An ACI Case Study in Healthcare to Protect EMR Systems and Automate Operation

Transcription

1

2 An ACI Case Study in Healthcare to Protect EMR Systems and Automate Operation Benjamin Vickers - Director of IT, ProMedica Harry Petty Moderator, Cisco Systems

3 Agenda An ACI Case Study in Healthcare to Protect EMR Systems and Automate Operations Introduction Healthcare, EPIC Systems and ACI ProMedica Intro IT Challenges Solution and Deployment on ACI Results Best Practice Observations 3

4 Cisco Webex Teams Questions? Use Cisco Webex Teams (formerly Cisco Spark) to chat with the speaker after the session How Find this session in the Cisco Live Mobile App Click Join the Discussion Install Webex Teams or go directly to the team space Enter messages/questions in the team space Webex Teams will be moderated by the speaker until June 18, cs.co/ciscolivebot# 4

5 Healthcare, EMR, and Epic Systems Epic leading the way for EMR Epic develops software to help people get well, help people stay well, and help future generations be healthier Epic Software is used in hospitals, clinics, integrated delivery networks, independent practices, patients homes (and in their pockets) Employee-owned and developer-led #1 Overall Software Suite in KLAS Epic is hardware vendor-neutral GE Healthcare AthenaHealth Prognosis Harris Self-developed Allscripts McKesson MEDHOST CPSI Meditech Epic Cerner 2017 EHR vendor client count by bed size Under Over 190 million patients have a current electronic record in Epic today. 5

6 ACI What it is and does App Agility Simplification / Abstraction ACI Centralized Provisioning and Visibility Automation and Programmability

7 ACI Policy for Epic Client Access Reporting, File Services, Print Services, MultiPurpose Services Presentation HyperSpace Web Citrix XenApp, Reporting Databases (Cogito / Clarity) Production Databases (CacheDB) ACI end point groups app end point pool that share common policy ACI contracts allowed communications ports by source and destination (white list)

8 ACI Deployment Options: Epic Disaster Recovery Use Cases 1 ACI Stretched Fabric ACI Multi-Pod Fabric ACI Multi-Site DC1 APIC Cluster DC2 Pod A IPN MP-BGP - EVPN Pod n Fabric A IP MP-BGP - EVPN Fabric n APIC Cluster Geographically Stretch a single Pod Multiple Networks (Pods) in a single Availability Zone (Fabric) Multiple Availability Zones (Fabrics) in a Single Region and Multi-Region Policy Management

9 ProMedica Established in 1986 Locally-owned, nationally recognized, notfor-profit healthcare network based in Toledo, Ohio. Our expansive team includes more than 2,700 physicians and more than 17,900 employees treating 4.7 million patients annually at 330 sites throughout northwest Ohio and southeast Michigan 9

10 2 STATES, Ohio and Michigan 330 sites ProMedica Toledo Hospital ProMedica Toledo Children s Hospital, a division of ProMedica Toledo Hospital ProMedica Flower Hospital ProMedica Wildwood Orthopaedic and Spine Hospital, a division of ProMedica Toledo Hospital ProMedica Bay Park Hospital ProMedica Bixby Hospital ProMedica Herrick Hospital ProMedica Defiance Regional Hospital Lima Memorial Health System Affiliate ProMedica Fostoria Community Hospital ProMedica Memorial Hospital (Fremont) ProMedica Monroe Regional Hospital ProMedica Coldwater Regional Hospital 10

11 IT Challenges Overhaul an incongruent legacy network environment to support a mission-critical application Improve system redundancy, application availability, and infrastructure management Enhance security and control to protect highly sensitive health data 11

12 Solution and Deployment with ACI Software-defined network fabric stretched across two data centers Centralized, policy-driven management and automation Next-generation intrusion prevention and firewall 12

13 EPIC Application 13

14 EPIC Application Profile with Contracts 14

15 ProMedica Stretched Fabric Architecture 15

16 Winning Together CDW has been implementing ACI since Implementing a logical network is very different than implementing a physical network, CDW has expertise in the logical and physical network. CDW has a strong partnership with Cisco and is focused on excellence. CDW has 23 experience ACI delivery engineers location all over the US. CDW delivery services include all of the Cisco Intent Based Data Center Products. 16

