SWAN Technology Users Group. Thursday March 30 th, 1pm Tinley Park Public Library Steven Schlewitt, SWAN IT Manager

Transcription

1 SWAN Technology Users Group Thursday March 30 th, 1pm Tinley Park Public Library Steven Schlewitt, SWAN IT Manager 1

2 Meeting Agenda SWAN System Update Quarterly Downtime Report Upcoming SWAN Technology Projects Mandatory SonicWall Upgrades Self-Maintainer s Program WorkFlows Upgrade Red Hat OS Upgrade Symphony Hardware Migration Making the Move: The SWAN IT Infrastructure Migration The Plan The Process Learning from Our Mistakes IT Projects from YOUR Library Open Forum Discussion

3 System Downtime Report (Jan 1 st March 28 th ) WorkFlows/Symphony Server January 25th (5 minutes, planned, before-hours) February 4 th (30 minutes, planned, after-hours) February 17 th (Under 5 minutes, planned, after-hours) March 28 th (2 hours, intermittent, unplanned) RAILS Datacenter Network Maintenance ICN provider network maintenance ICN provider network maintenance Network saturation issues possibly due to a runaway external harvest process

4 System Downtime Report (Jan 1 st March 28 th ) Enterprise OPAC SaaS Server January 2 nd (2 hours, unplanned) Limited outage affecting My Account and item availability functions February 17th (Less than 5 minutes, planned, after-hours) Limited outage affecting My Account and item availability functions due to ICN network maintenance January 4 th (5 minutes, unplanned) Tomcat service crash on SirsiDynix SaaS-hosted server February 20 th (5 Minutes, unplanned ) SaaS server Tomcat service error requiring a restart January 4 th (5 minutes, planned, after-hours) Corrective measure taken to remediate Tomcat service crash March 4 th (2 hours, unplanned) Intermittent network issues at the SirsiDynix data center impacted select SaaS hosted servers January 20 th (1 hour, 30 minutes, planned, after-hours) Preventative system maintenance by SirsiDynix staff March 9 th (30 minutes, unplanned) SirsiDynix DNS error in SaaS environment January 25 th (5 minutes, planned, before-hours) Limited outage affecting My Account and item availability functions due to RAILS network maintenance March 17 th (5 minutes, unplanned) SaaS server Tomcat service error requiring a restart February 4 th (30 minutes, planned, after-hours) Limited outage affecting My Account and item availability functions due to ICN network maintenance March 27 th (5 minutes, unplanned) SirsiDynix DNS error in SaaS environment February 5 th (10 minutes, unplanned) 503 errors possibly relating to Tomcat system resources March 28 th (1 hour, planned), after-hours) Enterprise v4.5.1 upgrade

5 System Downtime Report: Jan 1 st March 28 th WorkFlows / Symphony Server Enterprise OPAC Server Uptime Uptime Downtime (Planned) < 1% Downtime (Unplanned) < 1% Downtime (Planned) < 1% Downtime (Unplanned) < 1%

6 Upcoming Projects: Mandatory Library SonicWALL Upgrades Unsupported Models: TZ 170 (6 libraries) TZ 190 (1 library) TZ 210 (1 library) PRO 2040 (1 library) PRO 3060 (5 libraries) NSA 240 (3 libraries) All models are EOS (End of Support) Cannot be replaced under warranty Cannot be managed centrally with new version of SonicWALL GMS software Cannot support modern standards for VPN encryption

7 Option 1: SWAN Self- Maintenance VPN Agreement Agreement must be reviewed and signed by library s director Library s IT department/contractor is responsible for the library s firewall, network, and VPN connectivity Support for non-sonicwall firewalls Including options for virtualization Secondary or parallel firewall is no longer needed Library s current primary firewall can be used to establish SWAN s VPN Implementation requires scheduling and some network planning

8 Requirements for Self-Maintainer Firewall Must be a current product (Not End of Life/End of Support) Must support IPsec VPN IKEv2 AES256 SHA256

9 Recommended Firewalls for Self-Maintainer SonicWALL Hardware only solution Cisco ASA Hardware or virtualized platform (ASAv) pfsense Hardware or virtualized platform Community edition or supported hardware

