1

IBM WebSphere DataPower SOA AppliancesWhat’s new in 2012 and beyond

Peter BrabecWebSphere System Z Brand LeaderDataPower AmbassadorBrabec_peter@at.ibm.comMobile: +43 664 618 67 06

2

Agenda

• Over a Decade of Innovation• The 9005 Hardware• Current Capabilities• Application Optimization• DataPower Futures• DataPower Use Cases

3

Over a Decade of Innovation ….

1999

2000

2001

2002

20032004

20052006

20072008

20092010

XSLJITOptimizedSoftwareCompiler

XG4Gigabit/Sec

OEM HWSolution

Acquisition

ITCAMfor

SOAModel9235

DGXTOptimalSoftware

Interpreter

XG3OptimizedHardware

Acceleration

Model7993

WebSphereTransformation

Extender

AOSelf-Balancingand Intelligent

Load Distribution

XA35

XS40

XI50

XB60

XM70

CloudBurst

4

WebSphere DataPower SOA Appliances Roadmap

3.6.0Oct 2006

3.6.0.xJune 2007

WebSphere DataStage TX Design Studio integration

Denotes Major releaseDenotes Minor release

Fix pack delivery ongoing

3.6.1Dec 2007

Improved WS-* Standards support

Enhanced ease of use Improved 3rd party connectivity New MS functional capabilities

3.6.0.xDec 2006

3.6.0.xMar 2007

3.7.1Aug 2008

WS-Policy Enhancements WS-SecurityPolicy Interop Database Enhancements Consumability and Serviceability Customer-driven enhancements

3.7.2Dec 2008

3.7.32Q 2009

V.xQ4 2009

V.x+1Q2 2010

WTX improvements TAM 6.1 / TFIM 6.2 RACF integration Serviceability enhancements

IPv6 IE7 browser support Enhanced WTX integration Enhanced WSRR integration Serviceability enhancements

WebSphere MQ7 support AS1 support (XB60) Enhanced load balancing z/OS integration enhancements

V.x+2Q2 2010

4

All statements regarding IBM's future direction or intent are subject to change or withdrawal without notice, and represent goals and objectives only. This information is for planning purposes only. The information herein is subject to change before the products described become

available.

IBM Confidential

5

Continues in 2011!

XI50B

XC10Cast Iron

Acquisition 2010

2011

XH40

HMCHMC

XI50z

XI52

XB62

WAMC

XG45

6

2012 Roadmap

1H2012

2H2012

V5 Firmware Enhancements (GA 26/6/2012)• Supports 9004 + 9005 devices• Large file support for 9005• Large Configuration Extensions• Additional Standards Support Oauth,

X12, EDIFACT• WTX Industry Packs• Governance & SLA Enhancements• Application Optimization for XG45

VNext Firmware Enhancements - Candidates• Additional Standards Support for Oauth• High Availability Enhancements• Additional Edge of Network Capabilities• Monitoring Enhancements• Multi tenancy improvements• Customer Enhancement requests

7

7

WebSphere DataPower Appliances…

WebSphere DataPower Appliances provide a low startup cost,helping clients increase ROI and reduce TCO with specialized, consumable, dedicated appliances that

combine superior performance and hardened security

SIMPLIFY your connectivity infrastructure

ACCELERATE your time to value

SECURE your SOA, Web 2.0, B2B, and Cloud environments

GOVERN your evolving IT architecture

8

DataPower – A Purpose Built Appliance

Specialized compiler technology creates

optimized executable object code from

transformations (e.g. XSLT) that execute

natively on hardware

Everything is viewed as a transformation that is

extensible via DataPower custom extension functions

Purpose-built hardware to execute SOA workloads and

transformations

High-performing throughput-optimized

engine yields wire-speed capabilities

99

Configuration-driven approach speeds time to market• Enforce security standards with zero coding• Uses intuitive pipeline message processing• Import/export configurations between

environments• Transaction probe shows message content

between actions for debugging

Smarter Business Agility with WebSphere DataPower Appliances

1010

New streamlined WebSphere DataPower Appliance offering meets your Security and Connectivity needs

