Palm Beach County. Enterprise Information Technology Architecture. Revised March 2014

Palm Beach County Enterprise Information Technology Architecture Revised March 2014

Table of Contents I. Introduction 3 Purpose of this Project 3 Enterprise Architecture Justification 3 Project Goals and Objectives 6 Information Technology Architecture Principles (Overview) 7 II. Architecture Specifications 8 Index of Architecture Components 10 2

I. Introduction Purpose of this Project The purpose of this document is to provide the definition of the Enterprise Information Technology Architecture (EITA) of Palm Beach County. A technical architecture is a conceptual framework to describe a logical or organizational structure or a set of guidelines intended to provide a cohesive whole pertaining to the infrastructure. The EITA describes a current state, future goals, and active guidelines for building new systems. Enterprise IT Architecture Justification Enterprise architecture standards create commonality thereby increasing the enterprise s capability to provide effective information and services and to reduce the cost of delivering those services. Common IT standards and technology architecture provide guidelines for security, information privacy, communication protocols, infrastructure build out, platform and operating system integration, application development, and user interfaces that create efficiencies across a multi-disciplined environment. There is a critical need for a common set of IT standards and technology that will provide Palm Beach County with the guidelines necessary to migrate from its current environment and take advantage of new technologies with appropriate consideration for legacy systems and applications. Furthermore, it must be capable of being implemented in its entirety or in parts. The following are the major advantages of adaptive enterprise architectures (NASCIO, 2002): Helps to identify and mitigate project risks and increase project success rates. Provides a roadmap guiding all future technology investments and identifying and aiding in the resolution of gaps in the business and IT infrastructures. 3

Promotes staff retention by simplifying training and support requirements. Reduces security risks by providing standards for implementing security. Provides interoperability because when there is consistency among the systems, computing resources can be more easily shared. Provides enterprise integration increasing the utility of the enterprise s data by facilitating information sharing between data stores. Sharing information means better government. Shared information minimizes clerical errors, information discrepancies, and government loopholes. Once information is collected, it is warehoused in a centralized location where it can be upgraded, backed up, archived and easily accessed many times by multiple users. Promotes mobile and ubiquitous government initiatives by providing a common access portal for citizen access to government. Public expectation for electronic access to government information and services continues to increase. Citizens expect the same availability of information and efficiencies for government services as they receive from the private sector for information, services and products. Reduces total cost of ownership (TCO) produces technology savings through component commonality, joint purchases, and reuse. Reduced support costs fewer types of computing platforms, operating systems and other software means lower maintenance costs. Consistent service and support for use of infrastructure all agencies have access to the same resources More homogenization of processes learning costs are reduced as similar systems and methodologies are applied across the enterprise. 4

Figure 1. Architecture Development Process Inputs Deliverables Business Drivers & IT Principles Business Drivers Technical Architecture (current state, future goal, & set of active guidelines) Current Technology Position Architecture Specification Process (Management/Staff Collaboration) Architecture Critical Success Factors A Process for Keeping Architecture Updated Technology Directions Recommendations on Next Steps 5

Project Goals and Objectives Project Goal In 2003, Palm Beach County developed an Enterprise Information Technology Architecture (EITA) that enables the County to deliver multi-channel services to the public in the most efficient, integrated and cost-effective manner. Project Objectives 1. Define and design the processes that relate to the role of an enterprise architecture. 2. Develop a current-state picture of the technical architecture and develop a future desired-state vision for key architectural domains. 3. Position the County to move forward with ubiquitous-government services in an organized, integrated manner that will enable it to avoid the typical pitfalls of unplanned system development over the long term. 4. Delineate the standards for new system development and implementations. 6

Information Technology Architecture Principles (Overview) Definition Established rules that guide technology decision-making. Principles provide the foundation upon which architectural designs are built and to which appeal can be made in the event of differing views on particulars. Criteria for Architecture Principles Understandable To people throughout the Enterprise Clear interpretation of concept and intent Complete and Consistent No major omissions No duplication, overlap, or contractions Everlasting Types of Architecture Principles Management Application Data Technical (Infrastructure) 7

II. Architecture Specifications In this section, each architecture component is decomposed into a set of specific elements. Each technology (and process element where appropriate) element is discussed based on industry status and outlook. The following are the model definitions (see Figure 2 and 3, pages 14 and 15): Domain: A natural division of the technical architecture and forms the main building blocks of the technology architecture blueprint. For example Network Infrastructure, Platform Infrastructure, Common Services, Application Services, and Data Services. Categories are color-coded as brown on the templates. Discipline: Disciplines allow for further breakdown of the Domain into manageable pieces and each Discipline is a cohesive unit with regard to its subject areas and stakeholders. Disciplines are color-coded as teal on the templates. Technology Area: Where applicable, Technology Areas support the Discipline as an additional decomposition and are colorcoded as plum on the templates. Product Components: Includes the protocols, products, families and configurations that are specific to a Technology Area or Discipline. Current Situation (baseline): The current technology or process element in use by Palm Beach County. (tactical 2 years): Technologies that Palm Beach County may use in the near term, tactical time frame, now to two years. Currently available products needed to meet existing business needs are identified here. 8

: Technologies that Palm Beach County envisions using in the future that provide strategic advantage. Usually anticipated marketplace products are identified here. : Technology and/or process elements targeted for phase out during the architecture planning horizon. These are color-coded in red on the templates. Emerging: Technology and/or process element to be evaluated for future integration into the target architecture based on technology availability and business need. These are color-coded in green on the templates. 9

Index of Architecture Components Network Infrastructure Enterprise Network 1. LAN/WAN Protocols, LAN Topology 2. LAN Wiring 3. Wireless LAN Network Services 4. Naming Services and IP Addressing 5. Storage Networking 6. File Transfer Infrastructure Management 7. Network Diagnostics, Troubleshooting and Monitoring 8. ESD, Desktop, Solution Center 9. Change Management 10. Job Scheduling 11. Performance Management 12. Backup and Restore 13. Software and Hardware Asset/License Management Security Technologies 14. Anti-Virus and Spam Filtering Tools 15. Extranet Access, Firewalls, Intrusion Detection 16. Directory Services 17. Remote Access, Encryption, Authentication Platform Infrastructure Operating Systems 18. Desktop O/S Platforms 19. Mobile O/S Platform 20. Enterprise NOS and Hypervisor Server Virtualization Basic Middleware 21. Data Management Middleware 10

