Presentation on theme: "Changing the Rules of Networking Introduction to the new HP Networking portfolio Alexander Kudryashov Networking Architect Alexander.Kudryashov@hp.com."— Presentation transcript:
1Changing the Rules of Networking Introduction to the new HP Networking portfolio Alexander KudryashovNetworking ArchitectFebruary 2011
3OBP Technical Presales Support Product Help !!!Technical information on:Product structure, features, functionalityTheory of operationCompatibility & connectivityPart numbers, options, licensingSupport statements, technical documentsOBP Technical Presales Support- English- RussianPartners, HP, Distributors, SIProduct features?Product structure?Overall functionality?Theory of operation?Compatibility and connectivity?Positioning vs. competition products?P/N for upgrades?P/N for spare parts?Product availability?Technical documents/links?Support statements?
4How Design Network ?! ENDC ! Gather information related to the network projectID of order!End customerNetwork structure (user, resource, servers), cabling)Solution needs (Security, high availability…)Any technical documentation related to the project (existing plan, RFP/RFI…) Send your information to ENDCWeb :
5Agenda Changing Rules of Networking Networking Portfolio Overview A Series SwitchesA Series RoutersE SeriesWirelessV SeriesS SeriesNetwork ManagementCompetitors overview
6+ + = HP Networking ProCurve Материал HP ограниченного распространения 11 April 20176Материал HP ограниченного распространения
8HP is Changing the Rules of Networking Bridging the Network Architecture GapHow we do it atModern OS and protocolsUnified Network Architecture - Wired/wireless integrationDV Labs Proactive SecurityModern architectureIntegrated security; Zero Day InitiativeBased on open standards50% lower power consumptionEnd-to-end single mgmtLeading warranties and svcs.What it means for CustomersOperational consistency Faster recovery/resiliencyFewer devices; lower CapexFaster deployment; Proactive protectionUp to 2x better performance2.3x more attacks blockedEasier integrationLower OpexBetter aligned resources; Comprehensive visibilityInvestment protectionReduced Network ComplexityHigher Performance and FlexibilityOur end-to-end story can really help bridge that networking gap and translate into significant benefits to the customers. Bottomline for us is we’re delivering three key things to our customers:We’re taking the complexity out of networking through modern technology and design principles and proactive security, which means our customers benefit from improved operational efficiency, fewer devices required and faster deployment.We can deliver higher performance and give customers the flexibility they need to manage their business.We offer a lower total cost when you factor in our management capabilities that make it easier to control the network, lower price points and reduced power consumption, and the fact we’re based on open industry standards give customer piece of mind that their investment is in good hands because of our leading warranties and services. Things break, we know this, and no one is better at protecting our customers investments than HP.Lower TCO
9Changing The Rules With Experience & Expertise Long history of success30 years in networkingFastest growing vendor since 2001#2 vendor in Enterprise NetworkingCustomer Intimacy60% increase in networking-focused sales specialists5,500 enterprise sales with Converged Infrastructure focusTechnical expertise5,000 certified network professionals14,000 networking certificationsDeep practices in network migration, unified comms, andbusiness transformationPartner Ecosystem40,000 networking PartnersGlobal coverage with sales, delivery and supportHP will run on HP NetworkingCommitment to transform HP networking infrastructure to100% HP;Support 300,000 employees plus partners & suppliersIncorporate adjacent capabilities into network for increased capability, control, reliability, and choiceChange expectations about what to pay for and what to expect from networking and your networking vendorBuild service delivery capability across converged infrastructure from the data center to all clients, organizations, and partners
11Networking Portfolio Overview networking together.HP Confidential1111 April 2017
12Portfolio Design Centers by Family Large EnterpriseADVANCED & SECURITYDC/LAN SwitchingWAN RoutingMobilityNet ManagementSecurityESSENTIALLAN SwitchingMobilityNet ManagementSecurityEstablished TechnologyAdvanced TechnologyVALUELAN Switching Mobility WANSmall BusinessHP Confidential1211 April 2017