10 Unsupported Firewalls for Self-Maintainer Cisco Meraki Does not support IKEv2 for Non-Meraki VPNs Firewall deactivates without a valid subscription Ubiquiti UniFi Security Gateway does not allow VPN to non UniFi devices EdgeRouter does not support IKEv2 through web interface

11 Option 2: SonicWALL Hardware Upgrade Group purchase discounts may be available! Current Model EOS Date Recommended Replacement Replacement MSRP (Current) NSA 240 4/29/2017 TZ300 $ PRO /1/2013 TZ300 $ PRO /1/2013 TZ400 $ TZ170 7/1/2013 SOHO $ TZ190 7/1/2014 SOHO $ TZ210 5/30/2017 SOHO $ * All prices exclude Dell/SonicWALL Support which is included in SWAN s annual GMS software maintenance

12 Upcoming Projects: Symphony/WorkFlows Upgrade Tentatively scheduled for early May Auto Renewals policy adjustments Functionality for batch loading users Red Hat Enterprise Linux 7 officially supported Minor bug fixes

13 Red Hat OS Upgrade /OS Refresh Tentatively scheduled for Fall 2017 Migration to Red Hat Enterprise Linux 7 (RHEL 7) Will require downtime to perform transition Benefits Improved stability Improved security Flexibility to improve system services relating to Symphony/WorkFlows

14 Dell servers are now over 4 years old Operating on extended service warranties What s in our current server infrastructure? Dell R910 x2 (32-core each) Dell Equalogic SAN x2, 1Gb throughput Performance bump before New 19 migration Symphony Server Hardware Upgrade

15 Possible Options Purchase New Bare-Metal Hardware Hosted at RAILS datacenter Locked-in with configuration Over-provision initially Infrastructure as a Service (IaaS) with Azure/Amazon Web Services/Google Hosted with 3 rd party service Built-in applications for monitoring, service-control Scalable environment with flexible pricing Endless flexibility to provisioning Software as a Service (SaaS) with SirsiDynix Hosted with SirsiDynix Previously discussed prior to migration

16 Making the Move: The SWAN IT Infrastructure Migration The Plan Create a staff IT infrastructure that resembles previous RAILS offerings Laptops, VPN service, photo copiers, desk phones, chat client, file storage, domain authentication Improve options for remote work to support Work from Home program Seamlessly integrate offered services Implement with a small footprint, allowing mobility and flexibility with services

17 Microsoft Office O365 E5 Skype for Business to replace Cisco Jabber Softphone calling and desk phone integration Integrated conference and desktop sharing Video conferencing Microsoft OneDrive/Sharepoint for file storage Microsoft O365 Exchange to replace Exchange 2007 Microsoft-hosted Import existing domain More storage than we could possibly need Integrated spam/virus filtering Microsoft Azure to replace Windows Server Domain Authentication anywhere Self-service options Windows 10 to replace Windows 7

18 Other Solutions Implemented Lenovo ultrabook Laptops (T460/T560) Integrated VPN (OpenVPN) Windows 10 Professional Lenovo Servers & NAS On-prem domain controller File storage Imperial facility security system Docking stations, monitors, other peripherals

19 What Did We Learn? Most Important Azure Active Directory is not a fully-fledged domain controller replacement Needed on-premise solution for file storage authentication and group policy Sharepoint is not capable of presenting consistent mapped file storage Resorted to on-premise file server Skype for Business does not have an auto attendant / call trees Subscribed to Grasshopper to handle appropriate routing 501c3 and education discounts are MASSIVE Government -qualified discounts are low and difficult to obtain Less Important Expect massive delays when ordering anything from Lenovo Whatever you re thinking right now take that and multiply it by three

20 Open Forum: Your Library projects Future RFID Implementations? New Installations of Self-Check or AMH? Upgrade to Windows 10? Migration to Cloud Services?

21 Upcoming SWAN Technology Events SWAN RFID Committee April 27 th 10am-12pm Location TBD SWAN Technology Users Group September 21 st 10am-12pm Location TBD L2 event coming soon

22 How to Contact Us SWAN Support Phone: 844-SWANLIB (ext. 0) Questions & Open Discussion Steven Schlewitt, IT Manager Phone: Ian Nosek, System Administrator Phone: Rudy Host, Network Administrator Phone: