Creating a World Class IP VPN to Optimise Enterprise Application Performance

Transcription

1 Creating a World Class IP VPN to Optimise Enterprise Application Performance Successful deployment of your enterprise applications is contingent upon the intelligence of your IP network infrastructure. IP VPN Issue mp-tb003-01

2 IP VPN: The Critical Foundation for the Deployment of Enterprise Software To gain or maintain a competitive edge in today s global business world, multinationals are deploying Internet Protocol Virtual Private Networks (IP VPNs) to support their enterprise applications and strategic business initiatives at an unprecedented rate. IP VPNs operating over both public and private networks can support enterprise applications for business transactions that range from customer interactions to those involving partners and suppliers. With today s IP VPN technology and fully managed services, multinationals now have the key to globalising their business operations in a fast, effective and high performance way. Enterprise applications, including enterprise resource planning (ERP), supply chain management (SCM), customer relationship management (CRM), as well as Web-based and multimedia applications (voice and video), place high demands on many corporate wide area network (WAN) infrastructures. Successful multinationals understand that an efficient network is key to global distributed processing and access.

3 Application Centric Network Intelligence Chief Information Officers (CIOs) and IT departments know that even small improvements in network performance yield a high return on investment (ROI) on their enterprise application expenditures. With that in mind, it makes sense to factor in the impact these applications will have on the WAN much earlier in the implementation process and to select a network service provider and partner that will give your business the competitive edge to succeed in today s global economy. Selecting the Right Network for Your Critical Enterprise Applications Selecting a secure, high-performance network to support your global enterprise application deployment starts with accurately assessing your business processes and goals. Which applications, protocols and traffic flow does your network need to support? Who are your "users" (employees, business partners, customers, other applications)? What are your key business functions and goals (i.e. reducing time-to-market, communicating with business partners, executing transactions or globalising business operations)? What are the optimal operating conditions required for your mission-critical enterprise applications? What are the critical applications needed to support these goals and are they allocated the appropriate priority on your network? Increasingly, multinationals are relying on the flexibility, cost effectiveness and ease of management that IP VPNs offer. Why IP VPN? A virtual private network (VPN) is an enterprise network deployed on shared infrastructures that employs the same security, management and performance policies applied in a private network. VPNs can be implemented using technologies such as frame relay and asynchronous transfer mode (ATM) or leased lines, all of which offer predictable performance and a high level of security. IP VPNs are private networks implemented over either the public Internet backbone or a service provider s private IP backbone, making use of shared IP facilities to build an enterprise s private WAN. IP offers any-to-any connectivity without having to procure additional permanent virtual circuits (PVCs) thus reducing complexity and simplifying administration. In addition, private IP VPNs offer the security and predictable performance of private networks while adhering to the protocol standards of the Internet. Both private and public network IP VPNs offer the cost effectiveness of a shared network, along with network management and the cost savings that result from the convergence of data, voice, and video over one network. For secondary corporate sites that only require casual use of enterprise applications, an IP VPN based on the public Internet provides cost-effective connectivity. Both public and private networks can take advantage of the ubiquitous coverage of the Internet to provide the global reach demanded by multinationals. 3

4 Selecting an IP VPN to Maximise Return on Your Enterprise Application Investment The most important factor in selecting an IP VPN is finding a network that reflects the business processes and objectives you have identified for your enterprise applications. This requires a network with enough intelligence to distinguish between mission-critical and non mission-critical applications.

5 How can I ensure that critical enterprise applications receive the highest network priority? Application prioritised network Reduced total cost of ownership With traditional IP VPN services, bandwidth for each application is consumed on a first-come, first-serve basis. However, the most sophisticated IP VPNs offer class of service (CoS) capabilities that enable you to assign different priority levels to specific applications in order to differentiate priority enterprise applications (voice, video, ERP, SCM and CRM) from non mission-critical applications (FTP, and Web browsing). A higher priority level assigned to mission-critical applications ensures optimum network operations. Being unable to differentiate between business mission-critical applications from non mission-critical applications will adversely impact a network. Without CoS, enterprise applications compete with bandwidth-hungry applications like file transfer protocol. The advantage of enabling CoS is that the total cost of ownership (TCO) can be far lower than comparable networks and the individual cost of sending a bit becomes less. By comparison, in an over provisioned network there is minimal congestion but the cost to performance ratio is not maximised. With CoS, application performance can be optimised from end-to-end in ALL situations. How can I ensure the highest Service Level Agreements for my critical enterprise applications? Guaranteed level of performance Application performance management Quality of service (QoS) and class of service (CoS) are sometimes used interchangeably. In reality, they are quite different. QoS refers to the ability of network hardware and software to provide selected network traffic with a higher level of service than other traffic. CoSrefers to classifying traffic by type of applications or other criteria and then delivering packets by strictly following assigned priorities (i.e. all traffic queued at a higher priority is sent before lower priority traffic is considered for delivery). There are four parameters used to track and measure QoS: latency, jitter, packet loss and availability. These four parameters can guarantee QoS on a VPN. For example, latency is tolerable for or Web-based applications, but unacceptable for interactive applications such as voice calls. Jitter, the variance in packet transport delay, may be tolerable for a file transfer but not for interactive or time-sensitive video applications. Packet loss (dropped or lost packets) can leave a Web page still useable without graphics, but could mean your online broker never received your sell order. And availability is the measurement, in percentages, of network uptime on a monthly basis. 5