Integration Appliance XI52, XI50b and XI50z• Additional Network Interfaces• More HDD for logging and Audit• Increased performance• SFTP

B2B Appliance XB62 Unparalleled B2B performance Secure B2B messaging (EDIINT AS1, AS2, AS3) Trading Partner Profile management

Transaction viewing and resending EDI and ebXML Support Native MQ FTE Integration

Service Gateway XG45• Multiprotocol• Enhanced Security Capabilities• Routing and Service Level Management• Fine-grained authorization• Includes Tivoli Option (TAM / TFIM access)

• Centralized Policy Enforcement• Rich authentication• Application Optimization and Load Balancing• Data Integration Module – includes binary Data support

and ODBC

• IMS Connect• TIBCO EMS• ODBC• Tivoli Option

11

DataPower Product FamilyIntegration Appliance XI52

Hardware ESB “Any-to-Any” Conversion at wire-speed Bridges multiple protocols Self Balancing and Load Distribution

Integration Appliance XI50z / XI50b XI52 Blades in an HW integrated form

factor Special drivers ans SW for zEnterprise or

xBlade integration Configuration, Network, Monitoring…

B2B Appliance XB62 B2B Messaging (AS1/AS2/AS3) Trading Partner Profile Management B2B Transaction Viewer

Service Gateway XG45 Enhanced Security Capabilities Centralized Policy Enforcement Fine-grained Authorization and

Authentication

12

New Hardware Platform: 7199 (9005) – XI52, XB62

Features Customer Replaceable Units (CRUs) and Field Replaceable Units (FRUs) Higher performance purpose-built hardware Hard drive standard but not required for proper operation 1 Gb and 10 Gb ports standard 2U in size

8 1-Gigabit Ethernet

NICs

RAID mirroring and striping across four drives

2 10-Gigabit Ethernet NICs

13

• Next-generation 1U rackmount DataPower appliance hardware form-factor– Increased performance

• XG45 is the next-generation of the current XS40 appliances– Has all XS40 capabilities– Now includes Tivoli Access Manager client, WebSphere MQ client and WebSphere

JMS client support– Data Integration Module upgrade option which includes database connectivity, any-to-

any transformation and PKCS7 cryptography (available at initial order as well as upgradeable later)

• Requires DataPower firmware version 4.0.2 and later13

New Hardware Platform: 7198 (9005) – XG4524

Gigabytes Memory

RAID mirroring and striping across two 300GB drives

4 1-Gigabit Ethernet NICs

2 10-Gigabit Ethernet

NICs

14

SOA Security & Integration Operational Scenario

1. External Party makes Web Service request (Web Services = HTTPS with XML Payload)

8. Transform XML9. Switch protocol (e.g. HTTP to MQ) 10. Route based on content

Web Services Interfaces

FI Owned SystemsExternal Systems

Payment

Interfaces/Protocols

HTTP MQ JMS DB FTP

AccountAggregation

Invoice/Payment

Broker Portal

CustomerPortal

External Systems: different division, partners, consumers, etc

14. Send to security layer13. Transform response12. Switch protocol11. Aggregate response

17. Send response back16. Encrypt & Sign15. Filter response

Protocol switch

Content Routing

Transform XML

Authenticate

Authorize

Audit

Decrypt XML

Verify Sign.

Validate

6. Insert security token (e.g. SAML, Kerberos)7. Send request to integration layer

DataPower XS40

DataPower XS40

Tivoli Access Manager

WebSphere App Server

MQ Server

Web service client

Nortel L7 Module

Tivoli NetView

Identity Mgmt System (Tivoli, LDAP, etc)

Core Enterprise SystemsAccountServices

ERPHRCRM Credit Card

DataPower Integration Appliance (XI52 or XG45 + DIM)

2. Verify Signature3. Decrypt & Validate 4. Access Identity Mgmt System5. Authenticate & authorize

Request Message

Response Message

Payment

other

MQ, JMS, FTP, HTTP, etc.