22. Communication Middleware 23. Platform Middleware 24. Platform Middleware (con t) Integration Middleware 25. Integration Gateways 26. XML Related Standards Common Services Email and Messaging 27. Email Client, Engine, Protocols 28. Mail API s and Message Gateways Workgroup/Collaboration 29. Group Video Conferencing, IM, Interactive Voice Response, Group Document Editing 30. Internet Browser & Supporting Tools Document Management 31. Document Management, DOD, Postal Address and Verification 32. Workflow, Scanning, Fax Capture/Distribution 33. Document Authoring & Electronic Forms Personal Productivity 34. Office Productivity Tools 35. Presentation Graphics and High-End Publishing Tools Application Services Application Development 36. Programming Languages 37. User Interface (UI) 38. Component Model/Patterns 39. Modeling and Design Tools 40. Scripting Tools 41. Web Authoring 42. Testing and Change Management 43. AD Methodology and Process Tools 44. GIS 11

Data 45. Enterprise and Mid-range OLTP DBMS 46. Workgroup/Desktop DBMS 47. Business Intelligence/OLAP Tools 12

DOMAINS Disciplines Technology Components Compliance Components Product Components Figure 2. Blueprint Framework (NASCIO, 2002). As can be seen from the graphic in Figure 1, these pieces work together to ensure the complete documentation of the Domains that form the Technology Blueprint Architecture Blueprint. - Each Domain may have one or more disciplines. - Each Discipline will contain detail for one or more Technology Areas. - Product Components are specified under Technology Areas as appropriate. - Compliance Components can be documented at the Discipline, Technology Area, and/or Product Component levels, using the same template. 13

Domain Discipline Technology Area Figure 3. Example Template 16. Network Infrastructure - Security - Anti- Virus Tools Software for the purpose of identifying and detecting viruses in the network. Server Anitvirus McAfee 7.0 (Netware and MS Server) Product Server Anitvirus McAfee 7.0 (Netware and MS Server) Strategic Direction (5 years) Server Anitvirus Track market (Netware and MS Server) Desktop/Laptop Antivirus McAfee 7.0 Desktop/Laptop Antivirus McAfee 7.0 Desktop/Laptop Antivirus Track market Email Anitvirus McAfee 7.0 MailSweeper Email Anitvirus McAfee 7.0 MailSweeper Email Anitvirus MailSweeper Track market 14

1. Network Infrastructure - Enterprise Network - LAN/WAN Protocols, LAN Topology Physical network for the computing environment. Includes carrier services and Industry Standard protocols. LAN Protocols Ethernet, Fast Ethernet, TCP/IP Fast and Gigabit Ethernet Gigabit Ethernet, 10-Gigabit Ethernet WAN Protocols Frame Relay SONET (OC-3, OC-12, OC-48) Point-to-point circuit (usually T-1 or partial T-1) MPLS (from Bell-leased service) 10-Gigabit Ethernet Single Strand Transceivers 10K max WDM-CWDM/DWDM WiMax (802.16) LAN Topology VoIP Dynamic switching to the desktop, voice, video LAN Protocols Ethernet, Fast Ethernet Gigabit Ethernet, 10-Gigabit Ethernet 40-Gigabit Ethernet IP v6 (at core support) TCP/IP, IP switching WAN Protocols SONET (OC-12, OC-48) Gigabit Ethernet & 10-Gigabit Ethernet MPLS Single Strand Transceivers 10K max WDM-CWDM/DWDM WiMax (802.16) LAN Topology VoIP Dynamic switching top, voice, video LAN/WANProtocols Gigabit Ethernet 40-Gigabit Ethernet 100-Gigabit Ethernet SONET (OC-3, OC-12, OC-48) TCP/IP IP Switching MPLS IP v6 (at core support) IP v6 EDGE WDM-CWDM/DWDM WiMax (802.16) Point-to-point circuit (usually T-1 or partial T-1); Frame Relay IP v6 100-Gigabit Ethernet 15

2. Network Infrastructure Enterprise Network LAN Wiring Consists of the wiring standards of the physical network. Horizontal Wiring Category 5 UTP and 6A Enhanced Category 5E UTP Single Strand Transceivers 10K max 62.5/125 micron multi-mode fiber Vertical Wiring Multimode/SignalMode Horizontal Wiring Enhanced Category 5E Category 6A UTP EIA/TIA 568 specs 62.5/125 micron multi-mode fiber ST and S/ST fiber termination connectors Single Strand Transceivers 10K max 50/125 micron multimode 10G+ Fiber Vertical Wiring MultiMode/SingleMode Fiber Horizontal Wiring 50/125 micron multimode 10G+ Fiber Fiber optics Vertical Wiring Multimode/SingleMode fiber Cat 5 UTP Category 7 16

3. Network Infrastructure - Enterprise Network - Wireless LAN Includes network infrastructure for computing environment -the industry standard wireless protocols. Wireless LAN 802.11b/g 802.11g/n Wireless WAN 3G, 4G 802.11a-Mesh (for backhaul) Wireless LAN 802.11g/n 802.11 Wireless WAN 802.16 802.11n 3G, 4G 802.11a-Mesh (for backhaul) Wireless LAN 802.11g/n 802.1n Wireless WAN 802.16 802.11n 5G 802.11b 17

4. Network Infrastructure Network Services Naming Services and IP Addressing Delineates the standards necessary for network interconnectivity including naming services and Internet Protocol addressing. Naming Service DNS ONS (Oracle Naming Service) SLP (Service Location Protocol) NetBIO Broadcast IP Addressing Static with pools of DHCP Reserved with pools of DHCP Naming Service DNS DDNS ONS (Oracle Naming Service) IP Addressing DHCP IP v6 Reserved with pools of DHCP Naming Service DNS DDNS ONS (Oracle Naming Service) IP Addressing DHCP IP v6 Reserved with pools of DHCP WINS NetBIOS Broadcast SLP (Service Location Protocol) DDNS is Dynamic DNS It automates the discovery of client s public IP addresses. 18

