1 WirelessOffice SeminarLars Koelendorf Wireless Solution Sales Manager HP Networking Europe, Middle-East & Africa May 10th 2012
2 Mobility and video are transforming business communications25 % of all daily business comm. will be video or multi-media by 2013 50 billion devices will connect to wireless networks by the year 2020 At least More than 10 x Increase in capacity required for new business video applications Up to Unified wired and wireless with single management, fast access points with support for more bandwidth and many concurrent devices will help make you ready for this transformation.
3 Increasing amount of devices (BYOD?)Smart Phone Tablet Laptop All of it ? Mobile Devices have no wired ports so wireless must be ready! Do you have an access control solution that spans across wired/wireless network? Can you handle different policies per user per device? Are you protected against invisible attacks?
4 How does this impact your networkInconsistent user experience? Increasing the number of wireless users and devices degrades overall user experience on current networks Many concurrent devices, and applications like HD video conferencing, voice, radiology and “video on demand” requires more bandwidth
5 Bring Your Own Device Cannot Be Ignored90% Net-new growth in device adoption in the coming four years represented by smartphones and tablets1 IMPACT ON IT STAFF Over 4.5 billion Personal client devices will be on the network in 20152 PERVASIVE MOBILITY Approximately 34% Of CIOs think employees are accessing the network with personal devices3 …….69% of users say they are EMPLOYEE-OWNED IT PERSONALIZATION Only 1 Gartner: Gartner’s Top Predictions for IT Organizations and Users, 2012 and Beyond: Control Slips Away (23 November 2011) 2 IDC: The Empowered IT User: How Individuals Are Using Technology and Redefining IT (March 2012) 3 IDC White paper sponsored by Unisys, 2011 Consumerization of IT Study: Closing the “Consumerization Gap” July 2011
6 Top three most wanted in BYOD solutionsSANS Mobility Survey of 500 IT professionals Centralized Functionality Logging Monitoring and Reporting Ease of Deployment HP commissioned this report. Any solution should meet these 3 most wanted requirements. We need to provide a holistic solution that address the customer needs. From their perspective, they want an access agnostic solution that can leverage a universal security and compliance policy across wired, wireless, and remote access. And this tool should be intergrated with their current infrastructure management platform so that it is easy to deploy and easy to manage. Again, not another tool. The solution should have the capability, even for a brand-new personal device, to do easy onboarding, easy provisioning and easy monitoring, saving valuable IT resources and time to do more innovation and spend less time to keep the light on. Can’t stress enough of ease of use, not another tool. Even for a brand-new personal device from an employee, the solution can do easy onboarding, easy provisoing, easy monitoring with one tool. HPIT is managing a 120b company. 30% on innovation, 70% on keeping the lights on. Simple and easy to use management is always on top of the list that Enterprise IT is looking for.
7 Implementation strategies for BYODContain (recommended): Allow some people to use some devices to access some resources Embrace (advanced): Allow Employee to use devices to access all resources Block (not recommended) Except for very high security or critical availability environments Disregard (poor choice) High Value to Business Low Low High Enterprise will need to adopt one of the four strategies based on their business unit needs, and IT policy. Disregard, and block is no longer effective. A comprehensive solution should be able to support Embrace, Contain and Block. The Contain strategy will be relevant for most mainstream organizations. As noted in the following sections, the Block strategy is too draconian, and the Embrace strategy represents a huge cultural shift that adds technical and operational complexity. A Contain strategy will satisfy the needs of most organizations and give them the time to architect effective plans to migrate to an Embrace strategy. A Disregard strategy equates to ignoring the presence of personally owned devices in a corporate environment. This is a poor choice, and organizations that adopt a Disregard strategy don't make any policy or technology changes. In the sections below, we focus on how network managers can use NAC to adopt Contain, Embrace and Block strategies. Security “Pressure” Source: Gartner (December 2011)
