Listing Thumbnail

    Cisco Catalyst 8000V SD-WAN & Router - PAYG - DNA Advantage

     Info
    Deployed on AWS
    Free Trial
    The DNA Advantage Package for Catalyst 8000V (C8000V) includes all DNA Advantage feature sets and delivers multi-gigabit performance for enterprise-class networking services & VPN in the AWS cloud, as well as twice the IPSec throughput with IMIX packets.
    4.2

    Overview

    As part of Cisco's Cloud connect portfolio, the DNA Advantage package for Catalyst 8000V (C8000V) delivers the maximum performance available in AWS cloud for virtual networking services. Deliver high-speed secure VPN services with High Availability, strong Firewall protection, Application Visibility & Control, and more... This AMI runs Cisco IOS XE technology features and uses AWS instances with direct I/O path for higher & more consistent performance. The C8000V with full Cisco IOS-XE support enables customers to deploy the same enterprise-class networking services that they are so used to in their on-prem networks inside AWS. This AMI enables enterprise-class Routing, VPN, High-Availability, Firewall, IP SLA, VPC Interconnection, Application Visibility & Control, Performance Monitoring, Optimization. he familiar IOS XE CLI and RESTful API ensures easy deployment, monitoring, troubleshooting, and service orchestration.

    If you are using the Cisco Cloud Services Router 1000V (CSR 1000V) virtual router in autonomous mode, then you may want to use the GUI-driven migration tool to migrate those instances to Cisco Catalyst 8000V (C8000V) instance. This migration uses AWS CloudFormation template based automation to spin-up a new instance of Catalyst 8000V and copy the configuration files from the CSR 1000V instance. You can batch migrate up to ten CSR 1000V instances in one go. The migrated instances will include the enhanced "secure object storage" feature in C8000V that stores all sensitive configuration information in an encrypted file system inside the VM. See the http://cs.co/c8000v-aws-migration-tool  chapter in the Catalyst 8000V Configuration Guide for AWS for more details.

    Highlights

    • Enterprise-class VPN in AWS that's faster, cheaper, and more scalable than other VPN solutions. Manage both sides of your VPN for greater security. Familiar IOS-XE based VPN supports the same commands, tools, and logs as other Cisco Catalyst 8000 platforms.
    • More secure, reliable, and cost effective than native VPN. Feature-rich: IPSec, DMVPN, FlexVPN, GETVPN, EZVPN, SSL VPN, Zone-Based Firewall, and more...

    Details

    Delivery method

    Delivery option
    64-bit (x86) Amazon Machine Image (AMI)

    Latest version

    Operating system
    OtherLinux Cisco IOS XE

    Deployed on AWS
    New

    Introducing multi-product solutions

    You can now purchase comprehensive solutions tailored to use cases and industries.

    Multi-product solutions

    Features and programs

    Buyer guide

    Gain valuable insights from real users who purchased this product, powered by PeerSpot.
    Buyer guide

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Free trial

    Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.

    Cisco Catalyst 8000V SD-WAN & Router - PAYG - DNA Advantage

     Info
    Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    Usage costs (12)

     Info
    Dimension
    Cost/hour
    c5.large
    Recommended
    $2.34
    c5.9xlarge
    $4.12
    c5n.2xlarge
    $4.12
    t3.medium
    $2.34
    c5n.4xlarge
    $5.95
    c5n.large
    $3.29
    c5n.9xlarge
    $7.44
    c5n.xlarge
    $4.12
    c5.2xlarge
    $3.29
    c5.4xlarge
    $4.12

    AI Insights

     Info

    Dimensions summary

    You pay by the hour based on the AWS EC2 instance size you run this virtual router on. All twelve options bill on the same usage-based, hourly model with the DNA Advantage software license included. The dimensions are not feature tiers. Instead, each maps to a specific EC2 instance type, from smaller general-purpose sizes to larger compute and network-optimized ones. Your hourly rate rises as you select instances with more compute or network throughput. You choose the instance that matches your capacity needs, and you only pay while it runs.