5. Network Infrastructure Network Services Storage Networking Supports connecting and sharing data storage capacity across the application processors that support the enterprise. This should address data growth, data isolation and data sharing, enterprise-wide data access and data integrity. Storage Area Network Brocade DCX Storage Director Brocade Silkworm 4100 FCIP Fibre Channel Protocol Storage Array and High Availability EMC Celerra NS 480 Hitachi Device Manager Hitachi Storage Navigator Hitachi TrueCopy Replication Software Hitachi Universal Storage Platform V IBM DSS100 IBM Storwise V7000 IBM Storwise V7000 Unified IBM SVC (SAN Volume Control) Storage Area Network Brocade DCX Storage Director Brocade Silkworm 4100 FCIP Fibre Channel Protocol Storage Array and High Availability EMC Celerra NS 480 Hitachi Device Manager Hitachi Storage Navigator Hitachi TrueCopy Replication Software Hitachi Universal Storage Platform V IBM DSS100 IBM Storwise V7000 IBM Storwise V7000 Unified IBM SVC (SAN Volume Control) Storage Area Network Brocade DCX Storage Director Brocade Silkworm 4100 FCIP Fibre Channel Protocol Storage Array and High Availability EMC Celerra NS 480 Hitachi Device Manager Hitachi Storage Navigator Hitachi TrueCopy Replication Software Hitachi Universal Storage Platform V IBM DSS100 IBM Storwise V7000 IBM Storwise V7000 Unified IBM SVC (SAN Volume Control) 19

6. Network Infrastructure Network Services File Transfer Implements file transfer services across platforms. File Transfer FTP SCP SFTP File Transfer FTP SCP SFTP File Transfer FTP SCP 20

SFTP a file transfer protocol secure file transfer and manipulation facilities over SSH network protocol. 7. Network Infrastructure Management Network Diagnostics, Troubleshooting and Monitoring Defines the roles, policies, standards, and technologies that manage the communications infrastructure for Palm Beach County s distributed computing environment. Tools Brocade Network Manager NetScout Traffic Analyzer CiscoWorks Tropos Control Wireless Network Management System Paessler PRTG Traffic Grapher Struxureware Central UPS Manager Packet Design Route Explorer F5 Local Traffic Manager AT&T Common Network Management System (CNMS) IP Control Dynamic Host Control Protocol (DHCP) Domain Name Services (DNS) Windows Internet Name Service (WINS) Current Standards SNMP, RMON, RMON2 Tools Brocade Network Manager NetScout Traffic Analyzer CiscoWorks Tropos Control Wireless Network Management System Paessler PRTG Traffic Grapher Struxureware Central UPS Manager Packet Design Route Explorer F5 Local Traffic Manager AT&T Common Network Management System (CNMS) IP Control Dynamic Host Control Protocol (DHCP) Domain Name Services (DNS) Windows Internet Name Service (WINS) Current Standards SNMP, RMON, RMON2 Tools Brocade Network Manager NetScout Traffic Analyzer CiscoWorks Tropos Control Wireless Network Management System Paessler PRTG Traffic Grapher Struxureware Central UPS Manager Packet Design Route Explorer F5 Local Traffic Manager AT&T Common Network Management System (CNMS) IP Control Dynamic Host Control Protocol (DHCP) Domain Name Services (DNS) Windows Internet Name Service (WINS) Current Standards SNMP, RMON, RMON2 SNMPV3 21

Sun Management Center v.3x More sophisticated performance monitoring tools are on the horizon. Integration of tools sets with a centralized management center is important. The Enterprise Network is centrally managed in its entirety and tools are standardized. 8. Network Infrastructure Management ESD, Desktop, Solution Center Defines the roles, policies, standards, and technologies for monitoring and controlling problem reporting and resolution, implementing electronic software distribution, and desktop remote control. Electronic SW Distribution SCCM 2012 r2 Remote Control SCCM 2012 Help Desk Remedy for NOC Symposium Call Center Software Electronic SW Distribution SCCM 2012 r2 Remote Control SCCM 2012 Help Desk Remedy (the system is being replaced by the new SRS system). Symposium Call Center Software Electronic SW Distribution SCCM 2012 Remote Control SCCM 2012 Help Desk Service Request System (SRS) Symposium Call Center Software Remedy 22

New functionality is being added to PTS to handle problem and change processes. The new system, Service Request System (SRS), will replace Remedy. Novell Zenworks was replaced by SCCM 2012. Due to the IT reorganization of 2013, several datacenters and helpdesks consolidated under ISS. However, there are still a number of departmental/agency datacenters and help desks throughout the County. 9. Network Infrastructure Management Change Management Defines the roles, policies, standards and technologies for version control of all IT assets. Problem/Change Tracking Remedy Automated Operations Redwood Cronicle CRON (Unix) Problem/Change Tracking Remedy Automated Operations Redwood Cronicle Cron (Unix) Problem/Change Tracking Service Request System (SRS) Automated Operations Redwood Cronicle All distributed systems should have a centralized scheduling approach. 23

24

10. Network Infrastructure Management Job Scheduling Defines the roles, policies, standards, and technologies for initiating, monitoring and controlling batch jobs. Distributed Redwood Cronicle Distributed Redwood Cronicle Distributed Redwood Cronicle 25

11. Network Infrastructure Management Performance Management Defines the roles, standards, policies, and technologies for monitoring and controlling of all hardware and software with Palm Beach County s Enterprise Center. Performance Management (Distributed) Ganglia IBM Systems Director NMON Quest Spotlight Tivoli Monitor Performance Management (Distributed) Ganglia IBM Systems Director NMON Quest Spotlight Tivoli Monitor Performance Management (Distributed) Ganglia IBM Systems Director NMON Quest Spotlight Tivoli Monitor ManageWise was retired. 26

