HP Network Automation Matt Miller — HP Solutions

HP Network Automation Matt Miller - HP Solutions Architect December 2009

HP Software BTO centers Where does DCA Fit? Business outcomes STRATEGY APPLICATIONS Quality Management Project & Portfolio Management Center Quality Center CIO Office Performance Center SOA Center CTO Office 2 3/16/2018 Application Security Center SAP, Oracle, SOA, J 2 EE, . Net OPERATIONS Business Service Management IT Service Management Business Service Automation Operations Orchestration Business Availability Center Operations Center Client Automation Center Service Management Center Network Management Center Universal CMDB Data Center Automation Center

HP Businessclient, server, software, network, storage & process Service Automation Automate management of Business Service Automation Operations Orchestration BSM ITSM Live Network IT Teams Discovery Client Automation • Discover servers, software network devices, & storage Network Automation • Server, network, storage Server Automation • Audit Provisioning & Scaling Storage IT Systems Automation • Servers & network devices • Remediation Service Automation Visualizer. Software • Applications • • Reporting • Interdependencies • Configurations • Patching • All applications & • Process-enabled components storage provisioning • Software distribution Monitoring events & alerts Service Automation Reporter Universal CMDB 3 3/16/2018 Help desk/ change requests

What is driving the need for network automation? Globally distributed network Lack of Visibility and Control Consequences of Non -Compliance • • • Failed audits (PCI, SOX, HIPAA) • Security vulnerabilities • Out-dated equipment Device inventory Configuration Software versions Application dependencies Explosive Growth in Network Size and Technologies • 200% device growth • Wireless, Vo. IP adoption • New application and service support 4 3/16/2018 Need to do more with fewer resources • Disparate Tools and Processes • Repetitive, Manual Tasks • Escalations and Firefighting

Business impact of manual operations High outage rates & low availability Unknown security vulnerabilities 80% of security incidents due to manual misconfigurations Labor-intensive change management 45% of network engineers time spent on manual network changes Complex, costly compliance management 5 80% of network budget allocated reactively to avoid network downtime 5 x more costly to meet compliance requirements when done manually 3/16/2018

HP Network Automation measurable ROI Task Real-time visibility into change activities Automated compliance enforcement Real-time identification of security vulnerability Automate manual tasks 6 3/16/2018 Before HP Automation With HP Automation ROI Mean time to resolution – 150 minutes Mean time to resolution – 15 minutes 3% compliance and failed audit Decreased 100% auditing costs compliance and & improved customer passed audit satisfaction Increased uptime Mean time to discover security issue – 2 weeks Mean time to discover security issue – 2 minutes Drastically reduced vulnerability window Update WEP keys on 10, 000 devices in 2 weeks Update WEP keys on 10, 000 devices in 2 hours Lowered maintenance costs and rework

Key features of HP Network Automation Deep automation for each lifecycle stage and fully integrated process management Operations Orchestration Automate change approval, alert/event triage, routine networking tasks Network Lifecycle Automation IT Teams Catalog & Track • Discover and catalog the network • Visualize layer 2 & Audit & Enforce Change & Configure • Define compliance • Create and deploy policies configuration changes • Detect violations in layer 3 dependencies real-time & autoremediate • Snapshot & store • Standardize and • Dynamically alerted device information in real time to emerging threats via The HP Live Network validate changes before applying • Uniformly apply software updates • Enforce workflow & approvals Maintain & Support • Report on assets, change activity, compliance & much more • Download new device support monthly • Monthly content updates via HP Live Network e. g. PCI Policies Automation Platform Scalable 7 3/16/2018 Global Deployment Architecture Secure Extensible IT Systems

Challenges in Managing the Network 4. Data manually collected & reported Problem - Costly, tedious and inaccurate 1. Configs, OS images & scripts dispersed across IT workstations Problem - No propagation of standards - Lack of security - Redundant efforts in scripting & configuration IT Staff Tools Manager - Auditors - Managers - Directors Network Architect Network Manager Security Engineers Network Engineers NOC Operators 15 3/16/2018 2. IT admins connect directly to network devices 3. Devices configured manually one by one Problem - Lack of change control over the network resulting in errors Problem - Costly & error prone manual changes - No proactive enforcement of best practices Network

How companies are using HP NA Preventative management & global standards enforcement 1. Track all activity down to every operator keystroke IT Staff Tools Manager Direct access can be allowed & is still completely audited by HP NA 3. Prevent errors & enforce process through centralized point of control Network Architect Network Manager Security Engineers HP Network Automation Network Engineers NOC Operators Auditor Manager Director Network Management Tools 16 3/16/2018 2. Control and standardize across infrastructure in a central, secure location 4. Automate complex network management tasks through multi-threaded event-driven automation engine

Multimaster and Satellite enables global scalability and central visibility HP Satellite Remote Office HP Core Multimaster Data Center • • • Manage any device from anywhere Management is possible even when WAN links are down and automatically recovers Automation system itself is disaster tolerant Enables rapid disaster recovery of application environments The automation system is multi-location aware

HP Live Network HP Security & Compliance service for Network Automation © 2007 Hewlett-Packard Development Company, L. P. The information contained herein is subject to change without notice

What is HP Live Network? Security & Compliance Service HP Live Network Platform 21 3/16/2018 § § Security & Compliance Service for SAS & NAS To be expanded to Client Automation & PAS Daily delivery of security vulnerability content Industry-standard compliance policies updated regularly § Tools for delivering security & compliance service § Website for community engagement & downloads § To be extended to support other content services in FY 08

Traditional Vulnerability Management Manual, error–prone, time-consuming and expensive Impossible to ensure Takes days or weeks Manual 1. Vulnerability Awareness 2. Vulnerability Translation 3. Identification & Remediation IT Challenges 22 3/16/2018 Ongoing Compliance

The HP Live Network difference Automated, reliable, and rapid remediation Security Vulnerability Content Vulnerability Awareness Automated delivery of vulnerability alerts 23 3/16/2018 Vulnerability Translation Immediately actionable policies Identification & Remediation Ongoing Compliance Rapid identification and remediation Automated alerts on any regression

Security & Compliance Service Annual Subscription Service for NAS • Security Vulnerability Service − Weekly feed produced by dedicated content development team − Sourced from i. Defense & NVD (National Vulnerability Database) • Compliance Service − CIS (Center for Internet Security) policies for Cisco IOS & Cisco PIX − PCI (Payment Card Industry) policies for Cisco IOS 24 3/16/2018