White. Paper. A Roadmap for BYOD Adoption. December 2014

Transcription

1 White Paper A Radmap fr BYOD Adptin By Jn Oltsik, Sr. Principal Analyst with Kyle Prigmre and Jhn McKnight December 2014 This ESG White Paper was cmmissined by Extreme Netwrks and is distributed under license frm ESG by The Enterprise Strategy Grup, Inc. All Rights Reserved

2 White Paper: A Radmap fr BYOD Adptin 2 Cntents Intrductin... 3 Campus Netwrk Challenges... 5 The BYOD Jurney Shuld Engage in a Hlistic Apprach... 6 The Extreme Netwrks Radmap fr BYOD... 7 The Bigger Truth... 8 All trademark names are prperty f their respective cmpanies. Infrmatin cntained in this publicatin has been btained by surces The Enterprise Strategy Grup (ESG) cnsiders t be reliable but is nt warranted by ESG. This publicatin may cntain pinins f ESG, which are subject t change frm time t time. This publicatin is cpyrighted by The Enterprise Strategy Grup, Inc. Any reprductin r redistributin f this publicatin, in whle r in part, whether in hard-cpy frmat, electrnically, r therwise t persns nt authrized t receive it, withut the express cnsent f the Enterprise Strategy Grup, Inc., is in vilatin f U.S. cpyright law and will be subject t an actin fr civil damages and, if applicable, criminal prsecutin. Shuld yu have any questins, please cntact ESG Client Relatins at

3 Intrductin White Paper: A Radmap fr BYOD Adptin 3 Organizatins f all sizes are being impacted by the cnsumerizatin f IT: empwered by smartphnes and tablet cmputers, mre emplyees bring their wn devices t the wrkplace and expect t use them fr cmmunicatin, prductivity applicatins, and even persnal use. As a result, IT rganizatins are frced t deal with a rapidly grwing ppulatin f wireless devices in the wrkplace, many f which are unauthrized. While struggling t understand the ramificatins f this influx f new devices, businesses are als wrking t embrace these new technlgies. Indeed, previusly cnducted ESG research revealed that nearly ne-third (32%) f rganizatins surveyed already emply a hybrid mdel in which IT prvides endpint devices t emplyees wh want them, but als supprts utside devices fr thse wrkers wh wuld prefer t use a device f their chsing (see Figure 1). 1 Fast frward a few years and the number f rganizatins taking this dual-prnged apprach is expected t nearly duble t 55%; cnversely, less than ne-quarter (22%) will maintain their ban n all nn-it apprved devices. Bttm-line: BYOD has arrived and it s nt ging anywhere. Figure 1. Crprate Endpint Device Plicy: The Shift frm Cmpany-issued t Emplyee-prvided Which f the fllwing best describes yur rganizatin s plicy with respect t prviding yur emplyees with a PC r ther cre endpint cmputing device they need t d their jb? Hw will this change ver the next 3-5 years? (Percent f respndents) All emplyees requiring a PC r equivalent device are given a standard r apprved device by the rganizatin. N emplyee-prvided devices are apprved. 22% 62% Mst emplyees use a device prvided by the rganizatin, but emplyees that want t use their wn persnal device can d s with IT s apprval. The rganizatin ffers sme standard r apprved devices, but mst emplyees prvide their wn PC r equivalent device. 5% 14% 27% 41% Expected crprate plicy 3-5 years frm nw N emplyees are prvided with a standard r apprved device by the rganizatin. Every emplyee is expected t prvide their wn PC r equivalent device. 4% 10% Crprate plicy tday Dn t knw 2% 13% 0% 20% 40% 60% 80% Surce: Enterprise Strategy Grup, Indeed, what started as a bring yur wn device initiative, r BYOD, has mrphed int BYO3 r mre, as emplyees (and students) nw have an assrtment f mbile devices that typically include a smartphne, tablet, and PC. Fr clleges and universities, this list expands t include gaming devices that require wireless access, while hspitals enable a number f medical devices ver WLANs. As a result, campus netwrks acrss these and ther verticals are being inundated by devices requesting netwrk access. 1 Surce: ESG Research Reprt, Mbile Device and Applicatin Usage Trends, August 2013.

