Unleashing the Power of Ubiquitous Connectivity with IPv6 Sandeep K. Singhal, Ph.D Director of Program Management Windows Networking

Agenda The Connectivity Imperative IPv6 Product Report Card The power of IPv6 and Windows networking Call to Action 2

New business goals Agile, responsive Data driven decisions 3 The Connectivity Imperative And changing expectations Multiple devices Always on Always connected Create new requirements Interoperability Secure, reliable connectivity Seamless, dynamic applications

Seamless Applications Impact The Future of Business Computing Dynamic Datacenter Dynamic Datacenter Focus on Security, Productivity, and Impact Focus on Security, Productivity, and Impact Providing a unique “customer experience” Providing a unique “customer experience” The Future of Personal Computing From personal computer to personal computing From personal computer to personal computing Across multiple PCs and devices Across multiple PCs and devices Blurring of digital workstyle and lifestyle Blurring of digital workstyle and lifestyle Individual in control of their digital world Individual in control of their digital world 4

IPv6 is a Key Building Block Continued seamless connectivity demands a new paradigm Security Scalability Flexibility 5 IPv6 is required to support the new network and Internet

Windows Vista Windows Server 2008 SQL Server 2008 SQL Server 2005 Exchange Server 2007 SP1 Host Integration Server 2007 Biztalk Server 2006 Office Sharepoint Server 2007 SMS/SCCM 2007 MOM/SCOM 2007 System Center Virtual Machine Manager Office 2007 Active Directory/DNS/DHCPv6 Groove Coming Soon! ISA Server Coming Soon! IPv6 Report Card 6

Windows Vista Windows Server 2008 SQL Server 2008 SQL Server 2005 Exchange Server 2007 SP1 Host Integration Server 2007 Biztalk Server 2006 Office Sharepoint Server 2007 SMS/SCCM 2007 MOM/SCOM 2007 System Center Virtual Machine Manager Office 2007 Active Directory/DNS/DHCPv6 Groove Coming Soon! ISA Server Coming Soon! IPv6 Report Card 7

More Than the Stack… All standard Windows Server 2008 components are IPv6 capable IPv6 is on by default, and preferred Controllable via Group Policy All Enterprise-class products currently in production are IPv6 capable GUI-based configuration Full support for IPsec 8

IPv6 Now – Infrastructure Later Transition Technologies let enterprises deploy IPv6 before infrastructure supports it Phased deployments Managed rollout out native IPv6 Native IPv6 ISATAP tunnel (IPv6 in IPv4) Native IPv4 IPv4 IPv6 ISATAP Router 9 ISATAP (RFC 4214) works well inside the network Single box can enable IPv6 in the enterprise Secure tunneling of IPv6 over IPv4

IPv6 Now – Infrastructure Later IPv4 Internet Restricted NAT Teredo Server Bubble Packets Teredo works well for unmanaged/home users Works through a NAT Protocol of last resort Automatically disables in a managed environment Transition Technologies let consumers deploy IPv6 before infrastructure supports it Phased deployments Transition to managed infrastructure

On by default Server Roles plumb firewall rules Stateful IP filtering inbound and outbound Full support for IPv6/ICMPv6 Location-aware policy profiles Domain, Public, Private Service Hardening Prevent critical Windows services from being used for malicious activity Enabled by default, and applies to inbound and outbound traffic Windows Firewall Features

Server and Domain Isolation Labs Unmanaged guests Protect managed computers from unmanaged or rogue computers and users Protect specific high-value servers and data Server Isolation Domain Isolation Dynamically segment your Windows environment into more secure and isolated logical networks based on policy 12

Policy-Based Network Access Protection Network Access ProtectionNetwork Access Protection Policy-based solution that Validates whether computers meet health policies Limits access for noncompliant computers Automatically remediates noncompliant computers Continuously updates compliant computers to maintain health state Solution HighlightsSolution Highlights Standards-based Plug and Play Works with most devices Supports multiple antivirus solutions Has become the standard for Network Access Control

14 IPv6 Deployment at Microsoft ISATAP available in all buildings world-wide Native v6 connectivity in all development buildings world-wide Where do we need native v6? That is where we concentrate upgrades Everywhere else gets ISATAP connections

Lessons Learned Start early with training Set up a test lab Ensure you have a good application inventory Enable IPv6 on all machines Use ISATAP to decrease deployment costs Phased deployments work best Client impact in dual-stack environment is minimal The only way to achieve business value with IPv6 is to use applications that leverage the new features of the IPv6 stack 15

Call to Action Install Windows Vista SP1 and Windows Server 2008 Don’t disable IPv6 Start training now Don't buy hardware that won't support IPv6 You don't have to deploy IPv6 today, but you do have to start getting ready for IPv6 today 16

© 2008 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.