SolarWinds Online Federal User Group

Online Federal User Group
May 1, 2013
© 2013 SOLARWINDS WORLDWIDE, LLC. ALL RIGHTS RESERVED.
1

Agenda for Today
2
1:00 – 1:05 EST Welcome
1:05 – 2:25 EST SolarWinds Product Update
Francois Caron, Product Management Director, SolarWinds
Patrick Hubbard, Head Geek, SolarWinds
2:25 – 2:50 EST Federal Features & Tips
Scaling to the Federal Enterprise
Edward Bender, Head Federal Systems Engineer, SolarWinds
2:50 – 3:00 EST Q&A/Closing Remarks

SolarWinds® Overview
Company Background
Timeline 1999 Founded in Tulsa, OK
Headquarters
Austin, Texas
Global Offices: Singapore,
Ireland
Customers Over 95,000
Provide enterprise-class network,
systems, virtualization, and
storage resource management
software that is powerful, easy-
to-use, and affordable
- Slide 3 -
Over 400 of the Fortune 500
35% of the Global 2000
Businesses of ALL Sizes in 170 Countries
Every branch of DOD and virtually every
Civilian agency

Global Presence
- Slide 4 -
U.S.
• Company HQ – Austin
• Federal office –
Herndon Virginia
Brno, Czech Republic
• Opened ‘08
Chennai, India
• Opened ’10
Australia, NZ
• APAC HQ in Brisbane –
Opened in ‘10
Cork, Ireland
• EMEA HQ - Opened ’07
Singapore
• Opened ‘08

SolarWinds Federal
» Federal office in Herndon Virginia
» Team of 15 supporting our Federal Customers
» Rapidly expanding business
 DOD/Intel
 Civilian
» Products available on numerous contract vehicles
 GSA
 SEWP
» Extensive partner network
5

SolarWinds: The Evolution of a Revolution
» We are not just for Networks - we are also…
 Application and Server Management
 Log and Security Information Management
 Storage Management
 Virtualization Management
» We continue to focus on solving specific technical problems
in a cost effective way
 We also SCALE to the enterprise level at an affordable price
6

SolarWinds: The Evolution of a Revolution
» Our products continue to be easy to use and deploy with
limited services expense
 But we do have an ecosystems of Federal partners that provide
training and implementation services (Secret) as well as numerous
contract vehicles to procure through
» We continue to make it easy for you to download our
products and try them for free
 But we also have Federal technical resources available should you
need keys cut, extra assistance, business justifications
» We take our Federal customers and their missions seriously
7
Our job is to make you look good, and we’ll do everything
in our power to make this happen

SolarWinds Product Update
Francois Caron, Director of Product Management – Network Management
Patrick Hubbard, Senior Technical Product Marketing Manager
© 2013 SOLARWINDS WORLDWIDE, LLC. ALL RIGHTS
RESERVED.

Portfolio
» 20+ products covering all disciplines & domains of IT
management
» Based on organic growth as well as acquisitions
» Easy to find, download, evaluate, buy and use!
RESERVED.
9
Virtualization Management Log & Event Management

System, Storage and Desktop Management Portfolio
RESERVED.
10
™
™
TM
®

Scalability and High Availability
SolarWinds Additional Polling Engines, Web Server, and Fail Over Engine
Traffic Monitoring
Network
Traffic
Analyzer (NTA)
WAN & VoIP
Monitoring
VoIP & Network
Quality Manager
(VNQM)
Configuration &
Change
Management
Network
Configuration
Manager (NCM)
Device Tracking
User
Device
Tracker (UDT)
IP Infrastructure
Management
IP Address
Manager (IPAM)
Fault &
Performance
Monitoring
Network Performance
Monitor (NPM)
Orion® Core Platform Technology
Network Management Portfolio
Firewall Configuration
Management
Firewall Security
Manager (FSM)
SolarWinds CONFIDENTIAL 2012
FSM is not integrated
with Core at this time.
However, FSM is
integrated with NCM.

