LGS INNOVATIONS IP ADDRESS MANAGEMENT

Transcription

1 LGS INNOVATIONS IP ADDRESS MANAGEMENT

2 Streamlining Administration for Security and Savings Is your Domain Name System (DNS) getting the attention it deserves? DNS is the hierarchical distributed naming system for computers, services, or any resource connected to the Internet or a private network, converting numerical device addresses into easy-to-understand names. DNS serves almost as a phone book for the Internet, translating human-friendly computer hostnames into IP addresses. Unlike a phone book the DNS can be quickly updated, allowing a service s location on the network to change without affecting the end users, who continue to use the same host name. Users take advantage of this when they use meaningful Uniform Resource Locators (URLs), and addresses without having to know how the computer actually locates the services. This navigation method is convenient, but it also opens Domain Name Systems to hacking and spoofing, where deliberately misleading data is sent in DNS responses to reroute DNS requests to bogus name servers, steering users to a hacker s servers and leaving your agency or organization totally exposed. DNSSEC: Origin Authentication for Added Security DNS Security Extensions (DNSSEC) are a suite of specifications for securing certain kinds of information provided by the DNS as used on Internet Protocol (IP) networks. DNSSEC extensions provide DNS clients origin authentication of DNS data, authenticated denial of existence, and data integrity. DNSSEC covers all DNS data including name to IP address translation for web servers, voice over IP (VoIP), , chat protocols, etc. LGS innovations 2 In 2009, the Executive Office of the President, Office of Management and Budget, put out a memorandum to all Federal Chief Information Officers mandating the deployment of DNSSEC to.gov domains. Because both Government and Commercial organizations use the Internet to disseminate information both internally and externally, the added security provided by DNSSEC promotes a more efficient and effective use of the network. VitalQIP : DNS/DHCP IP Address Management Software A market-leading solution for automating IP address management services across networks, the Alcatel- Lucent VitalQIP DNS/DHCP IP Address Management (IPAM) software streamlines management and cuts administrative costs for enterprises, government agencies, and service providers worldwide. As the exclusive reseller of Alcatel-Lucent products and services to the U.S. Federal Government and any other entity when the end customer is the U.S. Federal Government, LGS Innovations is committed to providing our customers the tools they need for the most secure, efficient, flexible, and scalable solutions. VitalQIP helps Government and Commercial organizations efficiently configure, automate, integrate, and administer IP services across their entire network - locally or globally. Compatible with multi-vendor technologies, this solution helps organizations centralize the planning and administration of IP addresses, delivering significant reductions in infrastructure support costs and improved network availability.

3 A leading IP management product, VitalQIP has deployments with over 850 customers, including government agencies, telecommunications companies, financial service institutions, and universities. Without VitalQIP your domain could face: Loss of communication. Hackers can render your agency unable to communicate between groups and with the general public. Lack of trust. All it takes is one security failure for your collaboration partners, businesses, and the public to mistrust the safety of your entire domain. Loss of sensitive information. Attackers can re-route or block Internet-based applications such as and VoIP disrupting your operations and stealing usernames, passwords, account numbers, ID numbers, and more. Lack of access to mission-critical systems, including agency financial applications. If you can t access your online systems and resources, you can t do your job. VitalQIP is a centralized IP management tool that can also be used to configure DNS and DHCP servers from a variety of vendors, adding security and DNSSEC compliance, bringing a tremendous amount of flexibility to existing network environments, and providing consolidated management of the existing infrastructure. VitalQIP supports the following servers. Alcatel-Lucent DNS servers Alcatel-Lucent DHCP servers Microsoft DNS servers Microsoft DHCP servers Any BIND 8 or 9 compliant DNS server Alcatel-Lucent Software Appliances in a Virtual environment Alcatel-Lucent Appliances Alcatel-Lucent Software Appliances Alcatel-Lucent DNS and DHCP on Riverbed Wan Optimizer LGS innovations 3 End user PCs, broadband devices, etc. utilize RFC compliant DHCP or DNS transactions to interface with these servers.