12. Network Infrastructure Management Backup & Restore Contains the roles, policies, procedures, and technologies for backup and restore of all mainframe and distributed systems. Backup & Restore EMC2 Data Domain 890 Deduplication Idera (SharePoint backups) Oracle RMAN Quest V Ranger (Vmware Backups) Recovery Manager of Active Directory SQL Safe (MS SQLServer database backup) Symantec Netbackup V7.0 (Unix Systems, NAS Fileservers, etc.) Backup & Restore EMC2 Data Domain 890 Deduplication Idera (SharePoint backups) Oracle RMAN Quest V Ranger (Vmware Backups) Recovery Manager of Active Directory SQL Safe (MS SQLServer database backup) Symantec Netbackup V7.0 (Unix Systems, NAS Fileservers, etc.) Backup & Restore EMC2 Data Domain 890 Deduplication Idera (SharePoint backups) Oracle RMAN Quest V Ranger (Vmware Backups) Recovery Manager of Active Directory SQL Safe (MS SQLServer database backup) Symantec Netbackup V7.0 (Unix Systems, NAS Fileservers, etc.) EMC2 Data Domain Disk-to-Disk (D2D) backup including deduplication for backup and recovery (local and remote). 27

13. Network Infrastructure Management Software and Hardware Asset/License Management Defines the roles, processes, procedures, technologies, and audit of all networked hardware and software for asset/license management. Software and Hardware Asset/License Management Microsoft System Center Configuration Manager (SCCM) Fixed Assets Tracking System (FATS) Software and Hardware Asset/License Management Microsoft System Center Configuration Manager (SCCM) Fixed Assets Tracking System (FATS) Software and Hardware Asset/License Management Microsoft System Center Configuration Manager (SCCM) Fixed Assets Tracking System (FATS) 28

29

14. Network Infrastructure Security Anti-Virus & Spam Filtering Tools Software for the purpose of filtering spam and identifying and detecting viruses in the network. Desktop/Laptop Antivirus Microsoft Forefront Server Antivirus Trend Micro (MS Server) Trend Micro Scanmail (Exchange Mail) Trend Micro ServerProtect (NAS File System) Email Antivirus & Spam Filtering ProofPoint Email Security Firewall McAfee Sidewinder pfsense Internet Gateway (Wireless Services) Desktop/Laptop Antivirus Microsoft Forefront Server Antivirus Trend Micro (MS Server) Trend Micro Scanmail (Exchange Mail) Trend Micro ServerProtect (NAS File System) Email Antivirus & Spam Filtering ProofPoint Email Security Firewall McAfee Sidewinder pfsense Internet Gateway (Wireless Services) Desktop/Laptop Antivirus Microsoft Forefront Server Antivirus Trend Micro (MS Server) Trend Micro Scanmail (Exchange Mail) Trend Micro ServerProtect (NAS File System) Email Antivirus & Spam Filtering ProofPoint Email Security Firewall McAfee Sidewinder pfsense Internet Gateway (Wireless Services) McAfee 8.7 Microsoft Forefront Our strategy is to consolidate Active Directory and to complete the deployment of Microsoft Forefront. 30

15. Network Infrastructure Security Extranet Access, Firewalls, Intrusion Detection Defines the roles, standards, policies, and tools for monitoring and ensuring the security from external sources accessing the Enterprise Network. Extranet Access Management F5 Access Policy Manager Enterprise Firewall & Intrusion Detection McAfee Sidewinder pfsense Internet Gateway (Wireless Services) Extranet Access Management F5 Access Policy Manager Enterprise Firewall & Intrusion Detection McAfee Sidewinder pfsense Internet Gateway (Wireless Services) Extranet Access Management F5 Access Policy Manager Enterprise Firewall & Intrusion Detection McAfee Sidewinder pfsense Internet Gateway (Wireless Services) McAfee Sidewinder 31

16. Network Infrastructure Security Directory Services Defines the roles, standards, policies, and tools for directory services. The cornerstone of security is the directory service and facilitates the centralization of authentication, authorization, profiles, and procedures in an effective manner. Network Authentication Novell edirectory (SIM) MS Active Directory Oracle OID RADIUS Identity Management Novell IDM (user provisioning, password management) Standards Directory Protocols LDAP NAC Directory Tools Quest Change Auditor for Active Directory Password Policy Management Specops Tivoli EndPoint Manager Network Authentication Novell edirectory (SIM) MS Active Directory Oracle OID RADIUS Identity Management Novell IDM (user provisioning, password management) Standards Directory Protocols LDAP NAC Directory Tools Quest Change Auditor for Active Directory Password Policy Management Specops Tivoli EndPoint Manager Network Authentication Novell edirectory (SIM) MS Active Directory Oracle OID RADIUS Identity Management Novell IDM (user provisioning, password management) Standards Directory Protocols LDAP NAC Directory Tools Quest Change Auditor for Active Directory Password Policy Management Specops Tivoli EndPoint Manager Specops is software that implements a stronger password policy than is currently available with Active Directory. 32

33

17. Network Infrastructure Security Remote Access, Network Encryption, Authentication Defines the roles, standards, policies, and tools in terms of access management to ensure the appropriate level of protection for information assets. Remote Access Services F5 Access Policy Manager SSL VPN NetMotion (mobile VPN) IPSec Network Encryption SSL Authentication Methods One-time Password Authenticators Global Sign for SSL Premium Remote Access Services F5 Access Policy Manager SSL VPN NetMotion (mobile VPN) IPSec Network Encryption SSL Authentication Methods One-time Password Authenticators Global Sign for SSL Premium Remote Access Services F5 Access Policy Manager SSL VPN NetMotion (mobile VPN) IPSec Network Encryption SSL Authentication Methods One-time Password Authenticators Global Sign for SSL Premium Emerging Technologies and Standard These security standards and technologies are highly important for HIPAA compliance and the protection of other confidential information. 34

18. Platform Infrastructure Operating Systems Desktop O/S Platforms Provides for the inclusion of industry standard operating systems for desktop computing. The Operating System controls all the computer s resources and provides the base upon which the application programs can be written. Desktop O/S Platforms Windows 7 Mac OS Desktop O/S Platforms Windows 7 Desktop O/S Platforms TBD MS Windows XP Windows 9 is in development by Microsoft ISS will evaluate Windows 8 for compatibility with our applications. 35