6 Infonet Offers a Unique Approach to IP VPNs Using the Application-Defined Networking Approach Understand the optimal network architecture required to execute your strategic business initiatives.

7 Consultative Approach Infonet s IP VPN Family Infonet's approach to IP VPNs is to realise that one size does not fit all and to provide VPNs to match the client s particular business needs. Infonet has defined a CoSthat enables clients to run their applications ranging from delay-sensitive, mission-critical to non missioncritical applications on a single, unified private IP multiprotocol label switching (MPLS) network. Infonet can also meet client's needs for non mission-critical uniclass applications VPNs, as well as business partners access to its private networks, using Infonet's extensive tier one public IP network. Infonet s suite of IP-based services for intranet VPNs, remote access VPNs, Internet VPNs and extranet VPNs give multinationals the ability to choose the best mix of reach, performance and security they need to meet their business objectives. Unlike other IP VPN providers, these two networks, in combination with the Internet, means that Infonet can offer the best price to performance ratio and not be limited to either all public or all private solutions. Infonet s suite of IP-based services for intranet VPNs, remote access VPNs, Internet VPNs and extranet VPNs give multinationals the ability to choose the best mix of reach, performance and security they need to meet their business objectives. chosen enterprise applications and their performance requirements. Infonet focuses attention on network intensive enterprise software, a company s most strategic IT investment. Infonet s ADN approach provides multinationals with recommendations as to the optimal architecture required to execute strategic business initiatives, globalise business operations and maximise ROI on enterprise application deployment. Infonet s Application-Defined Networking Approach Infonet applies its Application-Defined Networking (ADN) and patent-pending Network Analysis Program (NAP) methodology in implementing VPNs. Through the ADN approach, Infonet understands your business strategy and objectives as they relate to your chosen enterprise applications and their performance requirements. We baseline an enterprises existing business requirements and network infrastructure to determine the optimal operating conditions for its mission-critical, mission-supporting, and non mission-critical applications. Infonet understands your business strategy and objectives as they relate to your Network Analysis Program A key element of the ADN approach is Infonet s NAP. The NAP is a professional service engagement delivered by highly skilled Infonet consultants who analyse the complex interactions between heterogeneous applications running on an enterprise WAN. The NAP details the performance characteristics ofapplications, protocols and traffic flows in the existing environment and recommends the optimum network design. The NAP is an invaluable tool when implementing CoS in your corporate network (or IP VPN). 7

8 Infonet s Flagship IP VPN Solution IP VPN Secure Infonet IP VPN Secure runs over a private IP infrastructure and uses MPLS technology to bring a new level of scalability, security and flexibility to IP VPNs. Infonet IP VPN Secure offers four CoS levels. These are backed by a set of QoS parameters to support mission-critical and non mission-critical applications in a secured and prioritised environment. Infonet IP VPN Secure guarantees four performance parameters (latency, jitter, packet loss and availability) and is backed by aggressive service level agreements (SLAs). Infonet s IP VPN Secure offers the following classes of service and target applications: Classes of Service Application Types Applications IP/RealTime Highly sensitive to delay and variation between packets Voice and Video IP/Interactive Mission-critical enterprise applications that are SAP, Oracle, PeopleSoft, interactive or time dependent Siebel IP/Lan2Lan Non delay-sensitive applications and general "business class" Lotus Notes, MicroSoft data applications such as client/server technologies, Exchange Web-based applications IP/Access Non mission-critical applications such as Internet browsing and FTP, HTTP, other best-effort applications

