Agenda Integrated Multi-Cloud Management (imcm) TOPIC Context and Solution Overview Common Challenges and Opportunities 4-5 Key Elements and Features

MMC2623BU The Integrated Multi- Cloud Management Solution (imcm) Doug Bourgeois, Managing Director Sean Vandruff, Sr. Technology Fellow #VMworld #MMC2623BU

Agenda Integrated Multi-Cloud Management (imcm) TOPIC Context and Solution Overview Common Challenges and Opportunities 4-5 Key Elements and Features of imcm 6-7 Technical Architecture Technical Architecture Framework and Impact 8-10 imcm Features, Capabilities and Use Cases 12-13 imcm Demonstration 14-18 SLIDES Project Approach Key Considerations and Approach 20-22 Copyright 2017 Deloitte Development LLC. All rights reserved. Integrated Multi Cloud Management solution 2

Common Problems of the Executive A typical scenario for IT Executives Mission-driven goals Comply with mandates Respond to mission area requests for technical support Support technology-enabled innovation across the agency Obstacles Lack of agility due to legacy hardware and software Siloed support teams Change-resistant organization and culture Results Lack of overall governance No comprehensive reporting Overall disconnection between Mission expectations and IT s delivery Outcome: Frustrated mission areas resort to developing their own insolated solutions. Copyright 2017 Deloitte Development LLC. All rights reserved. Integrated Multi Cloud Management solution 4

Integrated Multi-Cloud Management (imcm) Use Cases What We can Deliver for You Business Management Enhance efficiency through optimization Enable incremental adoption of modern technology Provide cost and usage transparency Optimize cloud utilization across environments Cloud Native Support cloud native development with ondemand containers and tools Provide tools, management, and reporting for container deployment and configuration Reduce risk of IaaS vendor lock-in through abstraction layer Hybrid Cloud Enhance cross-cloud management efficiency through a standard toolset and interface Provide demand agility through workload portability Monitor and report on all cloud resources in single feed Consistently provision workloads/environments to multiple clouds Automate to lower operations cost and speed delivery Disaster Recovery (DR) Rapidly standup workloads in cloud in DR scenarios Backup data to cloud for low-cost, high-availability access Automate DR testing Security Automation FedRAMP ready for Federal Audiences Provide ready-to-use profiles for security settings Consistent enforcement and compliance Copyright 2017 Deloitte Development LLC. All rights reserved. Integrated Multi Cloud Management solution 5

imcm Solution Overview Deloitte s Integrated Multi-Cloud Management (imcm) solution built on VMware technologies Technology Advisory and and Risk Risk Foundation for modernized applications Cloud-native applications Application optimization Digital services Security policy and governance Microsegmentation Policy enforcement Monitoring and logging Organizational and Business Transformation Deloitte s Integrated Multi-Cloud Management (MCM) Solution Automation Provisioning Security profile deployment Disaster recovery Migration Policy-based management Integrated cloud management Orchestration Dashboarding Business management API integration Cloud Native Development Cloud Native Development Infrastructure and Cloud Services Copyright 2017 Deloitte Development LLC. All rights reserved. Integrated Multi Cloud Management solution 6

Integrated Multi-Cloud Management (imcm) The Value Proposition Cost Reduction Can deliver significant savings over siloed infrastructure Enables right-size resources based on demand Helps optimize OpEx spend across physical and cloud infrastructure Risk Mitigation Provides stable, reliable platform for business deployment Designed to minimize application downtime and reduces downtime risk Provides consistent security profiles across cloud IT staff Productivity Requires less time to manage, administer, and update Allows IT to focus on generating business value Agility and Scalablity Accelerates deployment and migration Enables choice of cloud for innovation and speed Automatically scales to meet demand Enables future product service enhancements Facilitates increased responsiveness to the core business and mission Security Standardizes policies and controls Enhances security within the perimeter through microsegmentation Automates security controls Compliance FedRAMP-ready to improve solution timeto-market Consistently enforces and monitors Enhances ability to align with FITARA and DCOI Copyright 2017 Deloitte Development LLC. All rights reserved. Integrated Multi Cloud Management solution 7

imcm High Level Architecture Deloitte s multi-cloud solution helps drive value and can offer more flexibility than single-cloud deployments, providing fully integrated multi-cloud analysis and orchestration. imcm Accelerates cloud adoption Operationalizes mission capabilities in a cloud native ecosystem Automates provisioning and deployment of complex multi-tier applications Provides orchestration across: o External CSPs o On-premises management cloud services o On-premises virtual and physical infrastructure Helps prevent cloud vendor lock-in VMworld 2017 Content: Not for publication Copyright 2017 Deloitte Development LLC. All rights reserved. Integrated Multi Cloud Management solution 8

