HP BYOD at ITSMF The future of Networking

Transcription

1 HP BYOD at ITSMF The future of Networking René Andersen HP Networking Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

2 BYOD / mobility trend for Enterprise BYOD enhances productivity, increases flexibility and reduces device cost Market Drivers Always-on user experience Tablet & smartphone adoption rate Wireless preferred - growing speed Enterprise users want to choose devices to access applications Social Media adoption by Enterprise

3 + BYOD / mobility trend for Enterprise BYOD enhances productivity, improves user experience and reduces IT costs Market Drivers CIO Challenges BYOD Adoption Strategies Always-on user experience Centralized Control Users want to choose device and platform to access applications Tablet & smartphone adoption rate Wireless preferred - growing speed Social Media adoption by Enterprise Visibility - Monitoring & Reporting Easy deployment Manage Security risk (new uncontrolled devices) Reduce complexity (disparate wired & wireless, BYOD overlay system ) - Value to Business Embrace X Disregard Contain X Block - Security Pressure +

4 Edge access is changing. The number of switching ports being deployed at the edge of the network is decreasing as enterprises rightsize their infrastructure 76% Mobility requirements are increasing of enterprises have a single IT resource to manage network changes * A Unified Access Layer Forces Changes to Infrastructure Thinking at the Edge of the Network Gartner, Mar Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

5 ($M) BYOD is a key driver WLAN revenue growth $5.2B $3.5B CAGR: 13.8% 1H, 2012, market grew 26.6% YoY The mobile device explosion (BYOD) & SP deployments are major contributors for the significant WLAN market growth IDC (Oct, 2012, Market & Competitive update, Enterprise WLAN) 5

6 Legacy networks unprepared for BYOD Complex, Limited and Vulnerable Human Middleware Separate Networks & Management Limited BYOD Essentials Wired Wireless 6 Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

7 The Mobility Explosion By Wire The only wire required for employee work spaces will be the power connector 1 Approximately 4.5 billion Personal client devices will be on the network in Approximately 40% Employee-owned devices will be compromised by malware 3 SIMPLICITY SCALABILITY SECURITY 1 Gartner: Predicts 2012: Mobile & Wireless Technologies Rise (16 November, 2011) G IDC: The Empowered IT User: How Individuals Are Using Technology & Redefining IT (March 2012) 3 Gartner: Gartner newsroom: June 14, Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

8 Access layer is changing. G Gartner A unified access layer forces changes to infrastructure thinking at the edge of the network * Impacts New connectivity requirements: Right-size the edge of the network & eliminate unneeded ports Reduce provisioning and management cost: Eliminate duplicate applications and consoles WLAN network service application innovation: For wired and wireless clients Mobility has transformed how and when people work IT organizations are reexamining their strategies for providing wired and wireless LAN access A consolidation of network tools is also a key component to this movement 8

9 Gartner Magic Quadrant Wired and Wireless LAN Infrastructure According to Gartner, HP Networking has established itself as a global access layer vendor with its unified wired and wireless FlexCampus solution. Gartner recommended that HP be considered for all opportunities in which the entire access layer (wired and wireless connectivity) is being replaced. Intelligent Management Center (IMC) was called out as one of HP s key strengths for its multi-vendor management capabilities providing end-to-end access layer management from a single managed application. Source: Gartner (September 2013) 9 Source: Gartner Magic Quadrant for Wired and Wireless LAN Infrastructure Magic Quadrant September, 2013, Tim Zimmerman, Mark Fabbi ID Number: G This Magic Quadrant graphic was published by Gartner Inc. as part of a larger research note and should be evaluated in the context of the entire report. The Gartner report is available upon request from HP. The Magic Quadrant is copyrighted 2009 by Gartner, Inc., and is reused with permission. The Magic Quadrant is a graphical representation of a marketplace at and for a specific time period. It depicts Gartner's analysis of how certain vendors measure against criteria for that marketplace, as defined by Gartner. Gartner does not endorse any vendor, product or service depicted in the Magic Quadrant, and does not advise technology users to select only those vendors placed in the "Leaders" quadrant. The Magic Quadrant is intended solely as a research tool, and is not meant to be a specific guide to action. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

