LGS INNOVATIONS IP ADDRESS MANAGEMENT

Transcription

1 LGS INNOVATIONS IP ADDRESS MANAGEMENT Streamlining Administration for Security and Savings Is your Domain Name System (DNS) getting the attention it deserves? DNS is the hierarchical distributed naming system for computers, services, or any resource connected to the Internet or a private network, converting numerical device addresses into easy-to-understand names. DNS serves almost as a phone book for the Internet, translating human-friendly computer hostnames into IP addresses. Unlike a phone book the DNS can be quickly updated, allowing a service s location on the network to change without affecting the end users, who continue to use the same host name. Users take advantage of this when they use meaningful Uniform Resource Locators (URLs), and addresses without having to know how the computer actually locates the services. This navigation method is convenient, but it also opens Domain Name Systems to hacking and spoofing, where deliberately misleading data is sent in DNS responses to reroute DNS requests to bogus name servers, steering users to a hacker s servers and leaving your agency or organization totally exposed.

2 DNSSEC: Origin Authentication for Added Security DNS Security Extensions (DNSSEC) are a suite of specifications for securing certain kinds of information provided by the DNS as used on Internet Protocol (IP) networks. DNSSEC extensions provide DNS clients origin authentication of DNS data, authenticated denial of existence, and data integrity. DNSSEC covers all DNS data including name to IP address translation for web servers, voice over IP (VoIP), , chat protocols, etc. In 2009, the Executive Office of the President, Office of Management and Budget, put out a memorandum to all Federal Chief Information Officers mandating the deployment of DNSSEC to.gov domains. Because both government and commercial organizations use the Internet to disseminate information both internally and externally, the added security provided by DNSSEC promotes a more efficient and effective use of the network. VitalQIP : DNS/DHCP IP Address Management Software A market-leading solution for automating IP address management services across networks, the Nokia VitalQIP DNS/DHCP IP Address Management (IPAM) software streamlines management and cuts administrative costs for enterprises, government agencies, and service providers worldwide. VitalQIP helps government and commercial organizations efficiently configure, automate, integrate, and administer IP services across their entire network - locally or globally. Compatible with multi-vendor technologies, this solution helps organizations centralize the planning and administration of IP addresses, delivering significant reductions in infrastructure support costs and improved network availability. 2 LGS INNOVATIONS

3 A leading IP management product, VitalQIP has deployments with over 850 customers, including government agencies, telecommunications companies, financial service institutions, and universities. Without VitalQIP your domain could face: Loss of communication. Hackers can render your agency unable to communicate between groups and with the general public. Lack of trust. All it takes is one security failure for your collaboration partners, businesses, and the public to mistrust the safety of your entire domain. Loss of sensitive information. Attackers can re-route or block Internet-based applications such as and VoIP disrupting your operations and stealing usernames, passwords, account numbers, ID numbers, and more. Lack of access to mission-critical systems, including agency financial applications. If you can t access your online systems and resources, you can t do your job. VitalQIP is a centralized IP management tool that can also be used to configure DNS and DHCP servers from a variety of vendors, adding security and DNSSEC compliance, bringing a tremendous amount of flexibility to existing network environments, and providing consolidated management of the existing infrastructure. VitalQIP supports the following servers: Nokia DNS servers Nokia DHCP servers Microsoft DNS servers Microsoft DHCP servers Any BIND 8 or 9 compliant DNS server Nokia Software Appliances in a Virtual environment Nokia Appliances Nokia Software Appliances Nokia DNS and DHCP on Riverbed Wan Optimizer End user PCs, broadband devices, etc. utilize RFC compliant DHCP or DNS transactions to interface with these servers. 3 LGS INNOVATIONS

