Your vision. Your cloud. John F. Schaller Azure Solutions Specialist
Optimized Data Center Cloud Attributes Consolidated Managed Virtualized Cost Efficient Pooled resources Automation + Self-service Elasticity = Usage-based Cloud On Premise: Private Cloud Off Premise: IaaS, SaaS, PaaS
Microsoft Cloud Services for Government On-premises Infrastructure as a Service Platform as a Service Software as a Service Applications Applications Applications Applications Data Data Data Data Runtime Runtime Runtime Runtime Middleware Middleware Middleware Middleware OS OS OS OS Virtualizations Virtualizations Virtualizations Virtualizations Servers Servers Servers Servers Storage Storage Storage Storage Networking Networking Networking Networking Customer manages Microsoft manages Shared management 3
Build and innovate with choice and flexibility DevOps Management Applications App frameworks & tools Databases & middleware Infrastructure
Command AFMIS TRADOC HQDA PEO-C3T USACE ALTESS ARCYBER CIO G6 NETCOM AFRICOM DISA National Guard Defense Health SouthCom Use Case Food Logistics Training Systems, Video, Web Apps, SharePoint Web Apps, business Apps Code Repository and DevOps IoT, IaaS, Geo-Spatial Full Spectrum of apps/use cases Cyber feed from Microsoft, Identity Mgmt, Dashboard Commanders Dashboard Recruit a hacker and web apps Web Apps Full spectrum of Apps Backups/Storage and developing a new medical readiness app Medical Chart application VM s/iaas
Seattle ExpressRoute New York ExpressRoute 4 Gov regions Silicon Valley ExpressRoute, CAP Chicago ExpressRoute Washington D.C. ExpressRoute, CAP 2 DoD regions Phoenix ExpressRoute Dallas ExpressRoute, CAP 7 ExpressRoute Locations ExpressRoute Documentation
REGIONAL INDUSTRY US GOV GLOBAL ISO 27001 ISO 27018 ISO 27017 ISO 22301 ISO 9001 SOC 1 SOC 2 Type 2 Type 2 SOC 3 CSA STAR Self-Assessment CSA STAR Certification CSA STAR Attestation Moderate JAB P-ATO High JAB P-ATO DoD DISA SRG Level 2 DoD DISA SRG Level 4 DoD DISA SRG Level 5 SP 800-171 FIPS 140-2 Section 508 VPAT ITAR CJIS IRS 1075 PCI DSS Level 1 CDSA MPAA FACT UK Shared Assessments FISC Japan HIPAA/ HITECH Act HITRUST GxP 21 CFR Part 11 MARS-E IG Toolkit UK FERPA GLBA FFIEC Argentina PDPA EU Model Clauses UK G-Cloud China DJCP China GB 18030 China TRUCS Singapore MTCS Australia IRAP/CCSL New Zealand GCIO Japan My Number Act ENISA IAF Japan CS Mark Gold Spain ENS Spain DPA India MeitY Canada Privacy Laws Privacy Shield Germany IT Grundschutz workbook Trust Center
38 Azure Government services authorized FedRAMP JAB Authorized Active Directory ExpressRoute API Management Functions App Service HDInsight Application Gateway Intune Automation Key Vault Azure Monitor Load Balancer Azure Portal Log Analytics Azure Resource Manager Media Services Azure Service Manager (RDFE) Notification Hubs Backup Power BI Batch Redis Cache Cloud Services Scheduler Event Hubs Service Bus Service Fabric Site Recovery SQL Data Warehouse SQL Database SQL Server Stretch Database Storage StorSimple Traffic Manager Virtual Machine Scale Sets Virtual Machines Virtual Network VPN Gateway Workflow In-Progress FedRAMP Audit Authorizations Azure Information Protection Azure Active Directory Premium
Fast track to certification and compliance of applications built on Azure Architecture Deployment Certification Expertise Partnership 5-step process that streamlines paperwork through templates and tools, and allows your security professionals to focus on security not paperwork For latest Blueprint: https://aka.ms/azureblueprint
Azure solutions Big data & data warehouse Internal business apps Dev/Test RedHat on Azure High performance computing SAP on Azure Backup, Archive, DR Customer facing apps Internet of Things BI + analytics
We hear from our enterprise customers I need to consolidate vendors and require a partner who can solve my disaster recovery and backup needs under one contract. My infrastructure is extremely complex and features a mix of VMware & Hyper-V, Windows & Linux and many one-off applications. I am looking to take advantage of a hybrid deployment but it is a complicated process to migrate workloads to the cloud. I know the cloud has a number of useful services but it has proven difficult to achieve in reality.
