The Cisco Catalyst 3850 series is the enterprise-class stackable access-layer switches that provide full convergence between wired & wireless on a single platform. Cisco's Unified Access Data Plane (UADP) application-specific integrated circuit (ASIC) powers the switch & enables uniform wired-wireless policy enforcement, application visibility, flexibility & application optimization. Features Converged wired plus wireless access The Cisco Catalyst 3850 is the first stackable access switching platform that enables wired plus wireless services on a single Cisco IOS XE software-based platform. With this, Cisco has pioneered a host of rich capabilities such as high availability based on stateful switchover (SSO) on stacking, granular Qo S, security, and Flexible Netflow (FNF) across wired & wireless in a seamless fashion. Flexible Net Flow (FNF) Full visibility into the wired plus wireless traffic is achieved because of the access point Control & Provisioning of Wireless Access Points (CAPWAP) tunnel termination on the switch. This helps identify users & user traffic flows in order to identify potential attackers & take corrective action at the access layer before the attack penetrates further into the network. This is achieved using FNF, which monitors every single flow entering & exiting the switch stack for wired & wireless users. It also helps identify the top wired/wireless talkers & enforce appropriate bandwidth provisioning policies. Advanced wired plus wireless Qo S capabilities The 3850 switch has advanced wired plus wireless Qo S capabilities. It uses the Cisco modular Qo S command line interface (MQC). The switch manages wireless bandwidth using unprecedented hierarchical bandwidth management starting at the per-access-point level & drilling further down to per-radio, per-service set identification (SSID), and per-user levels. This helps manage & prioritize available bandwidth between various radios & various SSIDs (enterprise, guest, and so on) within each radio on a percentage basis. The switch is also capable of automatically allocating equal bandwidth among the connected users within a given SSID. Provides a rich set of security features The Cisco Catalyst 3850 provides a rich set of security features for wired plus wireless users. Features such as IEEE 802.1x, Dynamic Host Configuration Protocol (DHCP) snooping, IP Source Guard & control plane protection, wireless intrusion prevention systems (WIPSs), and so on enable protection against unauthorized users & attackers. With a variety of wired plus wireless users connecting to the network, the switch supports session-aware networking, in which each device connected to the network is identified as one session, and unique access control lists (ACLs) and/or Qo S policies can be defined & applied using the ISE for each of these sessions, providing better control on the devices connecting to the network.