17 Teamwork Taking on a Complex Project Together 4 Spines and 50+ Leaves Servers migrated from Avaya to ACI Fabric Dual data center, Stretched fabric Multi-tenant, Multi-VRF VMM integration Vblock EPIC 17

18 Results Built a consistent, reliable network infrastructure spanning two data centers Established network isolation and segmentation for better security and data protection Streamlined infrastructure and change management with singlepane-of-glass control 18

19 Policy Based Security and Isolation Simplified Networking for DR Outcomes Realized with Epic on ACI Policy automation across multihypervisor and bare metal Successfully deployed EPIC, and other major applications like Unified Communications, and SCOM Efficiencies realized in deploying network changes while maintaining application policy and security 19

20 Best Practice Observations We re no longer dealing with switching problems on a box-by-box basis. We re focused on application interdependencies, microsegmentation, and automation strategic and architectural tasks versus pure connectivity and box management. Ben Vickers, Director of IT, ProMedica 20

21 Best Practice Observations Change management adapted to new automation In hindsight, things that might be done differently Invest in your own ACI lab for training, test Now that Tetration is available, looking at Tetration for Application Dependency Mapping to migrate more brownfield applications and expand the zero trust model to more applications Security enforcement and workload protection 21

22 Automate the Epic Migration to ACI Tetration App Policy App Level Policy Enforcement / Visibility Data Real Time Network Policy Self-documenting Network Real-time Change Notification 22

23 Application Dependency Mapping for Epic Example Template for ACI Epic Network Profile ADM_ 23

24 Questions?

25 Thank you

26 Cisco Webex Teams Questions? Use Cisco Webex Teams (formerly Cisco Spark) to chat with the speaker after the session How Find this session in the Cisco Live Mobile App Click Join the Discussion Install Webex Teams or go directly to the team space Enter messages/questions in the team space Webex Teams will be moderated by the speaker until June 18, cs.co/ciscolivebot# 26

27 Complete your online session evaluation Give us your feedback to be entered into a Daily Survey Drawing. Complete your session surveys through the Cisco Live mobile app or on Don t forget: Cisco Live sessions will be available for viewing on demand after the event at 27

28 Continue your education Demos in the Cisco campus Walk-in self-paced labs Meet the engineer 1:1 meetings Related sessions 28

29

30 Data Center / Virtualization Cisco education offerings Course Description Cisco Certification Introducing Cisco Data Center Networking (DCICN) Introducing Cisco Data Center Technologies (DCICT) Get job-ready foundational-level certification and skills in installing, configuring, and maintaining next generation data centers. CCNA Data Center Implementing Cisco Data Center Unified Computing (DCUCI) Implementing Cisco Data Center Infrastructure (DCII) Implementing Cisco Data Center Virtualization and Automation (DCVAI) Designing Cisco Data Center Infrastructure (DCID) Troubleshooting Cisco Data Center Infrastructure (DCIT) Obtain professional level skills to design, configure, implement, troubleshoot next generation data center infrastructure. CCNP Data Center Product Training Portfolio:DCAC9K, DCINX9K, DCMDS, DCUCS, DCNX1K, DCNX5K, DCNX7K, CACND, DSACI, HFLEX UCSDF, UCSDACI, DCUCCEN Designing the FlexPod Solution (FPDESIGN) Implementing and Administering the FlexPod Solution (FPIMPADM) Designing the VersaStack Solution (VSDESIGN) Implementing and Administering the VersaStack Solution (VSIMP) Gain hands-on skills using Cisco solutions to configure, deploy, manage and troubleshoot unified computing, policy-driven and virtualized data center infrastructure. Learn how to design, implement and administer FlexPod solutions Learn how to design, implement and administer VersaStack solutions Cisco and NetApp Certified FlexPod Specialist For more details, please visit: Questions? Visit the Learning@Cisco Booth 30

