HP Network Automation Matt Miller - HP Solutions Architect December 2009

HP Software BTO centers Where does DCA Fit? Business outcomes STRATEGY APPLICATIONS OPERATIONS Quality Management Business Service Management IT Service Management Business Service Automation Project & Portfolio Management Center Quality Center Operations Orchestration Operations Orchestration Business Availability Center Service Management Center Client Automation Center Performance Center CIO Office Operations Center SOA Center Data Center Automation Center Application Security Center Network Management Center CTO Office SAP, Oracle, SOA, J2EE, .Net Universal CMDB 7 December 2018

HP Business Service Automation Automate management of client, server, software, network, storage & process Business Service Automation BSM ITSM Operations Orchestration IT Teams IT Systems Live Network Discovery Provisioning & Scaling Client Automation Network Automation Server Automation Storage Automation Discover servers, software network devices, & storage Interdependencies Configurations Server, network, storage Applications Configurations Patching Software distribution Audit Remediation Reporting All applications & components Servers & network devices Software Process-enabled storage provisioning Service Automation Visualizer HP has amassed a compelling BSA offering, and HP NA is a valuable and crucial part of the equation. By understanding and managing the network, all other parts of the system and their automation come together more completely. Everything passes through the network. Monitoring events & alerts Help desk/ change requests Service Automation Reporter Universal CMDB 7 December 2018

What is driving the need for network automation? Globally distributed network Consequences of Non-Compliance Failed audits (PCI, SOX, HIPAA) Security vulnerabilities Out-dated equipment Lack of Visibility and Control Device inventory Configuration Software versions Application dependencies 200% device growth Wireless, VoIP adoption New application and service support Explosive Growth in Network Size and Technologies Need to do more with fewer resources Disparate Tools and Processes Repetitive, Manual Tasks Escalations and Firefighting 7 December 2018

Business impact of manual operations High outage rates & low availability 80% of network budget allocated reactively to avoid network downtime 80% of security incidents due to manual mis-configurations Unknown security vulnerabilities Labor-intensive change management 45% of network engineers time spent on manual network changes Complex, costly compliance management 5x more costly to meet compliance requirements when done manually 7 December 2018

HP Network Automation - measurable ROI Task Before HP Automation With HP Automation ROI Real-time visibility into change activities Mean time to resolution – 150 minutes Mean time to resolution – 15 minutes Increased uptime Automated compliance enforcement 3% compliance and failed audit 100% compliance and passed audit Decreased auditing costs & improved customer satisfaction Real-time identification of security vulnerability Mean time to discover security issue – 2 weeks Mean time to discover security issue – 2 minutes Drastically reduced vulnerability window Automate manual tasks Update WEP keys on 10,000 devices in 2 weeks Update WEP keys on 10,000 devices in 2 hours Lowered maintenance costs and rework 7 December 2018

Key features of HP Network Automation Deep automation for each lifecycle stage and fully integrated process management Operations Orchestration Automate change approval, alert/event triage, routine networking tasks Network Lifecycle Automation Catalog & Track Audit & Enforce Change & Configure Maintain & Support IT Teams IT Systems Discover and catalog the network Visualize layer 2 & layer 3 dependencies Snapshot & store device information in real time Define compliance policies Detect violations in real-time & auto-remediate Dynamically alerted to emerging threats via The HP Live Network Create and deploy configuration changes Standardize and validate changes before applying Uniformly apply software updates Enforce workflow & approvals Report on assets, change activity, compliance & much more Download new device support monthly Monthly content updates via HP Live Network e.g. PCI Policies Automation Platform Scalable Global Deployment Architecture Secure Extensible 7 December 2018

Challenges in Managing the Network 4. Data manually collected & reported Problem - Costly, tedious and inaccurate 1. Configs, OS images & scripts dispersed across IT workstations Problem - No propagation of standards - Lack of security - Redundant efforts in scripting & configuration 2. IT admins connect directly to network devices Problem - Lack of change control over the network resulting in errors - No proactive enforcement of best practices 3. Devices configured manually one by one Problem - Costly & error prone manual changes IT Staff Network Tools Manager Network Architect - Auditors - Managers - Directors Network Manager Security Engineers Network Engineers NOC Operators 7 December 2018

How companies are using HP NA Preventative management & global standards enforcement 1. Track all activity down to every operator keystroke 3. Prevent errors & enforce process through centralized point of control Direct access can be allowed & is still completely audited by HP NA IT Staff Network Tools Manager Network Architect HP Network Automation Network Manager Security Engineers 4. Automate complex network management tasks through multi-threaded event-driven automation engine Network Engineers NOC Operators 2. Control and standardize across infrastructure in a central, secure location Auditor Manager Director Network Management Tools 7 December 2018

Multimaster and Satellite enables global scalability and central visibility HP Satellite Remote Office HP Core Multimaster Data Center Manage any device from anywhere Management is possible even when WAN links are down and automatically recovers Automation system itself is disaster tolerant Enables rapid disaster recovery of application environments The automation system is multi-location aware

HP Live Network HP Security & Compliance service for Network Automation

What is HP Live Network? Security & Compliance Service Security & Compliance Service for SAS & NAS To be expanded to Client Automation & PAS Daily delivery of security vulnerability content Industry-standard compliance policies updated regularly Security & Compliance Service HP Live Network consists of 2 distinct components Security & Compliance (S&C) service HP Live Network Platform (LNP) that provides infrastructure for delivering above service Customers pay for S&C, LNP is free S&C service is delivered daily/weekly, LNP updates are once a quarter Tools for delivering security & compliance service Website for community engagement & downloads To be extended to support other content services in FY08 HP Live Network Platform 7 December 2018

Traditional Vulnerability Management Manual, error–prone, time-consuming and expensive Impossible to ensure Takes days or weeks Manual Vulnerability Awareness 2. Vulnerability Translation 3. Identification & Remediation Ongoing Compliance IT Challenges 7 December 2018

Security Vulnerability Content The HP Live Network difference Automated, reliable, and rapid remediation Security Vulnerability Content Vulnerability Awareness Vulnerability Translation Identification & Remediation Ongoing Compliance Automated delivery of vulnerability alerts Immediately actionable policies Rapid identification and remediation Automated alerts on any regression 7 December 2018

Annual Subscription Service for NAS Security & Compliance Service Annual Subscription Service for NAS Security Vulnerability Service Weekly feed produced by dedicated content development team Sourced from iDefense & NVD (National Vulnerability Database) Compliance Service CIS (Center for Internet Security) policies for Cisco IOS & Cisco PIX PCI (Payment Card Industry) policies for Cisco IOS 7 December 2018