Managing outside the firewall and learn what is new in ITMS 7.5

Transcription

1 Managing outside the firewall and learn what is new in ITMS 7.5 Joseph Carson Sr. Manager Product Management Vlad Zelenjak Sr. Manager Development 1

2 Welcome to Barcelona or Welcome Back! 2

3 Tallinn, Estonia 3

4 1-1 Sessions with Product Owners 4

5 Agenda 1 Why Cloud-enabled Management? 2 Scenarios 3 SMP Internet Gateway 4 Supported Functionality 5 Installation 5

6 Important Usage Information This information is about pre-release software. Any unreleased update to the product or other planned modification is subject to ongoing evaluation by Symantec and therefore subject to change. This information is provided without warranty of any kind, express or implied. Customers who purchase Symantec products should make their purchase decision based upon features that are currently available. EM B16 SYMANTEC VISION

7 Why CEM? IT admins want: 100% visibility for the systems in the environment and what is installed on all of them 100% Patch compliance Consistent software delivery rollouts (up-to-date software/av) Reality? Not knowing how many systems are actually there Unsure about the software usage within the company Low Patch compliance Software version inconsistency across the environment 7

8 Why is it getting harder for IT Admins? Mobile Devices Cloud Services Mobile Workforce Laptops are consistently outselling desktops since % of businesses use SaaS By 2015, over 37% of the global workforce will work outside the corporate firewall CEM helps increase manageability ( Managed endpoint is a secure endpoint ) EM B16 SYMANTEC VISION

9 Covered Scenarios Enterprises Travelling employees Employees working from home Mainly laptops Highly distributed companies Telecommuting employees/home office Managed Service Providers (MSP) No VPN link from customer to the service provider 9

10 Actively manage remote and disconnected users Introducing Cloud-Enabled Management Securely manage users anywhere on the internet Eliminates the need for VPN Agents automatically detect location Secure trusted communications Internet Gateway can support multiple servers By 2015, over 37% of the global workforce will be mobile. 1 Wall Street Journal 1 Worldwide Mobile Worker Population Forecast, IDC Research, December

11 My Office Patched, Managed and Secured by Symantec using CEM 11

12 Cloud-enabled Agent External DMZ Internal Internet Agent External Firewall Internet Gateway Internal Firewall Symantec Management Platform Secure connection No VPN required Gateway blocks untrusted connections 12

13 Managing Through the Cloud SMP Internet Gateway HTTPS Customer Site A Symantec Management Platform Remote Package Server CEM SSL Tunnel Customer Site B Internet CEM SSL Tunnel Remote Package Server 13

14 SMP Internet Gateway Placed in the Demilitarized Zone (DMZ) Faces the Internet Protects the SMP Server and Site Servers That are located on the internal network Blocks untrusted clients Routes trusted clients to the management servers Single Gateway can serve multiple SMP and Site Servers 14

15 SMP Internet Gateway - scalability Internet Gateway can handle up to 3,000 concurrent connections: Translates into up to 60,000 CEM-enabled nodes Hardware requirements: Preferably physical box, 8GB RAM, 40GB HDD and dual-core CPU VM-based IG offers lower scalability, but still sufficient for a fully-loaded NS 15

16 SMP Internet Gateway architecture - examples 16

17 Operating Systems Support Managed endpoints Windows No UNIX/Linux support now (Mac support upcoming) SMP Internet Gateway Windows Server 2008 R2 SP1 (64-bit).NET Framework 3.5 SP1 Two NICs 17

18 Connectivity Load Balancing Agents can switch between gateways Automatic load-balancing using roundrobin algorithm All gateways are treated equally Automatic failover Inaccessible gateways are marked as bad and skipped for a registry configurable timeout At least two gateways are recommended for fault-tolerance 19

19 ITMS What is Supported? Managed Software Delivery Quick Delivery (non real-time) Hardware Inventory Software Inventory Server Inventory App Metering Patch Inventory Patch Management Policies Basic Client Tasks 21

20 CEM Configuration 1. Download and install SMP Internet Gateway (IG) 2. Generate IG security certificate + point IG to the SMP Server(s) 3. Configure IG on SMP Server(s) + enable clients to work over CEM 4. Optional: create and distribute offline Agent package Pre-requisite SMP Server and clients are communicating over HTTPS 23

21 Positive response from beta customers Solid, easy-to-implement Very impressed! This technology is a god-send, we really needed it Download is VERY fast Exciting evolution Console UI is lightning-fast EM B16 SYMANTEC VISION

22 Improving the administrative experience 7.5 What's New in 7.5 SYMANTEC VISION

23 Free yourself from the office Introducing New ios Remote Access Console Consistent experience from the ipad to the Console Immediate access to summary and drill-down reports Quickly verify status of policies and tasks Remediate issues, including remote control What's New in 7.5 SYMANTEC VISION

24 We re better when we work together Be where your peers are! Free access to product extentions, articles, videos, experts, more... Connect how Signup for SEV Beta 2 Download ITMS 7.5 Release Preview: Speak to your account rep for information or Joseph Carson Joseph_Carson@symantec.com SYMANTEC VISION

25 Symantec Connect Business Community Forums Blogs Articles Videos Events Downloads Ideas 1.1 million monthly visitors 4,000 new items each week Get answers to technical questions Contribute technical content Earn rewards symantec.com/connect Symantec Connect SYMANTEC VISION 2012

26 Other Important Sessions Wed 9:00 EM B03 Endpoint Management State of the Union Thur 10:30 Customer Session ITMS and Endpoint - CSR Thur 11:45 Customer Session Northgate Managed Service What is New SYMANTEC VISION

27 Thank you! Copyright 2011 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.

28 Agent communication in CEM mode Internet Gateway is listening on port 333 NS Agent web site is configured on port 4725 CEM Port is 4726 IG certificate Agent certificate for IG IG changes port to CEM port Agent certificate for NS 31