    Top-of-mind questions for buyers

    Each dimension meters the running time of the virtual router software on a specific EC2 instance type, billed per hour. The DNA Advantage software license is included in that hourly rate. AWS bills the underlying EC2 compute separately on your AWS invoice.
    The hourly software charge applies only while the instance runs. When you stop the instance, the software metering stops and no software hours accrue. AWS may still charge for attached storage on a stopped instance, but that is separate from this software license.
    You select a new EC2 instance type when you deploy or resize. Billing follows whichever instance you run, so your hourly rate changes based on the instance you choose. The transition is not automatic; you decide when to switch to match your capacity needs.
    www.cisco.com
    Helpful?

    Vendor refund policy

    None

    How can we make this page better?

    Tell us how we can improve this page, or report an issue with this product.
    Tell us how we can improve this page, or report an issue with this product.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    64-bit (x86) Amazon Machine Image (AMI)

    Amazon Machine Image (AMI)

    An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.

    Additional details

    Usage instructions

    Complete the following steps to launch a Catalyst 8000V (C8000V) AMI: 1. Locate the C8000V product page by searching the AWS Marketplace for 'C8000V'. 2. On the C8000V product page, click the 'Continue' button. 3. Use either the 'Launch with EC2 Console' tab to complete the deployment of a C8000V AMI. Select the correct version and region, and click the 'Launch with EC2 Console' button. 4. The Launch Instances Wizard will open. Select the desired instance type and click 'Next'. 5. Select your desired VPC environment in the 'Network' pull-down menu. 6. Select your desired IP subnet for the first C8000V network interface in the 'Subnet' pull-down menu. 7. Add any additional network interfaces, and select the appropriate subnet for each to connect to. 8. Click 'Review and Launch', and then review the information for correctness. 9. If the information is correct, click 'Launch', and then either select an existing key pair to use for authentication, or create a new key pair. If you create a key pair, make sure to download and save the private key. 10. Click 'Launch Instances'. 11. From the AWS Console, wait for your instance to indicate a state of 'running'. It may take a few moments after that point, before you can connect to your C8000V instance. Connect to your instance using an SSH client, and the private SSH key selected or created earlier in these steps. Example: ssh -i mykeypair.pem ec2-user@myhostname.compute-1.amazonaws.com . 12. See notes for further instructions.

    Support

    Vendor support

    Cisco TAC support services for Pay As You Go is available for purchase through any Cisco Partner. Cisco Partner Locator: https://locatr.cloudapps.cisco.com/WWChannels/LOCATR/openBasicSearch.do . Support Community: https://supportforums.cisco.com/community/csr-amazon . A 30-day free trial period is included for first-time users. For questions or to obtain C8000V AMI access to the GovCloud region, contact ask-csr-aws-pm@cisco.com .

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Product comparison

     Info
    Updated weekly

    Accolades

     Info
    Top
    50
    In Network Infrastructure
    Top
    50
    In Migration
    Top
    10
    In Network Infrastructure

    Customer reviews

     Info
    Sentiment is AI generated from actual customer reviews on AWS and G2
    Reviews
    Functionality
    Ease of use
    Customer service
    Cost effectiveness
    Positive reviews
    Mixed reviews
    Negative reviews

