Transcript Teleworking and Remote Operations

Teleworking and
Remote Operations
Michigan Digital Government Summit
October 10, 2008
Dan Seeley – Solutions Consultant
1
© 2007 Sprint Nextel. All rights reserved.
Teleworking and Remote Operations
• The workplace culture is changing
– Getting work done vs. attending work
• The desire/pressure for users to work remotely
has grown exponentially; driven by:
–
–
–
–
–
High fuel prices
Shortage of qualified staff
Increased mobile activities
Tighter budgets
Environmental Concerns
• Technology is enabling the change
2
© 2007 Sprint Nextel. All rights reserved.
Remote Access Technology
• Technologies that enable Teleworking
–
–
–
–
–
–
–
–
Email and Instant Messaging
Voice and Web Conferencing
Intranet Applications
Broadband Access (wired and mobile)
Virtual Private Networks
Femtocells
Remote desktop (device) management
Laptops and PDAs (Windows & Blackberry)
3
© 2007 Sprint Nextel. All rights reserved.
Converged Networks; Multi-faceted
Communications
Wireless Integration
Voice Connect
Fleet Management
Airport
Wireless Networks
Internetworking
Gateways
IP Networks
IMS
Any-to-Any
Connectivity
COS
Headquarters
MPLS
WWAN
Datalink
Branch Office
Customer Site
Field Management
Mobile Workers
4
© 2007 Sprint Nextel. All rights reserved.
Teleworkers
Broadband Access
• Wireless speeds are starting to become viable replacements to
wireline
Market Needs
Wireline
Wireless Equivalent*
Large Bandwidth
• Large Applications
• Large Offices
Above 1.544Mbps
• OC-3
• DS-3
• Multiple T1’s
4G WiMax
• Peak:
Medium
Bandwidth
• Small Offices
• Home
Connections
384K – 1.544Mbps
• Business Grade
DSL
• Cable
• T1
Low Bandwidth
• Point of Sale
• ATM Machines
40K – 256K
• DSL, ISDN
• Dial-Up, 56K
Circuits
*Note: Approximate speeds
Put Presentation title in footer menu
Up
1.5-5+Mbps
Down
3-15+Mbps
3G
EVDO Rev A
• Peak:
• Average:
Up
1.8Mbps
400Kbps
Down
3.1Mbps
.6-1.2Mbps
2G 1XRTT
• Average:
50K-70Kbps
5
Broadband Access Considerations
- How much should we spend?
Consumer Class Broadband Access
> DSL, Cable Modem, Wireless Broadband
> Very low cost
> Can easily become congested based on time of day (i.e. cable modem)
> Has very low service level agreements for mean time to repair
> Dynamic IP
Business Class Broadband Access
>
>
>
>
>
DSL, Cable Modem, Wireless Broadband
Higher cost. Often above $100 per location
Better Speeds, especially upload speed
Business class SLAs
Static IP
> Private network options
6
Put Presentation title in footer menu
Broadband Access Router for the Home
•Low Cost
•Available redundancy when using low cost network options
Cellular
Broadband
Network
Mobile Broadband
Connection Card or
USB Modem
Ethernet
Laptop
Ethernet
Laptop
Wi-Fi
Laptop
Wi-Fi
Wi-Fi
Laptop
Cable or DSL Modem
7
© 2007 Sprint Nextel. All rights reserved.
Wireless G Mobile
Broadband Router
Wi-Fi
Laptop
Virtual Private Networking
- How should I secure my information?
• Client software providing encryption
– Cisco, Checkpoint, Sonicwall, Citrix, etc.
• Hardware encryption
– Security device provides a single tunnel to the
host location. Good for branch office.
• Private Networking
– Carrier provided privacy
8
© 2007 Sprint Nextel. All rights reserved.
Sprint PCS Data Link – Private Network
• A completely private network architecture
• User traffic is switched across the Sprint PCS network, not routed
• IP Addressing scheme is dictated by the customer
• User is authenticated against the customer AAA server
• Data Link service is available on all Sprint PCS data plans
9
© 2007 Sprint Nextel. All rights reserved.
Femtocell Technology
• Femtocells are low cost, miniature
cellular phone towers in your house.
• They use a cellular carrier’s licensed
radio spectrum – not Wi-Fi.
• No special phones needed.
• Cellular calls are passed over the users
broadband network to the carrier.
• Special unlimited calling plans are
available for femtocell use.
• Calls transition to the macro network
when a user leaves their house.
• Femtocells are 911 compliant.
10
© 2007 Sprint Nextel. All rights reserved.
How to connect a Femtocell for home use
Public Internet
CDMA
Cable/DSL
Modem
AIRAVE
Router
PC
Customer has a cable/DSL modem with only one Ethernet port.
An additional router with multiple Ethernet ports is added.
11
© 2007 Sprint Nextel. All rights reserved.
Strategies to Secure Mobile Devices
• Third party security and management platforms
– Example: Alcatel Lucent Laptop Guardian
• Blackberry Enterprise Server
– A proven PDA solution for the public sector
– Fully certified in virtually all areas of security
• Microsoft System Center and Active Directory
– Now supporting Windows Mobile Devices with SCMDM
(System Center Mobile Device Manager)
12
© 2007 Sprint Nextel. All rights reserved.
