fortbragg techday presentation

SOLARWINDS & 4K SOLUTIONSFORT BRAGG TECHNOLOGY BRIEFINGEmbassy SuitesAugust 9, 2016

• SolarWindso Chris Hauter, Federal Account Manager

[email protected] (office)

o Bob Andersen, Sr. Manager Federal Sales [email protected] 703-386-2637 (office)

o Andy Wong, Federal Sales [email protected] 703-386-2610 (office)

INTRODUCTIONS

© 2016 SOLARWINDS WORLDWIDE, LLC. ALL RIGHTS RESERVED. 2

• 4K Solutionso David Theriault, President

[email protected] 706-593-9070 (office)

o Jim Urbec, VP of Business [email protected] 910.574.7573 (office)

mailto:[email protected]





AGENDA

• SolarWinds & 4K Solutions Overviews

• Network Management Products -- Technical Updates and Scaling the Orion® Platform

• Break

• Systems Management and Database Products -- Technical Updates

• Lunch with SolarWinds and 4K Solutions

• Security Products -- Technical Updates and Compliance

• Other SolarWinds® Products

• Wrap-up and Q&A

• Federal Networking Event

The power to manage IT


SOLARWINDS OVERVIEW

• Over 150,000 customers in 170 countries; SMB to Fortune 500®

• More than 425 of the Fortune 500 are customers

• Every branch of DOD and virtually every Civilian and Intelligence agency

• SolarWinds named to Gartner® Magic Quadrant for Network Performance Monitoring and Diagnostics, Feb. 2016

• Headquarters in Austin, TX

• Federal Office in Herndon, VA

• 1800+ employees worldwide

The power to manage IT

User Experience


OUR VISIONVisibility in a hybrid world

• Regardless of where the applications and underlying infrastructure are deployed

• Regardless of where our management products need to be deployed

• While continuing to take a user-centric approach – only buy what you need, when you need it

Manage All Things IT


Product Mission: Enable IT & DevOps pros to proactively and reactively monitor, alert, troubleshoot and resolve issues quicklyProduct Principles: Powerful (visibility / monitor / Manage IT infrastructures ), Intuitive (Web based easy to implement and use) and Affordable (pricing for agencies of all sizes)

SOLARWINDS 5 STRATEGIC PLATFORMSBuilding block approach for IT Management

Network Management

Performance

Configuration

IP Address

VoIP

Systems andApp Management

Servers & Apps

Virtualization

Storage

Database Management

Database Performance

Tools

Remote Troubleshooting

Web Help Desk®

Topology Mapping

Security Management

Log & Event

Patch

Configuration• MySQL® • Oracle®

• SQL Server®

• DB2®

• SAP® ASE

Device Tracking Secure File Transfer

Web Performance


HOW WE DELIVER OUR VISIONSolarWinds Orion Platform


• US Army (cont’d)o ARNG – 40+ units, including largest stateso NETCOM – multiple NEC’s incl. Redstone,

Polk, Hood, Sam Houston and Dixo PEO-EIS – ALTESS, PD-DWTS, PM-DCATSo TRADOC – USAICoE, ATSC, AWG, NTC,

JRTC, numerous MTCso Service Components – USANORTH,

USARPAC, SDDC, SMDC/ARSTRAT• US Navy / Marine Corp

o ONE-Net Baselineo SUPSHIPo MARCORSYSCOMo SPAWAR East and West

SOLARWINDS IN THE DOD


• US Armyo Army WIN–T (part of baseline build)o AMC – AMRDEC, ARL, CERDEC,

CECOM, o ARCENT – 3rd Army, SWACCo ASA(ALT) – PEO AVN, PEO M&S,

PEO-C3T, PEO-STRI, and PEO-EISo ATEC – OTC, RTC, ATC, and moreo FORSCOM – XVIII Airborne, 82nd

Airborne, III Corps/JNCC-Ao INSCOM – GISA (East, West Central,

Main), NGIC, 470th, 513th, and moreo MEDCOM – USAMITC, DENCOM

and multiple hospitals

SOLARWINDS IN THE DOD (CONT’D)

© 2016 SOLARWINDS WORLDWIDE, LLC. ALL RIGHTS RESERVED.

