Cisco Unity Connection 10.5 Product Update with On-Premise and Cloud Unified Messaging Deep Dive

Transcription

1

2 Cisco Unity Connection 10.5 Product Update with On-Premise and Cloud Unified Messaging Deep Dive Chris Ward Technical Marketing Engineer - Unity Connection

3 Agenda New Features of Unity Connection 10.0/10.5 Deployments and Integrations Unified Messaging with Microsoft Native Integrations Unity Connection APIs Additional Resources 3

4 New Features of Unity Connection 10.0/10.5

5 10.0 Feature Deep Dive

6 What s new in 10.0 Video Greetings HTTPS Networking Single Sign-on Support using SAML Improved Integrations with Cisco Prime SIP Early Offer Support Notifications for User Quota Intelligent Notification WAV Attachment Platform Upgrade to RHEL bit 6

7 Unity Connection Video Greetings Video Greetings is the first phase of Video Messaging in Unity Connection Supports UCM-integrated video IP phones and Jabber endpoints Leverages MediaSense for video recording and playback MediaSense is Cisco s common media platform Compliance Recording Video on Hold Remote Expert Storage and Playback 7

8 Video Greetings 8

9 Video Greetings Architecture Audio Audio and Video Video RTP Stream Audio RTP Stream Endpoints send media to Unity Connection directly Same RTP flows as today Endpoint is unaware of MediaSense Unity Connection forks the audio and video streams to MediaSense Playback is also forked though Unity Connection Unity Connection stores audio portion of greeting locally Calls fallback to audio-only if MediaSense is unavailable The audio portion of the Video Greeting is always available in Unity Connection 9

10 HTTPS Networking Improved Site Scale 25 nodes (server/ha pair) 100,000 users + 150,000 VPIM Contacts More Efficient Replication Reduces risk of replication storms Reduced load on SMTP smarthost Limited to 3 levels in 10.0 Directory Replication Only Users, Contacts, and Distribution lists Partitions and Search Space Message delivery still uses SMTP 10.0 still supports SMTP Networking Either HTTPS or SMTP, not both Spoke Node Hub HTTPS Links HTTPS Links Hub Spoke Node Spoke Nodes Hub HTTPS Links VPIM Bridgehead VPIM Servers 10

11 HTTPS Network Scale OVA Size Local Users Remote Users (Intrasite) VPIM Contacts Total Object Count 1,000 User 1,000 9, ,000 5,000 User 5,000 35,000 20,000 60,000 10,000 User 10,000 40,000 30,000 80,000 20,000 User 20,000 80, , ,000 Intrasite scale limit depends on smallest OVA in the HTTPS network Cisco recommends that all nodes be the same OVA Replication is done per node every 15 minutes by default Timer can be changed Depending on timing, replication across an entire network can take hours 11

12 HTTPS Networking with VPIM Connect 2 HTTPS Intrasite networks Intersite Networking is not supported with HTTPS Networking HTTPS Networking - VPIM Capacity Up to 50 Nodes and 200,000 users VPIM Blind Addressing can help scale past 200,000 limit Bridgehead Bridgehead VPIM Connection 12

13 SIP Early Offer Unity Connection 10.0 supports SIP Early Offer functionality Mid-Call RE-INVITE support Update remote IP to stream media after call initiation Improves interoperability with SIP service providers Removes requirements for MTPs in some Early Offer call flows Works with CUCM 8.5 and higher via SIP Also available with CUCM-SME 13

14 10.5 Feature Deep Dive 14

15 What s new in 10.5 SRSV MWI Support & Increased Scale SAML based SSO Enhancements HTTPS Networking Migration Tool Security/Platform Enhancements Microsoft Exchange/Outlook Support Updates URI Dialing Support Alternate Extension Allow Distribution Lists to be Owners of Call Handlers Legal Intercept Live Reply Tenant Partitioning (Unified Messaging Office 365) 15

16 Survivable Remote Site Voic (SRSV) MWI Support at Branch Office MWI now supported in SRSV mode MWI status synched upon WAN recovery Increased Scale 500 Users per Branch 35 Branches per node SRE-910 minimum More complete SRST complement Unity Connection HA Pair WAN 16

