colleen smith vp, saas and openedge marketing. © 2010 progress software corporation. all rights...

Colleen SmithVP, SaaS and OpenEdge Marketing

© 2010 Progress Software Corporation. All rights reserved.2

Agenda

Progress Update/OpenEdge Strategy Colleen Smith

Product Roadmap• Rob Straight

Deploying OpenEdge in the Cloud• Roy Ellis

User Interface Options and Directions• Mike Ormerod

Addressing Security & Compliance Issues• Rob Straight

Ensuring the Success of Every Business Transaction• Mike Ormerod


Progress Software - Last Twelve Months

A transitional period for the company• New C-level executives

– CEO, Rick Reidy– Sr. VP Field Operations, Chris Larsen– CIO, Dave Benson– CPO, Rob Levy

“One Progress” Initiative– One Team, One Plan, One Goal– Operate as one– Move to functional alignment

Assessment of Strategic Priorities


How Business Makes Progress

Progress enables organizations to achieve the highest level of business performance

We call thisOperational Responsiveness

We enable our customers and partners to deliver RESPONSIVE APPLICATIONS

with a FASTER TIME-TO-VALUE

© 2010 Progress Software Corporation6

Progress Software Update - Changes for 2010Branding and Awareness Initiatives


Delivering Operational Responsiveness with Responsive Process Management

Visibility, Sense and Respond, Continuous Process Improvement

Ability to respond and apply corrective actions

Anticipate what WILL happen in your business, not react to what HAS happened

Continually improve the business processes without disrupting existing infrastructure

ResponsiveProcess

Management

Enterprise Business Solutions


Key Elements of a Business Process

Metrics & Measurements

Workflow Description

Business Rules

Information

People and Systems

=

Pro

cess

+ +

+


What is a Business Process Management (BPM) Suite?

A BPM Suite is a platform for building and running business process applications.

Define, document and analyze

business processes.

Make the business process executable;

leverage existing apps.

Enable monitoring and reporting about

the process.

Easily modify and customize the application.


A Business Process Application is not a Replacement for Existing Applications

What if you already have applications that automate each task in the Marketing Lead process:• Lead entry application• Lead review and assignment application• Email campaign application• Quotation and pricing application

You do not have to re-implement them• Integrate them as part of a process application• Reuse them in a process application• Process-enable (modernize) your applications


Process Enabling and Modernization of Existing OpenEdge-based Applications

Return

Qualify

Yes

No Email Campaign

Review

Assign Acct MgrNo

Yes

App?

Opp?

A-GUI

Assign Service

Review Service

Email Camp

Qualify Service

R-GUI Q-GUI

Inside SalesSales MgrAcct Mgr

•Qualify lead1

•Qualify lead2

Inside sales

•Review opp1

•Review oo\pp3

Sales Mgr

•Assign prosp1

•Assign prosp4

Acct Mgr

An existing applicationsystem slightly

reengineered into acollection of cervices


Core Components of Progress Savvion BPM Suite

BPM ServerBPM Studio

BPM Portal

BusinessExpert

Process Modeler

Process Asset Manager


OpenEdge and Savvion Together Provide a Powerful Platform for Business Process Applications

OpenEdge is a proven platform for developing for transactional applications.

Savvion is a proven platform for building business processes

• A business process orchestrates work among people and systems.

The integration of Progress OpenEdge and BPM enables our partners/customers to deliver business process applications required for the future


Driving Operational Responsiveness by delivering the industry’s best business application development platforms with the fastest time-to-value

Delivering Operational Responsiveness with Responsive Business Applications

Simplify the creation of service and process-enabled applications

Provide deployment flexibility for public and private clouds

Continuously ease new technology adoption

ResponsiveBusiness

Applications

Application DevelopmentPlatforms


OpenEdge - Last Twelve Months

Continued adoption of OE 10 – over 40K

Over 4,000 new customers through our partners

Re-positioned OE as a leading SaaS platform

Hosted first Exchange Online 2009

Announced plans for OE 11

Shipped OE 10.2B

SaaS deployments yr/yr growth of 20%


OpenEdge

Accelerate Growth Build joint plans with our APs and focus on growth strategies Focus on modernization opportunities with direct customers Open new markets with SaaS business model

Strengthen the OpenEdge Market Position Differentiate OpenEdge in the market Aggressively expand market awareness

Our Goals


OpenEdge

OpenEdge becomes the leading SaaS Platform for simplifying service

development and delivery in the Cloud resulting in greater Operational

Responsiveness

Our Vision


Business Application Evolution

Pricing/Usage Models

Applications &

Services

Devices & Users

Ecosystem/ Collaboration

Business LogicData

Manageme

nt

Integration/

Workflow

Model-Driven

Tools/Architecture

Scalability ReliabilityService LevelManagement

Virtualization Hardware Network

Application Development

Platform

Infrastructure

Delivery of Application or

Service

Deploy in the Cloud (Public or Private)