13Portfolio breadth and depth 11 April 2017Portfolio breadth and depthEdge to Core, Enterprise to SMBADVANCEDESSENTIALVALUESECURITYModular SwitchesHP A12500HP A9500HP A7500Top of Rack SwitchesHP A5810HP A5820HP A6600Server Blade SwitchHP A6120Fixed Port SwitchesHP A5800HP A5500HP A5120HP A36x0HP A3100HP IntellijackRoutersHP A8800HP A-MSR 50HP A-MSR 30HP A-MSR 20HP A7000WLANHP A-WX5004 ControllerHP A-WA2xxx Access PointsHP A3000 Wireless SwitchesHP A9000 Access Points HP A8760 Access PointHP A7760 Access PointManagementIMCNNMi NAModular SwitchesHP E8200HP E5400HP E4200Fixed Port SwitchesHP E5500GHP E4800GHP E3500GHP E2910GHP E4500GHP E25x0GHP E4200GHP E5500HP E3500HP E4500HP E2610HP E4210HP E2810HP E25x0WLANHP E-MSM7xx ControllersHP E-MSM4xx Access PointsHP E-MSM3xx Access PointsHP E-M110 Access PointHP E-MSM317 Access PointUnified CommunicationsHP UC ApplicationsHP VCX Connect PlatformHP VCX Enterprise PlatformHP VCX GatewaysHP 3x00 IP PhonesManagementPCM/PCM+IDMNIMTMS zl ModuleWeb Managed SwitchesHP V19x0HP V1810HP V1700Unmanaged SwitchesHP V14x0HP V2124HP V408WLAN/WANHP V1xx Wireless RoutersIPSHP S5100NHP S2500NHP S1400NHP S660NHP S330HP S110HP S10HP Core ControllerManagementSMSHP SMS ControllerAdvanced: For customers with large/complex deployments seeking advanced, full featured networking technology to drive competitive advantage with lower cost of ownership.Essential: For customers seeking essential proven technology that’s affordable and easy to use while providing scalability for future needs.Value: For value-conscious customers seeking reliable and easy-to- use connectivity solutions.Security: For companies that require world-class network Security solutions to proactively stop threats and deliver business continuityNote: “x” in a product series name indicates multiple series numbers are availableHP Confidential
14HP A Series SwitchesHP Confidential11 April 2017
15A-Family Modular Switches A12500 Series18 and 8-slot 6.6/3.3 terabit switchesUp to 144 (1:1)/576 (4:1) 10GB & 864 Gig portsNon-blocking, zero service interruption designArchitecture supports 40/100-GbEWire speed L2/IPv4/IPv6/MPLSIntelligent Resilient Fabric (IRF)A9500 Series12, 8 and 5-slot 1.4 terabit switchesUp to GB & 576 Gig portsLoad-sharing fabrics, redundant chassis, management, power supplies, fans IRF stackingA7500 Series10, 6, 3 and 2-slot, 1.2 terabit switchUp to 84 10GB and 504 Gig portsRed. main control; passive backplane; IRFIPv4, IPv6, OSPF, BGP, IS-ISA5800/A5810/A5820SeriesFamily of Gig & 10-Gig SwitchesBoth modular & fixed-port (up to 48 ports)Media & OAA module slots; IRF; IPv4/IPv6 AC and DC power options
16HP A12500 Datacenter switch PERFORMANCE FEATURES WHY IT WINS 6.6Tbps (13.32Tbps) switching /13’s latencyUp to 864 Gigabit ports or Gigabit portsVirtual Resilient Switch Fabric (IRF ®, RRPP)FEATURESFuture proof resilient architecture designed to support 40/100GE FCoENon-blocking, zero service interruption designFully distributed switching and software architectureSeparate control and forwarding planesIRF™ technology enables virtual chasswith sub 50 mS convergenceSupporting MPLSWHY IT WINSFuture proofed architecture – 40/100G, PoE+Management consistency via Comware OS and IMCHigh performance multi-core service modules2X the performance of CompetitorGreen Design – consumes 50% less power than CompetitorHP Confidential11 April 2017
17A9500 - State-of-the-art Enterprise Core Modular Switch PERFORMANCE857 Mpps forwarding / 1.4 GbpsUp to 192 ports 10GE or 576 ports GigabitVirtual Resilient Switch Fabric (IRF ®, RRPP)FEATURESExtensive high availability and securityHA / hot swappable modulesExtensive Layer 2 and Layer 3 featuresSupports integrated services, including Firewall, WLAN Controller, Load Balancer and Network MonitoringWHY IT WINSFuture proofed architecture – 40/100G, PoE+Management consistency via Comware OS and IMCHigh performance multi-core service modules2X the performance of CompetitorGreen Design – consumes 60% less power than CompetitorA9512A9508-VA9505
18A7500 – Flexible Enterprise Modular Switch Family PERFORMANCE714 Mpps forwarding / 1.2 TbpsSupports up to 84 ports 10 Gigabit and 504 ports GigabitVirtual Resilient Switch Fabric (IRF ®, RRPP)FEATURESExtensive High Availability and SecurityHA / Hot Swappable ModulesExtensive Layer 2 and Layer 3 featuresHigh PoE+ port densitySupports integrated services, including Firewall, WLAN Controller, Load Balancer and Network MonitoringWHY IT WINSFuture proofed architecture – 40/100G, FCoE, DCE, PoE+Management Consistency via Comware OS and IMCHigh Performance Service ModulesGreen Design – consumes 60% less power than Competitor1.8 X the performance of Competitor3 X the performance of Competitor (access)A7510A7506-VA7503A7506A7502A7503-S
19A5820X / A5800 Series Flex-Chassis PERFORMANCEWire speed Gigabit switches with 10-Gigabit portsA5820X – up to 24 port 10Gig per unit / 192 per stackA5800 – up to 80 port 1Gig per unit / 640 per stackFEATURESModules for 2 and 4 Port 10G interfaces, 16 port Gigabit interfaces, and Service ModulesFull management features for Enterprise deploymentsLayer 2/3/4 switching with adv Layer 3 RIP and multicast (OSPF / PIM) routingFull IPv6 routing and managementPoE+ readyWHY IT WINSUnique Flex Chassis design delivers chassis-like resiliency in a fixed form factorFlexibility allows multiple hardware configurations, including seamless 10GE upgrades and support for integrated applicationsEnterprise-class Comware OS with operational consistency across other Enterprise switches and routers24- and 48-port non-PoE Gigabit G models; 24- and 48-port PoE+ Gigabit + 4 – 10G models; 24-Port Gigabit SFP Fiber G switch model;48-Port Gigabit PoE+ and 4 1G SFP modelBuilding or Department Enterprise Core, High Density Aggregation and Access or Data Center Top-of-Rack Switch