19. Platform Infrastructure Operating Systems Mobile O/S Platform Provides for the inclusion of industry standard operating systems for mobile systems such as phones and tablets. The Operating System controls all the computer s resources and provides the base upon which the application programs can be written. Mobile O/S Platform Windows 8 Android ios Mobile O/S Platform Windows 8 Android ios Mobile O/S Platform Windows version TBD Android ios Mobile platforms are critical for our M-Government initiatives. Device management including security is a challenge. 36

20. Platform Infrastructure Operating Systems Enterprise NOS & Hypervisor Server Virtualization Software Provides for the inclusion of industry standard operating systems for servers. The Operating System controls all the computer s resources and provides the base upon which the application programs can be written. Enterprise NOS AIX 5.3, 6.1,7.1 Linux-CentoOS (Moodle, CourseMill) Linux Red Hat (Sierra Gold) Linux Suse (Novell edir, imanager) MS Windows Server 2008, 2012, 2003 Solaris V8,V9, V10 (TimeServ, Remedy, JIS, Banner TC, Legacy Tax Systems) Hypervisor Server Virtualization Software IBM PowerVM VMware Vsphere 4.0, 5.0 Enterprise NOS AIX 5.3, 6.1,7.1 Linux-CentoOS (Moodle, CourseMill) Linux Red Hat (Sierra Gold) Linux Suse (Novell edir, imanager) MS Windows Server 2008, 2012, 2003 Solaris V8,V9, V10 (TimeServ, Remedy, JIS, Banner TC, Legacy Tax Systems) Hypervisor Server Virtualization Software IBM PowerVM VMware Vsphere 4.0, 5.0 Enterprise NOS AIX 5.3, 6.1,7.1 Linux-CentoOS (Moodle, CourseMill) Linux Red Hat (Sierra Gold) Linux Suse (Novell edir, imanager) MS Windows Server 2008, 2012, 2003 Solaris V8,V9, V10 (TimeServ, Remedy, JIS, Banner TC, Legacy Tax Systems) Hypervisor Server Virtualization Software IBM PowerVM VMware Vsphere 4.0, 5.0 37

21. Platform Infrastructure Basic Middleware Data Management Provides the interface between applications and network communications mechanisms for the purpose of data and file access and data manipulations. This helps programs read from and write to distributed databases or files. Data Access Protocol ADO.Net MSSQL ODBC for MS SQL Server ODBC for Oracle Oracle SQL Net Client Data Manipulation Language PL-SQL SQL Data Access Protocol ADO.Net MSSQL ODBC for MS SQL Server ODBC for Oracle Oracle SQL Net Client Data Manipulation Language PL-SQL SQL Data Access Protocol ADO.Net MSSQL ODBC for MS SQL Server ODBC for Oracle Oracle SQL Net Client Data Manipulation Language PL-SQL SQL 38

22. Platform Infrastructure Basic Middleware Communications Facilitates program-to-program communications and provides an API that shields (abstracts) the application developer from having to deal with lower-level communications chores. It offers a set of services that extend the power of the communications model in various ways. Remote Procedures Call (RPC) is based on synchronous access to the server- a client application must wait for a RPC to complete before continuing the process and Message Oriented Middleware (MOM) is asynchronous. Messages Oriented Middleware MSMQ Messages Oriented Middleware MSMQ Messages Oriented Middleware MSMQ MSMQ is a messaging protocol that allows applications running on separate servers/processes to communicate in a failsafe manner. 39

23. Platform Infrastructure Basic Middleware Platform Middleware This is a combination of communication middleware and variety of additional runtime services that provide an execution environment for application logic. Includes a layer of functionality that partially or fully insulates the application program from the operating system in the same way that communication middleware insulates the application program from the network software. Server Application, Database, Web Apache HTTP Server (Business Objects (BO)/Crystal) Apache Tomcat (Old VPT/LEX) Citrix Exchange 2010 IBM HTTP Server (Advantage, DOD) IBM WebSpere Applications Server (DOD, PO/Crystal, Maximo) JBoss (JBoss for IDM) MS IIS MS SQL MS.NET 1.1 4.X Oracle Application Server (Cinema, Oracle IFS, ClerkConnect) Windows 2008; AIX 6 X.1 Server Application, Database, Web Apache HTTP Server (Business Objects (BO)/Crystal) Apache Tomcat (Old VPT/LEX) Citrix Exchange 2010 IBM HTTP Server (Advantage, DOD) IBM WebSpere Applications Server (DOD, PO/Crystal, Maximo) JBoss (JBoss for IDM) MS IIS MS SQL MS.NET 1.1 4.X Oracle Application Server (Cinema, Oracle IFS, ClerkConnect) Windows 2008; AIX 6 X.1 Server Application, Database, Web Apache HTTP Server (Business Objects (BO)/Crystal) Apache Tomcat (Old VPT/LEX) Citrix Exchange 2010 IBM HTTP Server (Advantage, DOD) IBM WebSpere Applications Server (DOD, PO/Crystal, Maximo) JBoss (JBoss for IDM) MS IIS MS SQL MS.NET 1.1 4.X Oracle Application Server (Cinema, Oracle IFS, ClerkConnect) Windows 2008; AIX 6 X.1 Major enhancements to MS.NET Makes development and deployment of distributed processing faster and easier. Platform middleware may overlap with other services. In addition to communication-related functions, it may perform resource management functions such as managing memory and OS processes, loading programs from disk, starting and stopping programs, passing messages to and from programs, load balancing among programs, trapping and responding to errors (sometimes including failover), and managing transactions. 40

41

24. Platform Infrastructure Basic Middleware Platform Middleware (cont d) Portal Server SharePoint Content Management SharePoint Search Engine Site Server Google Enterprise Search Portal Server SharePoint Content Management SharePoint Search Engine Site Server Google Enterprise Search Portal Server TBD Content Management SharePoint Search Engine Site Server Google Enterprise Search 42

