/mcpCisco Snort IPS and Cisco Umbrella Branch Cisco® Snort® IPS for Cisco 4000 Series Integrated Services Routers (ISRs) offers a lightweight threat defense solution that uses industry-recognized Snort open-source Intrusion Prevention System (IPS) technology. It is perfect for customers who are looking for a cost-effective solution that provides one box for both advanced routing capabilities and integrated threat defense security to help comply with regulatory requirements. Cisco Umbrella Branch is a cloud-delivered security service for the Cisco Integrated Services Router (ISR). It provides the first layer of defense against threats at branch offices. And it offers the simplest, fastest way to protect every device on your branch network. You gain visibility and enforcement at the DNS layer, so you can block requests to malicious domains and IPs before a connection is ever made. When enabling MACsec, you will need to procure the Security and HSEC licenses to stay within the limits of federal export control regulations. When customers wish to enable Cisco Secure Network Analytics, the Security (SEC) license needs to be enabled. Enabling Snort needs a Security (SEC) license and a signature subscription license. Enabling Cisco Umbrella Branch needs an Umbrella Branch license and a subscription license. Reducing Operational Costs using Cisco ISR Support for Data Modelling Enterprises and Service Providers wish to drive down the operational cost (opex) of their networks and increase the agility and speed with which they deliver new services furthered by investments in Software Defined Networking (SDN) and Network Function Virtualization (NFV). Cisco routers provide support for Netconf and YANG data-modelling with increasing model coverage in successive releases. Software Maintenance Upgrades (SMU) The ISR4000 routers now support Software Maintenance Upgrades (SMU)7. An SMU is a package that can be installed on a system to provide a patch fix or security resolution to a released image, is provided on a per release and per component basis, and is specific to the platform. An SMU is an independent and self- sufficient package and does not have any prerequisites or dependencies. Please refer to https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/config-mgmt/configuration/xe-16-6/config-mgmt- xe-16-6-book/cm-smu.html for additional details. Network Plug and Play Network Plug and Play helps automate the onboarding of new devices on your network by applying configuration settings without manual intervention. With the ease of a centrally managed controller, it reduces the time a new device takes to join your network and become functional. For more information on Plug and Play (PnP), please refer to https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Plug- and-Play/release/notes/pnp-connect-release-notes.html.