17 URI Dialing Alternate Extension Support Directory URI Supported in the Alternate Extension User Field Supports User sign-in and Ring No Answer (RNA) Supports CUCM s SIP Trunk Calling and Connected Party Info Settings: Deliver URI only in connected party Deliver URI and DN in connected party (i.e. Blended Addressing) Available with CUC 10.5 and later and CUCM 9.0 and later URIs supported in Web Inbox, CUCA, Notification Devices, and TRAP MWI support still requires DN use in Unsolicited Notify CUCM restriction 17

18 URI Dialing Alternate Extension Support VMO Web Inbox Notification Devices TRAP 18

19 Allow Distribution Lists as Owners of Call Handlers Distribution Lists, in addition to Users, can be Assigned Owners of Call Handlers Only the Top Level Members (no nested DL's) are Assigned Ownership Only Local Subscribers within the DL's are Assigned Ownership Any member of the Distribution List can manage and record the owned Call Handler Greetings 19

20 Security/Platform Enhancements NTLM version 2 Authentication Support for Single Inbox NTLMv1 still supported NTLMv2 will be preferred over NTLMv1 LDAP Sync support with NTLMv2 not supported yet SAN Certificate Support SSL Support for ODBC Access SSL Support for Comet Notifications JavaScript Update (Java version 1.7 Update 40) VMWare ESXi5.5 Support 20

21 SAML based SSO OAuth Support Single Sign On authentication SAML Service authorization via Open Standard Authentication (OAuth) Supported across Collaboration portfolio Unity Connection Interfaces targeted for SAML SSO support System Administration (CUCA) Web Inbox and Personal Portal (CPCA) REST API User Authentication! 21

22 HTTPS Networking Migration Tool Migrates Digital Networking to new HTTPS Networking Build new network topology Users Distribution Lists Distribution List Membership VPIM Locations and Contacts Requires CUC 10.0 and later For more Information: NetworkMigrationTool/NetworkMigrationTool.html 22

23 Legal Intercept Live Reply Legal Intercept Identifies Mailbox or Caller Initiating Live Reply Mailbox ID included in Referred-by header of the SIP REFER System-wide or COS setting Supervised and Release Transfers 23

24 Deployments and Integrations 24

25 What is the Cloud to Unity Connection? On-Premise vs. Cloud Cost and operational/administrative differences Very little difference to Unity Connection Examples Office 365 Wave 14 based on Exchange 2010 Office 365 Wave 15 based on Exchange 2013 Cisco Hosted Collaboration Solution are on-prem Cisco UC apps in remote datacenter Implications of using cloud Bandwidth and Latency Security (SSL connections vs. Private WANs) The solutions presented here apply to both cloud and on-premise environments 25

26 Deployments Voic Only Voic Unity Connection HA Pair TUI/Web Access to voic s 26

27 Deployments Integrated Messaging Voic Unity Connection HA Pair TUI/Web Access to voic s IMAP Connection directly to Unity Connection Thick Client (Outlook) 27

28 Deployments All at the same time! Unified Messaging Voic Unity Connection HA Pair Unity Connection remains authoritative source of message Voic On-premise or Cloud-based Exchange (Office 365) Exchange TUI/Web Access to voic s IMAP Connection directly to Unity Connection Thick Client (Outlook) Web Client (OWA) 28

29 Integrations Standalone Cisco-on-Cisco Unity Connection HA Pair Unified Communications Manager 29

30 Integrations Active Directory Integrated Unity Connection HA Pair Active Directory Unified Communications Manager 30

31 Integrations On-Premise Exchange Unity Connection HA Pair Exchange Active Directory Unified Communications Manager 31

32 Integrations Cloud-based Exchange (O365) Unity Connection HA Pair Exchange Active Directory Unified Communications Manager 32

33 Integrations Centralized Deployment Unity Connection HA Pair Exchange Active Directory Session Management Edition Unified Communications Manager 33

34 Integrations Legacy PBX Integration/Migration Unity Connection HA Pair 3 rd Party Legacy PBX Exchange Active Directory Session Management Edition Unified Communications Manager 34

35 Integrations Simultaneously! Unity Connection HA Pair 3 rd Party Legacy PBX Exchange Active Directory Session Management Edition Unified Communications Manager 35