• US Air Forceo AFCENT – Enterprise AORo AFSPC – 26 NOS, 83 NOS, 561 NOS, 90

IOS, 45 SCS, 690 NSG o Standardized at AF INOSC East & Westo ACC – 4 CS, 20 CS, 27 IS, AFC2IC, 99 CS,

9 CS o 25th AF HQo AOC Weapon Systems Baseline o PACAF – HQ, 673 CS, 613 AOC, 607

ACOMSo AFSOC – HQ, SOCOM, 27 SOW, 16 CSo AETC – 17 TRSS, 47 CS, 690 ISS, 479 CSo AFE – A2 HQ, 1 ACOS, 86 CS, 603 ACOMS,

31 CS, 423 CS, 422 CS, 48th FW, 100CS9

• DoD and Unified Commandso DOD o DISA CIOo DIA / DoDIISo DCMAo DLAo DTRAo NGIAo WHCAo SOCOMo CENTCOM HQo AFRICOMo STRATCOM

4K SOLUTIONS OVERVIEW

10© 2016 SOLARWINDS WORLDWIDE, LLC. ALL RIGHTS RESERVED.

• Founded in 2006• Delivers critical communications support solutions• Provides Systems Design, Rapid Fielding, Solutions

Architecture, Special Operations & Emergency Communications Consulting and Professional Services

• Service Disabled Veteran-Owned Small Business (SDVOB)• GTACS Veteran Owned Small Business team member on

Army’s Global Tactical Advanced Communications Systems (GTACS) IDIQ

• Cisco® authorized Global Diversity Registered Business

4K SOLUTIONS OVERVIEW

11© 2016 SOLARWINDS WORLDWIDE, LLC. ALL RIGHTS RESERVED.

NETWORK MANAGEMENT PRODUCTS


NETWORK MANAGEMENT SOFTWARE

• Fault, availability, and performance monitoring for networks of all sizes

• Centralized network device change and configuration management

• Centrally manage your entire IP infrastructure and fix conflicts

• Automated device tracking and switch port management

• Alert, isolate, and resolve network outages and performance issues

• Comprehensive network traffic and bandwidth analysis and monitoring

• VoIP and WAN performance monitoring, troubleshooting, and SLA dashboard

Network management software that gives you the power to monitor and manage your network

Network Performance Monitor

Network Configuration Manager

NetFlow Traffic Analyzer

IP Address Manager

User Device Tracker

VoIP & Network Quality Manager


• User Interface (UI) enhancements and integrations

• NetPath™ troubleshooting

• ServiceNow® integration

• Network Insight for F5® BIG-IP® load balancers

• Monitoring for Cisco Switch Stacks

NETWORK PERFORMANCE MONITOR 12.0 Key new features


• NetFlow Traffic Analyzer 4.2

o UI enhancements and integrations

o Cisco NBAR2 support

• Network Configuration Manager 7.5

o UI enhancements and integrations

o Support for F5 BIG-IP load balancers

ADDT’L NETWORK MANAGEMENT PRODUCT RELEASESKey new features


NETWORK MANAGEMENT RELEASE DEMONSTRATION


• Network Performance Monitoro Automated Dependencieso Network Atlas and Topology datao Wireless monitoring and Wireless Heat Mapso QoE DPI for Application and Network Response Time

• NetFlow Traffic Analyzero Flow Storage Database in NTA 4.xo Monitor Cisco CBQoS policies for dropped packetso Using Flow Navigator for forensics or detailed analysis

• Network Configuration Managero Automated Change Detectiono Hardware inventory including serial numbers


NETWORK MANAGEMENT PRODUCTSTechnical review and update

17

• User Device Trackero Find switchport for specific IP address for both forensics and

troubleshootingo Rogue Device Detection and port shutdowno Device Watch List and All User Logons

