Defense Communications as a Scarce Resource Sandeep K. Singhal, Ph.D Director, Windows Networking Microsoft Corporation

Agenda Trends in enterprise networking Windows networking vision and roadmap Windows Vista and Windows Server 2008: Features at a glance Collaboration with MoD Looking into the future Summary

Trends in Enterprise Networking Server consolidation and growth of data centers Increasingly mobile and remote staff Evolving security requirements

Trends in Enterprise Networking Server consolidation and growth of data centers Single networking fabric for web, file, database, and backup Increased network traffic load on servers Increased load on Internet firewalls Increasingly mobile and remote staff Evolving security requirements

Trends in Enterprise Networking Server consolidation and growth of data centers Single networking fabric for web, file, database, and backup Increased network traffic load on servers Increased load on Internet firewalls Increasingly mobile and remote staff Remote access solutions stretch experience, support, and management Greater reliance on WAN (over Internet) links from branch offices Multiple client access technologies and devices Evolving security requirements

Trends in Enterprise Networking Server consolidation and growth of data centers Single networking fabric for web, file, database, and backup Increased network traffic load on servers Increased load on Internet firewalls Increasingly mobile and remote staff Remote access solutions stretch experience, support, and management Greater reliance on WAN (over Internet) links from branch offices Multiple client access technologies and devices Evolving security requirements Enterprise edge disappearing with mobile workforce & devices Diverse user population (contractors, vendors) require securing resources in addition to networks Federation and regulatory needs require policy-based isolation domains

Windows Networking Vision: Secure Seamless Network 3/25/2017 1:29 PM Windows Networking Vision: Secure Seamless Network Data Center IPsec Isolation X X Main Office Key points: 1. IPv6 is a key building block for Seamless Network Vision 2. End to end connectivity enables access to my data, my settings, my experience 3. Using Internet will require address scalability IPv6 requires. Branch Office Un-trusted PCs (e.g., guest) ©2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

Elements of a Secure, Seamless Network Policy-based secure access to resources from anywhere End to end connectivity over the Internet using IPv6 All communications authenticated using end to end IPsec Connection-by-connection Access controlled by identity Trust boundaries defined by policy instead of topology Traffic management at the edges Network access protection (NAP) systems keeps systems healthy and protected from unhealthy systems Existing applications just work

Windows Networking Roadmap Win Server 2003/ Win XP End host security Integrated Windows Firewall Win Server 2008/ Win Vista Intranet security domains Server and Domain Isolation (S&DI) Network Access Protection (NAP) IPv6 native and transition solutions for enterprises Future: Secure seamless networks Internet security domains Easy to deploy Easy to manage

Windows Vista and Windows Server 2008: Networking Features At A Glance Trend Problem Vista/WS08 Impact Server consolidation and growth of data centers Slow data replication between data centers despite high speed connectivity Compound TCP enables data transfers at multi-gigabit speeds 200% increase in replication speed between Microsoft Redmond and Bay Area data centers Increasing network load limiting server scalability Built-in hardware offload and CPU load balancing for network traffic 50% increase in web requests/sec on same hardware (as measured by webbench)

Windows Vista and Windows Server 2008: Networking Features At A Glance Trend Problem Vista/WS08 Impact Remote and Mobile workforce High latency limits network performance in branch offices Automatic tuning to optimize for WAN links File copy speed from US to Microsoft Australia increased by 1000% DCE* testing showed 200% improvement over 2Mbps satellite links Network losses limit throughput on WLAN, WWAN Loss detection and automatic recovery Loss recovery time reduced by 40% over satellite links in DCE testing Mobile PCs expose enterprise networks to viruses as they roam between networks Network access protection (NAP) solutions IT security compliance increased by 80% after deploying NAP on Microsoft network *Defense Communications Efficiency: Joint project between Microsoft and UK MoD

Windows Vista and Windows Server 2008: Networking Features At A Glance Trend Problem Vista/WS08 Impact Remote and Mobile workforce Overlapping private addresses make remote management hard Full IPv6 support enabled end to end connectivity IPv6 enabled throughout Microsoft by deploying only few new servers Ad-hoc collaboration in war zones, conferences hard in absence of infrastructure setup Windows Meeting Space allows sharing presentations, files, notes Windows Meeting Space widely used within Microsoft for ad-hoc collaboration Hard to deploy quality of service solutions to manage expensive WAN resources Policy based enterprise QoS (eQoS) eQoS deployed on Microsoft WAN links with existing router hardware to prefer certain app traffic

Windows Vista and Windows Server 2008: Networking Features At A Glance Trend Problem Vista/WS08 Impact Security Mobility and de-perimeterization increasing threat surface Server and domain isolation (SDI) solutions enable policy based security solutions Universidade de Vila Velha (UVV) deployed SDI to increase security and simplify management Security policy management hard to deploy and manage -Group policy based SDI deployment solution -IPsec management integrated with Windows Firewall City of Sopporo, Japan deployed SDI with Nil cost for 12000 users across 870 different departments

Case Study: Defense Communication Efficiency Players UK MoD Microsoft Started 2004 Goal Improving efficiency on satellite networks Approach Phased engagement consisting of problem definition, joint solution development, joint testing, feedback and refinement Outcome Windows Server 08/Vista autotuning, Compound TCP, and loss recovery improvements Benefits to MoD GBP 500M per year spending on satellite links – even 10% efficiency improvement is significant savings Benefits to Microsoft Microsoft: Validation of algorithms on Large Network Emulator as well as on real satellite network as part of JWID 05

Case Study: Defense Communication Efficiency Players UK MoD Microsoft Started 2004 Goal Improving efficiency on satellite networks Approach Phased engagement consisting of problem definition, joint solution development, joint testing, feedback and refinement Outcome Windows Server 08/Vista autotuning, Compound TCP, and loss recovery improvements Benefits to MoD GBP 500M per year spending on satellite links – even 10% efficiency improvement is significant savings Benefits to Microsoft Microsoft: Validation of algorithms on Large Network Emulator as well as on real satellite network as part of JWID 05 Engagement continuing beyond Windows Server 2008/Windows Vista Several areas identified such as IPv6, compression, QoS Framework for managing IP: Facilitates free flow of ideas and testing results

Looking into the Future Remote work Easy and reliable network access from anywhere Better manageability of mobile PCs Extend Intranet NAP and isolation to remote worker Branch offices Further efficiency in fetching data over WAN links Preserve end to end security solutions Security domains Easier deployment Easier management Easier support

Summary Windows Server 08 and Windows Vista Provide substantial advances that address key issues faced by evolving enterprise networks Influenced by partnership with MoD Address business issues impacting MoD Plan and prepare for secure seamless networks Trends in enterprise networking demand such networks IPv6, IPsec and NAP are key building blocks for these networks Windows Server 2008 and Windows Vista enable enterprises to deploy these networks

Questions Sandeep K. Singhal, Ph.D Director, Windows Networking Sandeep.Singhal@microsoft.com +1 (425) 706-6570 Questions

Backup

Windows Networking Vision: Secure Seamless Networks 3/25/2017 1:29 PM Windows Networking Vision: Secure Seamless Networks Internet IS your network Applications just work All communications authenticated Connection-by-connection Access controlled by identity Trust boundaries defined by policy instead of topology Traffic management at the edges Network Immune Systems Key points: 1. IPv6 is a key building block for Seamless Network Vision 2. End to end connectivity enables access to my data, my settings, my experience 3. Using Internet will require address scalability IPv6 requires. IPsec isolation Lab Guest Enterprise Network ©2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.