Security & Compliance through Integrated Multi-Cloud Management (imcm) Accelerating controls to reduce customer burden while maintaining efficacy GOVERNANCE & COMPLIANCE Real-time Asset Management Vulnerability Management Privileged Account Management Continuous Monitoring Incident Response & Management System owner s responsibility Provided by imcm Stack Application Layer imcm VMware Validated Design App 1 App 2 App 3 Hardening Encryption SDDC Automation Orchestration Compute Storage Network DR Management Provided by Data Center Physical Infrastructure Copyright 2017 Deloitte Development LLC. All rights reserved. Integrated Multi Cloud Management solution 9

VMware Validated Design Deploy and Operate All Components of the Software-Defined Data Center vrops vra vsan Software Defined Data Center vsphere NSX VMworld 2017 Validation VMware Validated Designs (VVD) are architectures and designs are created and validated by VMware experts SDCC VVD designs encompass the entire set of VMware softwaredefined data center (SDDC) products Designed to Deploy Standardized and streamlined design for each deployment scenario and use case, for example, single-region SDDC Clouds Content: Not for publication Copyright 2017 Deloitte Development LLC. All rights reserved. Integrated Multi Cloud Management solution 10

Multi-Cloud Deployment and Management Demo Unified dashboards and the multi-layered service catalog demonstrate the immediate value leveraging imcm with multiple clouds can offer Multi-layered Service Catalog Unified Multicloud Operations Dashboards Multi-cloud Business Dashboard The service catalog supports deployment across 3 CSP environments 4 business groups, supporting different functions (Dev, Test, Prod-low, Prod-high) Production VMs are deployed from hardened images, replete with encryption and distributed firewall network security VMs are deployed to networks that are open to others of their function, but isolated from other VMs (App, DB, Web) Using vrealize Operations Manager, we have created dashboards that depict the resources allocated to, and consumed by each cloud deployment Dashboards are available for business groups (App & dev/test/prod environments) depicting the cross-cloud resources consumed by each business group vrealize Business for Cloud is leveraged to provide the estimated cost of compute resources prior to deployment Dashboards for business groups depicting cross-cloud resources consumed by each business group, application or function View cloud consumption and spend across private and external CSPs Copyright 2017 Deloitte Development LLC. All rights reserved. Integrated Multi Cloud Management solution 12

imcm Use Case Technical Elements 1 2 3 4 Use Case Name Description Technical Tool AUTOMATED PROVISIONING NSX CONTINUOUS MONITORING CLOUD TO ON-PREM MIGRATION SURFACING NSX SECURITY PROFILES IN vra Provision workloads (simple server and multi-machine) to on-prem and off-prem Integrate workloads with Active Directory and other enterprise services BluePrints can deploy complex systems with the security built into automated workflows. Identify malicious action and respond as required: Changed setting/port VM is quarantined Action is logged Pilot solution in cloud and then migrate to on-prem for operational use Microsegmentation of VM to meet security profile vra, NSX, vsan, vrb, AD Federation vrops, NSX, Cloud Control vro, vra NSX, VRA 5 AGENTLESS AV Demonstrate use of agentless AV across multiple clouds NSX, VRA, McAfee, etc. 6 UNIFIED DASHBOARD Single 'Pane of Glass' view into the cross-cloud environment vrops, Blue Medora 7 MULTI-VM ENVIRONMENT Deploy a multi-machine blueprint that is a complete development environment with a jump sever NSX, VRA 8 DR/ COOP Replicate and migrate workloads from On-Premise to Cloud to DR/COOP vro, vra, vrops 9 ENCRYPTION Request encryption as service Deploy workloads to encrypted datastores by policy vcenter, HyTrust 10 BACKUP Backup as a service (on-prem to cloud) VDP, vra 11 COST TRANSPARENCY VMworld 2017 Content: Not for As part of the user portal demonstrate cost transparency with costs depicted across clouds publication vrb, Digital Fuel Copyright 2017 Deloitte Development LLC. All rights reserved. Integrated Multi Cloud Management solution 13