RESERVED.
Network Management Update (2012 & Q1 ‘13 YTD)
» Network Performance Monitor (NPM) ~abbreviated list
 Device support
• Extended support for BigIP® F5® devices (including connections,
throughput, nodes and virtual pools status polling)
• Hardware health monitoring (temperature, power supply, fan speed, etc.)
for major HW vendors (Cisco®, Juniper®, F5, Dell®, HP®)
• Support for HP MSM 760/765 wireless controllers
 Improved NPM infrastructure
• Auditing trail
• Web console UI improvements – sub views
• Performance upgrade (asynchronous loading of resources)
• Web-based custom property editor
» What are we working on?
 Release Candidate available
12

RESERVED.
» IP Address Manager (IPAM) *abbreviated list
 Primary use case: replace the spreadsheet
 Centralized multi-vendor console for IPAM, DHCP, DMS management
 Split scope functionality for Microsoft® and Cisco DHCP servers
• New UI helps user quickly define split scopes for high availability or load
balancing
 Enhanced User Delegation – Now limit permissions per user and
subnet or groups
 Enhanced Import – Now import properties for individual addresses
and assign them to the desired subnet
» What are we working on? It includes IP Address conflict detection.
13
Microsoft Cisco Linux
DNS Management V3.1 n/a >V3.1 (BIND)
DHCP(D) Management V3.0 V3.1 (incl ASA) >V3.1 (ISC)
DNS Monitoring (zones) V3.0 n/a >V3.1 (BIND)
DHCP Monitoring (scopes) <V3.0 <V3.0 >V3.1 (ISC)

RESERVED.
» User Device Tracker (UDT) *abbreviated list
 Track user connections (historical), watch and white list, and switch
capacity
 v2.5: Support for connection information in controller-based wireless
networks where "thin" access points (AP) are deployed
• See Wireless Support Overview blog post
» What are we working on? It includes support for white lists and port
shutdown.
14

RESERVED.
Network Management update (2012 & Q1 ‘13 YTD)
» Network Configuration Manager (NCM): NCCM
 Configuration backup
 Automated configuration changes
 Change management
• Change request approval, real-time change detection
 Inventory
 Compliance: DISA STIG
 The following SolarWinds products are Common Criteria EAL
2 certified by the NIAP: NPM, SAM (APM), IPAM, NTA, IPSLAM, NCM,
EOC. Our Validation ID is 10453
» NCM v7.1
 Multi-poller support
 Beta available, including EOL/EOS soon. Register now.
15

RESERVED.
Network Management update (2012 & Q1 ‘13 YTD)
» Firewall Security Manager (FSM)
 Automates security audits using over 120 customizable
rules
 Analyzes firewall configs and logs to clean up rules and
objects
 Simulates how a new/modified rule will impact your
firewall policy/traffic without touching production devices
 Change management
 FSM v6.5 available since Apr 30
16

IP SLA Refresher
» IP SLA is equivalent to sending test cars in actual traffic and measuring…
» Availability - Does it even arrive?
» Latency - How much time does it take to go from point A to point B?
» One way and back (one-way vs. two-way latency)
» Jitter - If I send a car every minute, can they keep that spacing all the way.
» Netflow is all about volume.
This car is sent by IP
SLA to test traffic
conditions.
With Netflow, each toll
booth can tell you min
how many cars passed
by…
…and where they were
coming from…
… and going to!
RESERVED.

RESERVED.
» VoIP & Network Quality Manager (VNQM)
 WAN quality tested via synthetic tests (Cisco IP SLA manager)
 VoIP: requires WAN quality
• CCM management
• Forensic call history search, pattern detection
• Actual tracking of individual calls (CDR), incl. precedence
 Correlated network synthetic tests and actual calls
 VNQM 4.1 Beta available, including PRI (beta3 required, register here)
18

RESERVED.
» Netflow Traffic Analysis (NTA)
 Netflow and CB QoS-based Traffic Analysis
 V 3.10
• Uses the new Orion charts
• vSwitch support
» Traffic analysis
 None >> MIB 2 ifTable >> Flow >> CB QoS >> NBAR >> DPI
 NTA 3.11 available on Thu May 2nd
19