Personalization/

Mobility

Multi-tenancy

User Interface Flexibility

Security &Complianc

eA complete “in the box” Platform for ISVs, Business Service Providers, and Direct End Userslooking to optimize Service Delivery in the Cloud

From a User’s perspective:“Get a Login”

OpenEdge Product Roadmap

Rob StraightOpenEdge Product Management


7 Keys to Success

•Going from 1 to N

Multi-tenancy•En

suring that data and applications are accessed only by those who need to know

Security & Compliance

•Being able to easily use the UI technologies that meet the needs of the customer

User Interface Flexibility

•Ensuring the application looks like the tenant and end-user want

Personalization

•Ability to easily integrate to any other application and provide workflow/process integration

Integration/Workflow

•Always available and scales to any size

Operational Excellence

•Provide a highly productive environment focused on OpenEdge and industry best practices

Productivity


OpenEdge 10.2 Release Summary

2009

Q1 Q2 Q3 Q4

10.2AUI Flexibility OpenEdge GUI for .NET

Operational Excellence OpenEdge Explorer

Productivity OpenEdge Architect

enhancements More object-oriented extensions

Q4

2008

10.2BSecurity & Compliance Transparent Database Encryption

UI Flexibility OpenEdge GUI for .NET usability

Operational Excellence Actional for OpenEdge Alternate database buffer pool

Productivity OE Architect new user support, and

ease of AppServer development JSON support

© 2010 Progress Software Corporation. All rights reserved.

Deploying To The Cloud

Engaging with our customers• Amazon EC2 Support

- 10.2A/10.2B certified - Best practices and getting

started guides

Cloud Deployment - Future• OpenEdge runtime in the cloud• Other public cloud platforms• Push-button deployment

Community ofend-user customers

Technology Services

BusinessServices

ManagementServices

SoftwareServices

Getting to the Cloud with EaseOperationalExcellence


OpenEdge Takes You There

1998 2000 2002 2004 2006 2008 2010

© 1998 Progress Software Corporation 28

Client

4GL

HTML

Java

VB / C

C++ / Java

Open AppServer

Un

ive

rsa

l In

terf

ac

e Progress Data

Objects

4GL Business Objects

Un

ive

rsa

l In

terf

ac

eU

niv

ers

al

Inte

rfa

ce

DatabaseDatabase

Interface

4GL

HTML

JavaBean

ActiveX

Corba IDL

Service

Native

HTTP

RMI

DCOM

IIOP

Progress Software Vision Universal Application ArchitectureProgress Software Vision Universal Application Architecture

JMSXMLEJB

Active-X

XML

Java

Email

4GL

Cli en

t Sm

a rt Ad

apt er s

LegacyPackaged Apps XML

System Smart Adapters

Progress

Oracle

SQL Server

DB2/400

ODBC

JDBCSe r

ver

Sm

a rt

Ad

a pte

rs

Universal Application Architecture

Applications

Application Framework

Integration

Application Server

Data Management

ClientProcessing

BusinessProcessing

AnalyticalProcessing

Ap

plic

atio

n M

anag

emen

t

Dev

elo

pm

ent

En

viro

nm

ent

OracleSQL ServerDB2ODBC

JDBCODBCSQL92

XMLJavaActiveXSOAP

SSLHTTP

HTTP/SHTML

ActiveXCOM

HTMLJava

JMSXMLSOAPWSDLJCA

LinuxAIX

SolarisHP/UX

Windows

Platforms

SNMP

OpenEdge The Progress E-Business PlatformOpenEdge The Progress E-Business Platform


Sim

plif

y yo

ur b

usi

nes

sS

imp

lify

your

bu

sin

ess

Service Oriented Architecture

Service-OrientedArchitecture

StandardsPlatform

Integration

Process-OrientedApplications

Business Process

Business Process

Business Process

User Interface Methods

It’s always been about B

usiness Applicatio

ns Continuous Evolution through the IT paradigms

• OpenEdge 11 Eases SaaS/Cloud Computing

• OpenEdge 10 Enabled SOA

• V9 Delivered Distributed Computing

• V8 was Client/Server


D I S C L A I M E R

Roadmap Information

This roadmap is for informational purposes only, and the reader is hereby cautioned that actual

product development can, and often does, vary significantly from roadmaps. This roadmap may not be interpreted as any commitment on behalf of Progress, and future development, timing and release of any features or functionality described

in this roadmap remains at our sole discretion.

D I S C L A I M E R


Isolating Sharing

Better economy of scaleSimpler managementTarget like-customersLeast cost to serve

Easier customization, securitySimpler throttling controlTarget dissimilar customersNo transformation

Tenant2 Tenant3

App App App

DB DB DB

Infra. Infra. Infra.

