Extreme Policy Access Control

Transcription

1 Extreme Policy Access Control Granular network access and control across wired and wireless infrastructure Role-Based Policy Policy Management Secure and provision network resources based upon the role a user or device plays within the business Create rules to define treatment of specific traffic types Centrally managed; no scripts; can be applied to the entire network with a single click Policy follows the user/device - VLAN not required Works across both switches and wireless APs

2 Campus Automation & Orchestration Zero-Touch User & Device Attachment Integrates Extreme Edge products & connection services with next-generation Fabric Core Automates switch port provisioning for required topologies Fabric Attach extends Fabric Connect services to EXOS and ExtremeWireless Edge Leverage Extreme s dynamic role based policy control and automation and orchestration to secure autoattachment of users/devices to Fabric-based services Customers Extreme, Avaya, and net-new now have more design & product options Fabric Connect ExtremeWireless 3900 APs

3 Extreme Intelligent Access Add On SW Solutions ExtremeGuest ExtremeLocation NSight ExtremeAnalytics AirDefense ExtremeManagement ExtremeCloud ExtremeControl Management Control Analytics Security Extreme Management Center ExtremeXOS Extreme ERS / VSP Automated, Secure, Policy-enabled Architecture Services and Support Ranked No. 1

4 4 Extreme Management Center ExtremeControl In-depth visibility. Granular policy control. Wired and wireless networks and Heterogeneous endpoints. Extreme Management Center Insights, Visibility, and Control for Superior Quality of User Experience ExtremeAnalytics Actionable business insights. Network and applications. Users, locations, devices. ExtremeManagement Integrated management. Wired and wireless. Single pane of glass. Information Governance Engine Fully automated network configuration compliance solution Analyzes and assesses network configurations for compliance Out-of-the-box audit-driven and userdefined compliance templates reports ExtremeConnect Automation & integration with VMware, MS, OpenStack, BYOD, MDM, Security, NGFW, etc. Provides direct access to Management Center Open API Build-Your-Own-Integration. Security IT Operations Marketing

5 5 360 View for Superior Quality of Experience Visibility and Control Get in-depth visibility and control over users, devices, applications Enable secure access and set granular policies Integrate with major MDM and security solutions ExtremeControl ExtremeConnect Actionable Business Insights Extreme Management Center Correlating network and application performance with user and device activities Speeds up troubleshooting by separating network from application performance Secure your network by monitoring shadow IT, malicious and unwanted applications ExtremeAnalytics Manage with a 360 View Zero touch provisioning + Alarm and event management Configuration, inventory and change management Capacity planning Discovery and topology ExtremeManagement

6 ExtremeConnect Making Integration Easy for Our Eco System Partners Enables automation and integration with VMware, MS, OpenStack, BYOD, MDM, Security, NGFW, etc. Management and Analytics Provides direct access to Management Center Open API Build-Your-Own- Integration. Mobility Extreme Connect Data Center and Private Cloud Security Extreme Networks, Inc. All rights reserved

7 Official Wi-Fi & Analytics Provider of the NFL Technology Needs The Solution The Value Mobile Point of Sale Mobile Ticketing Guest Wi-Fi Game Day App Streaming Video Incident Management App Security Systems Wired and Wireless ExtremeWireless (APs, Controllers) Extreme Switching Extreme Control Extreme Management Extreme Analytics Best in class Fan experience Uninterrupted access to social media, stats, streaming of live video, team content, replays, and more Analytics provided actionable intelligence to further improve game data experience Simplified network management 21 out of 31 NFL stadiums rely on Extreme

8 Global Transportation Company The Challenge Distributed environment -over 1800 sites Wi-Fi used extensively throughout operations Total site survivability essential - even in the event of lost WAN connection. High visibility & control over network paramount The Value Provided SmartRF self resilient and self healing solution provided smooth Wi-Fi experience Ability of access points to make dynamic decision to minimize the effect of change in RF environment provided seamless and uninterrupted service to the company s package tracking through their distribution sites. Seamless Mobility Full Redundancy Site Survivability 3x Faster to Deploy

9 Large Retail Company The Challenge Wireless network that enables company to connect with their shoppers via mobile devices Same shopper experience chain-wide (790+ stores) The Value Provided Architectural flexibility saved more than $3M for building WLAN infrastructure & centrally managing it Highly scalable solutions Intelligent auto access point provisioning allowing set up of multiple APs in no time Seamless Mobility Consistent User Experience High Scalability

10 Large Glass Manufacturing Company The Challenge Wireless network that enables company to connect devices used for glass flats manufacturing Production plans in different locations / countries High-availability solution for indoor / outdoor Central management for locations in different countries The Value Provided Architectural flexibility for locations keeping possibility of changes by local IT teams SmartRF self resilient and self healing solution provided smooth Wi-Fi experience Central management for monitoring and setting profiles used for auto provisioning Highly scalable solutions High availability Seamless Mobility Consistent User Experience Flexibility for changes

11 Flexible Management and Deployment Your IT Infrastructure & Applications Service Engines Application Provisioning Wireless APs Analytics Network Access Control Wireless Management Network Management Switches

12 12 Market Landscape What is running on my network? How can I enhance network security? How can I make IoT secure? How can I virtualize my data center? How good is the user experience? How can I accelerate the rollout of new services?