4 Automating IP Address Management VitalQIP has broad applicability - organizations across all vertical industries that run IP networks can benefit from its automated IP address management. Reduces infrastructure support costs - fewer support staff Reduces address assignment process and departmental costs Reduces disaster recovery time and cost Improves the availability of network infrastructure Reduces operator effort and misconfigurations Reduces troubleshooting time and support costs due to inaccurate configuration Improves overall network operational efficiencies Maintains consistent and accurate IP inventory Controls operating expenses through automation Provides high availability for clients/subscribers VitalQIP is performance proven in the most demanding networks Rapidly provisions address space and reliably delivers critical IP name and service In-step with new technology and services: VoIP, ENUM, RFID, IPv6, Mobile HSD and IP Video, etc. Innovative Profiling Capabilities, Flexible Subnet Management LGS innovations 4 Today s networks must be updated constantly to keep up with frequent moves, mergers, and reorganizations that cause address space to become fragmented. VitalQIP allows for the creation of a base of network and customer information so that subnets and network services can be easily defined and managed. By delivering a customizable user interface, VitalQIP streamlines operations and allows for IP network planning, modeling, and building that reflects an agency or organization s structure and goals. The ability to modify DNS options on multiple domains simultaneously can greatly reduce the operational expenses of configuring the network. Windows Support: VitalQIP software continues its market-leading support of Microsoft Windows DNS/DHCP servers with support of sites, subnets, and secure zones in Active Directory. DNS and DHCP server compatibility: VitalQIP supports BIND-compliant DNS servers. The Alcatel-Lucent DHCP Server can update both primary and secondary DNS servers with resource record information as DHCP leases are granted and deleted.

5 Handling IP Address Management: the Shift Toward Appliances The VitalQIP solution addresses the shift in the IP Address Management (IPAM) market toward appliances for increased reliability, manageability, scalability and security, and seamlessly integrates with VitalQIP DNS/DHCP & IP Address Management Software. Components of the VitalQIP Address Management Software include: Audit Manager Simple Network Management Protocol (SNMP) module API Toolkit Network Allocator Services Manager Registration Manager Auto Discovery ENUM Manager Centralized appliance management data store keeps track of services and status of remote appliances: Automated software upgrade capability with rollback options Highly secure communication between AMS and appliances with unique appliance key generation Logical grouping of appliances for ease of upgrades Remote start/stop/initialize of services High availability using heartbeat and virtual address mechanism Value-Added Modules: Audit Manager enables you to track the usage history of an IP address and the associated user or group Simple Network Management Protocol (SNMP) Module provides visibility into the network services engines running your DNS and DHCP protocols and helps you maximize the overall uptime performance of these services Usage-Based Billing Interface collects and tracks IP address assignments and links each address to a billing location or group API Toolkit allows you to extend and integrate the VitalQIP system into other critical network applications Network Allocator allows you to automate the creation of subnets Services Manager is specifically designed for the server administrator, enabling any administrator with access privilege to verify the operation of the DHCP and DNS environment Registration Manager streamlines network administration and enhances address tracking by authenticating each enterprise user and dynamically allocating an IP address based on a profile that can be mapped to levels of service to which the user is entitled AutoDiscovery provides a snapshot of the IP/Ethernet network as is ENUM Manager provides the ability to administrate ENUM records in the VitalQIP database and manage and update Alcatel- Lucent DNS servers LGS innovations 5

6 ABOUT LGS INNOVATIONS LGS Innovations delivers next generation solutions that solve the most complex networking and communications challenges facing the U.S. Federal Government, State and Local Governments, Foreign Governments, and commercial enterprises. LGS offers groundbreaking research and development and builds advanced wireless, optical, and wired products and applications customized for specific mission environments. These solutions provide unique information and security advantages that lead to the operational success of its customers. LGS offerings include: Campus and building networking solutions for military bases, hospitals, and corporate centers Maritime applications for in-port and at sea communications Global networks (long-haul communications, including undersea cable) Enterprise voice, video, and data networking 4G wireless deployable communications for public safety, battlefield, and emergency and first responder communities Network engineering, integration, and installation Cloud and data center infrastructure Video teleconferencing and IPTV suites Research and development in advanced multimedia/rf communications, cybersecurity, sensing technologies, and photonics LGS Innovations is a U.S.-owned company headquartered in Herndon, Virginia, with offices in Colorado, Illinois, Maryland, New Jersey, New Mexico, and North Carolina. Formerly a subsidiary of Alcatel-Lucent, LGS is the exclusive reseller of Alcatel-Lucent products and services to the U.S. Federal Government and any other entity when the end customer is the U.S. Federal Government. LGS maintains strong ties to Bell Labs and its technologies, employing more than 450 scientists and engineers and a total of nearly 700 employees worldwide. To learn more about LGS Innovations, visit LGS Innovations Dulles Technology Drive, Suite 301 Tel: LGS-4243 ( ) url: Herndon, VA LGS, LGS Innovations, and the LGS Innovations logo are trademarks of LGS Innovations LLC. The information presented is subject to change without notice LGS Innovations