Tenant1

Isolated Tenancy

Tenant1 Tenant2 Tenant3

App

DB

Infrastructure

Shared Tenancy


App App App

DB DB DB

Infrastructure

Infrastructure Tenancy


DB DB DB

Infrastructure

App

ApplicationTenancy

Multi-Tenancy: Options Continuum


Multi-Tenant Tables

Multi-tenancy built into the database

Data physically partitioned by tenant identity

Built-in tenant level authentication

Minimal application changes – just set a per-database tenant id

Simplifies Development of Multi-tenant Applications

Multi-tenancy

1 Lift Line Skiing 2 Urban Frisbee 3 Hoops Croquet

Tenant 1partition

1 Thundering Surf 7 Fanatical Athletes 8 Game Set Match

Tenant 2partition

2 Hide Tide Sailing 7 Pedal Power 9 Hoops Croquet

Tenant 3partition

CustomerSchema


Multi-Tenant Tables: Data Access

Keys unique per tenant or unique per table


Multi-tenancy

Tenant 1partition



Tenant 2partition


Tenant 3partition

CustomerSchema




Query is tenant specific


Multi-tenancy

Tenant 1partition



Tenant 2partition


Tenant 3partition

CustomerSchema

Tenant 1 Partition

FIND CUSTOMER WHERE CUST_NUM=2.






“Super” tenant query


Multi-tenancy




CustomerSchema

Super Tenant

For each customer:Display cust-num, name





“Super” tenant query Tenant ID virtual

column


Multi-tenancy

1 1 Lift Line Skiing 1 2 Urban Frisbee 1 3 Hoops Croquet

2 1 Thundering Surf 2 7 Fanatical Athletes 2 8 Game Set Match

3 2 Hide Tide Sailing 3 7 Pedal Power 3 9 Hoops Croquet

CustomerSchema

Super Tenant

For each customer:Display tenantid(customer), cust-num, name.


Multi-Tenant Tables: Tenant Provisioning

Tenant creation via DDL & Dictionary

Identification (via schema table)

• Database specific tenant ID

• User friendly names

• App specific ID

Tenant level activation/deactivation Runtime security by user by tenant Tenancy asserted via client principal Governors: Limit resource usage


Tenant 1partition


Tenant 2partition


Tenant 3partition

CustomerSchema


Multi-tenancy


Table Partitioning

Types of Table Partitioning• Range- the key is within a range of values, e.g. year,

territory, invoice amount, etc.• List: each partition is assigned a list of values, e.g.

male/female, country, etc.• Composite- a combination of Range and/or List

Phase 1: The Foundation for Multi-Tenancy• Initial use case of tables partitioned by tenant ID• Focus of OE11.0

Phase 2: Horizontal Data Partitioning (Range/List) • Focus of OE11.1



Multi-tenancy

Operational Features

Partition Maintenance• Object move• Add/drop tenants/objects• Backup/restore, recovery• Data dump/load• Index maintenance tools

Monitoring



Application

Tenant A

User A1

Login Session

A1-1

Tenant B

User A2 User B1 User B2

Login Session

A1-2

Login Session

A2-1

Login Session

A2-2

Login Session

B1-1

Login Session

B1-2

Login Session

B2-1

Login Session

B2-2

Context-Managed AppServer

Context Management built into the AppServer• Supports multi-tenancy in addition to general use

4 levels: Application, Tenant, User, Session Context automatically switched on a request basis as

needed

Multi-tenancyOperational Excellence


Application ServerAgent



Application

ServerBroker Context

Data Cache

Context Management

Storage Service

ABL Batch Loader

OE Database

DEFINE CONTEXT-TABLE ttPriceList FOR “TENANT”

Context-Managed AppServer

Context management service pre-loaded with context for performance

Data cache shared across agents Declarative approach simplifies development


High Availability Through Online Operations, Robustness, and Improved Diagnostics


High Availability – 24x7 Production Operation

Near-100% Online Database Maintenance• Improve performance of DB utilities (index rebuilds, table &

index moves, migration to Type II storage areas)• Avoid application restarts for DB schema changes

Server Property Changes in Real Time• No need to stop and restart the server

Improved Ability to Monitor AppServer• Better error diagnostics• R-code monitoring



High Availability – Performance

Table Scans Without Overhead of Using an Index• If entire table needs to be scanned, using the index adds

overhead

Auto Update of SQL Database Statistics• Optimizer has more current information, leading to increased

database performance

Dynamic Query Join Optimization for DataServers

Maximize operating performance


Built-in authentication and authorization system

Ajax tools Microsoft WPF/Silverlight JSON-RPC

Latest Web services standards

REST

Database multiple linguistic sorting

Actional – payload, DB interceptor Manage remote jobs

OpenEdge Architect Object-oriented extensions- remote objects, reflection


Productivity

Personalization

Integration

User InterfaceFlexibility

Security & Compliance

Taking You Higher With OpenEdge 11

Making Progress in the Cloud

Using Amazon Cloud Computing

Roy Ellis


What is Cloud Computing?