8 HP Mobility leadership and innovationKey Milestones Details #2 Worldwide vendor in Wireless LAN shipments 773,000+ units shipped globally in CY2011 Optimized Architecture – part of FlexNetwork - FlexCampus, FlexBranch – IMC (Intelligent Management Center with IDM (Identity Driven Manager) plug in. Maximum flexibility in supporting mobile business applications today and in the future at the lowest TCO – Intelligence is pushed from the mobility controller to the AP. Centralized or Distributed traffic capability – fault protection MSM460/466/466-R First in the industry to offer near Gigabit Ethernet (Dual 450Mb/s radios) WLAN client access MSM317 First in the industry to offer a multi function communication access device – wireless & wired port connectivity, Telco connection, PoE pass through port In room solution delivering advanced IP services Multi-media application support Multicast patent, Application based QoS Industry leading Wireless Security (IDS/IPS) Maximum threat detection with the lowest number of false positives (RF Manager + MSM415 dedicated sensors)
9 HP FlexNetwork for wired, wireless & BYODThe only converged networking architecture that spans from the virtualized data center to the workplace for cloud, multimedia, and mobility (BYOD) with integrated security HP TippingPoint provides real-time quarantine to keep troublesome BYOD nodes off the network. HP FlexManagement powers the identity-aware access and control with unified wired and wireless management HP FlexFabric, FlexCampus, Flex Branch enable the construction of flat, low-latency data center and campus networks with fewer layers, less equipment and cabling, and greater client densities Our BYOD solution is based on HP FlexNetwork architecture.
10 Optimized WLAN architecture – distributed performance & intelligence The RIGHT access for all YOUR different types of devices and users HP MultiService Mobility Controller (MSM7XX) Centrally control WLAN system Create traffic-handling policies Configure MAPs Handle PCI access traffic Management and PCI traffic Client traffic Smartphone PCI Backbone Tablet Application server Laptop Edge switch Printers HP MultiService Access Points (MSM AP) Provide wireless access Deliver wireless traffic Enforce networking policies Provide wireless backhaul Detect and prevent intrusions Let’s touch a little bit on the distributed intelligence. This is the best architecture but what are the components in how it plays? In this environment, you’re looking at a multi-service mobility controller, unlike the second generation, which maybe they refer to more as a wireless switch, which everything flows back to a central point. It controls how the traffic is handled on the wireless LAN, not necessarily where the traffic goes, so it helps direct configuration and management of the AP’s themselves, and gets access to the network. The AP’s now, referring to multi-service access points, or intelligent AP’s, is now providing more of delivering where the traffic goes, enforcing network policies, so in this case, you don’t have to have everything flow directly back to that controller. Data, client traffic, can actually go to where it needs to go.
11 Converged Wired and Wireless LAN5 December 2017 Converged Wired and Wireless LAN Delivering a wired-like experience Converged wired & wireless Comprehensive, unified portfolio of high-performance wired and wireless access solutions Converged service orchestration Single pane-of-glass management from the edge to the core Optimized architecture Optimized wireless architecture reduce latency and increase performance and manageability Pervasive security Industry-leading research powers best-in-class threat protection Comprehensive identity management and endpoint security Legacy—overlay FlexCampus WLAN Wired LAN Wired switch with integrated WLAN controller WLAN controller WLAN Network management Network management Unified network access Separate, Disjointed Networks, Policy, Security and NMS Unified Network/Design, Policy, Security and NMS across Hardware, Software and Management HP Confidential
12 Improved productivity, better user experience5 December 2017 Improved productivity, better user experience Delivering the highest performing n Access Points series 50% higher performance, users, devices First enterprise Access Point 50% increase in performance First to market Dual radio n APs E-MSM430: 2x3:2, integrated 4/7dBi antennas E-MSM460: 3x3:3, integrated 4/7dBi antennas E-MSM466: 3x3:3 ; six RP-SMA Male connectors New RF optimization features Standards-based beamforming (Explicit) Band steering Concurrent radio operation in 5GHz band (MSM466) Full E-MSM AP feature set Powered by 802.3af PoE Up to 200mW EIRP output power AP, Mesh and Monitor (packet capture) modes 0-50°C operating temperature Plenum-rated
13 Primary Building Blocks for an Effective BYOD SolutionEnabling BYOD - Is Your Wired and Wireless Network Ready? - Legacy Networks Limit BYOD Adoption Primary Building Blocks for an Effective BYOD Solution Identity-Aware Access Unified Network Support Monitor and Control User credential AND device based identity Simple and secure onboarding process AAA support for compliance Seamless wired and wireless policy Increased wireless client range and density support Higher wired aggregation bandwidth Device level application visibility and reporting Ability to quarantine and blacklist malware infected client Enhanced security for sensitive applications A BYOD solution must be easy to deploy with centralized management, visibility and control Our view of the main building blocks based on what we hear from the customers and analysts. Reemphasize the three most wanted at the bottom.