HTTP

Security LayerIntegration Layer

HTTP

DataPower Service Gateway (XG45)

15

WebSphere DataPower appliances support 8 basic Use CasesInternet Trusted Domain

Business

Consumer

1 B2B Partner Gateway

2 Secure Gateway (Web Services, Web Applications)

3 Intelligent Load Distribution

Application

Application

System z

DMZ

4 Internal Security

5 Enterprise Service Bus

6 Web Service Management

7 Legacy Integration

8 Run time SOA Governance

Each Use Case offers unique value propositions that result

in decreased costs and improved productivity and

performance

HMCHMC

1616

WebSphere DataPower XI50z for zEnterprise• XI52 features optimized in a dense,

high compute IBM zEnterprise BladeCenter Extension (zBX) form-factor

• Supports all ESB, Security, and Integration capabilities of DataPower XI52

• Purpose-built Integration Appliance• Highest capacity DataPower appliance

for SOA workloads optimized for zEnterprise environments

• Tightly integrated with zEnterprise– Unified hardware and firmware

management through the Hardware Management Console (HMC)

– Inherits serviceability, monitoring and reporting capabilities of zEnterprise

HMCHMC

17

What’s New in 4.0.2

• Support for XG45• Support for HSM for XI52, XB62, and XG45• Reliability Enhancements• Serviceability Enhancements• Maintain Session Affinity across failure using Application Optimization

18

DataPower Use Case• Monitoring and control

– Example: centralized ingress management for all Web Services using ITCAM SOA• Deep-content routing and data aggregation

– Example: XPath (content) routing on Web Service parameters• Functional acceleration

– Example: XSLT, WS Security• Application-layer security and threat protection

– Example: XML Denial-of-Service protection, WS Security, AAA• Protocol and message bridging

– Example: Convert to WS to legacy Cobol/MQ

Service Providers

Clients

In-the-clear SOAP/HTTP

MaliciousSOAP/HTTP

Service Provider

SOAP

SOAP

SOAP

Cobol/MQ Appl

Cobol/MQ

Encrypted and Signed SOAP/HTTP

In-the-clear SOAP/HTTP

19

Security and Governance• Hosting secure DMZ functions and enforcement requires secure

hardware• Virtualized and software approaches

– Enables the enforcement of dynamically changing policies to govern who can access what, how, and when

– Subject to hacks and incomplete hardware security• Network and infrastructure approach

– Rely on closed, obfuscated, and cryptographic hardware capabilities to completely secure platform

– Devices still largely configuration centric without a cohesive approach for end-to-end governance

• DataPower approach– Leverage hardware componentry to secure platform

• Trusted platform module• Intrusion detection• Encrypted flash drive

– Participate in broader data-center centric approach to overall solution “application-fluent governance”

TPM Chip

2020

Internet Trusted Domain

Consumer

ConsumerApplication

Application

System z

DMZ

Current infrastructure tends to be complex and fragmentedSmarter Business Agility with WebSphere DataPower Appliances

IP-Based Load Balancing

Monitoring

Access Control

Authentication

Caching

Traffic Shaping

SSL Offloading

Identity Federation

Transformation

Caching

Transformation

IP-Based Load Balancing

Protocol Mediation

Validation

21

Evolution of the Edge

Pac

ket

Filt

er

Pac

ket

Filt

er

intranet [Software + appliances]Internet

ESB

DMZ [Appliances ONLY]