A style of computing where scalable and elastic IT-enabled capabilities are delivered as a service using Internet technologies.

– Gartner, August 2009

Cloud Services

Cloud Providers (can be private)

Pay just for what you use– low price of entry

Simple self-service, scale up or down with global reach

Focus on differentiation, not infrastructure

Development

Process/Service Creation

Deployment/Application Delivery

Automated provisioning

Efficient utilization and monitoring

Simple management

Cloud Consumers


What is the “Cloud”?

IaaS


Why would anyone be interested in the Cloud?

Quick startup time Lower cost of ownership More customers can afford your application Competitors use the “Cloud” New Markets Lower cost to maintain


Why would anyone be interested in the Cloud?

Because its new! Easy scalability Pay for only what you use World wide availability Demo/Test drive Training More?


Why the Amazon Cloud?

The “600 Pound Gorilla” Free to try – only pay for what you use Supports both Windows and Linux Constantly improving

• Web based tools• Web based learning/help/forums

Large developer group Many customers already using Available around the world

• 2 U.S. entry points• 1 European entry point• 1 AsiaPac entry point (as of April 2010)


The Amazon Cloud


Signing up for your “Free” Account

EC2 = Amazon’s Elastic Compute Cloud• Create an account (already had an Amazon acct)• Check details (address, email, phone number)• Read and Agree to License• Give them your credit card

S3 = Amazon’s Simple Storage Service• Create an account• Check details • Read and Agree to License• Give them your credit card again


EC2 concepts and terms

AMI = Amazon Machine Image• Think of it as a VMware image – or system backup

Instance• Think of it as a running VMware image• Volatile memory

EBS = Elastic Block Storage• A mountable drive/volume• Non-volatile memory• Stored on the S3

Snapshot• Backup of an EBS volume

Elastic IP• IP Address that your account owns


EC2 concepts and terms

Security Groups• Opens only those ports you specify

Regions - Four• EU – European Region – Dublin• US East – North Virginia• US West – Northern California• ASIA - Singapore

Availability Zones – in each Region• Distinct and separate data centers

– 4 in US East, 2 in US West, 2 in EU• Important for Disaster Recovery• Snapshots can be restored to any Zone


US West Region

AWS Deployment Architecture

US East Region

Zone 1a

Zone 1b

Zone 1c

Zone 1d

Zone 1a

Zone 1b

S3 Storage

EBS


AWS Deployment ArchitectureCreating First AMI

US East Zone

Zone 1d

AMI Instance

Launch default image

Amazon Default AMI Storage

Public Redhat AMI

Public Windows AMI


AWS Deployment ArchitectureBundling Installed Image

US East Zone

Zone 1d

S3 Storage

Private Bundled AMI

AMI OpenEdge

1. Launch generic AMI (Previous Page)

2. Install OpenEdge

3. Install Application

4. Bundle AMI (make copy)

5. Register AMI


Cloud Tools

AWS Management Console


Cloud Tools

Elastic Fox


Cloud Tools

Amazon API’s


What’s supported?

Amazon EC2• Windows 2003• CentOS (debranded Red Hat)

Versions of Progress• 10.2A03• 10.2B

What no Red Hat Linux?• Red Hat Linux in Amazon EC2 is in Beta status• It costs more – need Red Hat license plus Amazon pricing


Licensing the Cloud

Common Licensing• Concurrent Users• Named Users

SPLA• Service Provider License Agreement• SaaS• Payment based on usage (like the cloud providers)• Business model available for over 5 years


Access to your system in the Cloud

Windows – Remote Desktop


Access to your system in the Cloud

Linux - ssh


More Information

Product Availability Guide• Known issues/caveats• http://web.progress.com/en/customer-service/product-life-cy

cle.html

PSDN/Communities• OpenEdge > Architecture, SaaS and Cloud Computing• http://communities.progress.com/pcom/community/psdn/ope

nedge/architecture

Getting Started Papers• Architecture, SaaS and Cloud Computing > Documents• http://communities.progress.com/pcom/docs/DOC-104551

http://web.progress.com/en/customer-service/product-life-cycle.html

http://web.progress.com/en/customer-service/product-life-cycle.html

http://communities.progress.com/pcom/community/psdn/openedge/architecture

http://communities.progress.com/pcom/community/psdn/openedge/architecture

http://communities.progress.com/pcom/docs/DOC-104551


Futures

Researching OpenEdge functionality to better support users in the cloud

Researching other Cloud providers and how best to support the operation of OpenEdge in other private and public clouds

Research the tools that assist Cloud users in managing their applications

OpenEdge RIA Strategy

Mike Ormerod Architect

Flexible and open support for leading RIA technologies


Rich Internet Applications - The Best of “Both Worlds”

Extend the market of a traditional desktop application with the reach of a web application• Multi-platform support• No installation or automated install and updates

Enhance the user experience of a web application with the richness of a desktop application• Look and feel of desktop applications• Increased productivity for user

RIA for me is all about expanding the experience for the user.*

- Raymond Camden Camden Media, Inc.