20A-Family Fixed-Port and Blade Switches A5800/A5810/A5820 SeriesFamily of Gig & 10-Gig SwitchesBoth modular & fixed-port (up to 48 ports)Media & OAA module slots; IRF; IPv4/IPv6AC and DC power optionsA6600 Series*24 & 48-port Gig and 10GB TOR switchesF-to-B/B-to-F airflow, red. fans, PSUsA5500 Series24 & 48-port Gig switches w 10GB uplinksPoE/non-PoE; AC/DC; IRF; IPv4/IPv6A5120 SeriesLayer 2, Lite Layer 3 24/48-port Gig switches w 10GB uplinksA36x0 Series24 & 48-port 10/100 switches w Gig uplinksRedundant powerIPv4/IPv6 routingA3100 Series24, 16 & 8-port 10/100 Layer 2, Lite Layer 3 switches w Gig uplinksPoE/non-PoE; AC/DC; .1x & MAC AuthHP A6120 C-Class Server Blade Switches*Gig/10GB and 10GB10-GbE switch CEE capable* Product or some product features specifically designed for Data Center applications.
22HP’s Comprehensive Router Portfolio A8800A8802A8805A8808A8812A6600A6616A6602A6604A6608MSRMSR20 SeriesMSR30 SeriesMSR50 SeriesMSR20-1xMSR20-11MSR20-12MSR20-13MSR20-15MSR 900MSR 900MSR 920New modern architecture, leveraging common OS, management and network design/resiliency protocols
23A8800 Routers NP based, 10GE core Routers Key FeaturesBenefitsNP based 10GE distributed architectureInnovative architecture ensures better service and more applicationsCarrier- Class ReliabilityProvides continuous and stable multiple servicesManaged services (VPN, H-QOS, Security, OAM, Net stream, NAT)Ease the management and deployment of multiple servicesGreen DesignLower power consumptionOn this slide, let’s look at some key features and benefits of the SR8800 routers. One of the distinct features of the SR8800 is the NP based 10GE distributed architecture, which essentially delivers carrier-class reliability as well as performance. Also the product supports managed services such as VPN etc.On this slide, note in particular the Carrier-class reliability and Green Design. Higher reliability and lower power consumption result in lower TCO.
24A6600 Routers Open, Multi-core, Distributed Processing Routers Key FeaturesBenefitsAdvanced Architecture: Multi-Core CPU, distributed processing, Integrated application module supportInnovative architecture ensures better services and more applications.Integrated Multiple Services ProcessingNo additional cost for VPN, NAT, NetStream modulesEmbedded encryption and all-around security featureProtect business assets and reduce overall costsFlexible extensibility and compatibilityEase network upgrade and protect investment with backward-compatible modules.Carrier-class ReliabilityEnsure multiple services continuous and stableThe key features and benefits of the SR6600 are as follows:Advanced Architecture - Multi-Core CPU with distributed processingOAA Enabled platform - Innovative architecture allowing 3rd party vendors to create various applications and solutionsIntegrated Multiple Services Processing – No additional cost associated with VPN, NAT, NetStream modulesEmbedded Encryption and All-round Security Feature- Protect business assets and reduce overall costsFlexible Extensibility and Compatibility- Ease network upgrades and protect investment with backward-compatible modulesCarrier-class Reliability – Ensure that multiple services function in a continuous and stable manner
25MSR50 Series Reliable, Secure, Multi-Service Router Platforms Key FeaturesBenefitsExcellent processing performance;Concurrent service processing without compromiseConvenience of Routing, Switching, Voice, Security.Reduce capital investments and operational costsHigh ReliabilityEnsures services are continuous and stableUnified iMC management platformSimplifies operations by managing services using unified toolsIntegrated application supportDevelops a rich portfolio of applicationsExpands the scope of cooperationPromotes a win-win situationThe MSR50 family represents the high-end of the MSR series of routers. The MR50 delivers the following key features and benefits.Excellent processing performance - Concurrent service processing without compromiseConvenience of Routing, Switching, Voice, Security - Reduce capital investments and operational costsHigh Reliability - Ensures services are continuous and stableUnified iMC management platform - Simplifies operations by managing services using unified toolsOAA enabled - Develops a rich portfolio of 3rd party applications, and expands the scope of cooperation with 3rd party vendors, promoting a win-win situationAnother significant advantage of the MSR50 series product is the ability for you to have the WAAM (WAN Acceleration Application Module) plugged directly into the router to perform WAN optimization.