datacenter

users

internaluser

intrusiondetection

identityfederation

loadbalancing

WAN and connection

optimization

application-awaretransformations

loadbalancing

caching

Security policy

enforcement

monitoring

intrusionprevention

trafficshaping

trafficshaping

DataPowerXG45

ISS

NEPs

caching

NEPs

IHS plugin, Proxy Server,Edge Server

XDoSprotection

QoS policyenforcement

WebSphere VE (XD)W

datacenter

WebSeal

SSL offload

extensible rules

Fine grainAccess control

XI52, WESB, WMB

Increased processing requirements in the DMZ: Load distribution, security,

monitoring, traffic management

clouds

threats

WSJ2EEWebREST

2222

DataPower + AO consolidates the infrastructureInternet Trusted Domain

Consumer

ConsumerApplication

Application

System z

DMZ

Smarter Business Agility with WebSphere DataPower Appliances

Application Optimization

SOA Optimization

- Application Intelligence- Application Security- SSL Acceleration

- XML Intelligence- XML Security- Routing, Transformation, Mediation

23

Service Provider

Active/Passive failover of distributor using standby control

Self balancing (IP spraying)s pushed to

DataPower Tier

Clients

Application Optimization: Self Balancing

Failure of target appliances are masked

by appropriate weighted distribution

Third-party IP sprayer

2424

Smarter Business Agility with WebSphere DataPower Appliances

Use Self Balancing for high availability and capacity scaling

Configure the appliances to share a single IP address

Leverages proven, world-class IBM technology (e.g., Sysplex Distributor)

Eliminates dependency on a separate load balancers

Built for automatic failover

2525

Smarter Business Agility with WebSphere DataPower Appliances

Provide application-aware Intelligent Load Distribution

Auto-discovers application targets using dynamic feedback mechanism

Uses intelligent weighted distribution algorithms based on current server load

Provides several options for enabling session affinity

Combine with traditional DataPower load balancing options for flexibility

26

Distributor HA Support

• Previous firmware suffered from distribution limitations– Distributor appliance quiesce leads to termination of existing connections– Distributor appliance failure leads to termination of existing connections

• New support enables connection state replication for distributor takeover without loss off connections

27

Trend: Technological Convergence

PH

Y

DLC)IPTC

P

HTT

P

XM

L

SO

AP

Business Goals

Technological Scope

Consistent Target

Runtime

Business goals are defined and mapped to appropriate technology based on application fluency

Enforcement across appropriate technological scope in a simple, highly performing, consistent platform

Service Policy

28

Trend: Technological ConvergencePolicy Semantics

Tech

nolo

gica

l Sco

pe

Security Traffic management

SLAs Dynamic routing

SOA

XML

JSON

REST

HTTP

TCP

IP

Caching

• Challenges– Lack of industry standards

(though this is progressing in some areas)

– Consistency of once-heterogeneous solutions

– Organizational barriers

29

29

User

Application tier

Hig

h L o

ad

Slow Response

Business Goals and Requirements

IT Project

Mappingrequirements

Config lifecyclemanagement

Production monitoring

Asset creation

OperationalInstability

Deployment Rigidity

High Cost of Ownership

Intermediary runtimes

Solution Pain Points

30

30

User

Application tier

Low

Loa

d

Fast Response

Business Goals and Requirements

Policy Definition and Association OperationalStability

BusinessAgility

Low Cost of Ownership

Policy enforcement in a

converged intermediary

Vision for the Edge

31

Today: On-Premise Deployment to AppliancesDataPower has a

collection of management tools and

APIs including WebSphere Appliance Management Center

WebSphere Appliance Management Toolkit (WAMT)

WAMT enables deployment of configuration

packages with associated policies

Customer provided

scripts and tools

Tools can deploy solution images and

DataPower configuration

packages per solution template

32

WebSphere Appliance Management Center

• Provide multi-box DataPower appliance management– Support managed sets of different appliance models & firmware– Exploits new support for managed domain tasks, configuration &

firmware deployments– Manage deployment policies for DataPower appliances,

individually or in managed sets• Simplified installation

– Enhanced Installation – for simplification and faster time to value• DataPower currency

– Support latest DP devices and agent platforms - for increased adoption

• Enhanced monitoring capability for more DataPower appliances KPIs– Out of the box monitoring of DataPower device – for visibility and

control of DataPower performance and availability• Ease of Use

– Enhanced Configuration UI – ease of use navigation by user role• Seamless integration into the Tivoli Monitoring infrastructure

– Integrates into IBM’s Service Management solution

32

Simplified Operations Management reduces operations costs

33

Directions• Focus:

– Address customer requirements based on ongoing interaction and feedback

– Maintain currency with Industry standards and specifications– Exploit IBM Technological leadership