36 Messaging Integrations Supports Exchange 2013, 2010, 2007 and 2003 Microsoft BPOS-D and Office 365 (including Wave 15) Intelligent Notifications (Unity Connection 9.0 and later) Esnatech CloudLink Google Mail Domino Zimbra Novell Donoma Unify Domino Novell 36

37 Unified Messaging with Microsoft 37

38 Single Inbox 38

39 Microsoft s New Versions Exchange 2013 CU3 and earlier 8.6(2)SU3+, 9.1(2)+, and 10.0(1)+ Office 365 Wave (2)SU4+ 9.1(2)+ and 10.0(1)+ Exchange 2010 SP3 8.6(2)SU3+, 9.1(2)+, and 10.0(1)+ Active Directory (1)+ Outlook 2013 and Windows 8 VMO 9.0(2)+ 39

40 Single Inbox Flexibility Exchange 2013, 2010, 2007, and 2003 Pure exchange version support Office 365 Support Multiple versions simultaneously Up to 20 UM services per server/pair / Cloud and On-Premise mixed Exchange Exchange Exchange Allows migrations of users 40

41 Dual-Message Store Architecture Cisco Clients CUC APIs Voice Mail System System Exchange 2003 EX APIs Clients Mobile Clients TUI/VUI/Midlet Exchange 2007 CAS Exchange Servers 2007 Web Client (OWA) Cisco Thick Clients Cisco Thin Clients Dual-Message Store Architecture Messages stored on both Connection and Exchange (unlike Unity and Exchange UM) Unity Connection remains authoritative source of voic Message Synchronization Cisco Unity Connection Exchange 2010 CAS Exchange Servers 2010 Exchange Web Services used Exchange 2013, 2010, and 2007 Exchange 2003 integration uses WebDav APIs Thick Client (Outlook) 41

42 Single Inbox Voice messages synchronized with Exchange inbox Supports On-Premise and Cloud-based Exchange accounts Support for Office 365 (up to 6,000 users) Remaining capacity can still be used for on-premise users I.E. 6,000 O365 Users + 14,000 On-Prem Users = 1x 20,000 User CUC OVA Exchange Web Services (EWS) HTTPS over port 443 Exchange and B-POS use Push Notifications Office 365 uses Streaming Notifications Exchange Web Services EWS Notifications Exchange 42

43 Single Inbox Features ViewMail for Outlook client (compose, read, reply, forward ) Message Waiting Indicator (MWI) synchronized Status (e.g. read, new, deleted ) and priority synchronized Secure, private messages supported (with VMO) SpeechView (Voic -to-Text) supported Text-to-Speech of s supported Import of Exchange contacts supported in CPCA Personal Call Transfer Rules based on Calendar Free/Busy 43

44 Unity Connection Account Permissions Unified Messaging Service Account(s) Exchange 2013, 2010, and Office 365 ApplicationImpersonation role on Mailbox servers Exchange 2007 ms-exch-epi-impersonation, ms-exch-epi-may-impersonate, Receive-As on Mailbox servers Exchange 2003 Administer Information Store, Send As, Receive As Directory Service Account (optional) For user synchronization Active Directory Minimum permissions set to "read" all user objects in the search base 44

45 Single Inbox Account Throttling Previous to Exchange 2010 SP2 RU4 EWS throttling was done based on the calling account (UM Service Account) Disable Throttling on the UM Service Account uide/10xcucumg020.html#wp Exchange 2010 SP2 RU4 and later EWS throttling is done based on the target mailbox (users) Enable Paging and change user throttling limits uide/10xcucumg020.html#wp

46 Single Inbox Account Throttling Exchange 2013 and later EWS throttling is done based on the target mailbox (users) Enable Paging uide/10xcucumg020.html#wp Enabling Paging Only required for Exchange 2010 SP2 RU4+ and Exchange Not required for Exchange 2010 SP2 RU3 or earlier Paging available in 8.5(1)SU6, 8.6(1)SU4, 9.1(2)SU1, and 10.0(1) and later uide/10xcucumg020.html#wp Enabled by default in fresh installs Can be enabled via CLI in the above versions 10.0 ES1 and later will enable by default 46