14 HP BYOD Solution w/ Single Pane-of-Glass ManagementCombined Infrastructure and Access Management for BYOD, Wired and Wireless Seamless Wired and Wireless network management BYOD user and device management Security policy provisioning and enforcement Network traffic monitoring User behavior analysis by user and device type Posture check and agent control
15 Wireless Enterprise
16 Campus Networks are at the Breaking PointUnpredictable performance Inconsistent wired and wireless user experience limits productivity Swivel-chair management Non-integrated network management tools breed inefficiency and are error prone Limited agility Legacy 3-tier campus networks are inflexible and inhibit scale Privacy, availability, and security Business continuity and availability of services Increased workforce mobility High levels of mobility driving demand for integrated enforcement of access control, security policies and management Proliferation of cloud services, multi-media applications and SaaS Cloud services, Multi-media and SaaS are driving demand for high bandwidth/higher user density applications with better capacity. Complexity of management Spiraling IT footprint/costs Enterprises want to meet the increasing demand for mobile local area network access while lowering the cost of ownership to deal with the user device sprawl caused by the consumerization of IT with employees having a notebook, tablet and smartphone for business use. Lifetime warantee Enterprises want a converged wired and wireless infrastructure for consistent enforcement of access control, security policies and management. High bandwidth mobility services are needed for multi-media and hi-res medical imaging applications such as PACS Enterprises want to meet the increasing demand for mobile local area network access while lowering the cost of ownership to deal with the user device sprawl caused by the consumerization of IT with employees having a notebook, tablet and smartphone for business use Simplified management with consistent policy enforcement across wired and wireless infrastructures. Ensuring quality of service for concurrent users and bandwidth intensive applications On line learning – students all accessing course material simultaneously Digital imaging for healthcare – bandwidth intensive Double the number of users per access point Up to 50% improvement in performance Customers forced to use many different management tools. Single-pane-of-glass management Reduction of OPEX: training on only one application & troubleshooting and event correlation – events in real time across wired/wireless Wired, wireless solution that has a single security approach Integrated security for client authentication regardless of method of access Volume of devices that people are attaching to the Wi-Fi network is also a driving force to why people are investing in this space as well as increase use of “cloud” implementations.