RESERVED.
Web Help Desk Integration with Orion
» Feed WHD’s asset information from Orion’s Node information
» Open WHD Trouble Ticket from Orion Alerts
» More…
20

Architecture
» Deployment and scalability
 Modular
 Scalable
 Multi-tenant
21
Network
Domain 1
Orion Platform
Network
Domain 2
Orion Platform
Network
Domain 3
Orion Platform
Network
Domain 4
Orion Platform
Enterprise Operations Console
RegionalLevel
N
P
M
N
C
M
V
N
Q
M
U
D
T
N
T
A
I
P
A
M
N
P
M
N
C
M
V
N
Q
M
U
D
T
N
T
A
I
P
A
M
N
P
M
N
C
M
V
N
Q
M
U
D
T
N
T
A
I
P
A
M
N
P
M
N
C
M
V
N
Q
M
U
D
T
N
T
A
I
P
A
M
FederatedLevel
RESERVED.
APE APE APE APE
F
O
E

RESERVED.
Architecture Highlight: SWIS
» SWIS API
 Lots of data
 More every release
» Powerful & Easy
 Efficient for us
 Easy for hobbyists
 Elegant Java®-.Net
bridge
» SDK is on thwack®
 Community
support
22

Thank You!
RESERVED.
The SOLARWINDS and SOLARWINDS & Design marks are the exclusive property of SolarWinds Worldwide, LLC, are registered with the U.S.
Patent and Trademark Office, and may be registered or pending registration in other countries. All other SolarWinds trademarks, service
marks, and logos may be common law marks, registered or pending registration in the United States or in other countries. All other
trademarks mentioned herein are used for identification purposes only and may be or are trademarks or registered trademarks of their
respective companies.

RESERVED.
Company Introduction
Question: Which is true?
A. SolarWinds is a Network Management Company?
B. SolarWinds is an IT Management Company?
Answer:
C. SolarWinds is both.
24

RESERVED.
Free Product: Introducing Alert Central
25

Alert Central: Respond Quickly
26

Alert Central: Manage Easily
27

Alert Central: Schedule Efficiently
28

Alert Central: Configure Intuitively
29

Alert Central: Interact Naturally
30

Federal Features & Tips
Scaling to the Federal Enterprise
Edward Bender, Federal Systems Engineer, SolarWinds
32

Problems Unique to Federal Customers
» Compliance (DISA STIG, FISMA NIST)
» Locked Down Servers causing installation problems
» Data Calls
 Serial Numbers of Cisco devices
 Ios versions (compliance related)
 Windows® Update status (compliance related)
 Windows Software Inventory (compliance / license true-up)
» DOD CAC Card and PIV SmartCard support
 For authentication to Windows OS, and web apps.
» Multiple Networks (e.g. NIPR / SIPR / JWICS)
 Desire for Cross Domain Solution
» User Audit Trail
33

Compliance - NCM DISA STIG / FISMA NIST
Reports
» Network Configuration Manager - Compliance Feature
 Automated daily compliance reporting on network device
configurations
 DISA STIG Compliance templates available on thwack:
 http://thwack.solarwinds.com/community/solarwinds-
community/product-blog/blog/2011/06/29/disa-stig-resources-for-orion-
ncm
 FISMA compliance templates available on thwack:
 http://thwack.solarwinds.com/docs/DOC-138904
» Firewall Security Manager – STIG policies
» SolarWinds Patch Manager – report on status of critical
Windows Updates (Java®, Adobe®, Microsoft, etc…)
34