26MSR30 Series Flexible, Secure, OAA-Ready Multi-Service Router Platforms Key FeaturesBenefitsExcellent processing performance;Concurrent service processing without compromiseConvenience of Routing, Switching, Voice, Security.Reduces capital investments and operational costsUnified IMC management platformSimplifies operations by managing services using unified toolsIntegrated application supportDevelops a rich portfolio of applicationsExpands the depth of cooperationPromote a win-win situationThe MSR30 family is well-suited for the mid-size branch office, where it can provide the following key benefits:Excellent processing performance - Concurrent service processing without compromiseConvenience of Routing, Switching, Voice, Security - Reduces capital investments and operational costsUnified iMC management platform - Simplifies operations by managing services using unified toolsOAA enabled - Develops a rich portfolio of 3rd party applications and expands the scope of cooperation with 3rd party vendors, promoting a win-win situationHere again, keep in mind that you have the ability to use the WAAM module. It is very significant to note that other than Cisco we are the only company to offer truly integrated WAN Optimization.
27MSR20 Series Affordable, Flexible, Secure WAN and LAN Access Key FeaturesBenefitsExcellent processing performance;Concurrent service processing without compromiseConvenience of Routing, Switching, Voice, Security.Reduces capital investments and operational costsUnified iMC management platformSimplifies operations by managing services using unified toolsIntegrated 2 WAN and LAN portsTake advantage of fixed-configuration modelsNow let’s look at the MSR20 series routers, which are best suited for the remote branch office.Excellent processing performance - Concurrent service processing without compromiseConvenience of Routing, Switching, Voice, Security - Reduces capital investments and operational costsUnified iMC management platform - Simplifies operations by managing services using unified toolsIntegrated 2 WAN and LAN ports - Take advantage of fixed-configuration modelsTake a note that the MSR20 series does not support OAA modules, as other MSR models do.
28MSR 20-1X and 900 All-in-one Box Economical, Flexible, Secure WAN, Wired and Wireless LAN Access Key FeatureBenefitWireless, WAN, LAN, Voice, VPN firewall all-in-oneReduced overall cost, power consumption, space requirements and complexityCompact DesignDesktop or rackmount supportedFixed-port and modular designFixed ports to reduce costModular increase flexibilitySimplified managementWeb management, easy to deploy, especially for non-technical users
29MSR Series Competitive Advantages Multiple Service IntegratedData, voice SIP and H.323, LAN switching, WLAN, 3G, FW, IPSec/SSL VPN all-in-oneIntegrated Application Support: WAN optimization, VCX solution,Multiple Link AccessTraditional link: Serial, E1/T1, ADSL, G.SHDSL, ISDN/AM backup,High-density Ethernet access: WAN FE/GE, LAN 4/9/16/24-port FE, PoEMobility access: 11g/n WiFi, 3G;Full Security and Access ControlRouting and forwarding security: MD5, uRPF, Advanced ACL, TACACS+Service security: DAR (Deep application Recognition), EAD solution, anti-P2P, anti DOS attackVPN: L2TP/GRE/IPSec/SSL VPN.Easier Management and DeploymentIMC: intelligent Management CentreManagement tools: CLI, WEB, TR069The MSR series of routers is an excellent choice to run multiple services and multiple service integration. With MSR, H3C provides a better and more cost-effective solution, with full security and access control support. As with all H3C products, it’s much easier to manage and maintain a network using iMC.MSR Series Routers are built on the Comware V5 network operating platform, and fully support the legacy software features of the AR 18/28/46 Series, e.g. providing abundant network security features, supporting the Systems Network Architecture (SNA)/Data-Link Switching (DLSw) etc. In addition, this unified platform provides a backup solution based on backup center technology and VRRP, supports MPLS L3/L2 VPN and ADSL access, PPPoE Server/Client and IP multicast and offers a wealth of Quality of Service (QoS) features. Meanwhile, the Comware V5 operating platform supports IPv6, MPLS TE and an abundance of other features.In addition to the traditional VPN and security features such as L2TP VPN, GRE VPN, RADIUS, ASPF (Application Specific Packet Filtering), Portal etc, the Comware V5 software platform delivers further expansion and improvements in VPN and security features such as Firewall, IPSec VPN, MPLS VPN, CA, Secure Shell (SSH) protocol 2.0, intrusion protection, Simple Network Management Protocol (SNMP v3) etc.With keen consideration for customers’ investment, and based around the concept of investment protection, MSR series routers are designed with high performance-to-price ratio. As these products are compatible with the former SIC and MIM AR 28/46 modules, users can achieve significant and smooth upgrade with comparatively cost-effective investment. In addition, MSR series router provides high default hardware configuration, as exemplified by the memory, the CF card capacity etc.The MSR Series Routers provide Backup Center and VRRP technologies, ensuring the provision of a backup system in case of communication line failure or equipment failure. In this way, smooth data communication is ensured and the robustness, reliability of the network is enhanced. The backup center supports the backup load sharing function