10 HP FlexNetwork for a mobile-centric business FlexFabric FlexCampus FlexBranch FlexManagement FlexNetwork Architecture Converged architecture From application to user Leverages industry standards to reduce layers Common user experience and consistent security Multimedia & collaboration Reduce network layers Increase throughout and lower latency Wireless that performs like wired Secure physical & virtual Protection at VM-level, performance that scales Common management across physical & virtual, wired & wireless Single pane-of-glass Consistent view across FlexNetwork Both physical & virtual, wired and wireless Federates across servers & networks Free Up stranded capital for innovation 10 Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

11 Unified access revolutionizes mobile campus networks Enhanced scalability and performance Comprehensive, unified portfolio of high-performing wired and wireless access solutions Unified access Single pane-of-glass management from edge to core Optimized connectivity 1- and 2-tier networks reduce latency and increase resiliency Optimized WLAN architecture reduces latency & traffic bottlenecks Robust security Industry-leading research powers best-in-class threat protection Comprehensive identity management and endpoint security 11

12 A unified Mobility & BYOD solution- HPN How does it look like? Unified Wired-Wireless Network Desktop & Mobile devices Access points indoor outdoor Antennas & acces. HPN SENTINEL SDN-based security Unified Wired-WLAN Switch Infrastructure switches controllers 12 Provisioning On-boarding Monitoring Single-pane-of glass management Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. IMC Single pane-of-glass management Unified policy, security & guest access Architected for BYOD Architected for SDN Easy deployment Pervasive Security Minimum operational complexity

13 Optimized WLAN architecture Centralized access control MSM Module or appliance Corporate Network MSM Module or appliance Corporate Network Distributed forwarding Distributed forwarding with centralized authentication MSM Module or appliance Corporate Network Access Switch Access Switch Access Switch Access Points Access Points Access Points Authentication Traffic User Traffic 13 Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

14 Capacity Controller portfolio Enterprise Controllers HP830 Unified Wired-WLAN Switch Controller HP10500/7500 Unified Wired-WLAN Controller Module MSM765 Premium Mobility Controller Modular format supports larger environments needing to reduce HW footprint Same feature set as MSM760 Premium Mobility Controller MSM 800 AP Solution Series 5400zl Chassis Up to 800 Access Points via (4) MSM765zl modules Teaming with N+1 redundancy (5 modules/ 2 chassis) Redundant power supplies Blade: flexible capacity MSM760 Premium Mobility & Access Controller access points 2000 simultaneous guest access users **Support for L3 roaming services **Teaming and failover support (max 5 MSM760 s) and 64 VSC profiles Appliance: flexible capacity 14 = Requires Mobility Services option ** = Requires Premium Mobility option MSM720 Premium Mobility & Access Controller access points and up to 40 in a Team 250 simultaneous guest access users **Support for L3 roaming services **Teaming and failover for mid market (max 2 MSM720 s) and 64 VSC profiles Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

15 Highly Scalable Unified Wired-WLAN Integrates into HP 10500/7500 software creating a unified wired-wlan modular switch HP 10500/7500 Unified Wired-WLAN Module Supports up to 1024 AP and 20K client per module N+1, N+N & 1+1 redundancy with sub-second failover Unified security & end point admission defense 20G of centralized WLAN throughput 2X10G backplane connections and IPv4/IPv6 support Fast roaming, end-to-end QoS Wi-Fi Clear Connect RF optimization and interference mitigation * Branch office support with AP survivability Flexible forwarding options Investment protection Supports MSM430, MSM 46X and WA 26XX APs 15 * MSM 430 and MSM 466 Up to 54% lower CAPEX Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. 2X wireless scalability per chassis Vs Cisco WiSM2 on Catalyst 6500 HP Competitive Analysis Based on internal HP testing

16 HP 10500/ G Unified Wired-WLAN Module Chassis Support Switch Chassis HP HP HP V HP Maximum # of Wired-WLAN modules Maximum # of Mobility domains ( 1/8 Modules) Maximum Mobility throughput 20 Gbps * 3 = 60 Gbps 20Gbps * 7 = 140 Gbps 20Gbps * 7 = 140 Gbps 20Gbps * 11= 220 Gbps 16 Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

