enabling the adaptive enterprise - microsoft...

© 2016 Level 3 Communications, LLC. All Rights Reserved. Proprietary and Confidential.


Enabling the Adaptive EnterpriseResponses to the Technology Revolution

Mike ParksRegional Director, Sales Engineering


Level 3 Communications–Company Overview

Over $8B in Annual Revenues

~12,500 Employees

Connecting 60+ Countries and Counting

Approx. 360 Multi-tenant Datacenters

Over 42Tbps of Global IP Capacity

More than 12B+ Minutes Per Month in VoIP Traffic

321,000+ Route Km of Fiber Globally

Level 3 Communications Level 3 Customers

8 of the Top 10 U.S. Based Banks

8 of the Top 10 Internet Service Providers

8 of the Top 10 Global Pharmaceutical Companies

4 of the “Big 6” Movie Studios

8 of the Top 10 Cable MSOs

2


3

Network Scale

Level 3

*Numbers are approximate as of June 2016

Network Scale*


Enterprises are shifting to a mix of private and public networks and cloud services to pursue cost advantages.

Private-to-Public Networks

Applicationscan be put in

either environment

PrivateData Centers

PublicData Centers

Branch Offices

Virtual Networks

Physical Networks

Network Orchestration and Control

Enterprise IT Gateway Layer

Analytics & Adaptive Control Layer

Network software, specifically open source, SDN, and virtualization, are changing the way

networks function.

Security solutions are increasingly network-based and need to be more uniformly available on both public and private networks, requiring more integration across the ecosystem.

Branch Offices

Network Trends

InternetPrivate Network (VPN)

Security Software

Scale

4

Enterprises and web scale companies are in need of significant infrastructure to meet their demands (Buildings, Fiber and 100G).

Trends


Hybridized Environments• Cloud and hybrid IT environments can change network traffic flows• Enterprises increasingly connect to cloud partners for distribution and hosting applications• Bandwidth consumption of cloud applications are expanding • IT spend on cloud services and technology are continuing to grow• Level 3 can help enable your path to hybrid cloud with flexible and agile connectivity

InternetMPLS/IP VPN or IPSecCarrier Ethernet

Local PoP &Security Gateway

3G/4G/LTECellular Access

Cloud EnvironmentWAN Environment

Split Tunnel IPSec

MPLS + Internet/SAS

Converged Multi-Service Port

IP Interconnects Partners

PrivateCloud

sPrivateCloud

s

Cloud Connect Partners

IPSec Access

WWW

WWW

WWW

WWW

MPLSWWW

PhysicalPort

5


Metro Architecture

PACKET NETWORK

Technical specifications• High availability with ring

switching • Redundant head-end

aggregation• MPLS and QinQ• 10G evolving to 100G rings• Continuous performance

measurement• Multiple CPE options• Backup battery power

Level 3 MPLS Level 3 Internet

Nx100GNx100G

100G

10/100GMetro Ring

Service capabilities• Layer 2 access for on-net

buildings• NNI connections for off-net

Ethernet • Supports access for all

services (Internet, Layer 2 VPN, Layer 3 VPN, Voice)

• Ethernet Private Line • Circuit emulation capable

6


Level 3 Adaptive Network Control Solutions

ANCS allows customers to control their user experience to the Cloud Control CoS priorities across customer’s VPN

Level 3SM Enhanced Management

Level 3SM DynamicCapacity

Level 3SM Dynamic Connections Solutions*

Level 3SM Dynamic Prioritization*

Visibility into end-to-end performance with

personalized alerting and actions

Real-time portal control, scheduled or automated flexing

of capacity up to x3 / 6Gbps

On-demand connections including to CSPs

Alpha trial done with AWS

On-Demand, real-time control of QoS

7

Adaptive Network Control Solutions: SDN-based Life-Cycle Service Orchestration that enables enterprises to dynamically control, scale, create and prioritize network connectivity to improve application performance across their network.

Three-Way ANCS Controls:

Ad-Hoc via portal or APIUseful for moving applications into production or support new services

Automatically Triggered by Enhanced ManagementLow touch option to focus on your business

ScheduledSupporting regular Hybrid workloads such as back-ups or supporting events

*Reflects Level 3’s plan as of September 2016. Subject to change at the sole discretion of Level 3 Communications.


Dynamic Capacity Mobile App

• Enables MyLevel3SM users to access Dynamic Capacity through a Smartphone or Tablet

• Available to all DC customers with an active MyLevel3SM account for either E-Line / eLynk / Internet / IPVPN

• Supported devices• iOS – iPhone and iPad• Android – Smartphone and Tablet

Extends the Dynamic Capacity Experience to Tablets and Smartphones

Provide circuit status• After logging in, Dynamic Capacity

Customers will see:• Critical Circuit Count (>80% utilization)• At Risk Circuit Count (between 60%

and 80% utilization)• Normal Circuit Count (<60% utilization)

• Easily Activate Now capability• Deactivate capability for circuits with DC

event in progressFor IP VPN customers with EM• Show Application Usage information

• Top ten data types• Top Talkers

ANC Mobile Will:

26*Reflects Level 3’s plan as of September 2016. Subject to change at the sole discretion of Level 3 Communications.