A Rich Internet Application's key job, is to move the ability to do

work to the web.* -Tony MacDonell

Teknision Inc.Combine the flexibility, responsiveness and ease of use of desktop applications with the broad reach of the Web.

- Ken Wilner Progress Software

*Source: http://www.insideria.com/2008/01/what-is-ria-1.html


Framing the RIA Market:Three User Personas

The Infrequent User

• Needs access from anywhere

• Uses application rarely and briefly

• Demands immediate feedback

• Expects familiar web usage pattern

• Needs intuitive UI with no training

The Occasional User

• Needs access from limited locations

• Uses app periodically and for a short time

• Limited setup acceptable

• Willing to use new usage paradigms

• Can learn as they go

The Power User

• Works from same location every day

• Uses application most of day

• Initial setup okay with clear benefits

• Expects domain-specific features, desktop integration

• Productivity is top priority, training expected



The Infrequent User






The Occasional User






The Power User







Three Types of RIA Applications Mapping Each to an RIA Technology Choice

Information-based pages• Browser-based with some interactive controls • No desktop integration; supports all platforms• Navigational elements: Hyperlinks, bookmarks, history…• Maximum reach, zero footprint




Rich browser application• Browser-based with desktop-like interactive controls• Limited desktop integration• Limited navigational elements• Limited reach; some platform limitations





Browser

Plug-in





Rich desktop application• Native, highly interactive controls• Full desktop integration• App runs locally -Full (incremental) install over web• Low reach; limited platforms

Browser

Plug-in





Rich desktop application• Native, highly interactive controls• Full desktop integration• App runs locally -Full (incremental) install over web• Low reach; limited platforms

Browser

Plug-in

Desktop RIA


RIA Technology: Lightweight Ajax

Enhance the user experience of traditional Web pages• Spot enhancements / incremental upgrade• Asynchronous page updates• Adds limited interactive elements Programming in JavaScript and HTML XML or JSON typically used for communication

Open source libraries simplify programming complexity – over 150• Hide most browser differences• UI controls , XML helper functions, XMLHttpRequest object

Extremely limited development tools

Extremely limited commercial support

Popular choices: • YUI (Yahoo)• jQuery• Prototype• ExtJS• DOJO


Traditional Web Architecture

Web Server

Business Application

HTTP(params) HTML(data)/CSS – New page

Browser

Server

<html> …/html>


Lightweight Ajax Architecture

Web Server


HTTP(params) HTML(data)/CSS

Browser

Server

Web Server


HTTP(data) XML/JSON

Server

BrowserTraditional

JavaScript event HTML/CSS/data

Ajax Engine

<html> <body> <h1>HelloWorld </h1> </body> </html>


RIA Technology: Heavyweight Ajax

Full web application or new UI component

Framework components for client and server services• Programming in JavaScript or code

compiled to JavaScript• Complex Ajax UI controls and custom

behavior• Services:

– Web Services and REST support– Data compression / normalization– Database integration

Limited development tools

Commercial offerings available

Popular choices: • Google Web Toolkit• ASP.NET Ajax• Isomorphic SmartClient• Open Laszlo• Backbase


Heavyweight Ajax Architecture

Web Server


HTTP(data) XML/JSON

Server

Browser

JavaScript event HTML/CSS/data

Ajax EngineFramework

Components

Web Server


HTTP(data) XML/JSON

Server

Browser

HTML/CSS/data

Ajax Engine

Lightweight

Server Framework Components

function $onModuleLoad() { var cs, i, n; cs = $wnd.jsonData; for (i = 0, n = cs.length; i < n; ++i) { $wnd.alert('Hello, ' (cs[i].FirstName + ' ' + cs[i].LastName)); } }

JavaScript event


RIA Technology: Browser Plug-in

Full web application or new UI component

Purposed platform specific browser plug-in – limited platform support

Popular choices: • Microsoft Silverlight• Adobe Flex

Proprietary framework and language• Program in specified language• Complex custom controls and custom behavior• Data-binding model