• Engineer’s Toolseto Network troubleshooting leveraging the Orion Platform integration


NETWORK MANAGEMENT PRODUCTS (CONT’D)Technical review and update

18

ORION PLATFORM ARCHITECTURE AND SCALABILITY


• SolarWinds Orion Platform architecture and release update

• Scaling for the enterpriseo Managing network and user growth

o Managing distributed environments

o Keeping your administration costs under control as you scale with automation

• Integration options

SCALABILITY AND ARCHITECTURE


ORION PLATFORM ARCHITECTURE

PRIMARY WEB SERVER

ORION PLATFORMPrimary Polling Engine and Common Services:

Nodes, Volumes, Alerts, Events, Reports, Discovery, Syslogs, Traps, Maps, API

NTAIP flows

NPMinterfaces, wireless, virtualization, UCS…

NCMconfigurationmanagement

networksecurity

IPAMIP address

management

UDTport

monitoring

network security

VNQMVoIP

monitoring

SAMserver &

application monitoring

WPMweb

application performance monitoring

SRMstorage

monitoring & capacity planning

Toolsetreal-time trouble

shooting

VMANvirtual

infrastructure monitoring

PMpatch update management

network security

DPAdatabase

performance monitoring

Orion DB

ADDITIONAL POLLING ENGINE +

FlowStorage DB

Network, Servers, Applications,

Storage

More Network, Servers,

Applications, Storage

ADDITIONAL WEB SERVER


22

LARGE SCALE NETWORKS

PRIMARY WEB SERVER

ORION PLATFORM

NTA

NPM

NCMVNQM

IPAMUDT

SAMWPM

Orion DB

ADDITIONAL POLLING ENGINE



Storage

More Network, Servers, Applications,

Storage


Storage

• Scalability and deployment architecture is determined by:

• Network size• Network topology (e.g. monitoring

across WAN/low bandwidth)• Sampling frequency (1 hr to ≤ 1 min)• Variety of managed objects (products

installed, custom pollers – UnDP)• Designed to scale to hundreds of

thousands of elements using Additional Polling Engines

FlowStorage DB


23

DISTRIBUTED ENVIRONMENTS

PRIMARY WEB SERVER

ORION PLATFORM

NTA

NPMNCM

VNQMIPAMUDT

SAMWPM




Storage


Storage


Storage

WAN

Orion DB

FlowStorage DB• The Additional Polling Engine

handles intermittent connectivity to the Orion platform to better support remote deployments

• Orion platform, NPM, SAM, SRM• NCM, VNQM, UDT to follow


24

MULTI-LEVEL, CONSOLIDATED MANAGEMENT

PRIMARY WEB SERVER

ORION PLATFORM

NTA

NPM

NCMVNQM

IPAMUDT

SAMWPM

PRIMARY WEB SERVER

ORION PLATFORM

NTA

NPM

NCMVNQM

IPAMUDT

SAMWPM

Orion DB Orion DB

ENTERPRISE OPERATIONS CONSOLE

• Orion Platform instances in regions• Enterprise Operations Console (EOC) at

the top level for roll-ups• Up to 600K elements• EOC consolidates real-time statuses at

the top level (no centralization of platform admin):

• Alerts, events, syslog, traps (last 24 hours worth of data)

• Orion node, volume, interface and wireless data

• Limited historical data

EOC DB


25

ORION PLATFORM USER GROWTH

PRIMARY WEB SERVER

NTA

NPMNCM

VNQMIPAMUDT

SAMWPM

Core DB




Storage


Storage


Storage

FlowStorage DB

ADDITIONAL WEB SERVER• Additional Web Server is recommended above 20-30 concurrent web users

• Load balancer friendlyORION CORE


26

SCALING THROUGH AUTOMATION

• Automation will assist you with controlling admin costs• Scalability is often limited by the ability to automate routine tasks like manual

configuration tasks; raw performance or hardware infrastructure costs may be a lesser challenge