4 LGS Innovations is a former subsidiary of Alcatel-Lucent, with exclusive reseller rights to deliver legacy Alcatel-Lucent products to the U.S. government, both directly and through any indirect supplier. Following Nokia s acquisition of Alcatel-Lucent in January 2016, LGS maintains this exclusive reseller role with the U.S. government, offering the same products as under the Alcatel-Lucent brand. We are committed to providing our customers the tools they need for the most secure, efficient, flexible, and scalable solutions. Automating IP Address Management VitalQIP has broad applicability - organizations across all vertical industries that run IP networks can benefit from its automated IP address management. Reduces infrastructure support costs - fewer support staff Reduces address assignment process and departmental costs Reduces disaster recovery time and cost Improves the availability of network infrastructure Reduces operator effort and misconfigurations Reduces troubleshooting time and support costs due to inaccurate configuration Improves overall network operational efficiencies Maintains consistent and accurate IP inventory Controls operating expenses through automation Provides high availability for clients/subscribers VitalQIP is performance proven in the most demanding networks Rapidly provisions address space and reliably delivers critical IP name and service In-step with new technology and services: VoIP, ENUM, RFID, IPv6, Mobile HSD and IP Video, etc. Innovative Profiling Capabilities, Flexible Subnet Management Today s networks must be updated constantly to keep up with frequent moves, mergers, and reorganizations that cause address space to become fragmented. VitalQIP allows for the creation of a base of network and customer information so that subnets and network services can be easily defined and managed. By delivering a customizable user interface, VitalQIP streamlines operations and allows for IP network planning, modeling, and building that reflects an agency or organization s structure and goals. The ability to modify DNS options on multiple domains simultaneously can greatly reduce the operational expenses of configuring the network. Windows Support: VitalQIP software continues its market-leading support of Microsoft Windows DNS/DHCP servers with support of sites, subnets, and secure zones in Active Directory. DNS and DHCP server compatibility: VitalQIP supports BIND-compliant DNS servers. The Nokia DHCP Server can update both primary and secondary DNS servers with resource record information as DHCP leases are granted and deleted. 4 LGS INNOVATIONS

5 Handling IP Address Management: the Shift Toward Appliances The VitalQIP solution addresses the shift in the IP Address Management (IPAM) market toward appliances for increased reliability, manageability, scalability and security, and seamlessly integrates with VitalQIP DNS/DHCP & IP Address Management Software. Components of the VitalQIP Address Management Software include: Audit Manager Simple Network Management Protocol (SNMP) module API Toolkit Network Allocator Services Manager Registration Manager Auto Discovery ENUM Manager Centralized appliance management data store keeps track of services and status of remote appliances: Automated software upgrade capability with rollback options Highly secure communication between AMS and appliances with unique appliance key generation Logical grouping of appliances for ease of upgrades Remote start/stop/initialize of services High availability using heartbeat and virtual address mechanism Value-added modules include: Audit Manager enables you to track the usage history of an IP address and the associated user or group Simple Network Management Protocol (SNMP) Module provides visibility into the network services engines running your DNS and DHCP protocols and helps you maximize the overall uptime performance of these services Usage-Based Billing Interface collects and tracks IP address assignments and links each address to a billing location or group API Toolkit allows you to extend and integrate the VitalQIP system into other critical network applications Network Allocator allows you to automate the creation of subnets Services Manager is specifically designed for the server administrator, enabling any administrator with access privilege to verify the operation of the DHCP and DNS environment Registration Manager streamlines network administration and enhances address tracking by authenticating each enterprise user and dynamically allocating an IP address based on a profile that can be mapped to levels of service to which the user is entitled AutoDiscovery provides a snapshot of the IP/Ethernet network as is ENUM Manager provides the ability to administrate ENUM records in the VitalQIP database and manage and update Nokia DNS servers 5 LGS INNOVATIONS

6 ABOUT LGS INNOVATIONS LGS Innovations delivers mission-critical communications products, R&D, and supporting services to U.S. defense, intelligence, and civilian agencies, state and local governments, critical infrastructure operators, and commercial customers around the world. We create advanced solutions in wireless communications, signals processing and analysis, optical networking, photonics, routing and switching, and spectrum management. These solutions drive mission success in Command, Control, Communications, Computers, Intelligence, Surveillance and Reconnaissance (C4ISR), cyberspace operations, and network assurance. By incorporating best-in-class commercial and custom technologies with a full suite of offerings in research and development, engineering, integration, and product applications, our solutions improve efficiency, reduce costs, and provide an information advantage to our customers. LGS has a history and culture of innovation, and maintains strong ties to our Bell Labs legacy of inventive development. Our intellectual curiosity keeps us on the cutting edge of technology and leverages our 75-year history of creating next-generation communications solutions to support critical operations. LGS Innovations is a U.S.-owned company headquartered in Herndon, Virginia, with offices across the U.S. and overseas. We employ more than 1,000 associates around the world, including 750 scientists and engineers. Do you have a passion for innovation? So do we. Learn more at LGS Innovations Dulles Technology Drive, Suite 301 Herndon, VA Tel: LGS-4243 ( ) url: LGS, LGS Innovations, and the LGS Innovations logo are trademarks of LGS Innovations LLC. The information presented is subject to change without notice LGS Innovations