    Overview

     Info
    AI generated from product descriptions
    Virtual Private Network Protocols
    Support for IPSec, DMVPN, FlexVPN, GETVPN, EZVPN, and SSL VPN protocols
    Firewall and Security
    Zone-Based Firewall protection with Application Visibility and Control capabilities
    High Availability and Routing
    Enterprise-class routing, high availability configuration, IP SLA monitoring, and VPC interconnection
    Performance Optimization
    Multi-gigabit performance with twice the IPSec throughput on IMIX packets using AWS instances with direct I/O path
    Management and Orchestration
    IOS XE CLI interface and RESTful API for deployment, monitoring, troubleshooting, and service orchestration
    Intrusion Detection and Prevention
    Intrusion detection and prevention (IPS) capabilities to identify and block malicious network traffic and attacks.
    Anti-Virus Protection
    Cloud-based anti-virus capabilities that detect and block spyware, adware, viruses, keyloggers, and malware over POP3, HTTP, SMTP, and FTP protocols.
    VPN and Encryption
    IPsec and full mesh VPN termination services for secure connectivity across on-premises data centers, campuses, branches, and geographically dispersed VPCs.
    Application Visibility and Control
    AppSecure application visibility and control through L4-L7security services for advanced threat protection and application-level inspection.
    Cloud Service Integration
    Native integration with AWS services including Elastic Load Balancer, Auto-Scaling Groups, CloudWatch, Security Hub, Key Management Service, Gateway Load Balancer, and Elastic Network Adapter support.
    Application Layer Visibility and Control
    Complete application layer-7 visibility and control of traffic with next-generation firewall capabilities in AWS environments
    AI/ML-Powered Threat Detection
    AI/ML-powered inspection engine with researcher-grade signatures for detection of zero-day threats, exploits, malware, spyware, and command and control attacks
    Dynamic Policy Management
    Policy definitions that dynamically apply to cloud assets based on AWS tags, Application IDs, User IDs, geographies, or zones without manual intervention
    Cloud-Native Integration
    Seamless integration and scaling with AWS environment including Gateway Load Balancer, AWS Auto Scaling, and Transit VPC with AWS Transit Gateway support
    Advanced Threat Prevention Service
    Cloud-delivered Advanced Threat Prevention security service with market-leading threat coverage against known and zero-day threats while maintaining performance

    Contract

     Info
    Standard contract
    No
    No
    No

    Customer reviews

    Ratings and reviews

     Info
    4.2
    32 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    47%
    44%
    9%
    0%
    0%
    7 AWS reviews
    |
    25 external reviews
    External reviews are from G2  and PeerSpot .
    Naveenkumar Arjunan

    Application aware routing has improved hybrid enterprise networks and supports efficient operations

    Reviewed on Oct 21, 2026
    Review from a verified AWS customer

    What is our primary use case?

    I am using Cisco Catalyst SD-WAN mainly for enterprise customers.

    What is most valuable?

    The most valuable feature I find in Cisco Catalyst SD-WAN is application aware routing.

    I am not aware of the end-to-end visibility offered by Cisco Catalyst SD-WAN.

    I assess the operational efficiency of Cisco Catalyst SD-WAN in the IT environment as overall good, and it is a competitor that we are able to propose to our customers.

    Cisco Catalyst SD-WAN optimizes the experience in both hybrid and distributed enterprise setups, and we are positioned well to promote Cisco Catalyst SD-WAN.

    What needs improvement?

    I see some room for improvement for Cisco Catalyst SD-WAN with G2 routers, as we are expecting more customers.

    To bring Cisco Catalyst SD-WAN closer to ten, I would like to see improvement in the GUI, Graphical User Interface, and for it to be more user-friendly.

    I find it complex to use and complex to learn how to use it.

    For how long have I used the solution?

    I have been working with Cisco Catalyst SD-WAN for the last one year.

    Cisco Catalyst SD-WAN is used in our company for around five to ten years, and I also recommend the product to my customers.

    What do I think about the stability of the solution?

    Based on the rating scale from one to ten, I would assess the stability and reliability of Cisco Catalyst SD-WAN as eight.

    I have not experienced much downtime, crashes, or performance issues, and it is good as of now.

    What do I think about the scalability of the solution?

    Cisco Catalyst SD-WAN is currently steady in scaling with the growing needs of our organization, and we can expect in one or two years that we will have more bandwidth.

    Currently, around six customers in my customers' company are using Cisco Catalyst SD-WAN.

    They are mostly enterprise companies.

    How are customer service and support?

    I would rate their technical support a seven.

    I see there is room for improvement when it comes to response time, which should be improved, as well as first level support quality.

    With respect to support, we expect some improvement regarding stability and reliability.

