ibm endpoint manager - software usage analysis
DESCRIPTION
IBM Endpoint Manager for Software Use Analysis delivers the ability to identify an organization’s licensed and unlicensed software with drill-down granularity to track software usage patterns and trends. Dramatically reducing the time required to conduct a comprehensive software asset inventory for license reconciliation or compliance pur-poses, the solution provides valuable insight into what the organization owns—and what it has installed but doesn’t own—along with how often the software is being used in order to support better planning, budgeting and vendor license compliance. Slides from a Webinar conducted in December 2013TRANSCRIPT
IBM Endpoint Manager Software Usage Analysis - Webinar
Darryl Miles December 2013
© 2013 International Business Machines Corporation 2
Presentation Overview
• Overview of IBM Endpoint Manager
• So6ware Usage Analysis (SUA)
• IBM License Metric Tool (ILMT) and moving to IEM SUA
• IBM’s Internal Experience deploying IEM
• Case Studies
• Summary
© 2013 International Business Machines Corporation 3
IBM Endpoint Manager continuously monitors the health and security of all enterprise computers in real-time via a single, policy-driven agent
Endpoints
• Common management agent
• Unified management console
• Common infrastructure
• Single server
IBM Endpoint Manager
Patch Management
Lifecycle Management
Software Use Analysis
Power Management
Mobile Devices
Security and Compliance
Core Protection
Desktop / laptop / server endpoint Mobile Purpose specific
Systems Management Security Management
Server Automation
© 2013 International Business Machines Corporation 4
IBM Endpoint Manager continuously monitors the health and security of all enterprise computers in real-time via a single, policy-driven agent
Desktop / laptop / server endpoint Mobile Purpose specific
Endpoints
• Common management agent
• Unified management console
• Common infrastructure
• Single server
IBM Endpoint Manager
Patch Management
Lifecycle Management
Software Use Analysis
Power Management
Mobile Devices
Security and Compliance
Core Protection
Systems Management Security Management
Server Automation
Why IBM Endpoint Manager ?
Concord Hospital achieves 98% first-pass success in hours on their Microsoft
and 3rd party patches
Helped US Foods reduce patch deployment times by 80 percent, saving USD 500,000 on software licenses and avoiding more
than USD1 million in license noncompliance fines.
Bendigo Bank has saved $175,000 off its power bill within 12 months
and avoid 2190 tonnes of carbon emissions
IBM has deployed Endpoint Manager to over
700,000 endpoints on three servers. Expects to save over $10M in Year 1
Over 13,000 mobile devices enrolled in 72
hours!
© 2013 International Business Machines Corporation 5
IBM Endpoint Manager offers a unified management platform
Desktop and Server Administration Delivers patch, inventory, software distribution, OS deployment, remote control capabilities and near real-time visibility into the state of endpoints including advanced capabilities to support server endpoints.
Software Asset Management Track software usage patterns and trends across Windows, UNIX and Linux endpoints with always on asset management to enhance license compliance. Manages software assets from procurement to retirement using control desk integration.
Mobile Device Management & Security Address issues of security, complexity and bring-your-own-device (BYOD) policies across a unified platform that spans Apple iOS, Google Android, Blackberry, Nokia Symbian and Microsoft Windows Mobile platforms.
Endpoint Security, Protection & Compliance Provides unified, real-time visibility and enforcement to protect distributed environments against threats that target endpoints and helps organizations to comply with regulatory standards on security.
© 2013 International Business Machines Corporation 6
Single Server & Console • Highly secure, highly scalable • Aggregates data, analyzes & reports • Pushes out pre-defined/custom policies
Cloud-based Content Delivery • Highly extensible • Automatic, on-demand functionality
Single Intelligent Agent • Performs multiple functions • Continuous self-assessment & policy enforcement • Minimal system impact (< 2% CPU)
Lightweight, Robust Infrastructure • Use existing systems as Relays • Built-in redundancy • Support/secure roaming endpoints
How it Works Remote Offices
Manage roaming devices
Identify unmanaged assets
© 2013 International Business Machines Corporation 7
• For Windows Servers and PCs
• Unix/Linux Servers • So6ware Asset Discovery • So6ware Use Metering
• So6ware Use ReporLng
• Near real Lme so6ware inventory
• Near real Lme so6ware usage reporLng
• Search, browse, and edit the Endpoint Manager so6ware idenLficaLon catalogue, which contains over 105,000 signatures out of the box
• Periodic catalogue updates are released regularly
• Easily customize the so6ware idenLficaLon catalogue to include tracking of home-‐grown and proprietary applicaLons
Benefits: Services:
Software Usage Analysis
Software publishers
8000+
Software products
40,000+
© 2013 International Business Machines Corporation 8 8
Software Usage Analysis 2.x
© 2013 International Business Machines Corporation 9
IBM License Metric Tool migration to IEM SUA
© 2013 International Business Machines Corporation 10
Proposed IEM SUA (License Metric) Dashboard
© 2013 International Business Machines Corporation 11
IBM’s experience using IBM Endpoint Manager
Before After Patch availability typically 3-14+ days Patch availability within 24 hours
92% compliance within 5 days (ACPM only) 98% within 48 hours
EZUpdate sometimes misses application of patches on required machines
Detected about 35% of participants missing at least one previous patch
Compliance model, completely reliant on user
90% of Windows requirements can be automatically remediated
Exceptions at machine level Exceptions at setting level
IBM gained real-time visibility into endpoints, and automatically remediates issues across over 500,000 endpoints and supports multiple policies based on employee role and data access
Reference - http://ibm.co/Ikm5xR
© 2013 International Business Machines Corporation 12
At IBM’s Pulse 2013 conference a number of organisations outlined some of benefits they’ve realised from IBM Endpoint Manager
• Provided near real-‐-me asset and so1ware usage visibility • Improved end-‐user client sa-sfac-on and Helpdesk first call resolu-on • User friendly client dashboard • IT staff ‘in the field’ efficiencies
• Provided visibility to devices otherwise not detected • Savings on so1ware licensing of over €200K per year (3000 endpoints)
• Management of over 10,000 devices on extremely low bandwidth networks • Shortened patch management cycle from 3 days to less than 1 day • Consolidated 51 servers to 6 IEM servers • Repor-ng from -me consuming to a simple web applica-on
• Vastly improved security and compliance posture • Real -me inventory and fast custom reports • Saving $100k annually using power management • So1ware license compliance and cost avoidance
Client #1 discussed on the webinar
Client #2 discussed on the webinar
Client #3 discussed on the webinar
Client #4 discussed on the webinar
© 2013 International Business Machines Corporation 13
Summary
• IBM Endpoint Manager enables unified management of all enterprise devices – desktops, laptops, servers, smartphones, and tablets
• Real-time/proactive endpoint management: Patch
management, anti-virus/malware, power management and device location information
• Continuous compliance reduces costs and risk • Power management • Management of software assets
© 2013 International Business Machines Corporation 14
ibm.com