Level 3’s Converged Multi-Service Port

Public-Private Agnostic Connectivity

• Applications are moving between private delivery to internet delivery• Customer can select the total bandwidth needed at site and let the converged multi-

service port flex between private and public access to their apps• Local internet breakout to maximize cloud/SaaS performance• Usage-based billing on the port allows customer to pay for the total bandwidth used• Internet can be secured by our extensive network based secure gateway service

9

Level 3’s Converged

Multi-Service

Port

MPLS

Private

Internet

Allow applications to seamless change between internet and MPLS delivery


Level 3 Internet Services

Global, scalable and reliable IP network• Global IP capacity with over

42Tbps • Over sixty 100Gbps

backbone links• More than 4,200 unique

Autonomous System (AS) interconnects

• Global reach with PoPs in over 100 major markets on six continents

10

Level 3 customers• 8 of top 10 U.S. internet

service providers (ISPs)• 8 of top 10 Cable MSOs• 8 of top 10 U.S.-based

Banks• Large social networking sites

Proven IP Network Performance• 21Tb of global peering

capacity• More than 60% of the traffic

that originates on the Level 3 Network stays on the Level 3 Network, allowing us to better control performance


Hybrid WAN Solutions Today

• We’re seeing growing demand for our Hybrid WAN solution set• Fully managed solutions - customers avoid contracting with dozens of service providers

11

• Suitable for small branch sites• DIA/Broadband access with optional split tunnel• LAN/Wi-Fi Professional Services• Carrier-agnostic LTE/4G backup for high availability

DIA/Broadband + 4G

• Private MPLS/IP VPN with DIA/Broadband augment• Offload Internet and low-criticality traffic via the Internet• Suitable for supporting the growing number of medium-to-low-criticality applications + critical applications

IP VPN Internet Physical Circuit

MPLSInternet

Customer Sites

MPLSInternet

MPLS + DIA/Broadband


Carrier-connected Data Center to Broadband connected Branch

Traffic Flow Comparison

12

Branch OfficeDatacenter

With Level 3SM Secure Access Servicesand Level 3® Enterprise Security Gateway

Without Level 3

Branch OfficeDatacenter

Broadband aggregator/ISP and your Data Center ISP peer at finite number of traditional peering exchanges which can result in suboptimal network performance and increased latencies

Level 3 localized peering and Enterprise Security Gateway maximizes network performance minimizing latency providing a more MPLS-like experience

Traditional Peering Point Level 3 Peering Points


Adaptive Hybrid Connect A Flexible, Open, NFV-based System

Internet

Network Services

WAN

NFV at the coreLevel 3 SD-WAN capability

Customer-provided SD-WANSecurity Controls

Dynamic BandwidthWAN Optimization

AnalyticsVoice SBC

Premises

”Whitebox” X.86

• API Driven Platform: Services-agnostic• Open system and whitebox CPE avoids vendor

lock-in• Centralized, open platform relieves the challenge of

stitching overlay networks together • Global availability and direct connections into cloud

service providers• Leverage local peering arrangements to bring

connections on Internet backbone faster• Comprehensive mix of connectivity options: cable,

DSL and cellular Service Chaining Mirrors Computing

Allows compute capacity of NFs to be in cloud or on prem

Abstracting Technology for a Consistent Networking Experience

Reflects Level 3’s plan as of November 2016. Subject to change at the sole discretion of Level 3 Communications.

© 2016 Level 3 Communications, LLC. All Rights Reserved. Proprietary and Confidential.14

Content Delivery Network

• ~75% growth December peak 2014 to December peak 2015

• Focus on performance optimization• New higher-capacity servers• In 2015, we added significant capacity

to the network and interconnects• Deployed new caching architecture to

interconnect more deeply with ISPs • TCP stack tuning• Improvements to rendezvous

technology allowing improved localization

Level 3 Internet

Mid Tier Servers

Edge Proxy Cache

Level 3 Origin Storage

Peers Peers Customers Customers

Customer Origin

Customer Origin

CDN performance has improved substantially


PRIVATE, SECURE CONNECTIVITY TO THE CLOUD

Level 3 Cloud Connect Solutions offer a private network ecosystem that can connect your enterprise with leading cloud and data center providers around the world. They can provide improved application performance as well as security and flexibility, which allow you to realize all the benefits of the cloud without compromising productivity or revenue.