The best-in-class provider for availability solutions Single Provider Heterogeneous Support Hybrid Built-in Unlocks Azure Services Leverage native, first party backup and disaster recovery from Azure, a trusted cloud service provider Support heterogeneous environments Hyper-V, VMware, Windows, Linux & physical servers with Azure s cross-platform functionality Quickly achieve a hybrid strategy by replicating on-premises workloads to Azure Azure s availability solutions provide a direct path to the cloud, unlocking the innovation it delivers
Protect and extend your datacenter With two availability technologies from Microsoft Azure Azure Site Recovery Azure Backup Disaster Recovery Datacenter Extension Enterprise Backup IaaS Backup Protect your applications from downtime by replicating to Azure Extend your datacenter to Azure and take advantage of the cloud services it provides Back-up on premises data to the cloud, replace tape, and ensure compliance Safeguard your cloud investments by ensuring cloud VMs are protected
When your applications have a catastrophic failure, run them in Azure or a secondary datacenter When your data is corrupted or lost, restore your data to the original location or a new location
Source: Forrester The State of Business Technology Resiliency Q2 2014, May 12, 2014
Maintaining all infrastructure on-site is costly & lacks flexibility
Maintaining secure backups
Annual Cost Estimates Tape Backup ($) Cloud Backup ($) Tape Hardware Cost (LTO-5 drive, two additional 1.5TB cartridges, five year life cycle) On-Premises Backup/Restore Device or Appliance Cost (annualized based on three-year life cycle, including annual maintenance cost) 520 0 0 500 to 3,000 Backup Software License and Maintenance (three servers) 1,260 0 Break/Fix Maintenance Calls 1,000 0 Tape Vaulting Services 3,600 0 Administrative Cost ($20/hour) 2,400 (30 minutes/day) 240 (1 hour/month) Cloud Backup Service (9TB/year; $0.08-$0.75/GB/ Month; no deduplication and compression including annualized local backup/restore appliance cost) 0 713 to 5,997 Total $8,780 $1,213 to $8,997 Azure Backup $2585! Gartner: How to Determine If Cloud Backup Is Right for Your Servers, 13 February 2014
Maintaining secure backups of IaaS VMs
VMWare VM Backup Agentless Backup Cloud integrated Discovery of vcenter vcenter 5.5, 6.0, 6.5 support Folder-level Auto protection Protect VMs stored on NFS/SAN/DAS Available through MABS
Microsoft File Server Microsoft IIS
Seeding your initial backup data without network consumption. This is great for customers who do not have a lot of bandwidth to spare (or) Bandwidth is costly Value proposition: Faster seeding of Azure Backup data Lower bandwidth requirements Better backup SLAs
Classic (Non-CSP) Subscription Azure Azure Recovery Services Vault (ARM) 5 Customer Storage Account 4 Import Service (Classic V1) 3 On-premises 1 2 Backup data Encrypted Hard-drive BitLocker Encrypted
Unified Restore experience Instant recovery Open and view data before restore Zero additional infra or cost
Real time Backup health Restore stats Backup Items Policy and Recovery points Every 24 hours 24 hour refresh Backup Storage
Today s challenges Compromised agility Developers Request VMs IT admin Provision VMs Limited hardware budget Resource contention with VMs Your datacenter Realistic scale tests often challenging Procurement delays 65% 10% of developers say it is too complicated and time-consuming to get development and test resources Average utilization of dedicated dev-test infrastructure Source: Business Case for Test Environment Management Whitepaper, Cognizant
Test at Realistic Scale Replicate real-world usage scenarios in your test environment, and gain a precise view into how your application will behave in the real world.
