BIG-IP Advanced ADC Access Policy Manager

BIG-IP V10.1Advanced ADC
New ADC services deliver unmatched control
and savings for next generation data centers

F5 Vision: Unified Application & Data Delivery
Branch Employees
LAN & WLAN
Corporate Employees
LAN & WLAN
Mobile
Employees
Customer, Partners, or Suppliers
Remote
Employees
Context-Aware Networking
Corporate
Data Center
Apps and Data
in the Branch
Cloud Services
SAAS
Hosted Applications
Enables the Dynamic Infrastructure

Geolocation Based Services in BIG-IP
All TMOS products include integrated GeolP Database
Powerful geographic based policy control
GSLB enhanced
Filtering, Redirection, Reporting, and iRules Control (New)
Provided by Quova™
Continent, country, state/region attributes
2.7 billion routable IP addresses
Accurate / Updateable

BIG-IP Access Policy Manager (APM)
Consolidated and centralized access policy enforcement
L4 – L7 full proxy access control at BIG-IP speeds
Advanced endpoint security
VPE Rules – iRules style interface for custom access policies
TMOS / BIG-IP modules Integrates on the ADC
Bringing Identity, Authentication, and Access Control to BIG-IP

Authentication Alternatives Today
1
Code in the Application
Costly, difficult to change
Not repeatable, less secure
Proxy
Web Servers
1
App 1
3
2
App 2
2
Agents on Servers
Difficult to manage
Not interoperable or secure
Decentralized and costly
App 3
App n
3
Specialized Access Proxies
Doesn’t scale and not reliable
More boxes and expensive
Policy Manager
Directory

A Better Alternative – BIG-IP LTM + APM
BIG-IP benefits:
Reduce costs and complexity
Gain superior scalability and high availability
Enforce L4 – L7 ACLs at BIG-IP LTM speeds
Proxy
Web Servers
App 1
LTM + APM
App 2
App 3
App n
Policy Manager
Directory

Richer Application Delivery
Additional benefits:
Endpoint inspection
Virtualization for the Application and Directory
Web application security
Web application acceleration
Web Servers
App 1
LTM + APM
ASM or WA
+
App 2
App 3
Endpoint
Security Checks
App n
Virtualization
(HA, Scale, LB)
Policy Manager
Directory

Auth Proxy Integration – Before
Customer Planned Architecture
with Oracle Access Manager (OAM)
Web App
OAM Proxy
LB
App 1
SSL
…
…
App 200
Customer has 200 apps
Requires 2 Oracle Proxy’s per app or 400 servers
CAPEX: $4K per server includes proxy software (give away), hardware, and OS
OPEX: $3K per server
LB required for high availability
OAM Manager
OAM Directory

Auth Proxy Integration – After
Customer Architecture with
Oracle Access Manager (OAM) and BIG-IP
Web App
LTM + APM
App 1
SSL
…
Customer CAPEX savings: $1.344M
$1.6M ($4K * 400 servers) - $256K (Cost of APM)
OPEX savings: $1.2M / year
$3K * 400 servers
OAM Manager
OAM Directory

Step 2
Step 1
Step 3
Symmetric
Adaptive
Compression
Data
De-duplication
Application
Layer
Acceleration
Step 5
Step 6
Step 4
TCP
Optimization
Bandwidth
Allocation
SSL
Encryption
BIG-IP WAN Optimization Module
Industry’s fastest and most scalable for data replication
Up to10 Gbps optimized throughput (single connection)
Most cost-effective WAN Optimization service
Different services for different applications
Optimized
Data
WAN
TMOS Optimization Services
Additional WOM (Module)
Free WAN Opt Service with LTM

Port Authority - Fast Document Downloads
Hosted Service Provider - East Coast
Port Authority - West Coast
Router
Firewall
Router
Firewall
Link: 20Mbps
80ms latency
0.1% loss
40MB file takes 3+ mins
2-4Mbps of throughput
Internet
SSL
Contractors, guest & Port Authority users
DocuShare Servers
Problem
Files are slow to download
Encrypting file transfer increases download time
Not utilizing bandwidth effectively
Distance between DC’s (Latency)

Port Authority - Fast Document Downloads
Hosted Service Provider - East Coast
Port Authority - West Coast
Router
Firewall
Router
Firewall
Link: 20Mbps
80ms latency
0.1% loss
iSessions
BIG-IP LTM + WOM
BIG-IP LTM + WOM
9x faster
40MB file takes 20secs
12Mbps of throughput
Internet
SSL Offload
Contractors, guest & Port Authority users
DocuShare Servers
Solution
Offload SSL
Utilize bandwidth more effectively
Accelerate data transfer over WAN
Mitigate the effect of latency

BIG-IP – Next Generation ADC Services
Expanding Integrated ADC Market.
GeolocationBased Services
Improve global Application control and performance
Access Policy Manager
Simplify and reduce AAA and Web Access costs up to 90%
Integrated WAN Optimization Services
DC to DC – Reduce WAN costs and improve performance

BIG-IP Advanced ADC Access Policy Manager

by DSorensenCPR on Jan 22, 2010

Accessibility

Categories

Tags

Upload Details

Usage Rights

1 Embed 7

Statistics

BIG-IP Advanced ADC Access Policy Manager — Presentation Transcript