LEVEL 3® CLOUD CONNECT SOLUTIONS

SCALE NETWORK AND BANDWIDTH ON DEMAND

PRIVATE CONNECTIVITY TO

THE CLOUD

FLEXIBLE ETHERNET AND IP VPN

CONNECTIVITY OPTIONS

CONNECT TO CSP LOCATIONS GLOBALLY


~87 TBof data per day

We collect

at least one C2network a month

We identify and remove

~1.3 billionSecurity events per day

We monitor

mitigate 40Large scale DDoS attacks a day

We respond to and

48 billion NetFlow sessions per day

We monitor over

daily audits,protect and monitor all our products & systems

We perform

Security from Our Lens


DDoS

Adaptive Security Architecture

Remote Office 1 Remote Office 2

Internet

Advanced ThreatDetection

IDCMobile Phone

Tablet

Bluetooth

Mobility and IoT“The New Perimeter”

Smartwatch

Level 3 Network

Level 3 Network

IPsecSSL

IP VPN

IPsecSSLIP VPN

Enterprise SecurityGateway

Enterprise SecurityGateway

9

*Reflects Level 3’s plan as of September 2016. Subject to change at the sole discretion of Level 3 Communications.


Threat Intelligence Methodology

Third party dataAggregated third party reputation databases and validation against Level 3 data

Level 3 global data• Level 3 Threat

Research proprietary threat data

Customer data (future)• Customer log data• Deep Packet

Inspection (DPI)

Machine learning

Algorithm scoring

Anomaly detection

Research

Scoring

Tracking

Analysis of existing and new threats includes:

Level 3 Adaptive Threat Intelligence portal

1

Security Operation Centers

victim / attack notification

4

2 Raw data feed to customer’s SIEM

Enterprise Security Gateway Controls

DDoS Mitigation / Network Protection Controls

Malware Sandboxing

Security Operation Centers “takedowns”

Professional Security Services

3 Email alerts

Real time Threat Intelligence alerts

Future*

Acquisition Analytics Analysis Alerting Actions

*Reflects Level 3’s plan as of January, 2016. Subject to change at the sole discretion of Level 3 Communications.


Level 3® DDoS Mitigation Service

19

• Feb. 22, 2016 Level 3 Opens First Scrubbing Center in Latin America Sao Paulo, Brazil moving to simultaneously respond to an uptick in the region's security breaches while creating a foundation to deliver new security and NFV-based cloud services in Latin America.

AmsterdamSacr

amento

Hong Kong

Amsterdam

Hong Kong

Planned

Launched

Los Angeles

Dallas

ChicagoNew York

São Paulo

LondonFrankfurt

Washington DC

Buenos Aires

Singapore

• Network-based security • 4.5 Tbps. of ingest capacity • Carrier agnostic• Regionally distributed scrubbing centers• Network-based controls• Extensive peering• Backed by threat Intelligence generated

by Level 3 Threat Research Labs• Supported 24x7 by global Security

Operations Centers

Tokyo

Global DDoS scrubbing backed by threat intelligence


Global - Adaptive Network Security Gateways

20

IP POP Co-Location - 40 by year end 2016 and more than 100 globally in 2017*

* Roadmap reflects Level 3’s plans as of May 2016. Subject to change at Level 3’s sole discretion.

Level 3® Enterprise Security Gateway service consists of next generation firewallpolicy rules, device configurations, management, monitoring and break-fix service.


• Next-gen firewall / Intrusion detection and prevention

• Web content filtering• Anti-malware• Data loss protection• Endpoint protection / Remote access• Carrier agnostic access


*Gartner “Magic Quadrant for Network Services, Global,” by Neil Rickard, Bjarne Munch, January 14, 2016; Gartner Critical Capabilities for Wireline Telecom Services, U.S. Danellie Young and Sorell Slaymaker U.S. February 29, 2016Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

Strong Industry Recognition

Level 3 Positioned in the Challengers Quadrant in the 2016 Gartner Magic Quadrant for Network Services, Global*2016 Level 3 Communications receives third highest product scores in Gartner’s Critical Capabilities for Wireline Telecom Services, U. S. report*

2016 Atlantic-ACM U.S. Long Haul Wholesale Service Provider Excellence in Service Delivery and Customer Service 2016 Large Service Provider Excellence Awards in Brand, Network Performance, Customer Service, Data Value and Voice Value

2015 MEF Ethernet Excellence Awards• Retail Service Provider of the Year – North America, Global, and CALA

Wholesale Service Provider of the Year – North America, CALA

Frost & Sullivan Best Practice Award in 2016 and 2015 for: • VoIP Access and SIP Trunking Product Line Strategy Leadership Award

2015 Frost & Sullivan Best Practices Award for: • Business Metro Carrier Ethernet Services for Competitive Strategy and Innovation

Leadership Award• VoIP Access and SIP Trunking Product Line Strategy Leadership Award2016 Vertical Systems Group mid-year Global Provider Ethernet Leaderboard2015 Vertical Systems Group year-end U.S. Carrier Ethernet Service Market

21

Presenter

Presentation Notes

We are making solid progress toward supporting our customer trends and their growth, efficiency and security challenges. Industry Organizations and Analysts are taking notice: In 2015 and 2016, we won a number of awards for our company, products, services, and leaders. A few of the top examples include:��[Examples noted on the slide]

enabling the adaptive enterprise - microsoft...

Documents