31 Cloud Cisco education offerings Course Description Cisco Certification Understanding Cloud Fundamentals (CLDFND) Introducing Cloud Administration (CLDADM) Implementing and Troubleshooting the Cisco Cloud Infrastructure (CLDINF) Designing the Cisco Cloud (CLDDES) Automating the Cisco Enterprise Cloud (CLDAUT) Building the Cisco Cloud with Application Centric Infrastructure (CLDACI) Product Training Portfolio: CloudCenter: CLDCTR* UCS Director: UCSDF, UCSDACI Prime Service Catalog: PSCF, PSCI, PSCD MetaPod: MPODF20 *Available Q3FY18 Learn how to perform foundational tasks related to Cloud computing, and the essentials of Cloud infrastructure, administration and operations Obtain professional level skills to design, automate, secure, provision and manage private and hybrid Clouds Gain in-depth hands-on skills using Cisco solutions to configure, deploy, manage and troubleshoot Cloud deployments CCNA Cloud CCNP Cloud For more details, please visit: Questions? Visit the Booth 31

32 Data and Analytics Cisco education offerings Course ANDMB Data Management, Architecture and Applications Description Provides hands on training with a technical mix of application, compute, storage and networking topics concerning the deployment of Big Data clusters. ANDMA Advanced Data Management, Architecture and Applications Covers major architecture design to cater to different needs of the application, data center or deployment requirements. It provides architectural designs and advanced hands-on training on topics covering Scaling of cluster to thousands of nodes and management, Data Life Cycle management with HDFS tiered storage, and different approaches for Multi-tenant Hadoop cluster deployments with Openstack Data and Analytics training page: For more details, please visit: Questions? Visit the Learning@Cisco Booth 32

33 Digital Business Transformation Cisco education offerings For Technology Sellers: Course Description Cisco Certification Adopting the Cisco Business Architecture Approach Builds skills to discover and address technology needs using a business-focused, consultative sales approach, broadly applicable and targeted to prepare for the digital transformation journey that is demanded across the business world. Cisco Business Architecture Analyst Applying Cisco Business Architecture Techniques Mastering the Cisco Business Architecture Discipline Cisco Customer Success Manager Specialist Provides tools and skills training to prepare the learner to use a business led approach to technology solutions sales and deployments. This continues the journey begun with the Adopting the Cisco Business Architecture Approach above Builds skills, and proven, real-world techniques to prepare for a Business architect leadership role in the sales and deployment of transformative technology solutions. Prepares for the crucial role that drives adoption and enablement, ensuring that customers achieve their expected business outcomes, and reduces churn/increases renewal for services and subscription based products. Cisco Business Architecture Specialist Cisco Business Architecture Practitioner Cisco Certified Customer Success Manager For more details, please visit: Questions? Visit the Learning@Cisco Booth 33

34 Cybersecurity Cisco education offerings Course Description Cisco Certification Understanding Cisco Cybersecurity Fundamentals (SFUND) Implementing Cisco Cybersecurity Operations (SECOPS) Cisco Security Product Training Courses The SECFND course provides understanding of cybersecurity s basic principles, foundational knowledge, and core skills needed to build a foundation for understanding more advanced cybersecurity material & skills. This course prepares candidates to begin a career within a Security Operations Center (SOC), working with Cybersecurity Analysts at the associate level. Official deep-dive, hands-on product training on Cisco s latest security products, including NGFW, ASA, NGIPS, AMP, Identity Services Engine, and Web Security Appliances, and much more. CCNA Cyber Ops CCNA Cyber Ops For more details, please visit: or Questions? Visit the Learning@Cisco Booth 34

35 Cybersecurity Cisco education offerings Course Description Cisco Certification CCIE Security 5.0 Implementing Cisco Edge Network Security Solutions (SENSS) Implementing Cisco Threat Control Solutions (SITCS) v1.5 Implementing Cisco Secure Access Solutions (SISAS) Implementing Cisco Secure Mobility Solutions (SIMOS) Implementing Cisco Network Security (IINS 3.0) Configure Cisco perimeter edge security solutions utilizing Cisco Switches, Cisco Routers, and Cisco Adaptive Security Appliance (ASA) Firewalls Implement Cisco s Next Generation Firewall (NGFW), FirePOWER NGIPS (Next Generation IPS), Cisco AMP (Advanced Malware Protection), as well as Web Security, Security and Cloud Web Security Deploy Cisco s Identity Services Engine and 802.1X secure network access Protect data traversing a public or shared infrastructure such as the Internet by implementing and maintaining Cisco VPN solutions Focuses on the design, implementation, and monitoring of a comprehensive security policy, using Cisco IOS security features For more details, please visit: or Questions? Visit the Learning@Cisco Booth CCIE Security CCNP Security CCNA Security 35