Extensive Web server services• Compression• Communication• Server push

Full-featured development environment with rich WYSIWYG UI designer


Browser Plug-in Architecture

Web Server


HTTP(data) XML/JSON

Server

Browser

Browser Plug-in

Server Components

function $onModuleLoad(){ var cs, i, n; cs = $wnd.jsonData; for (i = 0, n =

cs.length; i < n; ++i) { $wnd.alert('Hello, ' + (cs[i].FirstName + '

' + cs[i].LastName)); }

XAML MXML


RIA Technology: Desktop RIA

Can be used to extend reach of existing desktop application

Runs natively on desktop• Full branding

Provisioned over the Web • Automatically installed and

incrementally updated (Smart Client)• Terminal services, e.g. Citrix

Tight integration with the desktop• Drag n’ drop• Off-line mode• Local storage

Back-end services are platform specific

Popular choices: • OpenEdge GUI for .NET • OpenEdge WebClient• Microsoft WPF, WinForms• Adobe AIR• Java AWT/SWT/Swing


Forrester Study“Ajax is Not Enough for Power Users”


InfrequentUser

OccasionalUser

PowerUser

Rich browser application

Browser Plug-in

Rich Desktop applicationDesktop RIA

Information-based pages

Ajax (Light / Heavy)

Matching RIA Users and Design Centers


Use Lightweight / Heavyweight Ajax for…

Easy access from “any” browser Limited interactive experience Multiple platform support Zero footprint Best for incremental changes to an existing Web

application Easy update and deployment model

Infrequent User

Ajax client with OpenEdge WebSpeed Ajax client with OpenEdge Web Services ASP.NET Ajax with OpenEdge Open Client for .NET Java Server Pages (JSP) with OpenEdge Open Client for Java

AJAX CLIENTS WITH 10.2B:


Use Browser Plug-in for…

Want balance between• Client platform independence • and a rich interactive experience

Near-zero footprint; plug-ins almost ubiquitous Occasional User

Microsoft Silverlight with OpenEdge Open Client for .NET Microsoft Silverlight with OpenEdge WebSpeed Microsoft Silverlight with OpenEdge Web Services Adobe Flex with OpenEdge Open Client for Java Adobe Flex with OpenEdge Web Services Adobe Flex with OpenEdge WebSpeed

BROWSER PLUG-INS WITH 10.2B:


Use Desktop RIA for…

Limited platforms – mobility is not an issue Tight integration with the desktop is critical Local installation allowed by IT Maximize leverage in-house OpenEdge skills Works the way you want it when you want it

Power User

OpenEdge GUI for .NET / GUI with WebClient OpenEdge GUI for .NET / GUI /Character with Citrix

or Terminal Services Microsoft WPF/WinForms with OpenEdge Open Client for .NET Adobe AIR with OpenEdge Open Client for Java

DESKTOP RIAS WITH 10.2B:


OpenEdge Business Application – Reach vs. Development Effort

OpenEdge GUI

WPF

AIR Flex

Silverlight

Lightweight Ajax

OpenEdge GUI for.NET

Heavyweight Ajax

Leve

l of D

evel

opm

ent E

ffort

ReachMIN MAX

Eas

yC

om

ple

x


UI Decision Tree




Release Landscape is Subject to Change

D I S C L A I M E R This talk includes information about potential future

products and/or product enhancements.

What I am going to say reflects our current thinking, but the information contained herein is preliminary and subject to change. Any future products we ultimately deliver may be materially different from what is described here.

D I S C L A I M E R


OpenEdge 11.0 Roadmap

Lightweight / Heavyweight Ajax• JSON parser in ABL (read and write)• REST Adapter to OpenEdge AppServer• REST binding to OpenEdge WebSpeed• Web tooling in OpenEdge Architect

Browser Plug-in• Microsoft Silverlight RIA Services Adapter and Proxies• REST Adapter to OpenEdge AppServer• REST binding to OpenEdge WebSpeed

RIA Desktop• OpenEdge GUI for .NET designer improvements• Updated UltraControls

Making RIA Programming Easier


Summary

Start with the end-user• Ajax for the infrequent user• Browser plug-ins for the occasional user• Desktop RIA for power users

Pick the lightest-weight approach that meets your needs• You might want multiple UIs

Factor in the skill sets of the developers

Follow the guidelines and principles of the OERA • Plan for the future• http://communities.progress.com

Rob StraightOpenEdge Product Management

Addressing Security and Compliance Issues

OpenEdge Transparent Data Encryption


Introduction

The Need to Provide Security for Data Continues to Increase

Touches Many Market Segments: Finance, Retail, Healthcare, and more

Governments Have Enacted Legislation to Enforce Compliance of Data


Compliance Legislation Examples

Payment Card Industry (PCI) Health Insurance Portability & Accountability Act

(HIPPA) Sarbanes-Oxley Act (SOX) Public company accounting reform and investor

protection European Union Data Protection Directive

• Protects individuals personal information

“Must Have” Conformanceto do Business


Data Security Options

1. Use Built-In Encryption Functions

2. Encrypt Data Using O/S or SAN File Encryption

3. 3rd-Party Encrypted SAN 4. RDBMS encrypts only to disk, only for policy-selected

data


Option 1: OpenEdge Built-In Encryption Functions

Requires significant rewrite and ongoing maintenance of existing code• Operates on the data field level