17 HP 830 Unified Wired-WLAN Switch for branch Unified access, policies and QoS Flexible forwarding to optimize traffic flows & scalability 8 and 24 GbE PoE+ ports and up to 24 or 60 APs Optional 10-GbE uplinks relieve transmission bottlenecks Wi-Fi Clear Connect optimizes connectivity & security, and mitigates interference* Layer 2 and layer 3 roaming Investment protection with Supports MSM 430, MSM 46X and WA26XX APs Lifetime HP warranty 17 * MSM430 and MSM 46X Up to 38% reduction in CAPEX Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Vs Cisco Catalyst 3850 with 24 APs HP competitive analyses

18 Indoor/outdoor n wireless access points MSM466 MSM466 MSM460 MSM466-R MSM466-R Multi-media & collaboration ready Two and three spatial stream n access points Wire-like service (450Mbps /radio) 15 HD video streams per access point, double the users Increased reliability with RF optimization Standards - based beam forming improves coverage Band steering enhances 5GHz capable client performance Concurrent 5GHz radio operation for dense deployments (466/466-R) Seamless indoor and outdoor roaming MSM 466R Directional & Omni-Directional antennas, embedded heater Point to point and multipoint wireless communications 18 50% higher performance 15 HD video streams per AP Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

19 1+1 Redundancy sub-second failover Master controller 1024 APs 1024APs failover to back-up Back-up controller Dual Link and fast link fault detection APs establish link with active and back-up controller Fast link failure detection allows back up controller to detects master controller failure within milliseconds Back up controller notifies the APs and switches APs to backup controller When it detects when master controller is back inservice and switches APs back to master controller Controllers can be configured to support load sharing by defining controller priorities for APs Fast link failure detection in 31 milliseconds Note: Not supported on HP Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

20 N+1 Redundancy Controller 1 Controller 2 Controller 3 Back up Controller Reduced costs and simplified maintenance One standby controller acts as back up for up to 4 controllers All APs have a standby controller associated Standby controller only provides services when active controller fails When controller 1 fails, APs connect with back up When controller 1 recovers AP immediately change active link & terminate the connection to back-up N+1 redundancy does not support fast fault detection Note: Supported on all platforms and modules 20 Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

21 Wi-Fi Clear Connect RF optimization and integrated IDS

22 Wi-Fi Clear Connect automatic power adjustment Dead spot Channel 1 Channel 11 Channel 6 Optimized wireless coverage and capacity Wireless signals are susceptible to environmental changes and RF interference Automatic power adjustment analyzes RF environment based on real-time data from access points Automatically adjusts transmit power of APs to optimize signal coverage or mitigate against dead spots or AP failure 22

23 Wi-Fi Clear Connect dynamic channel adjustment Increased wireless reliability Microwave Channel 1 Channel 11 Channel 6 WLAN Channels are limited To avoid interference channels must operate on different non-overlapping channels Optimizes channel resources and minimizes interference through real-time detection and channel adjustment Channel 1 23

24 Wi-Fi Clear Connect interference mitigation Spectrum analyses for MSM 430 and MSM 46X access points New New Channel 1 Change to Channel Microwave Interference on channel 1 Signal detection and classification Identifies and classifies sources of non-wi-fi interference e.g. Bluetooth, cordless phones, microwaves Evaluation of channel quality Detects severe channel degradation and reports poor RF performance Controller GUI Spectrum Analysis Information Log entries and location Display interference information Adjust channels or power based on information (disabled by default) AP Scans available channels 24

25 Wi-Fi Clear Connect enhanced user experience Intelligent client load balancing Critical for dense client environments and BYOD support Dynamically adjusts loads among APS to ensure adequate bandwidth for clients Session mode load balancing is based on number of clients Traffic mode load balancing is based on snapshot of traffic against maximum threshold and traffic gap Intelligent bandwidth insurance and control Bandwidth insurance ensures fair bandwidth utilization among all WLAN services Bandwidth control ensures fair use of bandwidth by rate limiting clients Dynamic mode bandwidth is evenly shared by online clients Static mode configures maximum bandwidth each client 25