    Which solution did I use previously and why did I switch?

    Before Cisco Catalyst SD-WAN, I have hands-on experience in Cisco Meraki.

    What's my experience with pricing, setup cost, and licensing?

    Regarding Cisco Catalyst SD-WAN's price, I find it reasonable, based on commercial pricing and CDCS support, although we see that there is some lack in TACACS and other support.

    What other advice do I have?

    Cisco Catalyst SD-WAN is one of the competitors on the market at the moment.

    I rate Cisco Catalyst SD-WAN around eight overall.

    There are no specific challenges I face with hybrid and distributed enterprise networks that Cisco Catalyst SD-WAN addresses.

    Basel Mohamed

    Centralized routing rules have simplified branch load balancing and traffic visibility

    Reviewed on Sep 30, 2026
    Review provided by PeerSpot

    What is most valuable?

    The features I find most valuable in Cisco Catalyst SD-WAN are the configuration of rules where we don't need to configure router rules. We can create a group and configure all of them. On the other hand, there is the load balancer. I have a load balancer with two lines, with two lines in each branch of my organization. Cisco Catalyst SD-WAN makes a load balance between the two lines on a session here and a session there.

    What needs improvement?

    I don't think of something regarding weaknesses because I used to legacy routing. I think it is complete. Nothing is complete, but I think it is complete for me or for my daily work.

    My impression of the end-to-end visibility offered by Cisco is that we have other tools for monitoring traffic and net flow. But I can see the users who are consuming the bandwidth, and I can see from the LAN to the server, not the user, for example an IP address. For example, 10.10.10.10 communicates or consumes bandwidth to 10.10.10.20, but it doesn't appear with the user name, such as Ali, Zain, or Mark.

    I see room for improvement when it comes to visibility as there should be a direction they should go in the future to complete the monitoring of the user at the branch, which user at the branch consumes this bandwidth. This would make routing or configuration for routers easier.

    Regarding additional features, I have not thought of any at this time.

    For how long have I used the solution?

    I have been working with Cisco Catalyst SD-WAN for one year.

    How are customer service and support?

    I have no problem with the technical support provided by Cisco.

    I would rate their technical support at nine because for any problem, I receive an answer and the issue gets resolved. Nothing is a perfect ten, but nine is appropriate. I would rate it nine and a half.

    How was the initial setup?

    I know the concept and how Cisco Catalyst SD-WAN works. I understand what I should do for configuration, such as the vManage, vSmart, vBond, and what it needs for HA.

    It was not easy to implement it in my system as we did not do the implementation alone, but I could see how the vendors do it. I asked them about their procedures and requested a sub-plan and pre-requirements, but we did not do the implementation alone. However, for operation, we are working on operations without support.

    What about the implementation team?

    I was involved in the implementation of Cisco Catalyst SD-WAN, but not enough to implement it alone. However, I know how to.

    What's my experience with pricing, setup cost, and licensing?

    The pricing for Cisco Catalyst SD-WAN is something I don't know as the tender is not in my department or at my level, but I know it is very expensive.

    Which other solutions did I evaluate?

    I did consider other products before choosing Cisco Catalyst SD-WAN, and they are different in configuration and how they work. Forti doesn't have a centralized configuration in the way that Cisco Catalyst SD-WAN does.

    What other advice do I have?

    I don't remember which version I am currently using.

    I would rate Cisco Catalyst SD-WAN ten out of ten overall.

    In Egypt, regarding Cisco Catalyst SD-WAN popularity, fintech or big companies have many branches, such as fintech or telecom companies. Its popularity is high, and all of them want to have or already have Cisco Catalyst SD-WAN. However, other sectors know that Cisco Catalyst SD-WAN solution is very expensive and is not useful for them if they don't have many branches.

    Ahmed Mohammed Khan

    Reliable network management has supported long-term operations and simplified WAN connectivity

    Reviewed on Sep 16, 2026
    Review provided by PeerSpot

    What is our primary use case?

    The primary use case is for network management and routers we have for WAN connectivity.