17 Access Control TechnologiesGuest vs. employee asset requirements Required Maybe Not Required HP BYOD Guests Employees BYOD Company Asset Portal Authentication 802.1x Authentication Policy Enforcement (who, what, where, when) MAC Authentication Device Fingerprinting Digital Certificates Client Posture User Behavior Analysis User Auth Device Auth End Pt. Health
18 Improve operational efficiency5 December 2017 Improve operational efficiency Across the globe, state and local governments are required to provide better services for more constituents with smaller budgets and fewer staff. Staff shortages in particular drive the need to automate and streamline processes, as well as for increased collaboration. The presence of leading-edge technologies that makes the working lives of government employees and citizens easier and more productive. And the best staff increases citizen satisfaction, which in turn establishes a positive cycle of staff acquisition and revenue generation – an essential component of the quality of government services in many countries. Wireless technologies and collaboration tools streamline many processes and can help compensate for the lack of resources experienced in many state and local governments. Supported by a high-performance network, they can boost the employee productivity to enhance citizen satisfaction. HP Confidential
19 5 December 2017 Privacy and security HP Confidential
20 HP WLAN/BYOD Summary
21 HP Networking & Mobility summarySingle pane-of-glass management Wireless IDS/IPS Centralized configuration of multiple access points across the enterprise Provides continuous vulnerability protection Ensures compliance with industry regulations (SOX, HIPAA, PCI) through comprehensive reporting Support for up to 2,500 mobility devices Wire-like performance Lower TCO First Wi-Fi certified GbE WLAN client access (E- MSM46x) Uses existing HP MSM mounting hardware , controller and IDS/IPS Delivers 50% increase in user density/performance via three-spatial-stream dual n HP’s industry-leading lifetime warranty with next-day replacement Wire-like delivery of multi-media applications, SaaS and cloud services Training and support for only one management application Unified access control Consistent access control solution across wired/wireless network
22 Unified wired and wireless network for BYOD5 December 2017 Unified wired and wireless network for BYOD One MANAGEMENT system One UNIFIED network WLAN – just another MEDIA HP Mobility Manager is a software module that installs to the PCM+ network management platform. This management solution is unique in that it provides traditional FCAP functionality along with RF specific management views and tools in a single pane. Although PCM+ and MM deliver in-depth and breath of management tools, the software application itself is easy to install and use. For example, in a 50 device environment, PMC+/MM installs and discovers devices in 30 minutes or less on a Windows or ESX server. This solution reduces your TCO as for management. For example, it includes fault management, configuration control, reports for audits and other business uses, performance monitors, and secured access to managed devices. It also includes built-in site planner, site views for heat map displays, centralized RF configuration, and status views of managed APs, clients, and rouge APs. Security across and IDS/IPS control can be added to the entire wired/wireless network through the HP IDM and NIM plug-ins.
23 Wireless City
24 Increasing demand for services5 December 2017 Increasing demand for services Today’s citizens demands a more active role in their state and local government. Constituents want to take advantage of the latest web-based services. They want online access to their records, to information that can help them make decisions, even to license renewal and medicare records without having to take time off work. HP FlexNetwork Architecture allows state and local governments to react quickly, to implement new systems and scale services as demand grows. The FlexNetwork allows governments to easily scale to incorporate new services, applications, buildings and campuses. Our robust portfolio ensures that we can meet your specific needs – from a smaller satellite office to a municipal buildings and anything in between. HP Confidential
25 Improve operational efficiency5 December 2017 Improve operational efficiency Across the globe, state and local governments are required to provide better services for more constituents with smaller budgets and fewer staff. Staff shortages in particular drive the need to automate and streamline processes, as well as for increased collaboration. The presence of leading-edge technologies that makes the working lives of government employees and citizens easier and more productive. And the best staff increases citizen satisfaction, which in turn establishes a positive cycle of staff acquisition and revenue generation – an essential component of the quality of government services in many countries. Wireless technologies and collaboration tools streamline many processes and can help compensate for the lack of resources experienced in many state and local governments. Supported by a high-performance network, they can boost the employee productivity to enhance citizen satisfaction. HP Confidential
26 Privacy and security 5 December 2017While government investment in the latest Voice over IP and Web 2.0 technologies can increase public safety, improve communication among agencies and heighten citizen satisfaction, it also exposes personal records and government financial systems to increased cyber security threats and heightens the IT challenge of reducing network cost and complexity. Government agencies are streamlining their operations with upgraded technology such as video conferencing. These advanced networks must be able to support high bandwidth demands without bottlenecks or downtime that can inconvenience or endanger citizens, interrupt vital services and overburden limited IT resources. HP Confidential
