco DNA capabilities, bundled with Cisco DNA 3- or 5-year term subscription 3- or 5-year term subscription
Essentials subscription license Advantage or Premier license
Management options CLI, Web UI CLI, Web UI CLI, Web UI, CLI, Web UI, CLI, Web UI,
Cisco DNA Center, vManage Cisco DNA Center, vManage Cisco DNA Center, vManage
Features
Network Network Cisco DNA CIsco DNA Cisco DNA
Essentials Advantage Essentials Advantage Premier
Layer 3 routing
High availability achieved by routing packets to a specific next-hop IP address based on the destination IP address.
DevOps integration 1 1
Make it easy for your development and operations teams to continuously deliver applications.
Programmability
Model-driven programmability lets you automate configuration and control of your network devices, managed by Cisco vManage.
MACsec encryption
Configure MACsec for authenticating and encrypting packets between MACsec-capable devices, managed by the Cisco DNA
Center appliance.
Telemetry and visibility
Model-driven telemetry lets you monitor your network by streaming data from network devices, continuously providing near-real-
time access to operational statistics.
Essential routing capabilities
VRF-lite, NAT, OSPF, EIGRP, DNS, DHCP.
Essential security capabilities
MACsec-128, VPNs, ZBFW, PKI, ACLs, Cisco Umbrella Connector, Snort IPS.
Essential application experience
Basic quality of service (QoS) (classification, policing, re-marking, scheduling), PBR, AVC, NBAR, IPSLA, DPI visibility (full Flexible
NetFlow).
Essential unified communications 1 1
Cisco Unified Border Element (CUBE) Connector.
Router management
TACACS+, NETCONF, AAA, RESTCONF, gRPC, YANG.
Cisco trustworthy solutions
Help ensure hardware and software authenticity for supply chain trust and strong mitigation against man-in-the-middle attacks
that compromise software and firmware.
Optimize bandwidth utilization (multicast)
Multicast is used between routers so they can track which multicast packets to forward to each other and to their directly
connected LANs.
High availability and resiliency (patching)
Support operational continuity, and maintain availability during routine maintenance and disaster recovery
(VRRP/HSRP).
Flexible network segmentation
VRF, Cisco TrustSec (SGT, SGACL).
Advanced routing functionality
BGP, HSRP, IS-IS, GLBP, MPLS, VPLS.
Advanced security functionality
MACsec-256, ALG for ZBFW, VASI, URL filtering, AMP and Threat Grid Connector, Cisco Umbrella Cloud application discovery
(visibility only), SSL Proxy.
Cisco innovations
SMU patching, SGTs, ETA, ISSU, mDNS Bonjour, EPC, web caching.
Advanced unified communications
SRST, support for voice modules.
SD-WAN functionality
Basic WAN optimization, basic security, and flexible topology (hub and spoke, full mesh/partial mesh), dynamic routing, VNF
lifecycle management.
Automation and ease of management
Single, centralized management console deployed in the cloud or on-premises to manage inventory, discovery, topology, site
automation, network settings, device credential update, integrity verification, template programming, reports, and Plug and
Play (PnP) applications. Supports simplified workflows for physical and virtual branch automation, day-0, day-2, day-N. NFV
provisioning on ENCS and Cisco UCS E-Series, Cisco VNF orchestration (ISRv, vEdge, vASA, NGFW, and vWAAS).
Essential security
Enterprise firewall with application awareness, Snort IPS with signature updates, automated Cisco Umbrella DNS monitoring.
Voice optimization
Forward error correction and packet duplication.
Full Flexible NetFlow
This next-generation flow technology optimizes the network infrastructure, reducing operating costs and improving capacity
planning and security incident detection.
License portability
Software services-enabled license portability lets your software licenses stay current through hardware upgrades and
replacements at no additional cost.
IPv6 tunnel capabilities
Overlay tunneling encapsulates IPv6 packets in IPv4 packets for delivery across an IPv4 infrastructure (a core network or the
Internet).
EasyQoS dynamic monitoring
Create and assign network-specific or device-specific policies to applications based on business intent that can be adjusted
dynamically to guarantee services (Adaptive QoS).
Software Image Management (SWIM)
Automatically manage software upgrades with version control and the ability to deploy configurations across your network.
Enterprise Network Functions Virtualization (ENFV)
Facilitates branch virtualization on any hardware device – Cisco or third party. Supports existing branch migration without
hardware upgrade.
Management dashboards
Dashboards include views into the overall view of the health of every network device or client, the operational status of every
network device with suggested remediation for any communication issues, and the overall health of all applications on the
network, with dedicated sections for business-relevant application issues and suggested remediation.
Streaming telemetry
Enables network devices to send near-real-time telemetry information. Full Flexible NetFlow, EEM, router monitoring (basic), VNF 1 1
monitoring (ISRv, vWAAS), ENFV (ENCS, UCSE), topology, defined reports, and custom thresholds.
Optimized SaaS and IaaS cloud connectivity
Cloud onRamp for IaaS and SaaS.
Limited segmentation and 50-device limit
SD-WAN implementations are restricted to fifty (50) devices or fewer, and VLANs are limited to two (2).
Unlimited segmentation and devices
SD-WAN implementations unrestricted, VLAN implementations unrestricted.
vAnalytics
Provide real-time information for failure correlation, cross-customer benchmarking, and application performance scores. Enable
future planning based on intelligent data (application/bandwidth forecasting, branch expansion analysis, policy change what-if
scenarios). Provide a quality of experience score for applications running on your network to help quantify performance based on
recent changes made on your network.
Optimized multicloud colocation connectivity
Cloud onRamp for Colocation.
Advanced security
Cisco AMP with SSL proxy, URL filtering, Cisco Umbrella application discovery.
Enterprise secure cloud edge
Cisco Umbrella Insights and Cisco Threat Grid.
Support
SWSS
Software support services that also offer license portability and ongoing innovation in the software stack,
including 24-hour TAC support.
1
= Functionality available in a routing-only implementation.
© 2019 Cisco and/or its affiliates. All rights reserved.