    What is most valuable?

    Cisco Catalyst SD-WAN is easy to use for the purpose of SNMP and Spanning Tree. Getting the data from the long switch is sufficient to obtain proper information. It is easy to move around with, and it functions in the same manner as other Cisco devices. No major changes have occurred, so it is easier to handle.

    What needs improvement?

    I cannot speak to programming-side improvements since that is not my area of expertise.

    On a base level, improvements could include a better interface, more AI capabilities, better pricing, and better support from a user aspect. Adding AI would be beneficial.

    For how long have I used the solution?

    I have been working on Catalyst switches for more than seven to eight years. The latest models include the 92 series and 9600, and in the controller, we have the 9800.

    What do I think about the stability of the solution?

    Stability is exceptional. The switch can operate for more than twenty years, even after loss of license. I would rate it a nine out of ten. The hardware is very good and cannot be compared with other products from Aruba or HP. Cisco hardware is very perfect, similar to Juniper hardware, and you cannot compare it with other devices.

    What do I think about the scalability of the solution?

    We have three hundred fifty on-site devices, and almost five hundred to six hundred total.

    How are customer service and support?

    I would rate customer service a seven. The response time from Cisco TAC is very bad. We typically handle issues ourselves, as we do the majority of our troubleshooting independently.

    Documentation is available, but we need to read more of it. For P1 tickets, they do not respond very quickly, which is an issue. The response time is not comparable to Aruba.

    How was the initial setup?

    The initial setup is easy.

    Which other solutions did I evaluate?

    The only concern is the matter of pricing. There is no comparison between Cisco Catalyst SD-WAN and other solutions. Everything else is fine.

    What other advice do I have?

    I recommend Cisco Catalyst SD-WAN because it is easy to use. More information is available on the internet, and the community is very large, which is the primary reason for the recommendation. The main drawback preventing some from using it is the pricing. My overall rating for this product is eight out of ten.

    PSaravanakumar

    Comprehensive visibility has improved branch monitoring and central management across our network

    Reviewed on Aug 28, 2026
    Review provided by PeerSpot

    What is our primary use case?

    We are a system integrator and a Cisco Select Partner, deploying all the Cisco portfolios like SD-WAN, switching, firewall, access point, and then Secure Access, our cybersecurity product. We have been a partner at Cisco for the last 8.5 years, dealing with Cisco Catalyst SD-WAN.

    What is most valuable?

    The features I find most valuable in Cisco Catalyst SD-WAN are based on our customer requirements, as the SD-WAN solution now has two solutions: Viptela-based SD-WAN and then Meraki-based SD-WAN. Cisco Catalyst SD-WAN has detailed features, and Meraki is a better solution, but compared to Cisco Catalyst SD-WAN, some features are not as detailed.

    From the visibility perspective, I find that we are able to monitor and manage the entire branch and user-level activities, providing better visibility. We can integrate with cloud-based solutions, such as Secure Access, and get all the information regarding who is accessing from branch to headquarters, source to destination, the servers, and all related data. We can monitor and manage who is accessing and what traffic is flowing, covering all the necessary aspects.

    What needs improvement?

    Cisco Catalyst SD-WAN can be improved in minimal ways, because they have updated it now, and the updated version is really good. The only concern is the cost; compared to others, the cost is higher, but the features are the same as a superior product, so we are expecting that cost. Some customers feel the cost is high, as not all users utilize all the features. They want some limited functionality, and we have two or three models of licenses only, where they need to buy either one license version or another. They are not using all the features, so they end up paying for everything.

    The pricing is the only concern regarding Cisco Catalyst SD-WAN; otherwise, all aspects are good.

    For how long have I used the solution?

    8.5 years

    Which other solutions did I evaluate?

    I see the competition to Cisco Catalyst SD-WAN mainly as the Palo Alto product, specifically the IRON product, which is the SD-WAN device similar to Cisco Catalyst SD-WAN. It features a centralized dashboard, management, large-scope deployment, and visibility, making them a competitor. Other products are available, but they are not at that much of a competitive level; Silver Peak is one example.