25. Platform Infrastructure Integration Middleware Integration Gateways Software that translates among two or more protocols. It intercepts the communication after it has been sent and converts it into a form that is understandable by a dissimilar recipient. Integration gateways are available for all three kinds of basic middleware. DBMS Gateways Oracle Connect COM Gateways XML Platform Gateways XML VXML (Voice) AJAX DBMS Gateways Oracle Connect COM Gateways XML Platform Gateways XML VXML (Voice) AJAX DBMS Gateways Oracle Connect X COM Gateways XML Platform Gateways XML VXML (Voice) AJAX We are considering MS SQL as an alternative to Oracle Connect. Some gateways reside on the same computer as one of the applications. Others reside on a separate computer, so the first segment of a message s journey is conducted using a different protocol than the second segment. 43

26. Platform Infrastructure Integrating Middleware XML Related Standards XML defines a syntax and document organization for data, represented by human-and machine-readable tag/value pairs. Basically, SOAP is an XML-RPC that uses XML to pass message parameters over HTTP. WSDL is an XML format for describing network services as a set of endpoints (ports) operating on messages containing either document-oriented or procedure-oriented information. UDDI will provide access to a global repository of Web Services. Universal Data Format XML Web Service Interaction SOAP Service Description WSDL Publish, Find, Use None Universal Data Format XML Web Service Interaction SOAP Service Description WSDL Publish, Find, Use None Universal Data Format XML Web Service Interaction SOAP Service Description WSDL Publish, Find, Use UDDI Web Services has emerged as a broad Internet application standard and XML, SOAP, and UDDI are the major component standards in the Web Services Protocol Stack. 44

27. Common Services Email & Messaging Email Client, Messaging Engine, Protocols Uses computer text-processing and communication tools to provide a high speed information exchange service. Communications link may be dyadic, one on one, or it can be a group discussion involving many people. Email client /Messaging Engine Outlook 2007Exchange 2007/2010 FaxCore Messaging Protocols SMTP MAPI Email client /Messaging Engine Outlook 2007/Exchange 2007/2010 FaxCore Messaging Protocols SMTP MAPI Email client /Messaging Engine Outlook 2013 FaxCore Messaging Protocols SMTP MAPI Browser mail technology is becoming more sophisticated with more features 45

28. Common Services Email & Messaging Mail API s and Message Gateways Theses are the standards for e-mail communications. Mail API s MAPI Message Gateways ESMTP Exchange 6u SMTP Gateway Mail API s MAPI Message Gateways ESMTP Exchange 6u SMTP Gateway Mail API s MAPI Message Gateway Unified Messaging ESMTP Exchange 6u SMTP Gateway Unified Messaging 46

29. Common Services Workgroup/Collaboration Group Video Conferencing, IM, Group Document Editing Facilitated by the continuing advancement in video compression technology, video conferencing products support cooperatively working at a distance. Group Video Conferencing Tandberg Jabber Tandberg Video Conferencing Endpoints Web Conferencing Tandberg Jabber IM Lync 2013 Group Document Editing SharePoint Standard MPEG-2 (uses dual channel encoder technology Vbrick) Group Video Conferencing Tandberg Jabber Tandberg Video Conferencing Endpoints Web Conferencing Tandberg Jabber IM Lync 2013 Group Document Editing SharePoint Standard MPEG-2 (uses dual channel encoder technology Vbrick) Group Video Conferencing Tandberg Jabber Tandberg Video Conferencing Endpoints Web Conferencing Tandberg Jabber IM Lync 2013 Group Document Editing SharePoint Standard MPEG-2 (uses dual channel encoder technology Vbrick) Session Internet Protocol (SIP) * 47

30. Common Services Workgroup/Collaboration Internet Browser Software Interface for accessing services on the Web. Internet Browser MS Internet Explorer 8 Safari Internet Browser MS Internet Explorer 8 Internet Browser MS Internet Explorer 9 IE 9 We will implement IE 9 when Advantage has been updated for compatibility with the standard. 48

31. Common Services Document Management Document Management, DOD, Postal Address and Verification Provides controlled location-transparent access to documents. The content resources managed by a document management system may include images, but may also include other information formats, such as word processing files, graphics, source code, multimedia hypertexts, electronic forms, video clips, and database. Documents on Demand Content Manager on Demand (DOD) AIX 6.1 Document Management CINEMA Postal Address and Verification CODE-1 Plus (Unix) US Postal Database (Unix) Mailstream Plus (Unix) USPS Reference File (Unix) Documents on Demand Content Manager on Demand (DOD) AIX 6.1 Document Management CINEMA Postal Address and Verification CODE-1 Plus (Unix) US Postal Database (Unix) Mailstream Plus (Unix) USPS Reference File (Unix) Documents on Demand Content Manager on Demand (DOD) AIX 6.1 Document Management CINEMA Postal Address and Verification CODE-1 Plus (Unix) US Postal Database (Unix) Mailstream Plus (Unix) USPS Reference File (Unix) 49

50

32. Common Services Document Management Workflow, Scanning, Fax Capture/Distribution The automation of a business process during which documents, information or tasks are passed from one participant to another for action, according to a set of procedural rules. Enterprise Workflow SharePoint & InfoPath Fax Capture/Distribution FaxCore Brooktrout 8 channel T.38 Scanning and Miscellaneous Tools ScanMaster 2.1 CapturePerfect Tiff Combiner Image Converter Plus PTP Publisher Enterprise Workflow SharePoint & InfoPath Fax Capture/Distribution FaxCore Brooktrout 8 channel T.38 Scanning and Miscellaneous Tools ScanMaster 2.1 CapturePerfect Tiff Combiner Image Converter Plus PTP Publisher Enterprise Workflow SharePoint Fax Capture/Distribution FaxCore Brooktrout 8 channel T.38 Scanning and Miscellaneous Tools ScanMaster CapturePerfect Tiff Combiner Image Converter Plus PTP Publisher 51