4 White Paper: A Radmap fr BYOD Adptin 4 With s many new devices requiring access t netwrks, rganizatins need t be able t handle the influx safely and securely. This is driving netwrk and security teams t assess new risks and implement new cntrls. Indeed, ESG research indicates that many rganizatins are priritizing investments in slutins that frtify netwrk security and management capabilities (see Figure 2). 2 Figure 2. Areas fr Netwrk Infrastructure Investments We wuld like t learn a bit mre abut yur specific spending plans fr netwrk infrastructure in In which f the fllwing areas will yur rganizatin make the mst significant investments ver the next 12 mnths? (Percent f respndents, N=301, five respnses accepted) Netwrk security 52% Netwrk management 36% Upgrade cre data center netwrk 31% Expand wireless LAN envirnment Unified cmmunicatins WAN ptimizatin/acceleratin Netwrk data analytics Upgrade campus netwrks Vice ver IP Sftware-defined netwrk slutins 27% 27% 26% 25% 24% 21% 20% Applicatin delivery cntrllers Netwrk Packet Brkers 10% 10% 0% 10% 20% 30% 40% 50% 60% Surce: Enterprise Strategy Grup, BYOD, cupled with an increased fcus n the netwrk and mbile devices, will frce rganizatins t require greater levels f visibility and cntrl. These edge netwrks will need t g beynd simple cnnectivity t be capable f handling device registratin, device prfiling, nbarding, plicy-based management, and enfrcement. Autmatin will als play an imprtant rle as the netwrk scales. Health Care and Higher Educatin BYOD envirnments are highly prevalent in health care (highly mbile users with multiple devices) and higher educatin (multiple devices, including smartphnes, tablets, game cnsles, and PCs). Hwever, there is a tremendus difference in hw these envirnments need t be deplyed. Cmpliance in health care is very imprtant and as a result rganizatins may leverage different strategies fr addressing the BYOD issue. Fr example, in rder t better cntrl and secure the data, a hspital may deply a virtual desktp envirnment, whereas a cllege r university may chse t supprt devices natively. Regardless f the apprach taken, these envirnments will typically require different security znes and a cntext-based, plicy-driven apprach, based n the individual requesting infrmatin and even ptentially where they are lcated. 2 Surce: ESG Research Reprt, 2014 IT Spending Intentins Survey, January 2014.

5 White Paper: A Radmap fr BYOD Adptin 5 Campus Netwrk Challenges Simply adding mre wireless mbile users t a netwrk sunds like a simple task, but given the existing challenges in a campus netwrk, the BYOD trend culd break an already strained envirnment. Mdern campus netwrks als have t deal with a surge in new bandwidth-intensive applicatins, an increase in the number f cmputing devices, and in general mre data traversing the campus. T cpe with this rising tide f netwrk traffic, rganizatins are taking steps t upgrade their wired campus netwrks. In fact, Figure 3 reveals that mre than three-quarters (79%) f rganizatins said that they have either already standardized n 10 GbE (19%) r are actively planning a mve frm 1 GbE t 10 GbE (60%). 3 Prbing further, 61% f these respndents attributed their mve r expected mve t 10 GbE t a prliferatin f bandwidth intensive applicatins and/r endpint devices, the latter attributed t BYOD initiatives. Figure 3. Organizatins Campus Netwrk Standards Which f the fllwing best represents yur rganizatin s wired campus netwrk standards nw and in the future? (Percent f respndents, N=300) Our current campus netwrk standard is 10 GbE, 19% Dn t knw, 1% Our current campus netwrk standard is 1 GbE and we are nt actively mving t 10 GbE, 20% Our current campus netwrk standard is 1 GbE, but we are actively mving t 10 GbE, 60% Surce: Enterprise Strategy Grup, In additin t increased bandwidth requirements, rganizatins als need t be cncerned with the fllwing: Re-architecting wrkflws. Depending n the path taken t enable BYOD, significant redesign f existing wrkflws r the creatin f new nes may be required. Fr example, will business unit managers r HR be required t apprve mbile devices? Are there any cmpliance issues that need t be cnsidered prir t granting access, etc.? Registratin, access and nbarding. Organizatins need t determine hw they will handle the lifecycle f registratin f mbile devices n the netwrk. A number f factrs need t be cnsidered, including emplyment status, partner status, r even guest status. While guest access shuld be fairly straightfrward, emplyee and partner access may differ based n their rles. The nbarding prcess shuld be easy t use and intuitive, helping t facilitate access. Organizatins need t have a cmmn plicy-based apprach t vercme ptentially cmplex manual prcesses. This culd be even mre challenging fr hspitals that have t prtect patient privacy while allwing medical prfessinals access r higher educatin institutins that need t separate faculty frm students. 3 Surce: ESG Research Brief, Campus and Wireless Netwrk Trends, August 2014.