47 Single Inbox - Design Considerations Exchange Network For more than 2000 users or 80ms round-trip latency see Design Guide. Exchange Mailbox Server Guaranteed bandwidth with no steady-state congestion: For 50 voice messaging ports on each server 7 Mbps For 100 voice messaging ports on each server 14 Mbps For 150 voice messaging ports on each server 21 Mbps For 200 voice messaging ports on each server 28 Mbps For 250 voice messaging ports on each server 35 Mbps Unity Connection Active/Active Cluster Bandwidth/Latency CUCM Cluster CUCM Cluster Main Office or Primary DC WAN Branch Office or DR DC 47

48 Single Inbox - Design Considerations -60ms latency for Active/Active and 150ms latency for Active/Standby -Clustering over the WAN with Single Inbox doubles the bandwidth Exchange Network Unity Connection 2/2 Guaranteed bandwidth with no steady-state congestion: For 50 voice messaging ports on each server 14 Mbps For 100 voice messaging ports on each server 28 Mbps For 150 voice messaging ports on each server 42 Mbps For 200 voice messaging ports on each server 56 Mbps For 250 voice messaging ports on each server 70 Mbps Unity Connection 1/2 Bandwidth/Latency CUCM Cluster CUCM Cluster Main Office or Primary DC WAN Branch Office or DR DC 48

49 Single Inbox Connections Office 365 deployments - aim for round trip time of 250ms or less Better user experience Not a deal breaker if over 250ms Defining the number of connections to Office 365 or Exchange CAS server(s) wp connections is default and minimum Don t change if less than 2,000 users and less than 80ms RTT latency 64 connections is max # of connections = (# of Single Inbox users * (RTT in ms + 15) ) / 50,000 Examples 2,000 Users * (50ms + 15) / 50,000 = 2.6 = 4 connections (minimum) 2,000 Users * (150ms + 15) / 50,000 = 6.6 = 7 connections 4,000 Users * (100ms + 15) / 50,000 = 9.2 = 10 connections 49

50 Single Inbox Connections View Current Number of Connections run cuc dbquery unitydirdb select fullname, value from vw_configuration where fullname = 'System.Messaging.MbxSynch.MbxSynchThreadCountPerUMServer' To increase the number of connections run cuc dbquery unitydirdb EXECUTE PROCEDURE csp_configurationmodifylong (pfullname='system.messaging.mbxsynch.mbxsynchthreadcountperumserver', pvalue=<value>) Restart the Connection Mailbox Sync service Multiple Connection servers synchronizing with the a single Exchange server Increases the processor load Number of the connections for a specific environment may change User or version change 50

51 Enable Single Inbox in Unity Connection 51

52 Enable Single Inbox for a User 52

53 Single Inbox Administration Validate user Exchange SMTP Proxy matches corporate SMTP address specified in UM account Used for addressing and impersonation Unified Messaging Account Status Page Reports user UM services, meeting and abilities selected very detailed Bulk Administration supported for enabling/disabling UM Single Inbox enabled does not affect scalability of Connection Server Can run multiple client endpoints (API, IMAP, Accept & Relay, Web Inbox, etc.) 53

54 View Single Inbox Accounts 54

55 Message Action with Same Address Three choices: Accept, Relay (default), and Accept & Relay Message Action is set on UM service and user account Single Inbox supersedes the relay settings for voic s and delivery receipts Faxes and s Combine the UM service setting and the user's relay setting If either setting includes Accept, the message remains on Connection If either setting includes Relay, the message is relayed to the destination address 55

56 Message Action with Different Addresses Voic s and delivery receipts These are synched with Exchange (and retained on Unity Connection) If set to Relay or Accept & Relay the message is also relayed to that address Faxes and s Combine the UM service setting and the user's relay setting If either setting includes Accept, the message remains on Connection If the UM service setting includes Relay, the message is relayed to the SIB address If the message action includes Relay, the message is relayed to the address. 56

57 Quotas and Messaging Aging Validate Microsoft Exchange and Unity Connection do not overlap server quota and/or aging rules Unity Connection can soft delete voic s and send an alert after 14 days Microsoft Exchange can be configured to age messages after 30 days or more Manage Unity Connection quotas separately Determine approximate Microsoft Exchange sizing requirements Outside callers can leave voice messages regardless of the configured quota rules Enabled by default (Advanced Settings) Awareness of codecs and message sizing Secure messaging does alleviate this awareness through decoy messaging 57

