1. HP Network Automation Matt Miller - HP Solutions Architect
December 2009

2. HP Software BTO centers
Where does DCA Fit?
Business outcomes
STRATEGY
APPLICATIONS
OPERATIONS
Quality Management
Business Service Management
IT Service Management
Business Service Automation
Project & Portfolio Management Center
Quality Center
Operations Orchestration
Operations Orchestration
Business Availability Center
Service Management Center
Client Automation Center
Performance Center
CIO Office
Operations Center
SOA Center
Data Center Automation Center
Application Security Center
Network Management Center
CTO Office
SAP, Oracle, SOA, J2EE, .Net
Universal CMDB
7 December 2018

3. HP Business Service Automation
Automate management of client, server, software, network, storage & process
Business Service Automation
BSM
ITSM
Operations Orchestration
IT Teams
IT Systems
Live Network
Discovery
Provisioning &
Scaling
Client Automation
Network Automation
Server Automation
Storage Automation
Discover servers, software network devices, & storage
Interdependencies
Configurations
Server, network, storage
Applications
Configurations
Patching
Software distribution
Audit
Remediation
Reporting
All applications & components
Servers & network devices
Software
Process-enabled storage provisioning
Service Automation Visualizer
HP has amassed a compelling BSA offering, and HP NA is a valuable and crucial part of the equation.
By understanding and managing the network, all other parts of the system and their automation come together more completely. Everything passes through the network.
Monitoring events & alerts
Help desk/ change requests
Service Automation Reporter
Universal CMDB
7 December 2018

4. What is driving the need for network automation?
Globally distributed network
Consequences of Non-Compliance
Failed audits (PCI, SOX, HIPAA)
Security vulnerabilities
Out-dated equipment
Lack of Visibility and Control
Device inventory
Configuration
Software versions
Application dependencies
200% device growth
Wireless, VoIP adoption
New application and service support
Explosive Growth in
Network Size and Technologies
Need to do more with fewer resources
Disparate Tools and Processes
Repetitive, Manual Tasks
Escalations and Firefighting
7 December 2018

5. Business impact of manual operations
High outage rates & low availability
80% of network budget allocated reactively to avoid network downtime
80% of security incidents due to manual mis-configurations
Unknown security vulnerabilities
Labor-intensive change management
45% of network engineers time spent on manual network changes
Complex, costly compliance management
5x more costly to meet compliance requirements when done manually
7 December 2018

6. HP Network Automation - measurable ROI
Task
Before HP Automation
With HP Automation
ROI
Real-time visibility into change activities
Mean time to resolution – 150 minutes
Mean time to resolution – 15 minutes
Increased uptime
Automated compliance enforcement
3% compliance and failed audit
100% compliance and passed audit
Decreased auditing costs & improved customer satisfaction
Real-time identification of security vulnerability
Mean time to discover security issue – 2 weeks
Mean time to discover security issue – 2 minutes
Drastically reduced vulnerability window
Automate manual tasks
Update WEP keys on 10,000 devices in 2 weeks
Update WEP keys on 10,000 devices in 2 hours
Lowered maintenance costs and rework
7 December 2018

7. Key features of HP Network Automation
Deep automation for each lifecycle stage and fully integrated process management
Operations Orchestration Automate change approval, alert/event triage, routine networking tasks
Network Lifecycle Automation
Catalog &
Track
Audit &
Enforce
Change &
Configure
Maintain &
Support
IT Teams
IT Systems
Discover and catalog the network
Visualize layer 2 & layer 3 dependencies
Snapshot & store device information in real time
Define compliance policies
Detect violations in real-time & auto-remediate
Dynamically alerted to emerging threats via The HP Live Network
Create and deploy configuration changes
Standardize and validate changes before applying
Uniformly apply software updates
Enforce workflow & approvals
Report on assets, change activity, compliance & much more
Download new device support monthly
Monthly content updates via HP Live Network e.g. PCI Policies
Automation Platform
Scalable Global Deployment Architecture Secure Extensible
7 December 2018

8. Challenges in Managing the Network
4. Data manually collected & reported
Problem - Costly, tedious and inaccurate
1. Configs, OS images & scripts dispersed across IT workstations
Problem - No propagation of standards
- Lack of security
- Redundant efforts in scripting & configuration
2. IT admins connect directly to network devices
Problem - Lack of change control over the network resulting in errors
- No proactive enforcement of best practices
3. Devices configured manually one by one
Problem - Costly & error prone manual changes
IT Staff
Network
Tools Manager
Network Architect
- Auditors
- Managers
- Directors
Network Manager
Security Engineers
Network Engineers
NOC Operators
7 December 2018

9. How companies are using HP NA
Preventative management & global standards enforcement
1. Track all activity down to every operator keystroke
3. Prevent errors & enforce process through centralized point of control
Direct access can be allowed & is still completely audited by HP NA
IT Staff
Network
Tools Manager
Network Architect
HP Network Automation
Network Manager
Security Engineers
4. Automate complex network management tasks through multi-threaded event-driven automation engine
Network Engineers
NOC Operators
2. Control and standardize across infrastructure in a central, secure location
Auditor
Manager
Director
Network Management Tools
7 December 2018

10. Multimaster and Satellite enables global scalability and central visibility
HP Satellite
Remote Office
HP Core
Multimaster
Data Center
Manage any device from anywhere
Management is possible even when WAN links are down and automatically recovers
Automation system itself is disaster tolerant
Enables rapid disaster recovery of application environments
The automation system is multi-location aware

11. HP Live Network
HP Security & Compliance service for Network Automation

12. What is HP Live Network? Security & Compliance Service
Security & Compliance Service for SAS & NAS
To be expanded to Client Automation & PAS
Daily delivery of security vulnerability content
Industry-standard compliance policies updated regularly
Security & Compliance Service
HP Live Network consists of 2 distinct components
Security & Compliance (S&C) service
HP Live Network Platform (LNP) that provides infrastructure for delivering above service
Customers pay for S&C, LNP is free
S&C service is delivered daily/weekly, LNP updates are once a quarter
Tools for delivering security & compliance service
Website for community engagement & downloads
To be extended to support other content services in FY08
HP Live Network Platform
7 December 2018

13. Traditional Vulnerability Management
Manual, error–prone, time-consuming and expensive
Impossible to ensure
Takes days or weeks
Manual
Vulnerability Awareness
2. Vulnerability Translation
3. Identification & Remediation
Ongoing Compliance
IT Challenges
7 December 2018

14. Security Vulnerability Content
The HP Live Network difference
Automated, reliable, and rapid remediation
Security Vulnerability Content
Vulnerability Awareness
Vulnerability Translation
Identification
&
Remediation
Ongoing Compliance
Automated delivery of vulnerability alerts
Immediately actionable policies
Rapid identification and remediation
Automated alerts on any regression
7 December 2018

15. Annual Subscription Service for NAS
Security & Compliance Service
Annual Subscription Service for NAS
Security Vulnerability Service
Weekly feed produced by dedicated content development team
Sourced from iDefense & NVD (National Vulnerability Database)
Compliance Service
CIS (Center for Internet Security) policies for Cisco IOS & Cisco PIX
PCI (Payment Card Industry) policies for Cisco IOS
7 December 2018