Components of Alcatel Lucent Laptop Guardian
Laptop PC card
- Secure, always-on 3G broadband
PCMCIA data card
- 24/7 connectivity to a dedicated
management system located in the
enterprise
3G
WiFi
Server
VPN
Policies
APIs for IT
Applications
13
© 2007 Sprint Nextel. All rights reserved.
PC Card
3G Modem
GPS
API
Processor
Removable
Memory
Memory
Battery
Operating
System
LAN
Server with management software
Deployed on the enterprise premises to
terminate the secure tunnels and
manage user credentials and security
policies
Software Licenses
Per-user licenses that are paid monthly
Laptop Guardian Benefits
•Laptop lost or Stolen
• All Data is encrypted and a can be wiped remotely
•Authentication
•Card is an “ignition key” required to operate the laptop
•Data Protection
•All encryption keys are stored on the card
•VPN Usage
•Automatic VPN connection for all interfaces
•Anti-tampering
•Stand alone computer monitors activity on laptop
•Laptop Location
•GPS capability is built into the Guardian card
•Third Party Integration
•Open architecture platform integrates easily
•100% Patch Laptops
•All laptop patches are enforced by the Guardian card
14
© 2007 Sprint Nextel. All rights reserved.
The BlackBerry® Enterprise Solution
The BlackBerry Enterprise Server is the leading wireless platform in the U.S. for
connecting mobile professionals to customers, colleagues, and information.
It is a complete solution that provides everything organizations require to go wireless:
• Wireless sync of Calendar, Address Book, Tasks and Notes
• Works with all Exchange, Domino 5.x and GroupWise 7.x platform
• Enriched browser for secure wireless access to Internet and Intranet applications
• Support for common files and attachments (JPG, PDF, DOC, XLS, etc.)
• Works with Sprint and Nextel BlackBerry devices
• Secure OTA distribution and management of BlackBerry
• FIPS 140-2 government security certification
15 15
Sprint Wireless Email Solutions
© 2007 Sprint Nextel. All rights reserved.
System Center Mobile Device Manager
Lets you deploy and manage Windows Mobile devices like you do PCs/laptops in your IT
infrastructure and provides security-enhanced access to corporate data
Security
Management
Device
Management
 Active Directory Domain join
 Single point of management for
mobile devices in enterprise
 Policy enforcement using Active
Directory/Group Policy targeting
(>130 policies)
 Communications and camera
disablement*
 File encryption
 Application allow and deny
 Remote wipe
 OMA-DM compliant
 Full OTA provisioning and
bootstrapping
© 2007 Sprint Nextel. All rights reserved.
 Machine authentication and
“double envelope security”
 Session Persistence
 OTA Software distribution based
on WSUS 3.0
 Fast Reconnect
 Inventory
 Internetwork roaming
 SQL Server 2005 based reporting
capabilities
 Standards based (IKEv2,
MobIKE, IPSEC tunnel mode)
 Role based administration
 MMC snap-ins and Powershell
cmndlets
 WMU On/Off control compliant
16
Mobile
Optimized VPN
Embedded Mobile Computing Solutions
Leading manufacturers are building Mobile Broadband components directly into powerful, cutting-edge
devices. New software based radios (i.e. Qualcomm Gobi) will greatly simplify your carrier choices.
Embedded Sprint
Mobile Broadband
built right in to
Dell’s Latitude,
Inspiron and XPS
Notebooks.
Pocket-sized
embedded device
with full PC
performance and
advanced processing
and connectivity
options.
17
© 2007 Sprint Nextel. All rights reserved.
Boost productivity with
built-in Sprint Mobile
Broadband on the
innovative HP Compaq
2710p Tablet PC and
other HP business
notebooks.
Option-packed
embedded Tablet PC
combines dual
processors, WiFi,
Bluetooth® and more.
Ultra-portable and
slim designed VAIO®
embedded notebooks.
Lightweight,
embedded devices
with Windows®,
Intel®, WiFi,
Bluetooth®, external
display and Sprint
Mobile Broadband.
Toughbook® embedded
notebooks for optimal
performance on Sprint’s
Mobile Broadband Network.
Fully and SemiRugged embedded
devices for the
demands of mobile
professionals and
military and public
safety personnel.
Features of Business Email Solutions
Standard Features:
 Real-time wireless “push” delivery of email and data
 Wireless sync of Email, Calendar, and Contacts
 Support for common files and attachments (jpg, pdf, doc, xls, etc.)
 Browsers for Internet
 Full OTA device activation with no desktop software required
 On-handheld help
 Remote address book look-up
 Remote erase of the device
18 18
Sprint Wireless Email Solutions
© 2007 Sprint Nextel. All rights reserved.
Thank You!
Dan Seeley
Solutions Consultant, Public Sector
248-521-0142
[email protected]
19
© 2007 Sprint Nextel. All rights reserved.