58 Disaster Recovery Active/Active high availability Cisco Disaster Recovery Systems (DRS) Connection warm-standby possible COBRAS tool to back up directory information Unified Messaging considerations Microsoft Exchange Mailbox Database restore(s) Must disable user account synchronization Microsoft Exchange full server restore(s) Must disable all UM service agreements Upon Microsoft Exchange service restore (server/database) Enable all UM service agreements and/or enable user accounts 58

59 SMTP Domain Name and Addressing 59

60 SMTP Domain Whitepaper Cisco recommends NOT overlapping SMTP domains SpeechView, Digital Networking, routing via smarthost issues may occur Exchange Address Policy masks Unity Connection SMTP domain Allows Microsoft Exchange to present the corporate address in Outlook guide_c html Caveat when used in digital networks with smarthost (rather than pub-to-pub) Affects message routing but not contact replication Distribution lists will work Single user message forwarded will forward directly to Exchange and not Unity Connection Solution is to use dedicated smarthost outside of the Exchange environment 60

61 SMTP Domain Whitepaper 61

62 ViewMail for Outlook

63 ViewMail for Outlook Full Voic Experience from Microsoft Outlook Playback from Outlook or phone Forward, Reply, Delete, and Compose MWI Synchronization 32-bit and 64-bit Windows and Office Windows 8 and Office 2013 supported! Secure Messages IPv6 Single Sign-On with Single Inbox Integration Token-based 63

64 ViewMail for Outlook Operation VMO Leverages Unity Connection Rest-based APIs CUTI and CUMI APIs HTTPS over port 8443 VMO Forward and Reply Voic replies and forwards and replies and forwards of voic s are handled by Unity Connection Non-VMO users replies and forwards are handled by Exchange as 64

65 ViewMail for Outlook 65

66 Native Integrations 66

67 Jabber Integration 67

68 Unified Messaging with Jabber Message playback available within Jabber Cloud or On-Premise Jabber 9.2+ uses REST-based APIs for VM access HTTPS over port 8443 Same APIs available to general public Requires 8.6(2) or later Jabber pre-9.2 used IMAP(S) 143 for IMAP, 993 for Secure Messages over IMAP Secure Messaging Messages are streamed from Unity Connection Never cached/written to disk Adds load to Unity Connection server 68

69 Intelligent Notifications 69

70 Intelligent Notifications Alternative to Unified Messaging Domino Google Mail Customizable Notifications Look, Feel, Images & Info Displayed HTML Templates supported HTML Marked-Up Messages Delivered via SMTP ( agnostic) Notifications are voic specific Actionable Links Act on specific message Must be inside Firewall or VPN 70

71 Intelligent Notifications Details HTML Templates are fully modifiable Create multiple templates and assign as desired across user base Apply corporate branding Add static images I.E. banners, logos, backgrounds Dynamic Icons change based on message status Queries to Unity Connection for message status Unity Connection certificates must be trusted User authentication to Unity Connection must occur (authentication pop-up) Or use a template without Dynamic Icons. Outlook and Windows need some massaging Must download images (trust sender) Can test with OWA instead of Outlook 71

72 Intelligent Notification with Voic Attachment 72

73 Intelligent Notification s Mini-Inbox Invokes Mini-Inbox Player Leverages HTML5 when possible Play, Reply, Forward, Delete Supports Secure Messaging Must Be Inside the Firewall Corporate Network or VPN Mobile devicebased Mini-Inbox Computer-based Mini-Inbox 73

74 Web Inbox 2.0 Based on HTML v5.0 Backwards compatible w/ HTML 4 Built on REST-based API s Fully functional voic GUI Play Forward Delete Compose Distribution lists Access to Inbox, Deleted, and Sent folders QuickTime plugin no longer required with Firefox 74

75 Accept and Relay 75

76 Why Accept and Relay? Pseudo Unified Messaging Dodd-Frank Act Archive all incoming voic s for a mailbox Archive all the voic s sent from the mailbox Archived voic s to be stored for at least one year The archived voic s should be left un-tampered WORM storage devices can achieve the untouched guarantee Voic archive data needs to be searchable Be able to track the life of a message E.g when it was received, when it was heard, if forwarded or replied to Be able to report voic access by a user No single point of failure in the solution 76