• Potential Enhancements include:– Expanded Hardware Support– Expanded Security Standards Support– Enhanced integration with WebSphere Service Registry and

Repository– Reliability, Availability, and Serviceability enhancements– SLM enhancements

34

Documentation and Additional Information• DataPower Home Page:

– http://www-01.ibm.com/software/integration/datapower/• DataPower Library (brochures, case studies, documentation, Red

books, etc)– http://www-01.ibm.com/software/integration/datapower/library/

• DataPower Education and Training– http://www-

01.ibm.com/software/websphere/education/curriculum/soa/datapower/index.html

• WebSphere Application Acceleration Solutions– http://www-01.ibm.com/software/websphere/products/application-

infrastructure/application-acceleration/index.html

35

DataPower Customer Examples and Use Cases• Finance• Energy and Utilities• Government• Health Care

36

VISA InternationalProvide Greater Agility, Flexibility & Adaptability

Solution• Implemented WebSphere DataPower XML Security Gateway

XS40 to form the backbone of Web services infrastructure• Through content-based message routing, security policy

enforcement & data encryption, the XS40 helps to ensure safe & efficient flow of confidential customer data between Web site & backend systems

• Integrated seamlessly into existing heterogeneous environment increasing interoperability & promoting reuse

Benefits• Secure SOA on standards-based platform • Easily reuse Web services throughout enterprise• Boosts productivity of IT staff• Substantially shorten time to market for new services

• WebSphere DataPower XML Security Gateway XS40

• WebSphere Application Server

Challenge• Consistently & securely delivery of online services to members

that could be shared, integrated & flexible to meet specific needs• Web services infrastructure needed to support highly secure data

routing with daily high volume & sensitive nature of information

Wells FargoESB Infrastructure in a Heterogeneous Environment

Challenge Introducing SOA capabilities Enhancing current heterogeneous IT infrastructure Existing point-to-point home built solution connected

enterprise web applications via WebSphere Message Broker

Solution Implemented WebSphere DataPower Integration

Appliance XI50 for message routing, transformation, logging and security

Benefits Enabled quicker time to value for business initiatives WebSphere DataPower

Integration Appliance XI50 WebSphere MQ WebSphere Message

Broker

Access ControlSub-system

ING Bank Slaski Connecting to Enterprise SOA & Web Services

Solution Deployed WebSphere DataPower Integration Appliance

XI50 for protocol bridging (integration) & data transformation

The XI50 bridges protocol to MQ, which System i understands

Exposed services based on SOAP Client data is sent in XML, the XI50 converts the data

from ASCII to EBCDIC to System i formatBenefits No required application or platform changes to System i Ability to work with newest industry standards (SOAP,

XML) Provides a faster ROI & flexibility

WebSphere DataPower Integration Appliance XI50

WebSphere MQ System i

Challenge Integrate clients to core banking systems (System i)

without making changes to application Ability for clients to access banks’ services 24/7

3939

Bank of AmericaSimplification of Network Infrastructure

Challenge Multiple point hardware and software solutions providing

backbone network routing and load balancing Many different management control points leading to

operational complexity and unplanned network outages

Solution Upgraded existing XS40’s and XI50’s with Application

Optimization software feature Installation of new XI52’s to ensure 100% up time for

backbone networkBenefits Improve utilization of all application servers across

enterprise Significant cost reductions as a result of eliminating

multiple products Simplification of operational environment Improved utilization of backbone network resulting in

improved throughput

WebSphere DataPower Integration Appliance XS40, XI50, and XI52 with Application Optimization

WebSphere MQ

Internet Clients

40

WebSphere DataPower• Use as front side handler to collect events and data• Protect and inspect XML traffic across all network boundaries• Web Services Security

DataPower for Smart Meters

41

AMI Security frameworks are using DataPower between the Meter Head End System and the ESB.