Fed Compliance - Network Configuration
Manager (DISA STIG / FISMA NIST)
35

Fed Compliance – Firewall Security Manager
(STIG Security Checks)
36

Fed Compliance – Firewall Security Manager
(FSM)
37

Fed Compliance – Windows Patch Status with
SolarWinds Patch Manager
38

Fed Compliance – Windows Patch Status with
39

Locked Down Systems Interfering with
Applications
40
» Install SolarWinds software first, then apply security settings.
 Document which security settings break functionality
» Upgrade of Production SolarWinds Orion servers
 Federal Govt. production upgrade problems are almost all tied to multiple
security restrictions on the servers
 Several “Production Down, I’ve been Up All Night trying to upgrade”
escalations in the last year
 Recommend testing upgrade process in lab environment first
• Yes, requires more infrastructure to do lab testing of upgrades
• Again, most Fed upgrade problems are due to production security lockdowns
on the servers
» Server security lockdowns are constantly evolving
» Don’t assume your production upgrade will be smooth in a secure
Federal production environment

Data Calls – Hardware Serial Numbers and
Installed Software Inventory
41
» Lots of DOD requests for Serial Numbers of Cisco devices
 Reduced hardware maintenance costs with Cisco ELA
 Network teams have to supply Serial Numbers
» NCM 7.1 Inventory Feature collects Serial Numbers from:
 Cisco
 Juniper
» NPM 10.4 Hardware Health collects some Serial Numbers
also.
 NPM UnDP can gather more Serial Numbers
» SAM Hardware Health collects Service Tags / Serial Numbers
» Patch Manager Inventory of Software installed on Windows
Servers and Workstations

Hardware Serial Numbers - NCM
42

Hardware Health – NPM – Serial Numbers for
Some Devices Also
43
HP Service Tag

Hardware Health – SAM – Gathers Asset Tags
and Server Serial Numbers
44
Dell Service Tag for
ESX® Server

Software Inventory on Windows – from
45

Smart Card Integrations – DOD CAC / HSPD12
PIV Cards
» DOD CAC Card / PIV support
 Orion products can be configured to use DOD CAC or PIV card to login:
• KBA available from SolarWinds on how to configure IIS for this
• http://knowledgebase.solarwinds.com/kb/questions/2578/Use+CAC+We
b+Authentication+with+Server+2008
• Works for Orion modules:
• NPM, NCM, NTA, UDT, WPM, SAM, VNQM, UDT, Orion Patches tab, IPAM
 DameWare Remote Support (DRS) support DOD CAC and PIV card
 DameWare Mini Remote Control supports DOD CAC and PIV card
 Web Help Desk™ – can be configured to leverage CAC card or PIV card
for authentication.
46

LATE BREAKING NEWS – DameWare 9.0.1
HotFix2 Supports Multiple Certs on a Card
» Some Civilian Agencies have instituted use of PIV cards with 2
user certificates:
 First certificate on the PIV card is the User’s regular certificate
 Second certificate is mostly used for digital signatures, but can also be
used as the Systems Admin certificate for that user
 DameWare Remote Support and Mini Remote Control supports the
user selection of the certificate with this update
 Switching between multiple certificates is supported on versions of
Microsoft Windows Vista® or later
» DOD has issued two CAC cards to sysadmins
 One for their normal accounts
 Second CAC for sysadmin account
47

Review of Features and Tips for Federal
Customers
» DISA STIG Compliance Reports from Network Configuration Monitor (NCM)
» FISMA Compliance Reports in NCM
» FSM STIG policies
» DOD CAC Card and PIV SmartCard support
 Login to Orion applications
 DameWare Remote Support and Mini Remote Control (now supports choosing
credentials from single PIV card) DameWare Remote Support with DOC CAC Card /
HSPD-12 SmartCard integration
 Web Help Desk – customer configuration needed
» Reporting Serial Numbers of Network Devices
 NCM Inventory feature
 NPM Hardware Health feature
 NPM Universal Device Poller feature
» Monitoring Temperature and Power of devices
» SolarWinds Patch Manager – report on status of critical Windows Updates
and software inventory on Windows machines
48

