System Center 2016 and OMS in a Hybrid...

#ws2016sc2016

We Drive Business Evolution Forward

System Center 2016 and OMSin a Hybrid World

Agenda

How does System Center 2016 fit into a Hybrid world?

OMS

Automation & Control

Insights & Analytics

Security & Compliance

Protection & Recovery


Who are we ?

Claus Thude Nielsen is Senior Consultant @Lumagate,

where he works primarily with technologies from Microsoft.

He is specializing in general Windows infrastructure,

Azure, and software deployment optimization.

In his day-day work, his main focus is automation,

primarily done in PowerShell to ensure processes are

optimized and standardized.

Claus is the founder of the Danish PowerShell usergroup

(www.psug.dk), and is also a Microsoft Cloud and

Datacenter MVP.

Email: [email protected]

Twitter: @Claustn

LinkedIn: http://dk.linkedin.com/in/claustn/

DATA CENTER LEAD

Master of Microsoft Azure Certified Hybrid Solutions and

Microsoft Cloud OS with focus on Hyper-V, VMM, WAP,

DPM, SCOM and Microsoft infrastruktur services.

In his day-day work he is focusing on creating value

between IaaS og PaaS solutions based on exponential

technology in Azure

http://www.psug.dk/

mailto:[email protected]


System

Center 2016

Overview


Infrastructure

provisioning

Enterprise-class

multi-tenant

infrastructure for

hybrid

environments

System Center capabilities

Backup

End-to-end backup

and recovery for

private clouds,

physical machines,

clients, and server

applications

Automation

Application-owner

agility while IT

retains control

IT service

management

Flexible service

delivery

Infrastructure

monitoring

Comprehensive

monitoring

of physical, virtual,

and cloud

infrastructure

System Center 2016


System Center for the datacenter

{


Utilize a single tool for on-premises and cloud provisioning

Infrastructure provisioning

Effectively manage virtual environments at-scale

Reduce infrastructure complexity

Deliver efficient infrastructure services across customer base

IT demands

System Center 2016 delivers

Enterprise-class virtualization management with robust Linux support

Support for Windows Server scale and performance:

Fibre-Channel SAN connectivity

Storage QoS Management

Simplified provisioning & migration

Multi-tenant cloud infrastructure

Extend familiar management to Microsoft Azure

Enterprise-class multi-tenant infrastructure for hybrid environments


Opportunity to rethink your datacenter: Think services, not servers


Looking ahead


Modern IT management

Management as a service

Microservicesand containers

Support for heterogeneous environments

Cloud inspired

Shifting needs in IT management


Operations

Mangement

Suite

Azure

AWS

PrivateClouds

Microsoft Operation

Management + SecurityAutomation & Control

Insights & Analytics

Security & Compliance

Protection & Recovery


Process Automation PowerShell PowerShell workflows

Configuration Management Desired State Configuration

Update Management Monitor and patch Updates

Manage any cloud & on premises Change Tracking (Software,

Services, Daemons, Files)

Best of all, everything works on both Windows & Linux

Hyper-VVMWareOpenStack

Azure

AWS & other Service Providers

On-Premises


…sample list of log/metrics that OMS collects:

• Custom Application/Infra logs

• Azure Platform telemetry

• Windows event logs

• Window performance counters

• Security Event Logs

• IIS Logs

• ETW logs

• Linux Syslog

• Linux system metrics

• Firewall Logs

• Networking Syslog

• JSON doc

• O365 Activity Events

Solsutions

Search & Analytics

Azure


Connecting from On-Premises to the cloud

Using OMS GatewayThrough SCOM management serverDirectly connected Agents


Private Cloud

Lucene Spark HDInsight

SQL HBase Azure ML

OMS Solutions & ServicesInbound Data Sources

Public Cloud

Outbound Experience &

Connectors

Architecture


See which systems

are in which apps

Including Windows, Linux,

cloud, and on-prem

systems

Monitor the whole

distributed app

In one view, monitor each

component of the

application

Know the impact of

changes

Determine how a change

to one server affects other

connected components


• Automatically discover all dependencies for any Windows or Linux system

• View all TCP-connected processes, their bound ports and connections

• View dynamic maps of your system topology, live and historical

• Visualize any alerts or change events across all dependencies for a given VM

What if you could…

Acme App Pool

Acme App Pool

Sharepoint

Tomcat

Tomcat

MySQL

Postgres


Now you can with Application Dependency Monitor

Discovery

Automatically build a common reference map of dependencies across servers, processes, and 3rd

party services.

Incident Management

View cascading alerts, failed connections, load balancing issues, and rogue clients.

Migration Assurance

Ensure nothing is left behind, identify connectivity failures, view computer and process inventory, and identify systems for decommissioning.

In limited preview today. Fill out a simple survey and we’ll get you started:

https://aka.ms/getadm


Security and Compliance


Collect all your security data and send it to OMSAny machine in any environment

Just install the OMS agent and you are ready to go

Linux and Windows

Collect data from your security solutionsUse CEF (Common Event Format) supported by most security solutions

Additional solution for Cisco ASA

Collect Syslog on OMS Linux agent

Out-of-the-box security posture assessmentsUpdate

View the update and patching status on all your servers

AntimalwareDiscover antimalware software deployed and your current protection state

Security Configuration BaselineAssess best practice security configuration rules on all of your computers

IdentitySnapshot of the identities that access your servers


Integrated Threat IntelligenceOMS Security comes with Threat Intelligence feed

◦ Based on the leading vendors in this market and Microsofts own intelligence

◦ No need to purchase anything

Log records are cross-correlated and enriched

◦ Relevant log records are matched to find traffic involving malicious IP addresses

◦ No need for complex integrations

Search and visualize threats on maps◦ Records are geo-tagged

Built-in advanced detection analytics

◦ Hundreds of detection rules and patterns based on common security events

◦ Behavioral and machine learning tools calibrated for low false-positive

Always current, constantly updated

◦ Our security research team is constantly analyzing new threats and update the analytics

Integrated with Microsoft ATA

◦ Microsoft Advanced Threat Analytics (ATA) detections are normalized and presented side-by-side


LogsSystem Center

Operations Manager

(SCOM)

Direct Windows or

Linux agents

Web

Alerts via

Mail, WebHooks, automation

Queries

Data

export

API

On-prem / private cloud Any public cloud

Azure

Normalization &

EnrichmentMobile

Advanced

Detection

SCOM

agents

Syslog

/ CEF

Security

MPs

Threat

Intelligence feeds

Security

products

IP to Geo

mapping


Protection and Recovery (Backup)

Hybrid Cloud Backup

Backup to Cloud

Hyper-V and VMware Protection

Offsite and Long Term Retention

Protection from Malware

Cloud Backup

Backup of Cloud Workloads

Azure VM Backup

Azure SQL Backup

Premium

StorageLinux

Virtual

MachinesSQL Server


Azure VM backup - Capabilities

Features Configurations Management

• ASM and ARM

• Windows and Linux

• Premium Disks

• Load balancer

• Multi NIC

• Reserved IP

• Encrypted VM Backup


Protection and Recovery (Site Recovery)

Any OSWindows Linux

Site to Azure Site to Site


Q&A

System Center 2016 and OMS in a Hybrid...

Documents

Transcript of System Center 2016 and OMS in a Hybrid...