Cisco Network Assistant

Since 1917, Niemann Foods has provided groceries to the residents of Illinois, and today also does business in Iowa and Missouri. The company operates over 40 supermarkets, including Cub Foods and Sav-A-Lot stores, as well as over 50 other retail outlets such as pet supply stores, hardware stores, pharmacies, gas stations, and convenience stores throughout the region.

Niemann's more than 100 retail and support locations had previously used hubs for intra-site connectivity and VPNs for inter-site connections. Hub devices were traditionally purchased individually as needed, often through discount channels to avoid excessive strain on the company's financial resources.

Although usable, this model made securing sensitive information such as customer transaction data challenging. Further, managing a network of disparate hardware across a wide geographic region required a lot of staff travel time and reliance on third-party vendors for support.

As a retail organization, data security, especially customers' personal information, is a primary concern for Niemann Foods. "We wanted to upgrade our infrastructure to comply with Payment Card Industry (PCI) Data Security Standards and better protect customers' information," says Mike Smith, senior network administrator at Niemann Foods. "At the same time, any upgrades needed to also be cost effective and help us better manage our day-to-day operations."

Niemann deployed a comprehensive Cisco^® switching solution to replace its legacy infrastructure consisting of hubs. The Cisco network centers around approximately 150 Cisco Catalyst^® 2960 Switches in its stores and Cisco Catalyst 3750 Switches at the company's headquarters. Cisco 881 Integrated Service Routers that support Enhanced Interior Gateway Routing Protocol (EIGRP) securely tie the corporate network together, and Cisco 5510 Adaptive Security Appliances (ASAs) were deployed for failover and additional content security.

Using Cisco Network Assistant (CNA), the company's administrators can manage the entire network from a single interface for greater control and efficiency. Cisco Network Assistant, a PC-based network operations command console, enables IT staff to configure network switches and routers remotely from a unified console, saving time and effort. "Cisco Network Assistant enables us to simply click a device icon and launch the embedded device manager for easy, one-touch set-up," Smith says. "We can also reset passwords, generate inventory reports, troubleshoot configuration errors, and even upgrade software through a simple drag-and-drop process."

In addition to remote device controls, the Cisco Network Assistant helps Niemann managers optimize network performance for greater responsiveness and stability. With features such as Cisco Smartports Advisor and Troubleshooting Advisor, Cisco Network Assistant can review network configurations and recommend changes based on Cisco Certified Internetwork Expert (CCIE^®) best practices, saving valuable time for IT administrators while helping ensure that the network remains fully protected and running at peak performance.

Niemann's previous use of hubs for intra-site connectivity made tracking, managing, and securing data challenging. Controlled by CNA, the branch office Cisco 2960 switches provide superior Layer 2 security with built-in intelligence to automatically inspect data packets and direct information to the appropriate destination more efficiently. Meanwhile, the Cisco 5510 ASA offers access controls and robust endpoint security to help maintain the integrity of confidential information across the network, providing another layer of security through restricted network access, location-aware security policies for transactions, and defense against malware.

"PCI compliance standards require a lot of complex control objectives, which can mean countless hours of manual system setup and management," Smith says. "Cisco network solutions automate the majority of PCI compliance-related activities, reducing the amount of time we have to spend manually configuring and monitoring transactions and network traffic."

Although centrally managed at headquarters, network access for on-site employees is provided through the more than 200 Cisco Aironet^® 1131G and 1230 Series wireless access points installed in Niemann facilities. Each store hosts between one and six access points, depending on its size and traffic volumes. Given the different sizes and configurations of the stores, many with wireless access points installed on ceilings that reach as high as 30 feet, powering and maintaining the access points can be challenging. The Cisco access points leverage Power over Ethernet (PoE) capabilities to provide consistent, reliable power to 90 percent of the access points throughout the network.

Standardizing on Cisco routing and switching solutions brought much-needed efficiency, security, and stability to Niemann Foods' operations. Cisco Network Assistant has helped to reduce the amount of staff time and associated costs required to manage the company's network, while enabling the company to achieve PCI compliance.

From a single location, Smith or a member of his IT team can rapidly deploy a new switch, router, or wireless access point. In the past, installation and maintenance were handled by third-party vendors, which could be both costly and time-consuming. Using Cisco Network Assistant, the Niemann IT team can rapidly deploy network hardware remotely using configuration templates and then monitor and optimize performance without having to travel to a site.

"With the efficiencies of Cisco Network Assistant, we've reduced the time spent on network setup and maintenance by 50 percent, which is a huge boost in productivity," Smith. "From a single screen, we can see how every device on the network is performing and resolve potential issues before they become a problem."

Importantly, Niemann was able to quickly deploy a unified switching solution to bring the company into compliance with PCI mandates. In just a matter of months, the company was able to fully transition from a infrastructure consisting primarily of hubs to an efficient and cost-effective network that elevated the company's data security standards to unprecedented levels.

"On the surface, the initial investment is fairly significant, but the gains in reliability and standardization across the network have more than made up for it," Smith says. "In the long run, it was the right thing to do for our financial outlook, our data security, and our customers."

To find out more about Cisco Network Assistant go to: http://www.cisco.com/en/US/products/ps5931/index.html.