Download presentation
Presentation is loading. Please wait.
1
ExpressRoute for Office 365 Training
ExpressRoute for Office 365 overview and scenarios – Day 2 Session 1
2
ExpressRoute guidance for Office 365
Direct network connectivity from your network to Microsoft Careful consideration is recommended for evaluating use of ExpressRoute with Office 365 Infrastructure and platform services running in Azure will often benefit by addressing network architecture and performance considerations. We recommend customers consider ExpressRoute for Azure in these cases. Software as a Service offerings like Office 365 and Dynamics 365 have been built to be accessed securely and reliably via the Internet. Accordingly, we only recommend ExpressRoute for these applications in specific scenarios.
3
ExpressRoute guidance for Office 365
Exceptions enabling Office 365 access via ExpressRoute will require productivity win room approval requested by a Microsoft account team under the following criteria: regulatory requirements that mandate a direct network connection or following a customer network assessment for Skype for Business voice and meetings, when network deficiencies are discovered that ExpressRoute can address. c) Where a clear benefit can be seen for the customer to use ExpressRoute Existing Customers Keep using ExpressRoute—no service interruption Customers with significant financial commitments to onboard—keep going New Customers Microsoft Account Team needs to Make a Request to the Productivity WinRoom Prepare with Network Performance Assessment for Skype for Business or Regulatory Requirement being addressed. Network Assessment: Use a Microsoft partner or Microsoft Consulting Services or Microsoft Premier Field Engineering Obtain a report on the performance Use the report to improve the network for Skype for Business connectivity ExpressRoute may be recommended Implementation Plan: Identify inbound services Carefully review routes Plan changes, test, rollback if needed Technical Documentation updates: Office 365 guidance and detail on Office 365 networking and security Skype for business networking guidance “Skype Operations Framework”
4
9/7/2018 Why these changes? Large customers with experienced network teams were failing at deployments with Office 365 access going offline Study routing update guidance Plan for successful implementations Customers were finding ExpressRoute for Office 365 workloads do not meet their security or performance expectations Articulate guidance and best practices These ExpressRoute implementation problems were delaying customer projects We want to ensure that customers are successful © 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
5
Office 365 Networking Customer Guidance
9/7/2018 Office 365 Networking Customer Guidance Scenario Skype for Business Online network connectivity and performance Solution: Get a network assessment for the customer Network assessment must show customer network edge to Microsoft network edge connectivity If edge to edge connectivity cannot meet published guidance, ExpressRoute may be an option Scenario dedicated network required to address regulatory requirement Solution: Provide regulation document for Microsoft review © 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
6
Office 365 Networking Customer Guidance
9/7/2018 Office 365 Networking Customer Guidance Scenario additional network security to Office 365 Solution: Plan for customer security requirements. ExpressRoute does not solve Internet DDOS attacks. Reliable Internet is still required. ExpressRoute does not replace firewalls, proxy servers or load balancers ExpressRoute does not restrict the Office 365 tenants that can be accessed. ExpressRoute for Office 365 requires preparation of the customer network involving a specific implementation project and staged rollout. Scenario improve network performance to Office 365 Solution: Customer to fund an Office 365 Network Performance Assessment ExpressRoute provides predictable performance, but careful network planning is required to deliver better performance than an Internet connected alternative. Scenario network throughput for migrating from Exchange on-premises Solution: Customer to fund a Premier Support Office 365 Network Performance Assessment. Office 365 network throughput throttling mechanisms are not removed with ExpressRoute. Scenario ExpressRoute as separate connection to Office 365 because expanding Internet is too costly Could be due to MPLS use or Internet equipment is difficult to upgrade. Solution: Recommend staying with the existing internet connection. The ExpressRoute implementation will take longer and be more costly than expected. © 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
7
Office 365 ExpressRoute Customer Guidance
9/7/2018 Office 365 ExpressRoute Customer Guidance A reliable Internet connection is still required when using ExpressRoute with Office 365 For customers with multiple tenants in a single network, ExpressRoute cannot be limited to a specific Office 365 tenant ExpressRoute provides predictable performance, but careful network planning is required to deliver better performance than an Internet connected alternative ExpressRoute for Azure workloads can be turned on quickly and many customers are successful with those In contrast, ExpressRoute for Office 365 requires preparation of the customer network involving a specific implementation project and staged rollout Office 365 network throughput throttling mechanisms are not removed with ExpressRoute © 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
8
What is ExpressRoute for Office 365?