Use Case 1- External Cloud Deployment ON-PREMISES CLOUD OS VM OS VM CSP 1 HyTrust KeyControl vrops vra vro vsphere vsan HARDENED OS CSP 2 Pivotal Cloud Foundry vrb Digital Fuel Log Insight NSX Copyright 2017 Deloitte Development LLC. All rights reserved. Integrated Multi Cloud Management solution 14

Use Case 1 - Private Cloud Deployment VM ON-PREMISES CLOUD CSP 1 CSP 2 HyTrust KeyControl vrops vra vro vsphere vsan Pivotal Cloud Foundry vrb Digital Fuel Log Insight NSX OS SECURED NETWORK. 1 ENCRYPTED. 2 HARDENED OS. 3 Copyright 2017 Deloitte Development LLC. All rights reserved. Integrated Multi Cloud Management solution 15

Sample Approval Workflow Customer Requests New VM with Approval Chain Project Manager Requestor Financial Manager Technical Team Security Officer New VM Required Submit VM Request via VRA Analyze VM Requirements Yes Does VM Meet Business Needs? Yes Is there Funding For The VM? No Yes Is Tech Review Necessary No Yes Receive Rejection Notification No Does VM Meet Technical Requirements? Yes Receive Requested VM Does the Request Meet IA Requirements Yes No Phase vrealize Automation (VRA) Process VM Request Is Approval Required? Create Computer Object in relevant OU Build VM Join VM to OU Inform Customer of Completed VM Copyright 2017 Deloitte Development LLC. All rights reserved. Integrated Multi Cloud Management solution 16

ON-PREMISES CLOUD Use Case 2 - Unified Multi-Cloud Operations Dashboards CSP 1 CSP 2 HyTrust KeyControl 1. SECURED NETWORK 2. ENCRYPTED 3. HARDENED OS Pivotal Cloud Foundry vrb vrops vra vro Log Insight Digital Fuel vsphere OS VM vsan NSX vrealize Operations Manager Dashboards depict the resources allocated and consumed by cloud deployments Dashboards are available for business groups (aligning to dev/test/prod functions) Depicts cross-cloud resources consumed by each business group Copyright 2017 Deloitte Development LLC. All rights reserved. Integrated Multi Cloud Management solution 17

Use Case 3 - Multi-Cloud Business Dashboard IT Cloud Spend Across Clouds and Trending of Spend vs. Founded Questions Answered: o Where do significant variances exist between spend, vs. plan/funding? o What is being consumed and spent across clouds providers? Results & Value: o Manage spend to hit plan while preserving service o Cost with projections vs budget (Application/environment/services/pool of resources) Multi-CSP Application Spend Track and analyze costs related to applications and their environments (Dev, Test, Prod) Questions Answered: o Where is my application running and what is the cost breakout by provider? o How do infrastructure costs differ by provider? o IaaS/PaaS cost YTD VMworld 2017 Compute Storage Network Application 1 CSP1 CSP2 CSP3 $3,500 $500 $200 $1,000 $500 $2,000 Content: Not for publication CSP1 CSP2 $150 $100 $200 $200 $100 $50 $100 $150 Results & Value: o Understand the total cost of an application across environments and clouds o Enhanced reporting related to FITARA, DCOI and others for Federal Customers Private $200 Total application cost = $450 Copyright 2017 Deloitte Development LLC. All rights reserved. Integrated Multi Cloud Management solution 18

The Multi-Cloud Approach Lessons Learned and Considerations for your Multi or Hybrid Cloud Project Copyright 2017 Deloitte Development LLC. All rights reserved. Integrated Multi Cloud Management solution 19

Key Considerations to Take Away Consider the following points as the enterprise moves toward the implementation of cloud services in support of their mission Technology Considerations Understand how new cloud technology will integrate with current architectures and environments Evaluate current technology skillsets and capabilities of current staff and contracts and map proposed technology skillsets where they most appropriately align Evaluate the implications of the cloud platform options Perform IT landscape assessment and risk framework impact The integration of core infrastructure services and providers is critical to automation planning and design efforts Organizational Considerations Understand the Pain Points for 1) The IT service organization 2) The consumers of the services Align to/develop common enterprise framework and taxonomy for cloud service consumption and reporting Build stakeholder consensus across organization through Proof of Concept and Demos of real-life solution Build credibility through incremental enhancement of foundational services start simple and add complexity over time Copyright 2017 Deloitte Development LLC. All rights reserved. Integrated Multi Cloud Management solution 20