CustomerUser MgmtRepositoryPolicy

Authoring &Management

System

Identity, Federation& Access

ManagementSystems

InternetWeb Portal

Work MgmtSystem Apps

OutageMgmtSystem Apps

FinancialMgmtSystem Apps

LoadMgmt System Apps

InternalEmployee /ContractorRepository

Enterprise Service Bus

Security Services Gateway (Security Enforcement)

Meter HeadEnd

MeterDataMgt System

Customer SelfCare Apps

B2C Apps

Web SvcsRegistry

Logging and Compliance Monitoring System

Web Services Traffic

HTTP Traffic

Policy Distribution

Identity provisioning

IntranetWeb

Portal*

Intranet SSO

ReverseProxy

Internet SSO

ReverseProxy

* Optional

Firewalls

Log data collection

Vendor dependent(Web Svcs shown)

TSPMTSIEM

TDS

TIM TAMeb

TAM -WebSEAL

TAMWebSEALTSPM -

RTSSData

Power

TFIM

XMLFirewallDataPower

Proventia Server

Proventia Server

ISS Managed Security Services

Prov

entia

IPS

Proventia IPS

Proventia IPS

Proventia IPS

Proventia IPS

Fidelis

SiteProtector

ApplicationVulnerability Scanning System

RationalAppScan

42

Energy Australia• Client Background: Energy Australia delivers electricity to

over 1.5 million homes and business across Australia.

• Business Need: Previously, the company would deploy a data logger at a specific site to be retrieved later. Likewise, crews were also dispatched to patrol the line looking for a fault location, a difficult and time-intensive process.

Energy Australia wanted to become more digitally aware and speed fault restoration times for customers, as well as implement a preventative maintenance program.

Solution: Energy Australia engaged IBM Global Business Services to design, build and integrate a new system that utilizes over 14,000 DISCOS sensing devices from IBM Business Partner PowerSense S/A.

An IBM DataPower XI50 Appliance device and IBM WebSphere Transformation Extender software function as a message handling system, routing data from the sensing devices to various systems. Data is displayed in a portal built using IBM WebSphere Application Server software. The new user visualization allows company staff to monitor the electrical distribution system and make informed decisions about network management. This solution is based on IBM’s SAFE Framework.

43

Oncor

• Client Background: Oncor Electric Delivery is a regulated transmission and distribution utility in Texas.

• Business Need: As automated energy meter reading technologies become more prevalent in the industry, so will the energy supplier's need to scale and meet millions of transactions per day.

• Solution: IBM SWG and GBS were engaged to build an automated e-meter solution for Oncor. This project, through the deployment of these automated power meters, has transformed the energy marketplace and how energy is consumed.

– DataPower provides the capability to secure and transform business traffic flowing from the automated meter head end system into the back-end enterprise systems.

– DataPower provides the ability to scale the high traffic requirements, secure all inbound transactions, and broker messages to Oncor's internal Tibco infrastructure. WASND provided a secure, reliable and scalable solution for a large scale MDM solution that ensures business opportunities are not lost due to downtime.

44

Background– Deploy 3.4M smart meters to

residential/non-residential by 2012

– Transform web portal to access meters & customer information

Challenges– Centralize security policy

governance critical in a distributed environment

– Protect data store and web portal against unauthorized access

– Address NERC/FERC and privacy data compliance needs

– Reduce cost of managing web services security and administration across multiple data centers

IBM Solution– Tivoli Security for IAM, Security Policy and Compliance

Management – WebSphere DataPower SOA appliance for XML firewall – WebSphere Service Registry & Repository for services store – 3rd party ESB for mediating legacy systems– IBM Global Business Services leading the process

transformation effort

Datapower was just one part of the IBM security framework that IBM delivered to Oncor for their smart grid project.