27 Wireless Healthcare
28 Flexible, secure networking5 December 2017 Flexible, secure networking Graphic: depicts a digital image move from location to location, specialists to specialist. New healthcare technologies such as digital imaging, Picture Archive and Communication Systems (PACS), Electronic Medical Records (EMRs) and ePrescribing can enable healthcare teams to collaborate, work more efficiently and improve patient care. At the same time, new technologies introduce new IT challenges such as ensuring adequate bandwidth and uninterrupted delivery while keeping patient data safe. Mission-critical patient data must be where it’s needed, when it’s needed. For example, a surgeon cannot tolerate bottlenecks or downtime than can delay access to a CT scan in the operating room. HP Confidential
29 Staff productivity, patient care and services5 December 2017 Staff productivity, patient care and services Healthcare staff shortages across the globe are driving the need to automate and streamline processes, and enable collaboration. The presence of leading-edge technologies that makes the working lives of clinicians easier and more productive, plays an important role in attracting and retaining the best talent. And the best staff attracts patients, which in turn establishes a positive cycle of staff acquisition – an essential component of the quality healthcare delivery in many countries. HP Confidential
30 A flexible IT environment for future healthcare demands5 December 2017 A flexible IT environment for future healthcare demands In addition, today’s healthcare consumer demands a more active role in their own care. Patients want to take advantage of the latest web-based services. They want online access to their records, to information that can help them make decisions, even to telemedicine and online consultations, or e-visits, which help them get treatment without having to take time off work. Ageing populations, likely to develop chronic conditions, are driving demand for more remote monitoring, so patients can be cared for at home before complications arise and they need to be hospitalized. Wireless technologies and collaboration tools streamline many clinical processes and can help compensate for the chronic lack of nursing resources experienced by many healthcare providers. Supported by a high-performance network, they can boost the productivity of nursing staff to enhance patient care. In addition, where there are regional shortages of specialists, they can support solutions such as telemedicine, remote intensive care units, e-visits and telesurgery to ensure the availability of high-quality, responsive medical care. HP Confidential
31 Reduce cost and complexity5 December 2017 Reduce cost and complexity According to Gartner Research, healthcare organizations are spending too much time and money monitoring and troubleshooting the network – up to 60% of the budget is spent on maintaining the status quo. Healthcare organizations are looking for a way to flip that figure on its head and dedicate less to administrative tasks and more to strategic initiatives while often managing a geographically disperse organization. The healthcare industry is under considerable pressure to provide new patient services and improve patient outcomes, and healthcare organizations must simultaneously increase data protection and decrease costs. HP Confidential
32 Enable Patient Privacy and SecurityToday’s healthcare organizations face a challenging combination of security- related issues—including an increase of regulatory compliance requirements and growth in number and variety of security threats. A security breach can result in devastating consequences for patient safety, corporate reputation or financial viability. Yet, healthcare IT professionals have to manage a delicate balancing act: they need to enhance network access for patients and staff while protecting information, resources and confidentiality from digital threats and unauthorized network use. Patients want easy access to their medical records and to the Internet, as well as privacy protection. Medical personnel need to access corporate and clinical resources wherever they may be located, particularly as mobile working and efficiency requirements increase. And IT staff must ensure that both guests and users on the network are monitored to eliminate the risks of unauthorized access to confidential information.
33 In room Multi-service outletNurse Dormitory Hospital Solutions Video Surveillance Medical equipment Tracking Electronic Prescription Mobile kiosks VoWiFi Personnel / Patient tracking Asset Tracking Digital Signage in the lobby Mobile Point of Care Secure Guest Internet Access Patient Terminal HP solutions provide a secure, robust network infrastructure as the foundation for healthcare applications - wired or wireless. For example: Mobile Access - aaccess to Patient records, ePrescribing, remote monitoring, enhances productivity, patient safety Guest Internet Access - patients and visitors access entertainment and information, more satisfied with services VoWLAN - improved employee communications and eliminate cell/2-way radio expense Security – Indoor / outdoor video survillance (wired or wireless) Location - track personnel, patients or assets to improve productivity, eliminate loss Extending reach to outdoor with outdoor access points Both wired and wireless can be provided in a single small form factor wall outlet such as the HP E-MSM317. This can be deployed in the patient room or in a nurse dormitory to support multiple services Hot-desking for ad-hoc personnel outdoor
34 Thank you