security capabilities of ipam

Post on 30-May-2015

128 Views

Category:

Technology

2 Downloads

Preview:

Click to see full reader

DESCRIPTION

Security Capabilities of IP Address Management (Juniper Innovation Days 2014)

TRANSCRIPT

Security Capabilities of IPAM

Innovation Days

What is IPAM ?

IPAM meansManagement of IP Addresses &Host Names

Control the associated Services

DNS & DHCP

Centralised Documentation of everything

IP-related

Why IPAM ?

“I’m managing DNS & DHCP

since 20 Years ...”

“... and I never had

an Outage.”

Legacy Tools

Mobility and Cloud are changing IT

Past

Present Future

Phones

PrintersDesktops

PhysicalVirtual

VDI

Cloud

Mobile

SDNM2M

Wearable

Today’s and Future Challenges

... no Auditing

... no Automation

... no Visibility

... no Consistency Checks

... no Chance for IPv6

IPAM ... for AutomationRequest

Network

DHCP

Asset

Multiple Admins or Systems involved

IPAM ... for Automation

RequestAutomate

Validate

Delegate

IPAM ... for Auditing

Who? Where? When?

What?

IPAM ... for Visibility

Reporting

Alarming

IPAM ... for Consistency Checks

Built-in & free of Charge

L2 / L3 Discovery

192.168.191.5 reclaimableGi0/5 VLAN2

192.168.191.6 reclaimableGi0/6 VLAN2

192.168.191.11 mismatchGi0/11 VLAN2

192.168.191.16 unknownGi0/16 VLAN2

AA-BB-CC-DD-EE-05

AA-BB-CC-DD-EE-06

AA-BB-CC-DD-EE-11

AA-BB-CC-DD-EE-16

IP Reconciliation

IPAM ... for IPv6

192.0.2.53

SLAAC

http://www.insinuator.net/2013/10/ipam-requirements-in-ipv6-networks/

2001:db8:2::53

IPAM is central

Inte

rnal

External

Beyond

Let’s use this PositionAccessControl

Finger Printing

DNS Threat

Protection

Who’s BlueCat ?

GartnerHighest Possible

Rating

Debt FreeInvest back in

business

> 2000Customers

> 30%Revenue Growth

FY99 - FY14

Company

Who’s BlueCat ?

< 1%Industry’s Lowest Hardware Failure

94Local Depots

24x7x5 Onsite

5M+ IPsIndustry’s Most

Scalable DDI

200K QPSIndustry’s Fastest 1U DNS Appliance

Technology

Thank you for your time.Andreas Taudte

Sales Engineer

Special Thanks toRoberto „Rober-Raik“ Tello Oiz.

top related