45

London UndergroundTransformation & Routing Messages

Challenge• Train data collected by the London Underground

network used by both the Network Rail (NR) & London Underground (LU) is collected by NR servers

• The data, transmitted by NR in MQ messages needed to be integrated into the LU management network via a new train information system (TrackerNet)

Solution• Implemented WebSphere DataPower Integration

Appliance XI50• The XI50 transforms all collected MQ messages

over Internet from the NR application server for consumption at TrackerNet

Benefits• Ensures fast delivery of train data to TrackerNet• Provides a fast & simple solution as the on-ramp to

MQ at Network Rail • Did not have to deploy a full MQ infrastructure with

the attendant expertise requirement

• WebSphere DataPower Integration Appliance XI50

• WebSphere MQ

46

Los Angeles County’s Information Systems Advisory Board Reduced Complexity of XML Web Services

Solution• Implemented WebSphere DataPower XML Security

Gateway XS40 to secure & encrypt XML transactions• Easily adapt to changing standards, policies & partners• Supports government standards such as:

– FIPS Level 3 HSM– PKI Certified by DoD JITC– Common Criteria EAL4 under evaluation– GSA eAuthentication– HSPD-12

Benefits• Implemented devices quickly & easily• Meet security requirement & reduce complexity• Ability to integrate easily with agencies• Cost-effective solution to encrypt & secure XML

transactions

WebSphere DataPower XML Security Gateway XS40

Challenge• Sharing & securing confidential criminal information with

agencies in other counties & states• Quick access to criminal data

47

Blue Cross Blue Shield of FloridaSecurity Provisioning and Enforcement

Challenge• XML Messages with Attachments coming from other

Blues in the Association need to be authenticated, authorized, and virus scanned

Solution• Implemented WebSphere DataPower Integration

Appliance XI50 to provide security mediation and integration into existing Symantec and SiteMinder infrastructure

Benefits• Virus Scanning is done in the DMZ, preventing virus’

from getting behind the firewall• WebSphere DataPower can be extended to secure

internal message traffic flowing through WebSphere Message Broker

• Best of Breed architecture for Identity Management, Virus Scanning, and XML Security

• WebSphere DataPower Integration Appliance XI50

• WebSphere Message Broker

48

Commonwealth of Massachusetts Executive Office of Health & Human ServicesSOA Governance & Interaction Among Heterogeneous Applications

Challenge• In-house service bus lacked in synchronous messaging &

service level management• Effectively implement SOA Governance to realize the benefits

of SOASolution• Implemented WebSphere DataPower Integration Appliance

XI50 for easy Web services management, wirespeed performance & flexibility

• Deployed as a reverse proxy, providing schema validation & trust formations

• Augmented existing in-house service bus & WebSphere MQBenefits• WebSphere DataPower will reduce EOHHS’s monthly total

cost of ownership expenses• Satisfied EOHHS’ security & reliability concerns• Does not create any measurable impact on existing

infrastructure• Drove SOA adoption

• WebSphere DataPower Integration Appliance XI50

• WebSphere MQ

49

Commonwealth of Massachusetts Executive Office of Health & Human ServicesPhase 2 – Business to Business Connectivity

Challenge• Interaction with Hospitals, Dr.’s, and Insurance companies was

manual, and had lengthy processing delays• Connectivity with secure interaction required by health care

regulationsSolution• Implemented WebSphere DataPower B2B Appliance to

enable trading partner interactions without the need for partners or the Commonwealth to make application modifications

• XB60 deployed in DMZ to ensure secure communications, protecting both the State and trading partners

Benefits• WebSphere DataPower dramatically reduced EOHHS’s cost

of interacting with trading partners• Satisfied EOHHS’ security & reliability concerns• Reduced processing times from 2 week average to 48 hour• Enables rapid connectivity to new trading partners – no

infrastructure modifications required• WebSphere DataPower Business

to Business Gateway XB60

Trading Partner

Trading Partner

AS1

AS2

AS3

50

Documentation and Additional Information• DataPower Home Page:

– http://www-01.ibm.com/software/integration/datapower/• DataPower Library (brochures, case studies, documentation, Red

books, etc)– http://www-01.ibm.com/software/integration/datapower/library/

• DataPower Education and Training– http://www-

01.ibm.com/software/websphere/education/curriculum/soa/datapower/index.html

• WebSphere Application Acceleration Solutions– http://www-01.ibm.com/software/websphere/products/application-

infrastructure/application-acceleration/index.html