Does not encrypt the database:• Poor performance- data not indexed, no range searches• Limited effectiveness from a security perspective -

programmers put in position of “security risk”- mistakes, oversights, dishonesty can happen

• Might not pass auditors review

Customer has to manage the encryption keys manually

SQL reports do not decrypt values


Option 2: Encrypt Data Using O/S or SAN File System

Performance is an issue – heavier overhead than DB encryption• Microsoft says file encryption is too slow for DB

Security administrators must manually track the encryption keys for anything archived

Security administrators cannot prevent the writing out of clear-text data• The DB and some OS utilities can write to other file systems

that may not be encrypted


Option 3: 3rd-Party Encrypted SAN

Same issues as file system: security of the data outside the secured environment not guaranteed• Backups, dumps, journal files, etc.• Anything “unencrypted in memory” can be written


Option 4: Database Encryption At Rest

Data is encrypted whenever it is stored on disk (at rest)

This is the solution chosen by most database vendors

Industry expectations are “encryption at rest” because the major database vendors have proven this approach is performant, and less hassle than encrypting file systems.

Carl G. Olofson, IDC Analyst for Databases


n=260

n=260

Why Database Encryption?


n=260

n=260

Encryption – Industry View: Management


OpenEdge 10.2B Transparent Data Encryption

Option for Enterprise Database: At-Rest (storage area level) Encryption• Data secure on-disk, backup, and dump• Data is unencrypted In-Memory = (up to) normal speed

Secure Key Store and Key Management• Change keys on-line

Policies control use of utilities

Industry standard encryptions• AES, DES, triple DES, etc.

No application changes!


A High-Level View of Encryption

Client<SSL>

Server

Database on Disk

Encrypted Messages

Shared Memory

BackupsDump/Load

Encrypted Data

Encrypted Data

Encrypted Data


OpenEdge Database

Type IDatabase Storage Area

Tables

LOBs

Indexes

Entire area encrypted

Type IIDatabase Storage Area

Object-level encryption

Encryptable Database Objects

Table

Index

LOB

Table LOBIndex

LOB Table

LOB Table

Index Table

IndexLOB

Index


Database Key Store

Independent and Secure Entity• Not part of the database• One for each encrypted database• Managed by the DB Administrator

Stores DB Master Key (DMK)• Each TDE-enabled database has one unique DMK- required to

connect to the DB (via a passphrase)• Only one database is accessible if the DMK is compromised

Each DB Object Has One or More Unique Virtual Data Encryption Keys• Generated by the key store service based on the DMK- no DBA

action required• If key is cracked, intruder only has access to that one database

object


How Does It Work?

Key Store• Database Master Key (DMK)• DMK Admin/User Passphrase• Manual/Automatic Authentication on DB connect

Encryption Policy Area• Encryption Policies - What (object) & how (cipher)

Database

Encrypted Data

Shared Memory

Buffer Pool

(plain text block)

Read I/O

Decrypt

Key Store

Policy Area

Write I/O

Encrypt

&

Database Storage Engine


Your Cipher Choice

Governance Business rules Your choice, your responsibility - balance strength &

performanceRC4-

128

AES-128

AES-192

AES-256

DES-56

DES3-16

8Security Strength 0 – no encryption

DES-PBE

10

10

RC4-12

8

AES-128

AES-192

AES-256

DES-56/

PBE

DES3-16

8

Performance Cost

0 – no encryption

*Graphical data is relative


n=260

Challenges Addressed by TDE


How Fiserv Makes Progress - Case Study

Benefits• TDE will ensure data privacy across the entire lifecycle• Maintain competitive advantage and ability to interface with

third parties by adhering to PCI DSS• Increased IT performance will save time and reduce costs

“We always try to improve our performance and get things to run faster. We tested a fully encrypted database and there was only a 4% decrease in

performance versus an unencrypted database. We tested that with alternative data pools, we actually gained back almost 2% of that initial

performance degradation. We believe with additional fine tuning the performance will continue to improve.”


Why Use OpenEdge Transparent Data Encryption?

Gives You Control Over Who Can Access Private Data• Works regardless of who has a copy of the data or where

the data resides

Easy To Implement Low Cost Solution Configurable Transparent

• No need to change your OpenEdge application, database design, or data

Insuring the Success of Every Business Transaction with Actional

Mike OrmerodArchitect


Lost in interconnected complexityFind your way … the easy way! (And get a map!)