31E-Family Summary Design Center Key Product Attributes Mainstream businesses: mid to largeTarget customer Attitude: Networking is a cost center, pragmatic, risk averseKey Product AttributesEasy to useHighly reliableModerately scalableFully managedLifetime warrantyHP Confidential11 April 2017
32E-Family Modular Switches E8200 Series12 & 6-slot switchesUp to 288 Gig/48 10GB portsRedundant management modules, backplane and power suppliesPoE, PoE+ and non-PoE modulesOptions for imbedded ONE, firewall, wireless and management servicesIPv4 routing and IPv6 hostE5400 Series12 & 6-slot switchesUp to 288 Gig/48 10GB portsPoE, PoE+ and non-PoE modulesOptions for imbedded ONE, firewall, wireless and management servicesIPv4 routing and IPv6 hostE4200 Series8 & 4-slot switches;Layer 2 with static routingCost effective 10/100/1000 connectivity with 10GB uplinks
33E-Family Fixed-Port Switches Layer 2 OnlyLite Layer 3Full Layer 3E5500 Series24/48-port Gig & 10/100 switchesSRN resilient stackingPoE/non-PoEE45x0 Series24/48-port Gig & 10/100 switchesPoE and non-PoEE4210 Series8/16/24/48-port 10/10PoE/nonPoEE4800G Series24/48-port switches w 10GB slotPoE and non-PoEE4200G Series12/24/48-port Gig switchesPoE/nonPoEE2810G Series24/48-port Gig switches with Gig UplinksE2910 Series24/48-port switches w 10GB slotPoE/PoE+ and non-PoEE2520 Series8/24-port Gig & 10/100 PoE switches with Gig UplinksE3500 Series24/48-port Gig & 10/100 switchesPoE/PoE+ and non-PoEIPv4 Routing/IPv6 hostE2610 Series24/48-port switches with Gig uplinksPoE, partial PoE and non-PoEE2510 Series24/48-port Gig & 10/100 switches
34The HP-E ONE Services zl Module HP ProCurve ONE Services zl Module:Intel T7500 Core 2 Duo, 4G Main Memory, 4G Flash, 250G HDD2 x 10G Ethernet connections to backplaneFuture plans include virtualization, scalability, other form factors, and closer coupling with the management and forwarding planeThese systems support both LAN and WLAN deployments.Some apps can benefit from this close coupling with the network - through control of the forwarding plane and influence over packet forwarding decisions. We will provide access to allow applications to tap into the rich ProVision-ASIC-based network processors on every one of our ports to offload packet forwarding decisions from the application blade into the switch hardware; providing huge scalability advantages for an embedded application.Supported in zl series chassis:5400zl for edge & branch (4U / 7U)8200 with high availability for core and distributionHP-E Switch 8212zl
35HP HP-E TMS zl Module Real-time threat detection and mitigation: Stateful firewall with deep packet inspectionIntrusion detection/prevention system (IDS/IPS)IP Security (IPsec) VPNIntegration with PCM+/NIMThe TMS zl Module is a multifunction security system comprising a stateful firewall, intrusion detection/prevention system (IDS/IPS) with signature update service, network address translation (NAT), and virtual private network (VPN) concentrator. It enables network administrators to compartmentalize department traffic, protect the network from malware, and provide secure remote access and site-to-site connectivity. Your mid-market business customers can use TMS modules to increase network security without creating unnecessary complexity with separate devices.The TMS zl Module is an ProCurve ONE zl Services Module that runs the Threat Management Services product software. As such, TMSzl modules integrate with the 5400zl and 8200zl server chassis, eliminating the need for extra rack space and extra cables, and providing an easy-to-use management interface. Tight integration with the networking hardware also boosts performance. Multiple TMS modules can also be managed by PCM+—by way of its plug-in, Network Immunity Manager—which as you have seen provides a single interface for managing switches and access points in addition to TMS zl modules. Single-pane-of-glass management decreases the complexity and cost of managing these different devices.The TMS module can be deployed in many different environments, and can be used in different scenarios at the same time, providing only one of its three major services or all three at once. When multiple TMS modules are used, as shown in the network diagram on the previous slide, a highly available environment can be created, preventing downtime cause by power outages and other disruptions.