Scalable, on-demand infrastructure supports fast and consistent dev & test Provision resources in minutes, instead of days or weeks Developers Provision VMs Use VMs IT admin Manage environment Test at production scale, to catch and fix problems before you release Improve productivity with predefined images & application services Azure Provision in Minutes Test at Realistic Scale Minimize Waste & Cost
Make realistic scale a reality in testing your mission critical applications Stage your pre-production environments in Azure to secure safe rollout of new features, service updates, etc. Azure Azure supports Microsoft applications such as Dynamics, Sharepoint, Exchange, SQL. Azure Marketplace provides easy access to VM Images from SAP, IBM, Oracle and more than 3000 others Provision in Minutes Test at Realistic Scale Your datacenter or hoster Minimize Waste & Cost
Pay only by the minute for virtual machines, and allocate them as needed to developers Developers Provision & use VMs IT admin Manage resources Save time and money with automation and scale Minimize waste with visibility and tight control of computing resources. Use chargebacks to allocate costs to internal groups. Azure Use familiar tools for easy provisioning, deployment and management of dev-test environments Business units Pay as you go Provision in Minutes Test at Realistic Scale Minimize Waste & Cost
Worry-free self-service Provision environments with allocated quotas and policies Control Costs and track project spending Dev-Test Lab Create once, use everywhere Create templates once and share with your team Test easily in realistic scale scenarios Achieve high fidelity between dev-test and production environments Deploy easily on-prem or in the cloud Azure Integrate with your existing tools Leverage pre-made plugins and APIs Dev-Test from preferred CL tool Use command line tool ExpressRoute Migrations Dev-Test Labs
Azure Stack promise Consistent application development Azure services available on-premises Integrated delivery experience
Azure PaaS available on-premises: High productivity development Azure App Service Azure Functions Azure Service Fabric Azure Container Service (ACS) Cloud Foundry Web, Mobile, and API apps Serverless Computing Scalable distributed applications, deploy standalone Service Fabric clusters initially Container management, with ACS engine support for Docker Swarm, Kubernetes, and Mesosphere DC/OS Open source platform Roadmap: Azure Service Fabric-as-a-Service and Azure Container Service-as-a-Service are planned to be available in CY18
Azure IaaS available on-premises: beyond traditional virtualization Virtual machines (VM), VM scale sets Containers with Docker Networking Storage Key Vault Rapid deployment with automated scaling Linux and Windows Server containers Virtual network, load balancer, VPN gateway Blobs, tables, queues Securely protect application keys and secrets Roadmap: Additional Azure consistency (New VM types, Managed Disks, storage API updates) in CY18. Windows Azure Pack Connector for Azure Stack in CY17.
Built-in Azure, no setup required Automatically discover and monitor security of Azure resources Gain insights for hybrid resources Easily onboard resources running in other clouds and on-premises
Backup, Recovery and Migration Azure Backup Hyper-V VMware User Machine MS Apps Azure Backup Server (D-D), (D-C) or (D-D-C) Encrypted Backup Recovery Public Internet ExpressRoute Public Peering RBAC Mgmt Tape Replacement Microsoft Azure Retention up to 99 years RBAC Scheduled or ad-hoc backups LRS or GRSBackup Vault Encrypted in-flight & at rest Can protect: Hyper-V & VMware Windows & Linux Microsoft Applications Client machines Retention up to 99 years Support matrix here Azure VM Backup Microsoft Azure RBAC Mgmt Recover even deleted VMs RBAC Scheduled or ad-hoc backups Encrypted in-flight & at rest Can protect: Windows & Linux Microsoft Applications Retention up to 99 years Support matrix here Azure Site Recovery Health Monitor Region A Replication Region B Manage Recovery DR Service Cloud Storage Recovery plan Disaster Recovery Datacenter Extension Microsoft Azure Microsoft Azure Microsoft Azure Site A Replication Encrypted in-flight & at-rest On-demand compute Heterogeneous Scalable Powerful automation ExpressRoute or Public Internet Site A Recovery Replication Site B DR Service Cloud Storage Microsoft Azure Recovery Orchestrated Recovery in case of outage
Emerging strategies Microsoft IT Public cloud SaaS Office 365, OneDrive, Yammer, Dynamics Online,... PaaS New development Efficiency increases Efficiency increases IaaS IaaS virtual machines traditional applications Private cloud Private cloud datacenter Core network services remain on premises: Active Directory Domain Services (AD DS) Domain Name System (DNS) Windows Server Update Services Microsoft System Center 2012 Configuration Manager Evaluation Process Microsoft IT s hybrid cloud infrastructure Even though a complete migration to the public cloud is the goal, retaining core network services in traditional datacenters for the near future results in a hybrid cloud
Our adoption approach Roadmap planning Retire it, right-size, eliminate environments Use or convert to a SaaS (first- or third-party) solution Expose functionality in existing SaaS/PaaS solution ~30% ~15% From Office servers Portals and SPS Any relationship mgmt Active Source Control + work item type Data warehouses Industry standard verticals To Office 365 SharePoint Online CRM Online Visual Studio Online Azure Data Lake + Power BI Best third-party SaaS Convert to Azure PaaS solution Optimize for and move to Azure IaaS virtual machine <5% No change, lift-andshift to IaaS Remain on-premises First to move Basic web apps Advanced portals Any new solutions Any re-architected solutions ~35% ~10% ~5% Next to move High I/O OLTP Regulatory and high business impact Azure IT roadmap Hard or costly to move HVA systems PKI systems Legacy source control