• Automate and integrate with the Orion platform API• Query alert, configuration, and performance data• Set custom properties and other configurations• Acknowledge alerts and un-manage nodes• And so on…


15 MINUTE BREAK


SYSTEMS MANAGEMENT AND DATABASE PRODUCTS


SYSTEM MANAGEMENT AND DATABASE SOFTWAREManage, monitor, and troubleshoot application performance and availability

• Performance monitoring for servers and hundreds of applications

• Performance, troubleshooting, capacity and sprawl management from VM to data store

• Capacity and performance across multi-vendor storage arrays in context of your application

• Troubleshoot web based performance issues for both internal and customer facing applications

• Database performance management and optimization

• Application visibility across application and infrastructure layers

Server & Application Monitor

Web Performance Monitor

Storage Resource Monitor

Virtualization Manager

Database Performance Analyzer

AppStack Management Bundle


APPSTACK MANAGEMENT BUNDLE

What is it?The AppStack concept is the monitoring of an Application throughout the entire stack – application, database, virtualization, server, and storage layers – so the location of any performance bottlenecks can quickly and easily be determined

How is it accomplished?Utilizing our Server & Application Monitor (SAM), Virtualization Manager (VMAN), Storage Resource Monitor (SRM), and Web Performance Monitor (WPM) products we can see each piece of the puzzle; with integration amongst the products, we can follow the breadcrumbs to see where the issue lies

It’s here – enabled in SAM, VMAN, SRM, WPM


• Server & Application Monitor (SAM) 6.2.4

o Active Directory® (AD) discovery

o ServiceNow integration

o Group Assignments for Application Templates

• Storage Resource Monitor (SRM) 6.3

o New storage arrays: Pure Storage®, and XtremeIO

• Web Help Desk (WHD) 12.4

o Uses FIPS cryptography

• Kiwi CatTools®

o IPv6 support and SSL/TLS email support

SYSTEMS MANAGEMENT PRODUCT RELEASES Key new features


SYSTEMS MANAGEMENT RELEASE DEMONSTRATION


• Server & Application Monitor o AppInsight for SQL Server, Exchange™ and IIS™

o Hardware Health (temperature, power, fan speed, …)o Asset Inventoryo Customizable application monitoring

• Virtualization Manager o Virtualization Storage dashboard for datastore performance and capacityo Virtualization Sprawl dashboardo Change VM CPU/Memory, Power off VM, delete Snapshots and orphaned VMDKs

• Web Performance Monitoro Use WPM Recorder to capture a browser session using a web applicationso Configure WPM Player to play back the recorded browser session (transaction)o Review results of WPM player


SYSTEMS MANAGEMENT PRODUCTSTechnical review and update

33

• Storage Resource Monitoro Performance and Capacity Dashboardo Array support (EMC®, NetApp®, HP®, …)

• AppStack Environmento AppStack automatic integration and visualization including “Spotlight”o AppStack Environment view to find dependencieso Mini AppStack view for a node view


SYSTEMS MANAGEMENT PRODUCTS (CONT’D)Technical review and update

34

• Orion improvements

• Better visibility into hybrid on-premises/cloud environments

• Agent for Linux® Servers

• Virtualization optimization and automation

• Broader device and platform support for storage and databases

SYSTEMS MANAGEMENT ROADMAP THEMESSAM, VMAN, SRM, DPA, tools


LUNCH BREAK


SECURITY AND COMPLIANCE TOOLS


SOLARWINDS COMPLIANCE AND SECURITY SOFTWARE OVERVIEWMonitor security and compliance of your IT infrastructure

• Real-time security information and event management (SIEM) software

• Centralized patch management for Windows® desktops, laptops, and servers

• Centralized network device change and configuration management

• Automated device tracking and switch port management

• Centrally manage IP infrastructure and isolate users/devices from the network

• Secure file transfer and file sharing

Log & Event Manager

Patch Manager

Serv-U® Secure File Transfer

Network Configuration Manager

IP Address Manager


User Device Tracker

38

• Log & Event Managero Connectors for various log data sourceso Correlation ruleso Architectureo NIST FISMA and DISA STIG compliance reporting