37UNA Enables Single Wired and Wireless Access Layer HP Unified Network Access Redefines Edge ConnectivityWired-like WLAN Reliability and PerformanceIntegrated n for increased capacity and coverageHighest capacity WLAN solution in industryLeverages high availability features of core chassis platformIncreases Overall Network Security and Policy ControlWired security benefits extend to WLAN: IPS, EAD, UAMSimplified security: identical user security, policy and QoS profiles for wired and WLANLowest TCOIntegrated network mgmt and Common OS reduces complexity and IT training/personnel - lowers deployment and maintenance costsIntegrated WLAN and highest AP management capacity reduces required hardware, lowers CAPEX by 25%UNA Enables Single Wired and Wireless Access LayerUnified NetworkAccessReliability &PerformanceSecurityLowest TCOHP Confidential11 April 2017
38Radically Simplify Design & Operations Legacy – OverlayNow and Future – UNAWLANWired LANWired Switch with IntegratedWireless LAN ControllerWLAN Net MgmtNet MgmtUnified Network AccessWLAN ControllerHP unified network Access (UNA)Wired-like WLAN Reliability and PerformanceIntegrated n for increased capacity and coverageHighest capacity WLAN solution in industryLeverages high availability features of core chassis platformIncreases Overall Network Security and Policy ControlWired security benefits extend to WLAN: IPS, EAD, UAMSimplified security: identical user security, policy and QoS profiles for wired and WLANLowest TCOIntegrated network mgmt and Common OS reduces complexity and IT training/personnel - lowers deployment and maintenance costsIntegrated WLAN and highest AP management capacity reduces required hardware, lowers CAPEX by 25%Unified Network/Design, Policy, Security and NMS across Hardware, Software and ManagementSeparate, Disjointed Networks, Policy, Security and NMS
39HP A-Series Unified Network Access WLAN Portfolio Unified SwitchesWLAN ControllersWLAN Controller ModulesHP A3000-8G-PoE+HP A G-PoE+HP A7500 Access Controller ModuleHP A-WX5004ControllersHP A G-PoE+HP A5800 Access Controller ModulesHP A9500 Access Controller ModuleIndoor APsRuggedized APsHP A-WA2110A/G Single RadioAccess PointsHP A-WA2620N Single RadioHP A-WA2610N Single RadioHP A-WA2620EN Dual RadioHP A-WA2620XN Outdoor AP*Q4CY2010As you can see here with the portfolio, we offer a range of access points, including single and dual radio .11n AP for support of indoor office environments, plenum environments and outdoor applications. Most Aps can be configured as either ‘Fit’ or ‘Fat’, to interface to controllers or operate independently.In terms of controllers, we offer integrated wired and wireless access controllers, starting with the 3024 that can manage up to 48 APs through standalone and integrated modules that can manage up to 256 APs with the WX5004 and A5800 module or 640 APs on the S7500E and S9500E modules.Some key wireless features include:Performance FeaturesLayer 2/3 AP/Controller Discovery16 SSIDs per radioRate LimitingDistributed Forwarding on ALL APsLoad Balancing by # of Sessions or PerformanceIntelligent RF ControlController redundancyService-enabling FeaturesWeb PortalLocal AAA RADIUS ServicesLocal MAC Authentication databaseLayer 2/3 Seamless RoamingQoS/WMMCACAuto-Voice VLANsHP A-WA2220A/G Dual RadioHP A-WA2612N Dual RadioNew modern architecture, leveraging common OS, management and network design/resiliency protocols3939
40Industry-leading WLAN Capacity and Scalability Highest Capacity WLAN solutionSupports 640 APs from single controller moduleSupports 256 Aps from single 1U controller20,000 users per controller moduleMAC Address Table – 24,000 per controller module20Gb/s of wireless throughput per controller moduleLocal WLAN SwitchingIntelligently streamlines network performanceEliminates WLAN controller bottlenecksWLAN Traffic Load BalancingBalances network load to maximize user experienceUnified SwitchesWLAN ControllersHP A3000-8G-PoE+HP A G-PoE+HP A-WX5004HP A G-PoE+WLAN Controller ModulesA9500 ModuleA5800 ModuleA7500 ModuleWLAN ‘Overlay’ complexity leads to poor reliability, reduced performance and susceptibility to security breachesWired and Wireless LAN must be managed as an integrated system- if not, it is difficult, if not impossible to accurately configure a system, correlate alarms and events, etcSingle pane visibility of entire networkCommon OS provides consistent interfaceProvision, monitor, configure WLAN and Wired LAN in consistent mannerIncrease network reliability and performanceSeamless network maintenanceMaximize efficiency; Minimize training & costUnified Net Mgmt extends network utilityAnchor simportant features that span the wired, wireless network, not to mention other network functions…Extends benefits of Wired solution to WLANIntegrates Access & User Management, Security, Alarming, correlation of eventsThe H3C Integrated Wired/WLAN solution is anchored by IMC Network Management. IMC provides a single pane of glass system mgmt solution that truly integrates configuration, provisioning, monitoring and control of WLAN and Wired solution. It makes possible, for the first time, a consistent mgmt interface between WLAN and the core data network, simplified end-to-end system configuration, correlation of events and alarms between wlan and wired network. This eliminates the need to to train personnel on multiple mgmt platforms, streamlines network deployment and maintenance and eases the burden of network troubleshooting by quickly identifying root cause of issues.