13 Static Architecture Software-Driven Architecture Secure Automated Campus Customer Choice TODAY NEAR FUTURE Management Management Analytics and Security Assisted Analytics / Control Feature Set Feature Set Feature Set Feature Set Network OS Container Guest VM Container Feature Bundle Container Network OS Network OS Network OS Network OS Linux 4.9 Application Container Framework Merchant Silicon Merchant Silicon Merchant Silicon Merchant Silicon Common Merchant Silicon 13 Investment Protection Best-in-class solutions for each PIN Optimized architecture that fuels innovation

14 14 Secure Automated Campus Combining leading networking, software and services into an integrated solution. Fabric Connect / Fabric Attach Network automation, simplicity and enhanced security. Proven Results 11x faster time to service 7x faster mean time to repair 100% improvement in outage due to human error 28x higher multicast scaling Extreme Management Center Visibility, control and management through a single pane-of-glass. Proven Results 100% application visibility on any wired / wireless network Massive and customizable signature set with more than 7000 applications Centralized policies for as many as 200K users / devices Services and Support First person resolution to issues for increased customer satisfaction. Proven Results No. 1 in the Industry 100% in house support Average tenure of support staff is over 10 years Over 90% first person resolution

15 15 Simplify and Automate with Extreme Fabric Connect Fabric Connect is a standards-based network virtualization technology. It enables hundreds of thousands of isolated, secure virtualized networks to run as ships in the night over a single physical network. These networks can be set up and changed with ease, often without delay ZERO Breaches Reduced OPEX Deployments Olympic Grade Multiple Hackathons Elimination of manual tasks Fabric deployments on every continent and industry Largest customer network ~ 600 virtualized nodes First Fabric Olympics 7 secure zones over one converged network Hyper Segmentation Stealth Service Elasticity 66% reduction in Operating costs (internal analysis) 50%-60% reduction in provisioning (according to Dubai World Trade Center) Fabric Connect is the networking industry s best kept secret.

16 16 Fabric Connect is Simple: From 4-10 Protocols to 1 Traditional MPLS OSPF STP Extreme Fabric Connect 1 Protocol (IEEE/ IETF Shortest Path Bridging) Fabric Connect Benefits Lower Costs Increased Stability Faster Deploying & Resiliency Easier Troubleshooting

17 17 Fabric Connect is Simple: Edge Provisioning Status Quo Hop by hop provisioning Moves, adds and changes require core reconfiguration Vulnerable to human error during change Services coupled to physical topology With Extreme Edge Provisioning only Core is hands off Moves, adds and changes on the fly (no more maintenance windows) Services abstracted from topology Application Servers Video Surveillance Servers

18 Simplify the Network by Automating the Edge Fabric Attach Allows the values of Fabric to be extended to nonfabric enabled devices (edge switches, wireless APs and even IP cameras). Fabric Connect Offers the secure attachment of users and devices to the appropriate service. Policy Secure onboarding and control over users and devices. Users and devices can connect from anywhere and be assigned the right policy with attachment to the right Fabric service without manual intervention. Zero-Touch Edge = IoT- Ready 18

19 19 Control Access to Hyper-Segments with ExtremeControl Frictionless hyper-segmentation, stealth and elasticity for isolation, security & breach containment Policy and fabric for secure on-boarding and auto-attachment of users/devices to hyper-segment 3 rd party APIs for integration with other security vendors to orchestrate work flows based on alerts Surveillance Imaging Point of sale EMR Security is Enhanced Without Increasing Complexity

20 20 Why Extreme s Approach to Campus Networking is Unique Traditional Networking Competitive Approaches Extreme s Approach Protocol Overlays Complex multicast Hop by hop provisioning Manual CLI-based operations Separate wired and wireless Protocol Overlays Complex multicast Hop by hop provisioning Automation via python scripting and centralized provisioning tools Partially unified but either wired or wireless centric One Protocol Simple multicast Edge Provisioning for vast majority of moves, adds and changes Automation through Fabric, Policy and ZTP+ on Extreme Management Center Unified wired and wireless While our competitors focus on automating complex networks, only Extreme streamlines and simplifies the network first, significantly reducing OPEX.

21 21 Enhance Network Security through Fabric Connect Hyper-segmentation Stealth Networking Service Elasticity 1 Security 2 3 End to end isolation of traffic; isolates critical information, applications or groups of users Breaches contained to where they occurred; prevention of lateral movements. Deployed with ease and scale Network topology completely invisible to users Services are Ethernet Switched Paths and are not vulnerable to IP scanning / hacking tools Eliminates back door entry points to the network Services extend and retract as users and devices connect and disconnect from the network. Rob Joyce Chief of Tailored Access Operations US National Security Agency A well segmented network means that if a breach occurs, it can be contained the difference between a contained and uncontained breach is the difference between an incident and a catastrophe.

22 22 Security: Massive Scale Segmentation with Ease Largest hospital in Scandinavia 1.2M patient treatments 20,000 employees across 40 locations More than 50% of the total medical research in Norwegian medical centers performed at Oslo University Hospital Wanted a secure, easy to manage segmented network Result: 1700 isolated networks for different user groups, services, and applications deployed with ease and without risk of error

23 23 Security: Massive Scale Segmentation with Ease 30k employees in multiple locations Business objectives: Network has to support double digit growth Wanted a secure, 100% available and easy to manage segmented network that support full virtualization Need to abstract services from physical topology = no more need for separate networks Cost retention Result: x100 isolated networks for different user groups, services, and applications deployed with ease and without risk of error and supporting all above business objectives

24 Summary: Why Extreme s Secure Automated Campus? Simple Secure Intelligent True network simplification Automated edge Unified wired and wireless Frictionless Hyper-Segmentation Policy-based control Security ecosystem True 360 degree network view with context & scale Single pane of glass 100% application visibility Extreme Networks, Inc. All rights reserved

25 Thank You