6 White Paper: A Radmap fr BYOD Adptin 6 Setting usage plicies. In many instances rganizatins may want t restrict access t resurces during a certain perid f time r lcatin. Fr example, in higher educatin, IT may want t restrict access t certain resurces during certain perids f time fr students, while allwing access t faculty r staff. Budget cnstraints. IT rganizatins will always be under pressure t reduce r cntain csts; that will be difficult when trying t supprt rapidly-grwing BYOD markets. Organizatins shuld at least try t deliver predictable csts assciated with mbile users s anticipated grwth will be easier t budget fr and understand. Technical resurces. Finding the apprpriate skill sets t prperly design and implement a scalable netwrk infrastructure t handle BYOD can be difficult. In many instances, emplyees are learning n the jb, which can result in missteps and setbacks. Organizatins need t cnsider leveraging the talents f utside services rganizatins t help accelerate the time t value fr their BYOD envirnment. When trying t accmmdate BYOD initiatives, rganizatins can take a number f different appraches t handle this prblem. Fr example, many chse t cntrl access by having mbile users register via a Web page in rder t gain access t the netwrk. The netwrk will then prvide access and services based n plicy and rle. Other rganizatins may decide t centralize desktp applicatins and deply a virtual desktp t users at crprate lcatins like call centers, r even fr remte users at hme. Increasingly, rganizatins are als turning t mbile device management (MDM) slutins t gain cntrl f cntent n a device (e.g., remtely wipe the device if lst r stlen). These appraches can als lead t additinal management, security, and even infrastructure challenges. Organizatins need t take a unified apprach that can leverage existing skills, infrastructure, and management slutins. The BYOD Jurney Shuld Engage in a Hlistic Apprach Highly virtualized and dynamic envirnments require any-t-any nn-blcking netwrk cnnectivity in rder t handle shifting demand and meet end-t-end perfrmance requirements. This equates t a netwrk fabric architecture, ideally cmprised f high-perfrming netwrking hardware and sftware slutins. While mst ften aligned with data centers, netwrk fabrics need t extend beynd the data center and cver the campus envirnment as well. The any-t-any netwrk ges beynd hst t hst r hst t strage, and extends t the endusers accessing applicatins and resurces in the data center r ut in the clud. By creating an underlying architecture that ffers any user the ability t access any applicatin, rganizatins can rapidly adjust t changing business needs. Given the pace f business, many can t affrd t wait fr the netwrk team t recnfigure netwrk infrastructure r, wrse, deply new technlgies in rder t handle a service request. Organizatins shuld cnsider: Integrated wired and wireless netwrks. Fr BYOD envirnments, a big part f creating that hlistic netwrk apprach is the inclusin f bth wired and wireless netwrks. Creating a unified netwrk can guarantee any-t-any cnnectivity regardless f device r lcatin, and ensure quality f experience t the mst demanding f users. It will als ensure cmmn plicy enfrcement s n matter where r hw a user accesses the netwrk, the same plicies will apply. Autmated plicy-based decisin making. Given the sheer vlume f mbile devices requesting netwrk access, attempting any type f manual apprval prcess is flly. Organizatins need t apply autmatin and plicy-based decisin making in rder t keep up with the influx f devices. Mst imprtantly, these plicies need t be cntext-based and the autmatin shuld be fcused n the registratin prcess, determining the apprpriate level f access and security based n the rle f the individual requesting access. Open architectures. Organizatins have the flexibility t adpt multiple technlgies t apprach the BYOD prblem. Management sftware shuld be flexible enugh t integrate with thse technlgies. This culd include APIs t cnnect t virtual desktp infrastructures (VDI), r mbile device management (MDM)