9 IP VPN Secure delivers: >> Added Value Through Application Convergence. Economies of scale are achieved by the ability to transport multiple applications on a single network. Converging voice and video on a single communication infrastructure dramatically reduces voice and video communication expenses. >> Simple, Flexible Pricing. Cost-effective and simple pricing for budget management. >> Any-to-any Connectivity. Any-to-any connectivity provides default connections to other business sites without having to purchase connectivity to each site. In comparison, frame relay or ATM VPNs require PVCs to connect each business site in order to communicate. >> Secure Network Transport. IP VPN Secure provides an additional layer of security for information transport over a wide area network. As a connectionless network, IP VPN Secure provides security on a VPN basis, offering a comparable level of security and privacy as VPNs built on frame relay or ATM. >> Greater Flexibility and Scalability. Adding a new site to Infonet s IP VPN Secure is as simple as telling the customer premises equipment (CPE) router how to reach the network and configuring the network to recognize VPN membership of the CPE. >> Ease of Management. Network management with IP VPN Secure is far easier, faster and less expensive than building a point-to-point network for each new site. For example, adding a new site to a Frame Relay VPN entails updating the traffic matrix, provisioning virtual circuits (VCs) from the new site to all existing sites and reconfiguring each CPE for the new topology. >> Cisco Powered Network. Infonet has successfully attained the Cisco Powered Network designation. Infonet managed IP services are tested and implemented over end-to-end hardware and software infrastructure based on Cisco technologies. With Cisco Powered Network accreditation, customers deploying Infonet's managed solution can expect the highest levels of service reliability and performance. >> Global Award Winning Customer Service. Infonet has in-country customer service in over 70 countries and territories around the globe. This means Infonet s multinational clients are supported in their local language and in their own time zone. >> A Window to the Internet. Provides secure Internet access with a robust managed firewall. 9

10 Intranet VPN Intranet VPN provides secure connectivity between corporate sites. They allow businesses to share resources and information more efficiently. Intranet VPN is a tailored virtual networking service offered over a service provider s network. Infonet offers intranet VPNs built on both the public Infonet IP backbone and the Infonet Private IP backbone. Intranet IP VPN Secure IP VPN Internet VoIP OnNet VoIP OffNet IP VPN Security Managed Firewall Services Network Security Service Application-Defined Networking Consultative Application Analysis Network Analysis Program Infonet s IP VPN Solution. Extranet Managed Extranet Service IP VPN OffNet Remote Access DialXpress Solutions Professional Office Internet DualNet SecurID Infonet Services IP VPN Secure (Private Internet Backbone) IP VPN Internet (Infonet s Public Internet Backbone) IP VPN OffNet VoIP OnNet Intranet VPN Benefits >> Supports mission-critical applications via four classes of service >> Performance supported by SLAs >> MPLS ensures high performance >> Supports any-to-any or hub and spoke configurations >> Ensures high security >> Provides cost-effective intranet VPN using Infonet s public Internet backbone >> Secured connections using IPSec and Digital Certificate authentication >> Performance supported by SLAs >> Provides optimal encryption and firewall security >> Provides ubiquitous global access to applications >> Offers highly secure access using 3DES encryption and digital certificates >> Easily integrates with FR, ATM and IP VPNs >> Offers cost-effective international voice calling >> Provides either an end-to-end managed or unmanaged option >> Performance supported by SLAs >> Offers easy administration for managed service (complete detail and billing records) >> Supports fax calls

11 Extranet VPN Extranet VPNs focus on business-to-business connectivity. MNCs use extranet VPNs to provide secure and scalable connectivity between different business locations and/or its customers or suppliers. With an extranet VPN, multinational corporations can create Web portals that provide secure access to a subset of their network information. Infonet Services Managed Extranet Service (MES) IP VPN OffNet VoIP OffNet Extranet VPN Features >> End-to-end managed service to corporate applications with policy, security and service levels >> Remote user access over the Internet >> Highest levels of security for remote application access without implementing on-site equipment >> Partners or customers can access the network from unsecured LAN sites and non-company locations >> Quick extranet deployment leveraging cable or DSL access >> Provides ubiquitous global access to applications >> Offers highly secure access using 3DES encryption and digital certificates >> Easily integrates with FR, ATM and IP VPNs >> Offers cost-effective international voice calling >> Easily integrates with FR, ATM and IP VPN >> Provides easy administration (complete call detail and billing records) >> Supports fax calls 11

12 IP VPN Security Security is one of the most critical issues for IP VPNs today. If the greatest strength of the Internet is its ubiquity, its greatest weakness is its lack of security. Multinationals want to make enterprise systems and information more available to internal employees as well as business partners and customers. To ensure the privacy and security for IP VPNs, Infonet offers Managed Firewall Services (MFS) and Network Security Services (NSS). Infonet Services Managed Firewall Services Network Security Services IP VPN Security Features >> 24/7 Security Administration Team >> Network-based firewall secures many locations with a single firewall >> Premise-based firewalls provide access control for sites connected directly to the Internet >> Value added features include: malicious code disabling, URL filtering, intrusion detection and Web-based reporting >> Facilitates safe and reliable communication with customers, employees, business partners and suppliers >> Offers an end-to-end managed solution >> Supports high speed secure LAN access