Unravel the Complexity

Ensure the success of every important business transaction

OpenEdge-based applications are one piece of the complete picture.


Business Transaction Assurance: New levels of Visibility and Management

Expanding the boundaries beyond OpenEdge applications with:

…the ability to capture and track all transactions automatically and continuously

…the ability quickly and easily pin-point issues through root cause analysis

…the ability to produce the best business outcomes with real-time process optimization


Why is it so important?

• Visibility into customer experience

• Assure no process steps are missed or lost

• Early detection of performance and availability issues

• Guarantee of SLAs

• Decreased time and resources to fix issues


A Spectrum of Visibility

Where do you fit today?

And, where do you need to be in the future?

Complete Visibility

Zero Visibility


Example One –

Scenario• Minimal visibility into

environment• Non-mission critical

application• Application outages

– Minimal Revenue Loss– Acceptable Data Loss

Desired State: More Configuration capabilities• Maintain Status Quo• No Business Requirement

for additional monitoring• Process level information• Single tool for configuration

and management

OpenEdge Explorer


OE10.2A - OpenEdge Explorer!

OpenEdge Explorer using common OpenEdge Management framework:Browser-based interface means:

• No more Windows dependency• Access from anywhere

Single tool for configuration and

managementMore functionality, e.g.

• Log viewer• List AppServer connections• Customizable user roles • Process system level

information

Configure Your OpenEdge Environment from Your BrowserProgress Explorer

OpenEdge Explorer


Example Two -

Scenario• OpenEdge Application

– Mission Critical– Business Transaction with

other Applications• Application Outage

– Potential Revenue Loss– Business Reputation

would suffer

Desired State: Operational Continuity• Visibility into

– Application Environment– Specific Business

Transactions• Users need application

availability

OpenEdge Management


Operational Continuity

•Minimal Planned Downtime Online utilities

•Minimum care and feedingLoad Balancing Name Servers

•Non-stop Execution Failover clusters (in the box) AppServer failover

•See situations before they become problems- alerting and trending

•Automatically adjust settings as needed

• Maximize uptime and operational efficiency

•Further reduce Progress’ already low cost of ownership.

Proactive Management

OpenEdge Management


Example Three -

Scenario• OpenEdge Application

– Mission Critical– Business Transactions

integrate with other mission critical applications

• Application Outage– Potential Revenue Loss– Business Reputation

Suffers

Desired State: End-to-End Visibility• Visibility into

– Application Environment– Entire Business Transaction

flows• Guaranteed application

availability – SLA’s are becoming critical

Progress Actional


Introducing Actional For OpenEdge

Interceptors for AppServer, Sonic Adapters, WebSpeed, and Web Services

Easily configure with OpenEdge Explorer No application changes required


Before Actional There are no painted lines on the data center floor!

PartnerGW CustomerGW OrderMgmt

Logistics

Inventorymgmt

OrderIQ

Tax.writenow.com

Finance

Fdb.wirtenow.com

B2b.fedix.com

Idb.writenow.com

warehouseemea

Ldb.writenow.com


PartnerGW CustomerGW OrderMgmt

Logistics

Inventorymgmt

OrderIQ

Tax.writenow.com

Finance

Fdb.wirtenow.com

B2b.fedix.com

Idb.writenow.com

warehouseemea

Ldb.writenow.com

Actional EnterpriseStep 1: Install Actional Agents on Key Services

Actional Agents add less than

5% overhead even under themost stressful situations


Actional EnterpriseStep 2: Let the Application Run

Actional automatically discovers process flows and maps dependencies end-to-endwith no custom coding or configuration


Actional EnterpriseStep 3: Define Policies

Auditing, service levels, detecting missed deadlines, lost transactions, …


Actional EnterpriseStep 4: Triage and Locate Issues

Actional can snapshot individual transactions that violate policies to easily isolate the root cause of problems… with

no added overhead


Hippocratic Oath: First do no harmThe cure is usually worse than the disease

Business Transaction Assurance:Why Progress?

Patented track-and-traceDo you know where your transactions are?

• Auto discovery No surprises• End-to-end No blind spots• Content visibility Business aware

• Track-and-trace No manual correlation• Online configuration No downtime• Minimal overhead Always on

The cure is not worse than the disease


A Spectrum of Visibility

What tools are available to help you?

Progress Actional

Existing Out of the Box Tools

OpenEdge Management


Summary

End-to-end Visibility to monitor and govern services and applications

Design-time to run-time application validation, visibility and control

Ensure the success of every important business transaction

High Performant, Scalable, Patented, Product Leader, Proven ROI

colleen smith vp, saas and openedge marketing. © 2010 progress software corporation. all rights...

Documents

progress progress

process slide

process application

business process applications

progress initiative

business processes

marketing lead process

value slide