Accelerated Implementation Approach Discovery Proof of Concept Initial Offering Full Solution Analyze current environment Identify success criteria Develop detailed project plan Identify POC use case Complete business case Design and validate POC Build and demonstrate POC Finalize project plan Identify security requirements Develop production use cases Launch system for Dev and Test Ensure compliance with FISMA/FedRAMP Connect to external clouds Deliver fully operational multi-cloud management tool Accelerate FedRAMP and ATO activities for FISMA moderate data Complete and authorize security documents Governance, cyber security, documentation, and program management occur across the entire timeline Copyright 2017 Deloitte Development LLC. All rights reserved. Integrated Multi Cloud Management solution 21

4 8 12 12 16 16 4 8 12 12 16 16 4 8 12 12 16 16 4 8 12 12 16 16 4 8 12 12 16 16 Software Defined Data Center (SDCC) Logical Design ToR Switch ToR Switch Management pod (4 ESXi hosts) Management pod (4 ESXi hosts) Management pod (4 ESXi hosts) Management pod (4 ESXi hosts) Management Edge pod pod (4 (4 ESXi ESXi hosts) Management Edge pod pod (4 (4 ESXi hosts) Management Edge pod pod (4 (4 ESXi ESXi hosts) Management Edge pod pod (4 Management (4 ESXi ESXi hosts) pod (4 ESXi hosts) Compute Management Edge pod pod pod (4 (4 (4 ESXi ESXi hosts) Management Compute Edge pod pod pod (4 (4 (4 ESXi hosts) Management Compute Edge pod pod pod (4 (4 (4 ESXi ESXi hosts) Management Compute Edge pod pod pod (4 (4 (4 ESXi ESXi hosts) hosts) Management pod (4 Compute Edge ESXi pod hosts) pod Management (4 (4 ESXi hosts) pod (4 Compute Edge ESXi pod hosts) pod (4 (4 ESXi hosts) Compute Edge pod pod (4 (4 ESXi hosts) Compute Edge pod pod (4 Compute (4 ESXi hosts) pod (4 Edge ESXi pod hosts) Compute (4 ESXi hosts) pod (4 Edge ESXi pod hosts) Compute (4 ESXi hosts) pod (4 ESXi hosts) Compute pod (4 ESXi hosts) Compute pod (4 ESXi hosts) Compute pod (4 ESXi hosts) Compute pod (4 ESXi hosts) SDDC Payload NSX Transport zone (compute) vds (compute) Virtual Infrastructure Compute Edge Managed by: Compute vcenter Server Shared Edge and Computer Cluster ES Xi APP OS ES Xi ES Xi Virtual Infrastructure Management NSX Transport zone (Mgmt) Managed by: Management vcenter Server Copyright 2017 Deloitte Development LLC. All rights reserved. Integrated Multi Cloud Management solution 22 APP OS NSX Controller (compute) APP OS NSX Edge (compute) Network: Internal SDDC Fabric (spine/lead) ES Xi NSX Controller (Mgmt) NSX Manager (compute) vcenter server (compute) NSX Edge (Mgmt) NSX Manager (Mgmt) vcenter server (mgmt) vds (Mgmt) Management Cluster Other Management Applications Management and Shared Edge and Compute Pod ES Xi APP OS ES Xi ES Xi Network: External (Internet/MPLS APP OS ES Xi NSX provides cross platform security and network automation vcenter manages the virtual infrastructure ESXi hosts coordinate the allocation of resources Aggregating these various VMware components allows for total virtualization of the Data Center Environment

Thank you. Doug Bourgeois Managing Director Deloitte Consulting LLP Dbourgeois@deloitte.com Sean Vandruff Sr. Technology Fellow Deloitte Consulting LLP Svandruff@deloiite.com Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee ( DTTL ), its network of member firms, and their related entities. DTTL and each of its member firms are legally separate and independent entities. DTTL (also referred to as Deloitte Global ) does not provide services to clients. In the United States, Deloitte refers to one or more of the US member firms of DTTL, their related entities that operate using the Deloitte name in the United States and their respective affiliates. Certain services may not be available to attest clients under the rules and regulations of public accounting. Please see www.deloitte.com/about to learn more about our global network of member firms. This communication contains general information only, and none of Deloitte Touche Tohmatsu Limited, its member firms or their related entities (collectively, the "Deloitte Network"), is, by means of this communication, rendering professional advice or services. Before making any decisions or taking any action that may affect your finances, or your business, you should consult a qualified professional adviser. No entity in the Deloitte Network shall be responsible for any loss whatsoever sustained by any person who relies on this communication..