77 Accept and Relay Overview Setup Unity Connection users to relay messages A SMTP account per user for message delivery or notification A single account for all the users for archival Wave file (voice message) sent in SMTP message Copies are stored in different message stores and not synchronized Setup a SMTP messaging infrastructure to accept the messages Use off the shelf archival tools Storage can be a WORM storage Messages include details like Sender, CallerID etc. Relay action and address are controlled by administrators The SMTP relay address can be setup for individual users or set in bulk User can not change the address via the GUI or TUI 77

78 Accept and Relay Architecture SMTP/ Messaging Infrastructure. SMTP relay to a independent mailbox per user Voic Archive Mailbox User B User A User C User D 78

79 Accept and Relay Limitations No MWI Sync Supports incoming messages only Possible issue if only some of the users are to be archived Unity Connection appliances can only support one SMTP proxy server Can cause higher loads on the SMTP infrastructure. Forwarded messages are not flattened Difficult to search through in the archive Meta data not always enough Issues with using Secure Messaging Secure messages will be unsecure when sent over this interface. If they are relayed to a secure mailbox, risk lower Solutions can be built using the Unity Connection APIs 79

80 Unity Connection APIs

81 Unity Connection APIs Cisco Unity Connection Provisioning Interface - CUPI Admin access to users, contacts, distribution lists, and call handlers Cisco Unity Connection Provisioning Interface for End Users End user access for custom end-user applications (Co-Pilot) Cisco Unity Connection Messaging Interface - CUMI Access user messages Cisco Unity Connection Telephony Interface - CUTI Provides ability to play and record audio over the phone Cisco Unity Connection Imaging Interface - CUII Provides access to view message state and mailbox info (Intelligent Notifications) Cisco Unity Connection Notification Interface CUNI Provides notifications for one or more users over a single link 81

82 Cisco Unity Connection Provisioning Interface Queries on collections of objects include a total count of objects Full access Class of service settings Schedules User alternate names Unified messaging service Private lists User templates Routing rules Read access to ports and port groups Read/write access to MWI On/Off codes Ability to import LDAP users 82

83 CUPI for End Users Access for end users when authenticating with user credentials Allows for custom end user applications Full access Alternate names Greetings Recorded Name Private Lists Alternate Devices Call Transfer Rules Ability to Change Passwords 83

84 Cisco Unity Connection Messaging Interface Allows for Sending messages Receiving messages Replying to messages Sending broadcast messages User must be enabled to send broadcast messages Sending dispatch messages Receiving notifications of new messages By default, API access to playback secure messages is turned off System Settings > Advanced > API Settings > Allow Access to Secure Message Recordings VMO does not require this setting 84

85 Cisco Unity Connection Telephony Interface Initiate dial-out to a phone device Play and record greetings, messages, and other audio Control playback speed and volume Stop and resume of playback and record 85

86 Cisco Unity Connection Imaging Interface Provides icon/graphic based representation Unread messages count Urgent unread messages count Read messages count Urgent read messages count MWI status and the corresponding image End user authentication Added in Unity Connection

87 Cisco Unity Connection Notification Interface Manages subscriptions to events in Unity Connection Message events Received Deleted Changed Server-to-Server Asynchronous Subscribe to one or more users at once Requires administrative credentials 87

88 Resources for Unity Connection APIs Information on all Cisco Unity APIs Cisco Developer Forums for Unity Connection APIs Code Samples, Videos, and documentation 88

89 Additional Resources 89

90 Additional Resources Cisco Unity Connection Product Documentation Cisco Unity Connection Design Guide Cisco Unity Tools Cisco Collaboration Communities 90

91 Complete Your Online Session Evaluation Give us your feedback and you could win fabulous prizes. Winners announced daily. Complete your session evaluation through the Cisco Live mobile app or visit one of the interactive kiosks located throughout the convention center. Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online 91

92 Continue Your Education Demos in the Cisco Campus Walk-in Self-Paced Labs Table Topics Meet the Engineer 1:1 meetings 92

93

94