41E-Family Wireless CONTROLLERS ACCESS POINTS E8200/E5400 Series Wireless Controller ModuleMSM765 moduleSupports from 40 to 200 APsE-MSM760Wireless ControllerApplianceSupports from 40 to 200 APsCONTROLLERSE-MSM710Wireless Controller ApplianceSupports up to 10 APsE-M100, E-MSM3xx,E-MSM4xx SeriesSingle / Dual / Tri radiosIndoor and outdoor802.11a/b/g/nE-MSM 317 Access DeviceIntegrated Access Point and SwitchACCESS POINTS
42Access Points Managed (Scale) WirelessEnterprise Class Wireless Solutions (Family A & E)E series A seriesHP Advantages:Seamless unified wired and wireless architectureOperation simplicity through single management consoleOptimized .11n architectureSignificantly Reduced TCOTechnology innovationSuperior solution scale from 3 – 640 Access Points per device640 APsA7500 ModuleA9500 Module ( )300 APs200 APsA5004A Module(64-256)E-MSM760E-MSM765 Module(40-200)125 APsAccess Points Managed (Scale)100 APs50 APsA3000(4-48)25 APsMSM317 innovation example for vertical optimization. Hotspot in a box for hospitality10 APsE-MSM710(3-10)5 APs
44V-Family Summary Design Center Key Product Attributes The V-Family is designed to meet the wired switching, wireless, and WAN networking needs of small businesses (<100 nodes)Customer: Do it yourself/non-technical small businessKey Product AttributesDevice ManagementSingle-Device managementWeb GUINo centralized managementLimited CLI/SNMP supportDesign CenterSW is bug fix onlyHW is merchant siliconRapid TTMNo guaranteed feature roadmapWarrantyMix of 3-year and LifetimeEnterprise-class phone support• Device-level management needed (no centralized management).• Simple, reliable connectivityWhen to sell:Primary Competitors:• Price is primary decision factor• Bug fix only, no guaranteed product lifecycle/feature roadmaps• D-Link• Netgear• Cisco Small Business• Allied Telesyn SMBHP Confidential11 April 2017
45V-Family Smart Managed/Unmanaged Switches V1910 Series16, 24 and 48-port Gig switchesStatic routing; PoE and HPoEV1405 Series5, 8, & 16-port compact Gig & FE switches16 & 24-port rack-mount Gig & FE switchesV1905 Series8, 24, 48-port 10/100 & 10-port Gig switchesACLs; PoE and non-PoEV1400 Series8-port (fanless) & 24-port Gigabit switchesV1900 Series8-port Gig switch802.1x, Spanning Tree & SNMPV2124 Series24-port 10/100 switchwith 100-FX transceiver slotV1810 Series8 and 24-port Gig web managed switches8-port is fanless & can be powered via PoEV408 Series8-port fanless 10/100 switchV1700 Series8 and 24-port 10/100 switchesWeb managed
46V-Family WLAN / WAN WIRELESS ROUTERS WIRELESS V110 V10ag V-M200 Wireless n routersMultiple ADSL optionsFour 10/100 LAN portsWIRELESS ROUTERSV10ag802.11a/g Access PointCan be powered by PoEV-M200802.11a/g/n Access PointCan be powered by PoEWIRELESS
48HP TippingPoint S-Series Products IPS Platform SolutionsSecurity Intelligence10GE Networks, Core, Data Center, Service Providers…ROBO, Perimeter, Zone isolation, MSPs…Management, AccessoriesDVLabs ServicesTippingPoint S10TippingPoint S660NCore ControllerDigital Vaccine20Mbps • 2 Segments750Mbps • 10 Segments20Gbps • 3x10GbEBroadest Coverage • Evergreen ProtectionTippingPoint S110TippingPoint S1400NSecurity Management System (SMS)Web App DV and Scanning100Mbps • 4 Segments1.5Gbps • 10 SegmentsManage Multiple Units • Central DashboardWeb Scan• Custom Filters • PCI ReportTippingPoint S330TippingPoint S2500NSSL Appliance S1500ThreatLinQ300Mbps • 4 Segments3Gbps • 11 SegmentsTransparent SSL Bridging and Off-LoadingReal Time Threat IntelligenceTippingPoint S5100NvController and VMCReputation DVAvailableJune 7th, 20105Gbps • 11 SegmentsVirtual Data Center Security & VisibilityIP Reputation • DNS Reputation
49IPS Platform Introduction Automated, Scalable Threat ProtectionSecurity Management SystemDirty TrafficGoes InClean TrafficComes OutIPS PlatformDesigned for future security demands and servicesSlide 9:TippingPoint new IPS PLATFORM provides automated and yet scalable threat protection.Our new IPS Platform is a simple security device that sits inline in the network. It receives dirty traffic, blocks all of the malicious content, so that only the clean traffic comes out. But there are 3 components to our solution:The IPS Platform itselfThe TippingPoint Security Management System that manages security policies on a single IPS Platform to hundreds deployed globally.And finally there is DVLabs which is our security research organization that supplies the security intelligence feeds to our customers IPS Platforms.And every one of our IPS Platforms are built with the same key strengths that TippingPoint products have always been known for.Namely they have the best RELIABILITY, PERFORMANCE, and ACCURACY in the industry, meaning we don’t negatively impact uptime, performance, or latency.And they provide the fastest and broadest security coverage in the industry because of our leading security research team.And finally because our products are the easiest in the industry to deploy and manage they help companies reduce their overall security costs.But our new IPS Platform is also designed to accommodate future security demands and the convergence of new security services.ProactiveIn-line reliabilityIn-line performance (throughput/latency)Filter accuracySecurityLeading security researchFastest coverageBroadest coverageCostsQuick to deployAutomated threat blockingEasy to manage
50TippingPoint IPS Platform Leading security research – DVLabsIPS Platform is Only as Good as its Security IntelligenceZero-Day InitiativeDVLabsLeading security research and filter development1,000+ Independent ResearchersThreatLinQ MonitoringDVLabs Research & QATippingPoint IPS Platform2,000+ Customers Participating30+ Dedicated ResearchersSlide 14:But it’s our DVLabs security research team that provides the Security Intelligence that runs on every TippingPoint IPS Platform. And DVLabs is the leading security research and filter development organization in the industry. One of the reasons for they are the leading security research team is the 30+ dedicated security research and QA professionals on the team. But it’s also because of the 1,000+ independent researchers that stand behind DVLAbs as part of the TippingPoint Zero-Day Initiative. And the 2,000+ TippingPoint customers that participate in the ThreatLinQ monitoring program that is used by DVLabs. And the variety of partners that work directly with DVLabs, like the software vendors that we work with on every single software vulnerability that we discover and report.PartnersDVLabs Services:Digital VaccineWeb App DV & ScanningReputation DVCustom DVThreatLinQLighthouse ProgramSANS, CERT, NIST, etc.Software & Reputation Vendors
51Leading Security Research – DVLabs Discovers 8-10 Times More Software VulnerabilitiesSlide 21:One way to easily see DVLabs industry leadership is to look at their research results.Over the last 4 years TippingPoint has discovered more than 8 times more software vulnerabilities than our nearest competitor. And in 2009 year to date, TippingPoint has discovered almost 12 times more software vulnerabilities than our nearest competitor.
