Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Network Configuration and Audit Simplified

2,196 views

Published on

Presentation on the capabilities and benefits of the network tool IP Assure.

  • Be the first to comment

  • Be the first to like this

Network Configuration and Audit Simplified

  1. 1. IP Assure from Christopher Willard Account Manager Cell: 781.367.7149 Office: 617.517.0925 Email: cwillard@starpoint.com
  2. 2. The IP Assure Market Space HP NA BMC CA CiscoWorks NCM EMC Voyence
  3. 3. IP Assure Product Highlight Flexible and scalable web-based software that assesses configuration files of IP-based devices (e.g. routers, switches, firewalls) to determine if required security, availability and regulatory policies and best practices are correctly implemented. Transforms the costly labor-intensive job of network error detection and remediation into a simple automated process.
  4. 4. Major Vulnerabilities Proactively Discovered by IP Assure in Operational IP Networks
  5. 5. Is Configuration Assessment Really Needed? <ul><li>IP Assure’s actual assessment of thousands of multi-vendor routers, switches and firewalls from over 10 different G2000 organizations revealed errors in all devices. </li></ul><ul><li>Most organizations had NCCM solutions in place. </li></ul>
  6. 6. Network Change Impact Analysis <ul><li>Users can create customized configuration sets and rule-sets </li></ul><ul><li>Configurations can be edited and re-assessed against same customized rule-set </li></ul><ul><li>Assessment output from before and after configuration change can be compared to detect issues </li></ul><ul><li>Users can share configuration sets and rule-sets, and results of assessments, with other users </li></ul>
  7. 7. Multi-level Topology Visualization <ul><li>Automated generation and display of topology; IP subnet, VLAN, VPN, Routing computed in </li></ul><ul><li>real-time using graph theory algorithms on configuration and inventory data </li></ul>
  8. 8. Product Ecosystem IP Assure - IP Network Assessment & Awareness Network & Security Administrators NCCM (e.g. HP NA) Get IP Device Configurations Inventory (e.g. Granite) Identify IP Devices & Physical Connectivity Network Monitoring Assessment Results Real-time Input
  9. 9. Competing Solutions
  10. 10. Product Comparison Telcordia ® IP Assure Typical NCCM Number of configuration parameters used Up to 750 per device configuration Less than 100 per device configuration Assessment approach Configuration assessments consider IP network in its entirety, encompassing multiple device-types, multiple vendors and IP technologies. Bulk upload of multi-vendor configurations for entire network. Configuration assessments are specific to a single device at a time. Out-of-the-box Assessment Capability Best-practices for security, availability, and QoS are built-in. They cover multiple technologies such as addressing, administration, VLAN, BGP, OSPF, IS-IS, RIP, MPLS, QoS, IPSec, IKE. Regulatory Policies. Best-practices for security are built-in. Customized Rules Built-in rules can receive parameter values from users. Complex customer-specific rules can be added. Security policies can be defined by user, and checked against firewalls. Multi-vendor firewalls can be compared for semantic equivalence with each other. Templates and regular-expressions can be defined by users. Topology Visualization On-screen and PDF output for IP subnet, VLAN, OSPF, MPLS, IS-IS, BGP, network path. Visio diagrams of Layer 2 (VLAN) and Layer 3 (IP subnet) Availability Analysis Non-intrusive service reach ability analysis, single point-of-failure detection N/A Manage network device configurations, software, and inventory Maintain versions of uploaded configurations and generated assessment reports Deploy and track changes to network hardware, software and configurations
  11. 11. Cloud Computing for Medium-Large Enterprises <ul><li>Web-based IP Assure fits Cloud Computing paradigm </li></ul><ul><li>Single installation shared by multiple geographically distributed users and groups </li></ul><ul><li>Reduced operational and capital cost </li></ul><ul><li>Increased collaboration between diverse groups </li></ul>IP Assure - IP Network Assessment & Awareness
  12. 12. Bottom-up ROI Model Input <ul><li>Configurations of IP network devices are changed periodically </li></ul><ul><ul><li>4 changes per device annually </li></ul></ul><ul><li>Some changes introduce errors in configurations </li></ul><ul><ul><li>Probability of error due to device configuration change is 5%, based on Telcordia experience with assessment of thousands of device configurations </li></ul></ul><ul><ul><li>IP Assure detects at least 80% of errors, reducing error probability to 1% </li></ul></ul><ul><li>Some configuration errors are cause of security, availability and regulatory compliance incidents </li></ul><ul><ul><li>1% of configuration errors are cause of incidents </li></ul></ul><ul><ul><li>i.e. 0.05% of device configuration changes are cause of serious incidents </li></ul></ul>
  13. 13. Cost of Configuration Errors <ul><li>Security, availability and regulatory compliance incidents cause financial impact </li></ul><ul><ul><li>$59K per security incident – 2008 CSI Computer Crime and Security Survey </li></ul></ul><ul><ul><li>$700K per network downtime incident – Dataquest and Infonetics </li></ul></ul><ul><ul><li>$100K per regulatory non-compliance – Forrester Research </li></ul></ul><ul><li>Manual effort is needed to detect and rectify each configuration error </li></ul><ul><ul><li>6 person-hours </li></ul></ul>
  14. 14. Assuming Deployment of 1,000 Devices IP Assure Provides Approx $1.0M Cost Saving in Year 1
  15. 15. And Over $1.3M/Year Cost Saving in Subsequent Years
  16. 16. Potential Risk Cost With vs. Without IP Assure
  17. 17. Cost Reduction and ROI in Yr 1 for Additional Scenarios
  18. 18. Conquering Network Error Detection & Remediation <ul><li>Unique technology </li></ul><ul><ul><li>Infosecurity, the industry’s leading publication on security-related products and technology, has named Telcordia IP Assure the winner of two of its annual awards, including the 2009 Global Product Excellence in IP Network Device Configuration Assessment Customer Trust Award and the 2009 Tomorrow's Technology Today Award for Network Configuration Assessment </li></ul></ul><ul><ul><li>10 patents filed to date </li></ul></ul><ul><li>Flexible deployment options </li></ul><ul><ul><li>Assessment consulting service by Starpoint </li></ul></ul><ul><ul><li>Deployment in customer infrastructure used continuously by customer network and security personnel </li></ul></ul><ul><ul><li>Web-based software-as-a-service, hosted by Telcordia or another party </li></ul></ul>
  19. 19. Christopher Willard Account Manager Cell: 781.367.7149 Office: 617.517.0925 Email: cwillard@starpoint.com

×