the global ddi company 1. the challenges dramatically growth of applications and services available...
TRANSCRIPT
The Challenges
Dramatically growth of applications and services available on networksExponential growth of devices connected to networksIP infrastructure is a key support of Enterprise changesMerge, acquisition, extension, and relocation
2
No IP = No Business
The Challenges
On top of service criticality, drastically increase of IP address life-cycle complexity !More devices with more servicesMore security rules, with more exceptions to the rulesMore dynamic connections for more user mobilityHigh intimacy between DNS, DHCP and IPAM servicesMore management tasks to plan, deploy, control and reconcile
Consequences ?50% of +1,000 employees companies faced network outages DNS or DHCPHigh average annual management costs per IP address at $8,68
3
“If this problem continued to be ignored organizations face an unacceptable situation: increased downtime, additional security events,
burdensome operations, and increasing costs”, ESG, feb 2009
Standard Solution
75% of DNS and DHCP services in use are based onOpen source software (Bind, ISC)Microsoft® Windows Server
IPAM tools in use
4
71% of companies
have no solution
Why Current DNS-DHCP Solutions Are Not Enough?
No built-in DNS-DHCP services continuity and disaster recovery functionality
No advanced security mechanisms to protect data integrity and ensure service availability
No unified and automated management
DNS and DHCP services are unitary and separately managed
No IP address management functionalities
Limited audit trails for quality and security control
5
EfficientiP DDI Solutions
Managing the global life-cycle of DDI resources
6
Modeling Visibility
MonitorDelegate
Policies
Alerts
Automation
Discover ReportsAnalysis
Metadata Continuity
EfficientiP Solutions
7
Centralized management of IP plans and remote DNS-DHCP
servers
Security, availability and performance of
DNS and DHCP servers
Key Benefits
8
Security• System: Hardened OS, easy and fast update process• Deny of service attack protections• IP address connection tracking: Where, When and Which IP/MAC address are connected?
High Availability• Automated failover management• Built-in disaster recovery mechanisms
Management• Unified and automated management
• One tool, one single process to manage IPAM-DNS-DHCP• Overall consistency control to eliminate conflicting configurations
• Conformity management• Define and enforce automatically DDI policies (IP address naming convention)• Metadata management (e.g. location, serial number)
• Granular role based delegation
Visibility• Single repository to consolidate DDI data• Real time access to the DDI information with advanced monitoring, reports, and statistics• Access to the information with user-defined search criteria (metadata)
Global Visibility
9
bookmarkTabs
Global Search
Unified IPAM DNS DHCP data view
Intuitive user-defined wizards
Project Types
10
Internal DNS-DHCP: Managing existing DNS-DHCP servers
Unified and automated management of IPs and DNS-DHCPOverall consistency control: Error freeBuilt-in Disaster recovery
Internal DNS-DHCP: Replacing existing DNS-DHCP servers with SOLIDserver appliances
DNS-DHCP high availability, built-in disaster recoveryUnified and automated management of IPs and DNS-DHCPOverall consistency control: Error free
External DNS (DMZ): Replacing existing DNS servers with SOLIDserver appliances
High availability and security of DNS servicesEasy to deploy, manage and update
Project Types
11
IPAM: Replacing spreadsheet or homegrown tools
Centralized management repository of IPs and subnetsEasy delegation of rights
IP address Connection trackingDiscover and track switch, port, vlan information of IP addresses connected on the network
Data CenterHigh availability and security of DNS servicesIntegrated IPAM functionalities IP address connection discovery to detect and report conflicts
VoIP projectHigh availability of DHCP servicesDoS attack protection
References
TelecommunicationSFRColtT MobileCompletel Easynet VodafoneKPNNoos
IndustriesNXP PhilipsMANArkema RepsolCassidian (EADS company)EDF GDF SUEZGlobaliaSalomonAtomiCUniversal Music GroupJapan Tobacco
Banks & InsurancesCoface Credit AgricoleZurich Financial ServicesBank of FranceHenner Group
TransportsRATP SANEF United AirlinesMetro of MadridMetro of Paris
Services3Suisses CEA SERSIM CNAMTS La Poste Sopra Group
12
IPAM & Core Network Services Appliances
IP addressing Plan Management Network Services Engines: DNS-DHCP-NTP-TFTP Multi-Vendor DNS&DHCP services Management
Microsoft – ISC – Cisco – SOLIDServer™
Active IP address Tracking Built-in Work FlowIntegrated Zero Admin DatabaseHardened OS with embedded stateful firewall
13
Hardware Appliance Suite
SDS-250
SDS-5002 hot-swap power supplies
Performances
Capacity
14
SDS-10002 hot-swap power supplies
SDS-20002 hot-swap power supplies
SDS-30002 hot-swap power supplies
2 hot-swap hard disks
Software Appliance Suite
15
Software ApplianceAppliance image on a CD or download
“Boot and Run” appliance technology
Auto-install appliance image on industry standard hardware or Virtual server
BenefitsGet appliance benefits without hardware constraints
No dedicated spare platforms required Added value of appliance combined with world wide hardware vendor’s service