Microsoft Datacenter A partial alternative to the public Internet connection Direct networking for some Office 365 workloads Predictable performance with managed connectivity SLA of 99.9% for availability QoS for Skype for Business Office 365 Services on ExpressRoute EXPRESSROUTE Customer Site 2 Office 365 Services Require Internet MPLS VPN WAN Azure services Internet Co-lo Public internet Customer Datacenter Alternate connection
9
Microsoft Internet network peering
Microsoft has more than 65 connection points to the Internet in 36 countries with peering agreements with over 2000 ISPs Peering points are listed at: ISPs and Network Operators are invited to peer for routing
10
Network peering locations
Brisbane Australia Melbourne Perth Sydney Vienna Austria Brussels Belgium Sao Paulo Brazil Rio de Janeiro Sofia Bulgaria Montreal Canada Toronto Vancouver Zagreb Croatia Prague Czech Republic Copenhagen Denmark Helsinki Finland Marseille France Paris Berlin Germany Frankfurt Athens Greece Hong Kong Budapest Hungary Chennai India Mumbai Dublin Ireland Milan Italy Osaka Japan Tokyo Kuala Lumpur Malaysia Mexico City Mexico Amsterdam Netherlands Auckland New Zealand Wellington Warsaw Poland Lisbon Portugal Bucharest Romania Moscow Russia Singapore Cape Town South Africa Johannesburg Seoul South Korea Barcelona Spain Madrid Stockholm Sweden Zurich Switzerland Taipei Taiwan London UK Slough Manchester Ashburn USA Atlanta Boston Chicago Dallas Denver Honolulu Las Vegas Los Angeles USA Miami New York Palo Alto San Jose Seattle © 2014 Microsoft Corporation
11
Office365 Datacenters TechReady 23 9/7/2018 4:51 PM FINLAND AMSTERDAM
DES MOINES QUEBEC CITY SOUTH KOREA TORONTO SAITAMA PREFECTURE QUINCY BEIJING CHICAGO OSAKA PREFECTURE DUBLIN TOKYO PREFECTURE AUSTRIA CHEYENNE HARRISON MUMBAI BOYDTON PUNE CHENAI SAN ANTONIO BLUE RIDGE SHANGHAI HONG KONG MALAYSIA BRAZIL SINGAPORE NEW SOUTH WALES CHILE VICTORIA © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
12
Microsoft Global Network – Not the Internet!
13
Microsoft Network Security On any network connection
SSL / TLS on all connections Microsoft encrypts all customer data in datacenters In datacenters Microsoft employs threat management security monitoring intrusion detection Customers can also use technologies including data loss prevention advanced security management advanced thread protection Details on the Office 365 Trust Center
14
Connecting to Office 365 with ExpressRoute
15
Office 365 workload availability
9/7/2018 Office 365 workload availability Internet connectivity is still required Some endpoints are not hosted in Microsoft datacenters Some endpoints create unnecessarily complex routing on ExpressRoute Some endpoints have not yet configured or tested ExpressRoute Office 365 workloads on ExpressRoute Office 365 workloads that require Internet Exchange Online & Exchange Online Protection SharePoint Online, OneDrive for Business, Office 365 Video, Delve Skype for Business Online (formerly Lync Online) Office Online Azure AD & Azure AD Sync Power BI and Project Online Standard DNS and CDN lookups Office 365 (operated by 21 Vianet) service in China Yammer Office 365 ProPlus client downloads Onedrive client downloads On-premises Identity Provider Sign-In eDiscovery Office video © 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
16
Details of workload availability
9/7/2018 Details of workload availability Internet is recommended for all of these Azure Public Peering Office 365 Hybrid eDiscovery Office video ADFS proxy server Exchange Hybrid SharePoint 2013 Hybrid The eDiscovery export feature, temporarily stores data in Azure storage until downloaded to a local computer, is supported on Internet connections and does not route over Microsoft Peering on ExpressRoute The eDiscovery team has not tested this when Azure Public Peering on ExpressRoute is configured Although support escalations can be accepted on untested configurations, the eDiscovery team might have to request that the customer reproduce any issue with an Internet- connected user before they can escalate © 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
17
Why is an implementation project required?
18
Summary Set correct expectations with customers about security
Get network assessments for performance issues to find root cause Plan for an implementation project Be aware of asymmetric routing Use our Online Docs Network connectivity for Office 365 Azure ExpressRoute for Office 365 Routing with ExpressRoute for Office 365 Using BGP Communities with ExpressRoute for Office 365 Office 365 URLs and IP address ranges Media Quality and Network Connectivity Performance in Skype for Business Online Network planning with ExpressRoute for Office 365 ExpressRoute and QoS in Skype for Business Online ExpressRoute for Office 365 Implementation Guide
19
© 2016 Microsoft Corporation. All rights reserved
© 2016 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
Similar presentations