26 Wi-Fi Clear Connect wireless IDS Integrated Intrusion Detection (IDS) Simultaneous client services & Intrusion Detection Flexible configuration options Normal : AP provides WLAN services and does not perform scanning Monitor: No client services, dedicated to IDS scanning on 2.4GHz & 5GHz Hybrid : Offers simultaneous client services and scans all channels Scanning frequency is 120 milliseconds out of every 5 seconds Client services Detect Floods. Spoofing, and Weak IV attacks Displays statistics (events) and history Supports configuration of detection policies 26

27 HP Optimized WLAN architecture distributed performance & intelligence The RIGHT access for all YOUR different types of devices and users PCI/SECURE DATA etc. (TUNNELLED) Corporate Network HP Multi-Service Wireless Controller Edge Switch (NOT TUNNELLED) HP Multi-Service Access Points User Devices 27

28 IMC Unified Network Management

29 IMC unified infrastructure and access management Modular service oriented architecture Comprehensive, deep management for: Wired and wireless networks Wired and wireless users and devices and BYOD Unified security policy provisioning and enforcement Network traffic monitoring User behavior analysis by user and device type Posture check and agent control Single pane-of-glass management with IMC 29

30 Unified Network Support Wired & wireless Management Wired & Wireless network visibility Status & traffic monitoring from a single screen Unified management & troubleshooting Robust reporting for compliance Mary MAC: 00:24:d6:94:d7:52 Where are your APs? Who s connected? How strong are the APs? IMC Wireless Services Manager (WSM) Auto discover WLAN access points (AP) & connected clients Track device status, network performance & user connections Optimize wireless coverage with heat maps IMC Wireless Service Manager 30 HP Restricted.

31 IMC User Access Manager Module Enables BYOD Process for on-boarding, provisioning and monitoring BYOD users, devices Admin 1 On-board Automated onboarding with user self registration Advanced device identification 2 Provision Multi-vendor unified wired and wireless enforcement Apply consistent user policies Corporate Network 3 Monitor Monitor threats & quarantine Integrates w/ User Behavior Auditor for access history Analytics to optimize user experience I have access I m on Network is running well User 31 Intelligent Management Center (IMC) Single pane-of-glass management Unifies wired-wireless networks Simplifies implementation & operation

32 A demo: use smart device to access network via UAM EIP Login to imc, Authentication first, then download configuration tool, install certificate and start to deploy configuration template. 32

33 A demo: use smart device to access network via UAM EIP On iphone. 33

34 Unified User Behavior & Device Analysis Monitoring & control Real-time visibility of bandwidth consumption Audit on-line behaviour Captures URLs, DB access, application access etc. Integration with Network traffic analysis Captures Netflow, NetStream & sflow Analyze user based traffic flows & usage Full traffic visibility for compliance reporting Resources management & capacity planning Capture traffic trends, application, session performance IMC User Behaviour Analyzer, IMC Network Traffic Analyzer 34

35 IMC Real Time Location Real-Time tracking of roaming clients inode client acts as soft Wi-Fi tag inode scans the AP signal as the location data, and then reports location to WSM Locate multiple wireless clients running inode Positioning accuracy of 5 ~ 15M inode sends AP signal info to WSM IMC / WSM inode Bob 35

36 Unified application support IMC Outlook integration Example of what a user have done with new API MSM466 Mobile device on-boarding & unified access provisioning MSM460 Access User registration integrated with Outlook No interface with IT is required Allow users to Bring Your Own Device to the meeting Allow users connect to network during meeting without IT request MSM466-R Demonstration: API integration 36

37 HP BYOD solution IMC UAM IMC UAM DHCP Agent IMC UAM IMC UAM 1 Device Authentication 2 User Authentication 3 Device Fingerprinting 4 Access Condition 5 Authorization Policy Enforcement MAC Portal Registration, 802.1X Vendor + OS + Device Vendor + OS + Device + Location + SSID + Time VLAN, ACL IMC EAD IMC UBA+NTA TP IPS 6 PC Posture Check 7 Behavior Monitoring 8 Live Quarantine inode User Traffic Analysis Traffic Inspection Network 37

38 HP FlexNetwork - Unified wired and wireless network One MANAGEMENT system One UNIFIED and Optimized network BYOD from user to datacenter WLAN just another MEDIA 38

39 Thank you