33. Common Services Document Management Document Authoring, Electronic Forms Electronic form is a tool that makes it easy to enter, modify, and view the information stored in one or more tables in documents, spreadsheets and databases. Document authoring provides tools for creating documents in a collaborative environment. Documents Authoring MS Office 2007 Documents Authoring MS Office 2007 Documents Authoring MS Office 13 Electronic Forms Creation MS Office 2007 Adobe Acrobat ALF-DesignPro Tools Electronic Forms Creation MS Office 2007 Adobe Acrobat ALF-DesignPro Tools Electronic Forms Creation MS Office 13 Adobe Acrobat ALF-DesignPro Tools Cloud-based alternatives such as MS Office 365 (Outlook, calendar, Word, Excel, PowerPoint) and Google. Implementation of MS Office 13 is dependent on whether the County executes a new Microsoft Enterprise Agreement. 52

34. Common Services Personal Productivity Office Productivity Tools Tools that enhance personal productivity include the office suites. Typically, word processing and spreadsheet software. Office Productivity Tools MS Office 2007 MS Visio MS Project Dreamweaver Adobe Acrobat Supporting Tools Shockwave Player (Macromedia) Flash Player (Macromedia) Quicktime Player Adobe Office Productivity Tools MS Office 2007 MS Visio MS Project Dreamweaver Adobe Acrobat Supporting Tools Shockwave Player (Macromedia) Flash Player (Macromedia) Quicktime Player Adobe Office Productivity Tools MS Office 2007 MS Visio MS Project Dreamweaver Adobe Acrobat Supporting Tools Shockwave Player (Macromedia) Flash Player (Macromedia) Quicktime Player Adobe Cloud-based alternatives such as MS Office 365 (Outlook, calendar, Word, Excel, PowerPoint) and Google. 53

Implementation of MS Office 13 is dependent on whether the County executes a new Microsoft Enterprise Agreement. 54

35. Common Services Personal Productivity Presentation Graphics and High End Publishing Includes software for creating presentations, graphic tools for creating templates, visualizing technology infrastructure, drawing floor plans, creating engineering schematics, planning new software systems, and analyzing business processes. Presentation Graphics MS Office 20007 High-End Graphic & Pub. Tools MS Visio Adobe Presentation Graphics MS Office 2007 PowerPlugs, Ultimate Combo for MS PowerPoint High-End Graphic & Pub. Tools MS Visio Dreamweaver Flightcheck Designer Presentation Graphics MS Office 10 High-End Graphic & Pub. Tools Track market 55

36. Application Services - Application Development - Programming Tools Includes all the various programming tools utilized to deliver software applications, components, and objects. MS Visual Studio 2012 Infologistics TOAD PowerDesigner PowerBuilder Visio SQL Enterprise Manager MS Visual Studio 2012 Infologistics TOAD PowerDesigner PowerBuilder Visio SQL Enterprise Manager MS Visual Studio 2012 Infologistics TOAD PowerDesigner PowerBuilder Visio SQL Enterprise Manager FoxPro, PB, Cobol (Unix), ASP Classic, Visual Basic, MTS/COM+, MS Access HTML5, CSS3, Silverlight, ios & Android Strategic opportunity to continue developing a cohesive framework. Cross-platform interoperability is an important consideration. 56

37. Application Services - Application Development - User Interface Includes the standard application interfaces for the user. User Interface Win 7 64 Bit IE Browser User Interface Win 7 64 Bit IE Browser User Interface Win 7 64 Bit IE Browser P.B. (contain), 32-bit development Tablets (Apple, Google, MS), mobile devices The adoption of M Government and Ubiquitous Government is in progress. Mobile technologies are changing the way employees work and how the public interacts with government. 57

38. Application Services - Application Development Component Model/Patterns Includes the component models and patterns for application development. Components ASP+ Component Models MS COM MS COM+ MS.NET J2EE (Financial System) XML VB.NET Components ASP+ ASP.NET Component Models MS.NET J2EE (Financial System) XML VB.NET C# Components ASP.NET Component Models MS.NET (generic) J2EE (Financial System) C# XML VB.NET Entity Framework MVVM/MVC Component Model TDD (Test Driven Development) CDD (Coded Driven Development) MS COM Entity Framework MVVM/MVC Component Model TDD (Test Driven Development) CDD (Coded Driven Development) The patterns and component models greatly decrease the amount of developer coding required. 58

39. Application Services - Application Development - Modeling and Design Tools These tools are the modeling toolsets used during the application modeling and design phase of application development. Sybase Power Designer Data Architect Visio Sybase Power Designer Data Architect Visio Snagit 10 (defect tracking) VS 2010 Sybase Power Designer Data Architect Visio Snagit 10 (defect tracking) VS 2012 ` 59

40. Application Services - Application Development - Scripting Tools Tools for writing scripts. ASP Java Script Scripting tools for.net ATLAS Windows Scripting AJAX MS PowerShell Java Script Scripting tools for.net ATLAS Windows Scripting AJAX MS PowerShell Java Script Scripting tools for.net ATLAS Windows Scripting AJAX MS PowerShell MS PowerShell 60

41. Application Services Application Development Web Authoring Toolset for creating Web pages, etc. Web Page Authoring Dreamweaver Web Development Visual Studio 2012 SharePoint Designer Web Page Authoring Dreamweaver Macromedia Flash SharePoint Web Development Visual Studio 2012 SharePoint Designer Web Page Authoring Dreamweaver Macromedia Flash SharePoint Web Development Visual Studio 2012 TBD Visual Interdev; FrontPage 61