    What other advice do I have?

    Cisco does optimize the experience in a hybrid or distributed enterprise setup with the previous solution being Viptela Cisco Catalyst SD-WAN, which has now changed to Cisco Catalyst SD-WAN. We can now integrate Secure Access with Cisco Catalyst SD-WAN devices, allowing us to do all the policy optimization and distributed distribution functions.

    I think the operational efficiency of Cisco in my IT environment is a good aspect compared to Palo Alto, which is another competitor in enterprise-level solutions. Cisco Catalyst SD-WAN has some more features, enabling us to integrate with multiple platforms to monitor, manage, and adapt a single point of management. I would rate this solution a 9 out of 10.

    VENKATESHREDDY

    Reliable connectivity has improved operations while high costs and onboarding still need work

    Reviewed on Aug 27, 2026
    Review provided by PeerSpot

    What is our primary use case?

    I am using Cisco Catalyst SD-WAN in my company and I recommend it to my customers as well.

    What is most valuable?

    The most valuable features of Cisco Catalyst SD-WAN include their support, which is really good compared to other vendors because we do deal with other vendors, and I have seen FortiGate. I don't think they will ever be able to match up to what Cisco Catalyst SD-WAN offerings are, that is for sure.

    Cisco Catalyst SD-WAN optimizes the experience in a hybrid or distributed enterprise setup, and it is good in enterprise setups as well. We have deployed it for our manufacturing customers and it is pretty stable.

    In terms of troubleshooting capabilities, end-to-end visibility affects my organization's ability to detect issues aggressively with their products, especially the software-defined networking stack for the LAN and WAN, where we have seen issues being detected much more aggressively, allowing us to resolve issues faster. Their AI features are really decent, so overall, it is a good solution.

    What needs improvement?

    Cisco Catalyst SD-WAN is good, but from a cost perspective, they need to think through and see how they can materialize and reduce costs, especially the hardware.

    Overall, I would rate Cisco Catalyst SD-WAN good, although they should start innovating more towards the AI landscape where we are seeing very high traction. At the SD-WAN level, they are fine, but they need to catch up, especially HPE post-acquisition of Juniper. When comparing Meraki versus Mist, Mist has better features, so those are some areas they need to catch up.

    To make Cisco Catalyst SD-WAN closer to a 10, I think cost is the first primary factor. The support and fundamental help assistance, especially during onboarding, could be much easier to enable small businesses to take it up.

    For how long have I used the solution?

    I have been working with Cisco Catalyst SD-WAN for three years.

    What do I think about the stability of the solution?

    The product is pretty stable.

    What do I think about the scalability of the solution?

    In terms of scalability, I would put Cisco Catalyst SD-WAN around eight on a scale of one to ten, as it scales well with the growing needs of my organization. We have used it in multiple diversified topologies and it has remained stable, being tested through time.

    From a scalability point of view, I don't see any concerns because we take into consideration their product-wise limitations when we are buying specific modules or things, so I think we are good over there.

    How are customer service and support?

    I would rate their technical support a ten.

    My impression of the end-to-end visibility offered by Cisco Catalyst SD-WAN depends on the channel partner who is providing the support, and their channel partners are pretty stable and quite good.

    How was the initial setup?

    The initial setup for Cisco Catalyst SD-WAN is very easy and pretty straightforward because their documentation is pretty detailed, so we haven't seen or run into issues.

    Which other solutions did I evaluate?

    I see HPE as good competition to Cisco Catalyst SD-WAN.

    HPE is cheaper.

    To make Cisco Catalyst SD-WAN closer to a 10, I think cost is the first primary factor. The support and fundamental help assistance, especially during onboarding, could be much easier to enable small businesses to take it up.

    What other advice do I have?

    Go ahead with your questions about Cisco products.

    Everything remains as is with these products. No changes.

    I purchased my Cisco products directly from Cisco.

    I would rate this review a 7 overall.

    View all reviews