Federal Enterprise Scalability
» Successful SolarWinds Orion instances are asked if they can
“scale up” to monitor more of the Agency or Mission
» SolarWinds can scale up in different ways:
 Enterprise Operations console (EOC)
 Additional Polling Engines (APE)
 Additional Web Server (AWS)
 Failover Engine (FOE)
» Active Directory® Users and Groups with Role Based Access
Control and new user Audit features allows easier
enterprise roll out
» NIPR / SIPR / JWICS networks require multiple instances
 Cross Domain Solutions are being looked at by Fed Orion customers
49

Orion Architecture – Global Visibility into
Multiple Orion Instances with EOC
50

Orion Architecture – Disaster Recovery Config
51

Orion Architecture – Remote Pollers in Remote
Locations
52

Demo
53

Q&A/Closing Remarks

Q&A
55

Let’s Keep in Touch
» More user groups in the future
» thwack Government forum
 http://thwack.solarwinds.com/groups/federal-and-government
» Birds of Feather Groups
 Happy to sponsor events
» Frequent Webinars – Tech Updates
 Keep our customers up to date
» Look for our upcoming
federal newsletter
» Are always looking for user stories
 Press
 Case Studies/application examples
 Reference calls
56

SolarWinds Federal Contacts
Name Territory Contact Information
David Kimball Vice President, Federal David.Kimball@solarwinds.com, 703-234-2203
Denise Guzman Federal Regional Sales Manager Denise.Guzman@solarwinds.com, 512-498-6124
Ed Bender Lead SE (Sales Engineer) Ed.Bender@solarwinds.com, 410-286-3060
Lisa Sherwin Wulf Federal Marketing Lisa.Sherwinwulf@solarwinds.com, 703-234-5386
Ben Baldi Commands Ben.Baldi@solarwinds.com, 703-234-2204
Chris Hall Civilian Chris.Hall@solarwinds.com, 512-682-9865
Jonathan Hood Channel Jonathan.Hood@solarwinds.com, 703-234-5336
Ryan Johnson USAF/Air Guard/Navy Ryan.Johnson@solarwinds.com, 512-874-3461
Sean Martinez SE (Sales Engineer) Sean.Martinez@solarwinds.com, 512-682-9554
Paul McCloskey System Integrators Paul.McCloskey@solarwinds.com, 703-234-2205
Donal McRae Civilian Donal.McRae@solarwinds.com, 512-498-6123
Tracy Merla Army/VA/MC/Army Guard Tracy.Merla@solarwinds.com, 512-682-9389
Mathieu Morin SE (Sales Engineer) Mathieu.Morin@solarwinds.com, 703-234-5331
Matthew Waters Army/VA/MC/Army Guard Matthew.Waters@solarwinds.com, 512-682-9327
57

Thank You
The SOLARWINDS and SOLARWINDS & Design marks are the exclusive property of SolarWinds
Worldwide, LLC, are registered with the U.S. Patent and Trademark Office, and may be registered or
pending registration in other countries. All other SolarWinds trademarks, service marks, and logos
may be common law marks, registered or pending registration in the United States or in other
countries. All other trademarks mentioned herein are used for identification purposes only and may
be or are trademarks or registered trademarks of their respective companies.
58

Network Management Market
Network Management
Performance &
Fault
Inventory &
Change
Analysis &
Planning
ConfigWireless
VoIP/
Video
Network
Devices
(phys & virt)
Bandwidth
Usage
Route
Analysis
IP Address
Patch Asset
Tracking
Change
Automation Workflow
Network
Mapping
Deep
Packet
Inspection
Traffic
Analysis
(NetFlow)
Security &
Compliance
Vulnerability Penetration
Event/Log
Intrusion
Prevention
Rogue
Detection
Authntctn
Authiztion
Accnting
Modeling/
Capacity
Planning
Compliance
WAN LAN
QoS
Packet
Analysis
Covered Some coverage Doesn’t fit well Target

SolarWinds Online Federal User Group

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (20)

Semelhante a SolarWinds Online Federal User Group

Semelhante a SolarWinds Online Federal User Group (20)

Mais de SolarWinds

Mais de SolarWinds (15)

Último

Último (20)

SolarWinds Online Federal User Group

Notas do Editor