42. Application Services Application Development Quality Assurance Testing Tools use by our QA/Training group for testing. QA - AD Testing Tools Xpert Tuner for TOAD Team Foundation Server (TFS) Microsoft Visual Studio 2010 Adobe Captivate Tech smith Snag-It 11 Sybase Power Designer MS Office Suite (Outlook, SharePoint, Word, Excel, PowerPoint) QA - AD Testing Tools Xpert Tuner for TOAD Team Foundation Server (TFS) Microsoft Visual Studio 2010 Adobe Captivate Tech smith Snag-It 11 Sybase Power Designer MS Office Suite (Outlook, SharePoint, Word, Excel, PowerPoint) QA - AD Testing Tools Xpert Tuner for TOAD Team Foundation Server (TFS) Microsoft Visual Studio Adobe Captivate Tech smith Snag-It Sybase Power Designer MS Office Suite (Outlook, SharePoint, Word, Excel, PowerPoint) Training AD Testing Tools Adobe Acrobat Pro Adobe Captivate MS Office Suite (Outlook, SharePoint, Word, Excel, PowerPoint) MS Publisher MS Visio Pro Software Casa Super Stamps (imports into Snag It) Tech Smith Snag It Training AD Testing Tools Adobe Acrobat Pro Adobe Captivate MS Office Suite (Outlook, SharePoint, Word, Excel, PowerPoint) MS Publisher MS Visio Pro Software Casa Super Stamps (imports into Snag It) Tech Smith Snag It Training AD Testing Tools Adobe Acrobat Pro Adobe Captivate MS Office Suite (Outlook, SharePoint, Word, Excel, PowerPoint) MS Publisher MS Visio Pro Software Casa Super Stamps (imports into Snag It) Tech Smith Snag It Visual Source Safe, CA Harvest,Mercury TFS Project Server, TFS Build Server 62

43. Application Services Application Development AD Methodology and Process Tools Includes tools for application development project management, development methodologies, and project controls. AD Methodology Agile Waterfall AD Project Management MS Project Project Tracking System (PTS) Time Tracking Time Entry Application (TEA) AD Methodology Project Management Body of Knowledge (PMBOK) PMI 4 th Ed. Agile AD Project Management MS Project 2007 Project Tracking System (PTS) Time Tracking Time Entry Application (TEA) AD Methodology Project Management Body of Knowledge (PMBOK) - PMI Agile AD Project Management MS Project Project Tracking System (PTS) Time Tracking Time Entry Application (TEA) Waterfall methodology Agile; Scrum; Spiral We have standardized our development methodology and are now using Scrum. 63

44. Application Development Application Development GIS Includes tools for geographic information systems development. Server MS IIS7, 2008 Server 2008 ArcGIS Server 10.1 ArcSDE 9.3.1(upgrading to 10.0) Oracle 11.2 AIX 6 Server MS IIS7, 2008 Server 2008 ArcGIS Server 10.1 ArcSDE 9.3.1(upgrading to 10.0) Oracle 11.2 AIX 6 Server MS IIS7, 2008 Server 2008 ArcGIS Server 10.1 ArcSDE 9.3.1(upgrading to 10.0) Oracle 11.2 AIX 6 Client ArcGIS 10.1 Oracle client 11.1 ASP.NET JavaScript10 ArcGIS for Windows Mobile 10 FME Desktop 2012 Microsoft Silverlight 3 Visual Studio 2008 & 2010 Toad 11.6 for Oracle Crystal reports Client ArcGIS 10.1 Oracle client 11.1 ASP.NET JavaScript10 ArcGIS for Windows Mobile 10 FME Desktop 2012 Microsoft Silverlight 3 Visual Studio 2008 & 2010 Toad 11.6 for Oracle Crystal reports Client ArcGIS 10.1 Oracle client 11.1 ASP.NET JavaScript10 ArcGIS for Windows Mobile 10 FME Desktop 2012 Microsoft Silverlight 3 Visual Studio 2008 & 2010 Toad 11.6 for Oracle Crystal reports Mobile device technology 64

45. Application Services Data Enterprise and Mid-range OLTP DBMS Defines the roles, policies, standards, and technologies for data definition, design, management and administration as a recognized enterprise resource. Enterprise/OLTP DBMS Oracle (AIX) Mid Range OLTP DBMS Oracle (AIX) 10g or later MS SQL Server 2005 DBMS Gateways Oracle Connect Oracle Products Enterprise Manager Grid/Cloud Control Fusion Middleware Control Weblogic Web Server Directory Services Manager Non-Oracle Products Quest Software, TOAD Xpert edition Quest Software, Spotlight for Oracle Microsoft SQL Server Management Studio s Softerra LDAP Administrator (Outdated) Cyqwin/X (X Windows Server for Microsoft Windows) Enterprise/OLTP DBMS Oracle (AIX) Mid Range OLTP DBMS Oracle (AIX) 10g or later MS SQL Server 2005 DBMS Gateways Oracle Connect Oracle Products Enterprise Manager Grid/Cloud Control Fusion Middleware Control Weblogic Web Server Directory Services Manager Non-Oracle Products Quest Software, TOAD Xpert edition Quest Software, Spotlight for Oracle Microsoft SQL Server Management Studio s Softerra LDAP Administrator (Outdated) Cyqwin/X (X Windows Server for Microsoft Windows) Enterprise/OLTP DBMS Oracle (AIX) Mid Range OLTP DBMS Oracle (AIX) (version to be determined) MS SQL Server DBMS Gateways Oracle Connect Oracle Products Enterprise Manager Grid/Cloud Control Fusion Middleware Control Weblogic Web Server Directory Services Manager Non-Oracle Products Quest Software, TOAD Xpert edition Quest Software, Spotlight for Oracle Microsoft SQL Server Management Studio s Softerra LDAP Administrator (TBD) Cyqwin/X (X Windows Server for Microsoft Windows) 65

66

46. Application Services Data Workgroup/Desktop DBMS Defines the standards and technologies used for desktop and workgroup database management systems. Workgroup/Desktop DBMS MS Access Oracle Express (desktop SQL Server Express ) SQL Server Express Oracle Standard Edition (Work Group) Workgroup/Desktop DBMS Oracle Express (desktop SQL Server Express ) SQL Server Express Oracle Standard Edition (Work Group) Workgroup/Desktop DBMS Oracle Express (desktop SQL Server Express ) SQL Server Express Oracle Standard Edition (Work Group) FoxPro; Access 67

47. Application Services Data Business Intelligence/OLAP Tools Standards and technologies used for analysis, reporting, decision support systems, etc. Crystal XI Crystal Reports Oracle Reports Crystal 2008 MS Excel SQL Reporting SharePoint Crystal 2008 and beyond SQL Reporting Excel SharePoint Other tools to be determined Crystal 2008 is currently being tested in our environment. 68