Implementing and securing a resilient The IPAM Specialists ... · Implementing and securing a...

15
The IPAM Specialists Implementing and securing a resilient network services infrastructure

Transcript of Implementing and securing a resilient The IPAM Specialists ... · Implementing and securing a...

Page 1: Implementing and securing a resilient The IPAM Specialists ... · Implementing and securing a resilient The IPAM Specialists network services infrastructure

The IPAM Specialists Implementing and securing a resilient network services infrastructure

Page 2: Implementing and securing a resilient The IPAM Specialists ... · Implementing and securing a resilient The IPAM Specialists network services infrastructure

Welcome & Introduction

Paul Roberts Calleva Networks Ltd

[email protected]

Page 3: Implementing and securing a resilient The IPAM Specialists ... · Implementing and securing a resilient The IPAM Specialists network services infrastructure

Why are we here today?

• Hopefully to learn a little bit...

• ... about the importance of core network services

• ... how to detect and prevent threats once people have connected to the network

• ... and of course, sample some fine wines!

© Calleva Networks Ltd. 2013 3

Page 4: Implementing and securing a resilient The IPAM Specialists ... · Implementing and securing a resilient The IPAM Specialists network services infrastructure

© Calleva Networks Ltd. 2013 4

Who are we?

Many years of experience deploying core network services across all verticals The only dedicated specialists in this field We can provide a complete “wrap- around” service:

Professional Services Training Support

Page 5: Implementing and securing a resilient The IPAM Specialists ... · Implementing and securing a resilient The IPAM Specialists network services infrastructure

Some techie-speak... Sorry!

• What do we mean by core network services? • DNS – Domain Name System

• What every system uses to convert a name into an IP address

• DHCP – Dynamic Host Configuration Protocol • How your PC/laptop/tablet gets its IP address

automatically

• IPAM – IP Address Management • Managing IP address allocations/assignments, and

optimally integrating DNS & DHCP

© Calleva Networks Ltd. 2013 5

Page 6: Implementing and securing a resilient The IPAM Specialists ... · Implementing and securing a resilient The IPAM Specialists network services infrastructure

Network & Applications

Microsoft Web Apps. Internet email

Network Services DNS-DHCP-NTP-TFTP-IPAM

Clients

Video

IP V

DNS-DHCP-

IPAM

Unavailability

NO ACCESS For clients

6

Why is DNS-DHCP-IPAM so critical?

6 © Calleva Networks Ltd. 2013

Page 7: Implementing and securing a resilient The IPAM Specialists ... · Implementing and securing a resilient The IPAM Specialists network services infrastructure

• Ensuring continuity of DNS and DHCP service delivery

• Managing heterogeneous DNS-DHCP services

• Eliminate network outages due to inconsistencies within IP plans, DNS and DHCP services

• Control and streamline resource qualification and consumption

• Mapping delegation and control

• Control the divergence between network theory and reality

• Simplifying updates, upgrades, backup and disaster recovery

50% of 1,000+ employee companies

faced network outages due to DNS

or DHCP

ESG, February 2009

More IPs, More Complexity,

More Cost

Customer Challenges Around DDI

© Calleva Networks Ltd. 2013 7

Page 8: Implementing and securing a resilient The IPAM Specialists ... · Implementing and securing a resilient The IPAM Specialists network services infrastructure

What IPAM solution are you using today?

• Excel spreadsheet(s)

• Open source

• In-house custom system

• Feature of another product

• Commercial solution

© Calleva Networks Ltd. 2013 8

Page 9: Implementing and securing a resilient The IPAM Specialists ... · Implementing and securing a resilient The IPAM Specialists network services infrastructure

The DDI market is growing

• Gartner coined the term DDI for their first MarketScope report in 2009

• Both Gartner and IDC predict annual growth > 20% per annum

9 © Calleva Networks Ltd. 2013

Source: IDC, 2011

“75% of enterprises still using manual

IPAM methods (spreadsheets etc.)”

- Gartner

“40% of enterprises cite improving

DNS/DHCP stability as the main

reason for purchasing a DDI solution”

- Gartner

Page 10: Implementing and securing a resilient The IPAM Specialists ... · Implementing and securing a resilient The IPAM Specialists network services infrastructure

© Calleva Networks Ltd. 2013 10

BYOD is on the rise...

Source: Forbes Online

Page 11: Implementing and securing a resilient The IPAM Specialists ... · Implementing and securing a resilient The IPAM Specialists network services infrastructure

© Calleva Networks Ltd. 2013 11

...and is unstoppable

Gartner predicts by 2017, half of employers will require employees to supply their own device for work purposes

- Gartner Press Release, 1st May 2013

Page 12: Implementing and securing a resilient The IPAM Specialists ... · Implementing and securing a resilient The IPAM Specialists network services infrastructure

© Calleva Networks Ltd. 2013 12

Mobile malware is a serious threat

Source: TrendLabs 2012 Annual Security Roundup. Evolved Threats in a “Post-PC” World

“In 2012, Trend Micro detected 350,000 threats for Android, with a growth ratio of 14:3 for Android versus PC. In context, it took Android just three years to achieve the PC volume of malware threats within 14 years. By the end of 2013, the volume of Android malware could reach as high as the 1 million mark.”

Page 13: Implementing and securing a resilient The IPAM Specialists ... · Implementing and securing a resilient The IPAM Specialists network services infrastructure

Multiple issues to consider

• How do you find out who is on your network? • What about malware and vulnerabilities? • How do you secure corporate and guest

wireless access? • The introduction of 802.11ac (gigabit wi-fi) could

see the end of flood-wiring

• How do you prevent hijacking of RJ45 ethernet ports (e.g. printers)? • Secure networks (e.g. Lab or data centre)

© Calleva Networks Ltd. 2013 13

Page 14: Implementing and securing a resilient The IPAM Specialists ... · Implementing and securing a resilient The IPAM Specialists network services infrastructure

Two products showcased today

• DNS, DHCP, IP Address Management:

• Agentless Network Access Control:

© Calleva Networks Ltd. 2013 14

Page 15: Implementing and securing a resilient The IPAM Specialists ... · Implementing and securing a resilient The IPAM Specialists network services infrastructure

Thank you

Paul Roberts [email protected]

© Calleva Networks Ltd. 2013 15