13 IP VPN Security Security is one of the most critical issues for IP VPNs today. If the greatest strength of the Internet is its ubiquity, its greatest weakness is its lack of security. Multinationals want to make enterprise systems and information more available to internal employees as well as business partners and customers. To ensure the privacy and security for IP VPNs, Infonet offers Managed Firewall Services (MFS) and Network Security Services (NSS). Infonet Services Managed Firewall Services Network Security Services IP VPN Security Features >> 24/7 Security Administration Team >> Network-based firewall secures many locations with a single firewall >> Premise-based firewalls provide access control for sites connected directly to the Internet >> Value added features include: malicious code disabling, URL filtering, intrusion detection and Web-based reporting >> Facilitates safe and reliable communication with customers, employees, business partners and suppliers >> Offers an end-to-end managed solution >> Supports high speed secure LAN access

14 Network Services Case Study Stratex Networks Infonet Helps Stratex Networks Globalise Processes With installations on five continents and across 22 time zones, DMC Stratex Networks, Inc., (Nasdaq:STXN) is one of the world s foremost solutions providers for mobile applications and broadband wireless access. From manufacturing facilities in California, New Zealand and Scotland to a repair depot in the Philippines, every aspect of Stratex s business depends on the 24/7 availability of its mission-critical applications. Stratex Networks needed a communications network that could support the company s worldwide sales, order processing, customer service and billing functions. Company management decided to outsource and secure a fully-managed solution. "The nature of our business puts us in areas of the world that have poor telecommunications," remarked B. Lee Jones, vice president of Information Technology and Chief Information Officer for Stratex Networks. "It was imperative for us to partner with a company that not only had an established presence in remote areas, but had built long term relationships. Only Infonet met our criteria." Additionally, Stratex engaged Infonet to undertake a Network Analysis Program (NAP) to collect, format and analyse the complex interactions between its heterogeneous applications running on its wide area network (WAN) as well as to access any potential loopholes in either performance or security. The NAP engagement also helped to determine the optimal course for Stratex s transition from an IP WAN to an IP VPN. With the conversion to an IP VPN, Stratex was able to double and in some places triple its bandwidth, while at the same time cutting its WAN budget in half. "That s a true measure of value for your dollar," stated Jones. In addition to delivering a measurable return on investment, Jones appreciates Infonet s customer service, its ability to deliver a fully-managed solution and having a single point of contact. "Infonet is a proactive partner always ready to go the extra mile to meet our needs," Jones observed. Partnering with Infonet has enabled Stratex Networks to globalise its processes, giving all of its locations access to the sales and customer-related information needed to more effectively run its business.

15 Selecting an Intelligent IP VPN Maximises Your ROI On Enterprise Applications Multinational corporations need to be certain that mission-critical data is reaching its destination and enterprise applications are meeting business objectives. 15

16 About Infonet Infonet Services Corporation, known for its quality of service, is a leading provider of value-added global communications services, including IP VPNs, to over 2,600 multinational clients. Employing a unique consultative approach, Infonet offers integrated solutions optimising the complex relationship between enterprise applications and the global network. Extensive project management capabilities are the foundation for the services and solution offerings (broadband, Internet, intranet, multimedia, remote and local access, provisioning, application and consulting services) positioning Infonet as the ideal single-source partner for multinationals. In particular, Infonet IP VPN solutions offer multinationals a unique combination of Private and Public IP services as well as a full set of Managed Security Services. Rated "Best in Class" overall in Telemark s survey of Global Managed Data Network Services, Infonet has also won "Best Customer Care" and "Best Carrier" at the World Communication Awards. Infonet owns and operates The World Network, accessible from more than 180 countries, and provides local service support in over 70 countries and territories. Founded in 1970, Infonet's stock is traded on the New York and Frankfurt Stock Exchanges under the symbol IN. Additional information about the company is available at Worldwide Headquarters Asia-Pacific 391A Orchard Road #13-08 Ngee Ann City Tower A Singapore Tel: Fax: Europe, Middle East & Africa 350/358 Avenue Louise Box 3 B-1050 Brussels, Belgium Tel: Fax: Latin America Mardoqueo Fernandez 128 Piso 7 Providencia, Santiago, Chile Tel: Fax: North America 2160 East Grand Avenue El Segundo, California USA Tel: Fax: An ISO Registered Firm Infonet, DialXpress, Global Connect and The World Network are registered trademarks of Infonet Services Corporation. DialXpressway, PerspeXion and Insight Matters are trademarks of Infonet Services Corporation. SecurID is a registered trademark of RSA Security, Inc. Other product names that may be used herein are for identification purposes only and may be trademarks of their respective companies. Copyright 2002, Infonet Services Corporation. All rights reserved. Printed in U.S.A. 5M 06/02 AP MP-TB003-01