Transcript sp-DDI_intoduction

The Global DDI Company
1
The Challenges
Dramatically growth of applications and services available on
networks
Exponential growth of devices connected to networks
IP infrastructure is a key support of Enterprise changes
Merge, acquisition, extension, and relocation
No IP = No Business
2
The Challenges
On top of service criticality, drastically increase of IP
address life-cycle complexity !
More devices with more services
More security rules, with more exceptions to the rules
More dynamic connections for more user mobility
High intimacy between DNS, DHCP and IPAM services
More management tasks to plan, deploy, control and reconcile
Consequences ?
50% of +1,000 employees companies faced network outages DNS or
DHCP
High average annual management costs per IP address at $8,68
“If this problem continued to be ignored organizations face an
unacceptable situation: increased downtime, additional security events,
burdensome operations, and increasing costs”, ESG, feb 2009
3
Standard Solution
75% of DNS and DHCP services in use are based on
Open source software (Bind, ISC)
Microsoft® Windows Server
IPAM tools in use
7%
4%
Spreadsheet
Software
71% of
companies
have no
solution
14%
46%
Appliance
Homegrown
10%
Other
Manually
19%
4
Why Current DNS-DHCP
Solutions Are Not Enough?
No built-in DNS-DHCP services continuity and disaster
recovery functionality
No advanced security mechanisms to protect data integrity
and ensure service availability
No unified and automated management
DNS and DHCP services are unitary and separately managed
No IP address management functionalities
Limited audit trails for quality and security control
5
EfficientiP DDI Solutions
Delegate
Discover
Modeling
Policies
Monitor
Analysis
Reconcile
Deploy
Plan
Visibility
Control
Managing the global life-cycle of DDI
resources
Automation
Metadata
Alerts
Continuity
Reports
6
EfficientiP Solutions
Centralized management of IP
plans and remote DNS-DHCP
servers
Security, availability
and performance of
DNS and DHCP servers
7
Key Benefits
High Availability
• Automated failover management
• Built-in disaster recovery mechanisms
Security
• System: Hardened OS, easy and fast update process
• Deny of service attack protections
• IP address connection tracking: Where, When and Which IP/MAC address are connected?
Management
•
•
•
Unified and automated management
• One tool, one single process to manage IPAM-DNS-DHCP
• Overall consistency control to eliminate conflicting configurations
Conformity management
• Define and enforce automatically DDI policies (IP address naming convention)
• Metadata management (e.g. location, serial number)
Granular role based delegation
Visibility
• Single repository to consolidate DDI data
• Real time access to the DDI information with advanced monitoring, reports, and statistics
• Access to the information with user-defined search criteria (metadata)
8
Global Visibility
bookmark
Tabs
Global Search
Unified IPAM DNS DHCP data view
User-defined
dashboards
Intuitive userdefined wizards
9
Project Types
Internal DNS-DHCP: Managing existing DNS-DHCP
servers
Unified and automated management of IPs and DNS-DHCP
Overall consistency control: Error free
Built-in Disaster recovery
Internal DNS-DHCP: Replacing existing DNS-DHCP
servers with SOLIDserver appliances
DNS-DHCP high availability, built-in disaster recovery
Unified and automated management of IPs and DNS-DHCP
Overall consistency control: Error free
External DNS (DMZ): Replacing existing DNS servers
with SOLIDserver appliances
High availability and security of DNS services
Easy to deploy, manage and update
10
Project Types
IPAM: Replacing spreadsheet or homegrown tools
Centralized management repository of IPs and subnets
Easy delegation of rights
IP address Connection tracking
Discover and track switch, port, vlan information of IP addresses
connected on the network
Data Center
High availability and security of DNS services
Integrated IPAM functionalities
IP address connection discovery to detect and report conflicts
VoIP project
High availability of DHCP services
DoS attack protection
11
References
Telecommunication
Industries
Banks & Insurances
SFR
Colt
T Mobile
Completel
Easynet
Vodafone
KPN
Noos
NXP Philips
MAN
Arkema
Repsol
Cassidian (EADS company)
EDF
GDF SUEZ
Globalia
Salomon
AtomiC
Universal Music Group
Japan Tobacco
Coface
Credit Agricole
Zurich Financial Services
Bank of France
Henner Group
Transports
RATP
SANEF
United Airlines
Metro of Madrid
Metro of Paris
Services
3Suisses
CEA
SERSIM
CNAMTS
La Poste
Sopra Group
12
IPAM & Core Network Services Appliances
IP addressing Plan Management
Network Services Engines: DNS-DHCP-NTP-TFTP
Multi-Vendor DNS&DHCP services Management
Microsoft – ISC – Cisco – SOLIDServer™
Active IP address Tracking
Built-in Work Flow
Integrated Zero Admin Database
Hardened OS with embedded stateful firewall
13
Hardware Appliance Suite
Performances
SDS-3000
2 hot-swap power supplies
2 hot-swap hard disks
SDS-2000
2 hot-swap power supplies
SDS-1000
2 hot-swap power supplies
SDS-500
2 hot-swap power supplies
SDS-250
Capacity
14
Software Appliance Suite
Software Appliance
Appliance image on a CD or download
“Boot and Run” appliance technology
Auto-install appliance image on industry
standard hardware or Virtual server
Benefits
Get appliance benefits without hardware
constraints
No dedicated spare platforms required
Added value of appliance combined with world wide
hardware vendor’s service
15