• Patch Managero WSUS extensiono 3rd party updates through WSUSo Asset Inventory

• Network Configuration Managero DISA STIG and NIST FISMA compliance reportso Leveraging integration with the National Vulnerability Database

IT SECURITY TOOLSTechnical review and update


• The implementation of National Institute of Standards and Technology (NIST) Federal Information Security Management Act (FISMA) is designed to protect the nation’s critical infrastructure

o Provides standards for categorizing IT systems by mission impact (FIPS 199)o Establishes minimum security standards for data and IT systems (FIPS 200)o Establishes baseline security controls and provides guidance for selecting, implementing, and assessing

security controls and assuring their effectiveness (SP 800-53)

• The Risk Management Framework (RMF) provides a framework that combines IT security and risk management into the systems development lifecycle (SP 800-37)

o DOD has adopted the 6-step RMF to transform the traditional C&A processo Categorize your IT assets and identify critical infrastructureo Implement security controls and assess that they are implemented correctlyo Operate assets and monitor effectiveness and vulnerabilities of security controls

COMPLIANCE OVERVIEW


• DOD mandates usage of Security Technical Implementation Guides (STIGS) to standardize secure infrastructure installation and maintenance; these guides were developed by DISA to reduce vulnerability

o Create an inventory of all systems and software in order to determine which STIGS to applyo Monitor configurations and produce compliance reportso Manage configurations to achieve and maintain compliance

• And, let’s not forget about dreaded AUDITS, including DISA Command Cyber Readiness Inspections (CCRI), and OMB/GAO audits

o Preparing for an audit requires considerable documentation and compliance reportingo Audits require detailed knowledge of networked hardware and applications, including asset inventories,

locations, configurations, access privileges, and vulnerabilitieso Which systems are being attacked, and are any still compromised?o IT Pros need to be able to quickly respond to auditor inquiries and provide accurate details

COMPLIANCE OVERVIEW (CONT’D)


SOLARWINDS COMPLIANCE FEATURES

• Automate patching of Microsoft® and 3rd party applications to improve compliance

• Schedule patches for minimum downtime• Inventory software and physical components per

server or workstation

Patch Manager

• Inventory network device configurations, assess configurations for compliance, and automate change and configuration management

• Implement configuration of security controls and assure their effectiveness

• Produce FISMA and STIGS reports from configuration templates

• Produce audit documentation and reports

Network Configuration Manager• Configure correlation rules to help assure

effectiveness of security controls • Real-time and continuous monitoring of security

controls • Produce FISMA and STIGS compliance reports from

templates• Supports STIG requirements for configuration

auditing, log analysis and broader network security• Tracks and report suspicious activities/attacks to

provide auditing support

Log & Event Manager

• Trend utilization for capacity planning• Track multicast or firewall port discards• Monitor network health and availability• Identify protocol latency delays• Produce audit documentation and reports

Network Performance Monitor


• DISA STIG and NIST FISMA reports ship with NCM to help IT Pros improve compliance

• LEM has a range of features to support STIG compliance

o Supports DISA STIG compliance via our real-time monitoring of related events across systems, network devices, applications, and security tools

o Supports configuration auditing, including logs of relevant STIG best practices, configuration changes, installation of unapproved software, and more

o Many of LEM’s out of the box rules can be used to address STIGS

o LEM also includes STIG and FISMA compliance reports

DISA STIG COMPLIANCE AND WHERE WE CAN HELP


• Review our NIST FISMA/RMF compliance blog:

https://thwack.solarwinds.com/community/solarwinds-community/product-blog/blog/2015/08/01/fisma-nist-800-53-compliance-with-solarwinds-products

• Review our DISA STIGS compliance blog:

https://thwack.solarwinds.com/community/solarwinds-community/product-blog/blog/2011/09/07/disa-stig-compliance-with-log-event-manager