7 White Paper: A Radmap fr BYOD Adptin 7 technlgies fr better management and the ability t integrate additinal services like threat management, vice, vide, lcatin-aware services and applicatin visibility, which are becming much mre ppular. Applicatins and services t mbile users. As mentined, rganizatins need t think abut this in terms f cnnecting users n their mbile devices t the apprpriate applicatins and services they need t be prductive. Just prviding a cnnectin t the Internet may be fine fr guests, but emplyees and partners may need access t a number f applicatins, s the end-t-end path needs t be cnsidered. It will als be imprtant t have the apprpriate security measures in place (VLANs, ACLs, firewalls, etc.) s that nly apprved users can access certain applicatins. Even then, usage shuld be clsely mnitred. Ease f use. As the BYOD envirnment cntinues t scale, slutins that are easy t use and have simple intuitive interfaces will be necessary as IT budgets and headcunts will mst likely nt scale at the same pace. That means that the same r fewer IT staff members will need t manage a rapidly scaling BYOD envirnment. A gd user interface will g a lng way in this regard. The Extreme Netwrks Radmap fr BYOD Extreme Netwrks recgnized the issues facing rganizatins respnding t the BYOD trend and ffers a cmprehensive apprach t address the challenges. Its radmap fr BYOD includes a cmbinatin f technlgy and services t enable rganizatins t quickly and effrtlessly deply a slutin t accmmdate any apprach that will scale t meet future needs. Based n a sftware-defined architecture (SDA), Extreme Netwrks technlgies can be deplyed tgether t frm a cmprehensive slutin, r individually as time and budget allw. The main cmpnents f the Extreme Netwrks slutin include: A single unified netwrk. Extreme Netwrks sftware-defined architecture cmbines wired/wireless edge t data center/cre infrastructure hardware with a brad sftware prtfli. This can help enable rganizatins t deply a cmprehensive end-t-end netwrk that delivers the any-t-any cnnectivity required by a dynamic envirnment. Netwrk-wide management. Extreme Netwrks centralized management cnsle, Netsight, prvides a slutin designed t address the dynamic needs f IT. Netsight prvides visibility and management, spanning frm the data center t the unified edge. This includes aut discvery, flexible nbarding, guest access, multi-level device prfiling, cntext-based plicy management, and integratin with VDI, MDM, and threat management slutins. Anther ptentially valuable element in Extreme Netwrks SDA is their netwrk-pwered analytics engine, called Purview, which prvides IT visibility t measure BYOD user engagement and experience. Extreme Netwrks Mbile IAM, the key element prviding BYOD services within the SDA, which delivers: Self-registratin and scial-lgin nbarding that can eliminate IT interventin. Rapid and secure guest access with SMS credential delivery. Active and passive nbarding and prvisining fr traditinal and nn-traditinal devices. Aut discvery, multi-level device prfiling, and cntext-based plicy management. Cntext-based plicy distributin and enfrcement (based n user identity, lcatin, device type and applicatin being used). A single user interface (UI) fr end-t-end management, auditing/reprting capabilities, and cntext-based plicy enfrcement. Flexible deplyment ptins (physical r virtual appliance). Integratin with MDM and VDI. The Extreme Netwrks BYOD slutin can be tightly integrated with VDI and MDM systems prviding a cmplete slutin fr securing, managing, and nbarding the mbile device

8 White Paper: A Radmap fr BYOD Adptin 8 user. This apprach significantly cuts dwn the time requirements placed n IT supprt fr nbarding and trubleshting while at the same time enhancing the end-user experience. The Bigger Truth The cnsumerizatin f IT shws n signs f abating. BYOD initiatives are rapidly becming BYO3, as individuals augment their laptps with smartphnes and tablets, and the inclusin f nn-traditinal devices is n the hrizn, as the Internet f Things becmes a reality. While having multiple tls is ften t advantageus fr emplyees, it creates significant challenges fr the IT rganizatins trying t supprt them. Given the size and scpe f BYOD, it is nt advisable t apprach this in a piecemeal fashin. Because f the ptential netwrk impact and security threats, rganizatins shuld be taking a mre strategic apprach. While appraches t handling BYOD can vary, it is clear that the underlying infrastructure needs t be able t rapidly adjust t changing demands and prvide any-t-any cnnectivity. This wuld include the ability t deliver applicatins t end-users n mbile devices, s slutins shuld incrprate data center and campus envirnments, bth wired and wireless. Extreme Netwrks sftware-defined architecture aims t address the netwrking needs f mdern business. It has develped the Mbile IAM slutin and designed services specifically t address the needs f BYOD envirnments and t accelerate the time t value. Fr rganizatins deluged by BYOD dilemmas in need f a cmprehensive, secure, and scalable slutin, Extreme Netwrks shuld be n the shrt list.

9 20 Asylum Street Milfrd, MA Tel: Fax: