Jonas Vercruysse Technical Pre-sales February Endpoint Management IBM Corporation

Transcription

1 Jonas Vercruysse Technical Pre-sales February 2013 Endpoint Management 2013 IBM Corporation

2 Agenda 2 Intro IBM Endpoint Manager overview Key value adds Functionalities Use cases Wrap-up

4 BUSINESS PROBLEMS AND SOLUTIONS 4

5 Visibility is key in a constantly changing, distributed world Critical systems are globally distributed and in constant flux Find all assets on your network NOW! Patch hundreds of thousands of workstations, laptops and servers in minutes. Deploy a software application worldwide in days. Patch anywhere, anytime over any network. 5 Continuously enforce security configuration baselines, even on mobile and off-network devices.

6 Endpoint complexity continues to increase Speed, severity and complexity of malware attacks Patch O/S and application vulnerabilities with hours Endpoint device counts, devices and platforms Mobile/roaming endpoints New form factors and platforms Rapid, agile, automated remediation is needed 6 Compliance requirements to establish, prove and maintain continuous compliance Establish, prove and maintain continuous compliance Employee-owned devices

8 THE VALUE OF IBM ENDPOINT MANAGER 8

9

10 The power of IEM Speed IEM Platform Scalability 10 Ease of Use

11 IEM SECRET SAUCE 11

12 IBM Endpoint Manager architecture Network-friendly architecture delivers large packages without disrupting critical business applications IEM Content Update Service Support for a wide variety of devices: Windows, Mac, *nix, mobile Home Headquarters e/d SL Stores / Kiosks Ca bl 56k Single, intelligent agent with small footprint (<2% CPU, <10MB RAM) constantly checks policies also when not connected Cloud-based service continuously provides new patch, policy updates T1 line WAN T1 line 3G Coffee shop Internet WiFi Satellite Data center WiFi Hotel Airport Remote offices Distribution center One management server per 250,000 endpoints Use existing computers as Relays to minimize network traffic Full command and control by using patented Fixlet technology Whether it s a Mac connecting from hotel WiFi, a Windows laptop at 30K feet or a Red Hat Linux Server in your data center, IBM Endpoint Manager has it covered. In real time, at any scale.

13 IEM secret sauce IEM agent Continuous self-assessment Continuous policy enforcement Minimal system impact (<2% CPU, <10MB RAM) 13 TEM policy language (Fixlets) Thousands of out-of-the-box policies Best practices for operations and security Simple custom policy authoring Highly extensible/applicable across all platforms IEM messaging architecture Single server and console, aggregates data, analyzes and reports, manages up to 250K endpoints Relay infrastructure provides built-in redundancy and uses network BW and existing systems processing power in an efficient way IEM content update service continuously provides new/updated Fixlets

14 CHC reduced risk and TCO with IBM Endpoint Manager OVERVIEW Christian Hospital Centre (CHC) BUSINESS NEED Security oriented SOLUTION SUMMARY IBM Security Solutions IBM Endpoint Manager BENEFITS security risk TCO 6 clinics convalescent homes dozen polyclinics province of Liège, Belgium Numerous security problems led CHC to revise its security defences with the aim to protect the infrastructure against any possible threats in the future. Vulnerability assessment. Intrusion detection and prevention. Near real-time remediation of endpoint issues. Integrated asset and configuration management Frees up the equivalent of a full-time IT person, due to 50% reduction in helpdesk calls.

15 IEM FUNCTIONALITIES 15

16

17 IBM Endpoint Manager: unifying operations and security Common management agent Systems management Unified management console Common infrastructure Security management Single server IBM Endpoint Manager Desktop / laptop / server endpoint 17 Mobile endpoint Purpose-specific endpoint

18 Solution Sets IBM Endpoint Manager Microsoft Windows Mac OSX IBM AIX HP-UX Solaris VMWare ESX Server 7 versions of Linux ios Android Symbian Windows Mobile Lifecycle Management Software Use Analysis Patch Management Hardware, Software, Configuration Inventory Software Distribution OS Deployment Remote Control 18 Power Management Mobile Devices Patch Management Security and Compliance Core Protection Anti-Malware Patch Management Security Configuration Management Firewall DLP / Device Control (add on) Vulnerability Assessment Compliance Analytics 3rd Party Endpoint Protection Management 1 console, 1 agent, 1 server, many OSs

19 Endpoint Manager Value Across the Organization Unified Endpoint Management Microsoft Windows Mac OSX IBM AIX HP-UX Solaris VMWare ESX Server 7 versions of Linux ios Android Symbian Windows Mobile / Phone Mobile Workforce Enable password policies and device encryption Force encrypted backup Disable icloud sync Access to corporate , apps, VPN, WiFi contingent on policy compliance Selectively wipe corporate data if employee leaves company Fully wipe if device is lost or stolen 19 IT Operations Compress patch cycles to minutes or hours with 98-99% first pass success Patch 90+ OS versions and popular 3rd party Windows applications Software distribution OS deployment Remote control Server management IT Security and Compliance Facilities Ensure continuous Reduce annual compliance across all electricity costs by endpoints, regardless of $20-$50 per PC/Mac location or network Wake-on-LAN connectivity Current power usage Security configuration baselines and savings baselines models Vulnerability assessment Network self-quarantine Personal firewall Multi-vendor antimalware management Endpoint protection Data loss prevention / device control IT Asset Management Attain real-time visibility and control Network discovery Managed endpoint hardware inventory Managed endpoint software inventory Software use analysis to reclaim under-used applications PC software license compliance analysis 1 console, 1 agent, 1 server: 250,000 endpoints, 90+ OS versions

20 Agenda Intro IBM Endpoint Manager overview Key value adds Functionalities Use cases Wrap-up 20

21 Use case 1: mobile device management

22 Use case 1: mobile device management Remediate or disconnect device in case of non-compliance 1 4 End-user enrolls its mobile device Increase productivity and employee motivation while limiting risk for corporate data loss Continuously check policies:encryption, 3 password, rootdetection,etc 22 2 Automated configuration of corporate connection ( , VPN)

23 Use case 2: security and compliance 3 Remediate in case of noncompliance Reduce risk (for data loss) on all assets by continuously enforcing policies by automating remediation 1 Report on assets and their security status 2 Enforce policy Baseline Adaptation of standard policies Custom policies 23

24 IBM Endpoint Manager and endpoint compliance Traditional compliance Continuous compliance 1. The security team develops compliance policies 1. Security and operations work together to formulate policies and service-level agreements (SLAs) 2. The security team runs an assessment tool (or tools) against that policy 2. Operations implements the baseline (patch, configuration, anti-virus, etc.) across all endpoints in the organization 3. The security team forwards findings to operations 4. Operations makes corrections as workload allows, one item at a time using different tools from security (which generates different answers to questions like how many endpoints do I have? ) 5. Users make changes causing endpoints to fall out of compliance again 3. Policy compliance is continuously monitored and enforced at the endpoint; changes are reported immediately 4. The security team can instantly check on the current state of security and compliance anytime 5. Security and operations teams work together to continually strengthen security and adjust to evolving requirements 6. Start assessment all over again 24

25 IBM deploys endpoint manager internally NEED Protect endpoint infra under changing condition SOLUTION Growing number of non-standard endpoints Security threats: increasing + more complex Real-time visibility and management IBM Endpoint Manager Continuous compliance BENEFITS Realized 78% decrease in endpoint security issues Costs saving well above $10 million Manage over 500,000 endpoints with 3 FTEs

26 Benefits Column 1 Column 2 Column Row 1 Row 2 Row 3 Row 4

27 Use case 3 - Patching 3 Report results Automate manual process Errors Speed Reduction of known security issues Load on helpdesk Outage risk Employee productivity 1 Retreive list of pretested patch packages relevant for the environment 2 Apply patches Optional: scheduling, user interaction, baseline, roll-back, pre-cache 27

28 IBM Endpoint Manager architecture Network-friendly architecture delivers large packages without disrupting critical business applications IEM Content Update Service Support for a wide variety of devices: Windows, Mac, *nix, mobile Home Headquarters e/d SL Stores / Kiosks Ca bl 56k Single, intelligent agent with small footprint (<2% CPU, <10MB RAM) constantly checks policies also when not connected Cloud-based service continuously provides new patch, policy updates T1 line WAN T1 line 3G Coffee shop Internet WiFi Satellite Data center WiFi Hotel Airport Remote offices Distribution center One management server per 250,000 endpoints Use existing computers as Relays to minimize network traffic Full command and control by using patented Fixlet technology Whether it s a Mac connecting from hotel WiFi, a Windows laptop at 30K feet or a Red Hat Linux Server in your data center, IBM Endpoint Manager has it covered. In real time, at any scale.

29 IEM secret sauce IEM agent Continuous self-assessment Continuous policy enforcement Minimal system impact (<2% CPU, <10MB RAM) 29 IEM policy language (Fixlets) Thousands of out-of-the-box policies Best practices for operations and security Simple custom policy authoring Highly extensible/applicable across all platforms IEM messaging architecture Single server and console, aggregates data, analyzes and reports, manages up to 250K endpoints Relay infrastructure provides built-in redundancy and uses network BW and existing systems processing power in an efficient way IEM content update service continuously provides new/updated Fixlets

30 Agenda Intro IBM Endpoint Manager overview Key value adds Functionalities Use cases Wrap-up 30

31 Solution Sets IBM Endpoint Manager Microsoft Windows Mac OSX IBM AIX HP-UX Solaris VMWare ESX Server 7 versions of Linux ios Android Symbian Windows Mobile Lifecycle Management Software Use Analysis Patch Management Hardware, Software, Configuration Inventory Software Distribution OS Deployment Remote Control 31 Power Management Mobile Devices Patch Management Security and Compliance Core Protection Anti-Malware Patch Management Security Configuration Management Firewall DLP / Device Control (add on) Vulnerability Assessment Compliance Analytics 3rd Party Endpoint Protection Management 1 console, 1 agent, 1 server, many OSs

32 The power of IBM Endpoint Manager Speed IEM Platform Scalability Ease of Use

33 Additional info IBM Tivoli Endpoint Manager Landing Page IBM Tivoli Endpoint Manager v8.2 Information Center

34 Still questions? Contact details: Jonas Vercruysse T: E: jonas.vercruysse@be.ibm.com

35 BACK-UP SLIDES 35

36 Gartner Recognizes IBM as a Leader in Client Management Tools Magic Quadrant for Client Management Tools Terry Cosgrove, Ronni Coleville January 2012 This graphic was published by Gartner, Inc. as part of a larger research document and should be evaluated in the context of the entire document. The Gartner document is available upon request from IBM. Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose 36

37 Gartner Recognizes IBM as a Visionary in Endpoint Protection Platforms and Mobile Device Management Software This graphic was published by Gartner, Inc. as part of a larger research document and should be evaluated in the context of the entire document. The Gartner document is available upon request from IBM. Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose 37

38 SCREENSHOTS 38

39 Mobile Devices 39

40 Endpoint Manager for Mobile Devices Dashboard 40

41 A Single Device View enables administrators and helpdesk personnel to easily view device details and take required action 41

42 A flexible enrollment process enables organizations to include a EULA and to collect critical device and employee data via customizable questions 42

43 Distribute apps using the Enterprise App Store 43