• Watch a Federal Security Compliance video:

http://www.solarwinds.com/resources/videos/solarwinds-federal-security-compliance.html

• Download a SIEM whitepaper:

http://www.solarwinds.com/resources/whitepaper/siem-speeds-time-to-resolution.html

• Download a Continuous Monitoring whitepaper:

http://go.solarwinds.com/fedcyberWP?=70150000000Plgf

COMPLIANCE RESOURCESLet us know how we can help you






http://www.solarwinds.com/resources/videos/solarwinds-federal-security-compliance.html

http://www.solarwinds.com/resources/whitepaper/siem-speeds-time-to-resolution.html



OTHER SOLARWINDS PRODUCTS


TOOLS, IT HELP DESK & REMOTE SUPPORT SOFTWARE

• Management, monitoring, and troubleshooting tools for Engineers

• Powerful IT help desk service request management, IT asset management and knowledge base

• Collection of comprehensive troubleshooting tools for remote Windows administration and Active Directory® management

• Simplify syslog and SNMP trap management

• Easy-to-use remote control and desktop sharing tool

Simplify help desk ticketing, IT asset management, and end-user support

DameWare Remote Support

DameWare Mini Remote Control

Web Help Desk

50

Engineer’s Toolset

Kiwi Syslog Server


• VoIP & Network Quality Managero Search and filter Call Record detailso Troubleshoot Cisco and Avaya VoIP systemso View Quality Metrics – Jitter, Latency, Packet Loss and MOS

• Web Help Desko Trouble ticketso Integration with Orion alertso Asset managemento SmartCard support

• DameWare® Remote Supporto Remote administrationso Remote desktopo SmartCard supporto Satellite friendly

OTHER SOLARWINDS PRODUCTSTechnical review and update


THANK YOUQUESTIONS?


• Watch a NetPath demo: http://

www.solarwinds.com/resources/videos/critical-path-visualization-and-hop-by-hop-monitoring-with-netpath.html

• Watch an NPM 12 demo: http://www.solarwinds.com/resources/videos/solarwinds-npm-your-complete-network-monitoring-solution.html

• Download a free trial: http://www.solarwinds.com/downloads/

• Visit our Federal website: http://www.solarwinds.com/federal

• Call the SolarWinds Federal sales team: 877-946-3751

• Email federal sales: [email protected]

• Download our Scalability whitepaper: http://www.solarwinds.com/resources/whitepaper/orion-scalability-tech-tip.html

• Visit our THWACK® government group: http://thwack.com/government

• Follow us on LinkedIn®: https://www.linkedin.com/company/solarwinds-government

ADDITIONAL RESOURCESLet us know how we can help you


http://www.solarwinds.com/resources/videos/critical-path-visualization-and-hop-by-hop-monitoring-with-netpath.html

http://www.solarwinds.com/resources/videos/critical-path-visualization-and-hop-by-hop-monitoring-with-netpath.html

http://www.solarwinds.com/resources/videos/solarwinds-npm-your-complete-network-monitoring-solution.html

http://www.solarwinds.com/resources/videos/solarwinds-npm-your-complete-network-monitoring-solution.html

http://www.solarwinds.com/downloads/

http://www.solarwinds.com/federal


http://www.solarwinds.com/resources/whitepaper/orion-scalability-tech-tip.html

http://thwack.com/government

https://www.linkedin.com/company/solarwinds-government

https://www.linkedin.com/company/solarwinds-government

The SOLARWINDS and SOLARWINDS & Design marks are the exclusive property of SolarWinds Worldwide, LLC, and its affiliates, are registered with the U.S. Patent and Trademark Office, and may be registered or

pending registration in other countries. All other SolarWinds trademarks, service marks, and logos may be common law marks, registered or pending registration in the United States or in other countries. All other trademarks mentioned herein are used for identification purposes only and may be or are trademarks or

registered trademarks of their respective companies.