52The HP Network-Embedded IPS Platform 11/04/17The HP Network-Embedded IPS PlatformTippingPoint IPS module in A7500: Full TippingPoint IPS Solution with Reputation Service and Digital VaccineFlexible Deployment Scenarios to secure traffic between network segments directly from the chassisA unified network and security management framework based on TippingPoint’s Security Management System (SMS) and HP’s Intelligent Management Center (IMC)1.3 Gbps Inspected per bladeMultiple blades per chassis (up to 10) for scalability and HAHP A7500 Switch SeriesThe TippingPoint network security solution, including the TippingPoint IPS, TippingPoint Security Management System (SMS), and its world class Digital Vaccine® Service, protect enterprise networks across the globe. Now the industry-leading IPS platform is available as a network-embedded security blade for the A7500 series switch chassis, providing greater network integration and cost savings without compromising performance or security.The TippingPoint SecBlade 1200N IPS module is a full TippingPoint IPS solution embedded in the A75000 Chassis. It enables the integration of the TippingPoint advanced IPS solution directly into the chassis through backplane connectivity, while providing the capability to use external ports on the blade similar to a traditional IPS solution.The TippingPoint IPS blade, including the TippingPoint IPS, TippingPoint Security Management System (SMS), and its world class Digital Vaccine® Service, provides the same high degree of performance and security as their comparable appliances which have been protecting enterprise networks across the globe.HP TippingPoint S1200N IPS ModuleHP Confidential
53SecBlade Integrated Security Defense in Depth Security PortfolioAccess ManagementIMC EADIMC GAMIMC UAMSecBlade Integrated SecurityFWIPSSSL VPNNetStreamLoad BalanceSecPathUTMU200-SU200-MU200-APerformance:F-Series VPN FW - FW: 200Mbps / VPN: 60Mbps up to FW: multi-10 Gbps / VPN: multi-10 GbpsScalable to thousands of VPN TunnelsMillion+ sessions at high performanceU-Series UTM (FW: 200Mbps / AV: 20Mbps up to FW: 1000Mbps / AV:100MbpsSecPathFirewall/VPNF100-AF1000-SF1000-AF1000-EF5000-A5353
55Our Network Management Vision An integrated approach to managementManagement & monitoring of not just the network but also the services, applications & users which depend on itIntelligence through application layer monitoring & behavioural analysisIntegrated solutions for all infrastructure technologiesDriving the adoption of secure, real-time servicesEnabling next-generation network applicationsTrue multi-vendor networkingProvide genuine choice rather than proprietary ‘lock-in’End the proliferation of vendor-specific toolsUser CentricCreating user-specific network environmentsIntegration of the network with business applications to allow user management rather than device management55
56IMC - Single Pane Management for the Entire Network Supports HP and 3rd party devicesIncludes comprehensive support for Cisco devicesFully integrated, comprehensive Management platformBased on a Resources, Services and Users modelDelivers full FCAPS solutionDesigned to support ITIL initiativesRich Enterprise class functionalityData Centre OrchestrationUser Access Management (UAM) & Endpoint Admission Defence (EAD)MPLS, VPLS, MPLS VPN & Wireless ManagementClient Server & Service Orientated Architecture (SOA)Enables highly integrated modules to deliver new functionalitySOA – Service Orientated Architecture.
57Comprehensive Management of Cisco Devices IMC provides comprehensive management of Cisco devicesDiscovery & TopologyMonitoring & Performance ManagementData Center OrchestrationEvents & TrapsConfiguration Backup & RestoreConfiguration comparisonBase-lining and change notificationBulk ConfigurationSingle management solution for mixed HP & Cisco networksSimplifies Cisco / HP interworking & transitionsSupport for >2000 3rd party devicesNew device can be added in <1 week
67Superior technology deployed around the world Financial ServicesTransportation and LogisticsManufacturingOil and GasRetailHospitalityTORINOMedia, Internet SoftwareTelecomHealth CareGovernmentEducation