Infoblox Network Automation Matt Gowarty, Sr. Product Marketing Manager Dynamically Controlling Your Network

Complexity Outpacing Resources © 2013 Infoblox Inc. All Rights Reserved.2 TasksTasks  Discovery and network analysis  Reduce risk & ensure compliance  Increase productivity & network availability  Shorten time to deploy services Time Quantity/Size Network Management Resources Network Infrastructure Demands Network Scale & Complexity  More complex work  Increased expectations  Menial tasks  Distracted focus

The Power of Infoblox Network Automation © 2013 Infoblox Inc. All Rights Reserved.3 3 IP & Device Management Cross Functional Enablement Policy Enforcement & Audits Task Delegation Task Delegation Dynamic Provisioning Dynamic Provisioning Change & Config Automation Dynamic IPAM Sync Network Auto- Discovery Infoblox Network Automation Infoblox Network Automation

Solving Business Problems Eliminate network bottlenecks to deploy services & apps Shorten time to delivery Empower IT staffing Support growing IT needs with existing IT staff Reduce risk of policy violations and non-standard networks Ensure ongoing compliance

Infoblox Network Automation © 2013 Infoblox Inc. All Rights Reserved.5 5 Discover Automated Network DiscoveryChange & Configuration Management Automate Compliance & Policy Standardization Maintain Firewall ACL & Rule Automation Control

Infoblox Network Automation Overview Network discovery Built-in analysis Check against best practices Detect issues Monitor and manage change Automate change Maintain compliance Provision ACL & rules Collected Via: SNMP CLI/configuration Syslog Fingerprinting Real-time & Historical Analysis © 2013 Infoblox Inc. All Rights Reserved.6

What’s On and Connected to My Network? Manual, spreadsheets and/or scanning tools Often out of date Tight budgets and stretched teams Multi-vendor network devices Proliferation of IP devices Ever-changing questions What’s on my network? Which ports are active? Do I need more capacity? What device is using which port? When & where did they connect? 7 © 2013 Infoblox Inc. All Rights Reserved.7

Network Auto-Discovery 8 Automatic device discovery Extensive multi- vendor support Layer 2 physical & 3 logical data Integrated topology views New device detection Detailed VLAN information © 2013 Infoblox Inc. All Rights Reserved.8

Switch Port Management 9 Track free vs. available port Identify unused ports Capacity planning & management Track connected end-hosts/devices History of what connected when and where Track devices/MACs by specific VLANs © 2013 Infoblox Inc. All Rights Reserved.9

Automated IPAM Sync 10 Integrated with Infoblox IPAM Auto-created networks Synced device details within IPAM IP map correlation Updated smart folders All automated – no manual steps © 2013 Infoblox Inc. All Rights Reserved.10

Keeping Up with Daily Changes Extensive manual processes CLI Scripting Limited functionality Configuration scrapes Basic change automation Vendor-specific tools Minimal control & documentation Limited work-flow Admin or nothing access rights Massive files require extensive manual digging and compiling 11 © 2013 Infoblox Inc. All Rights Reserved.11

Change Management Automatic change detection Accurate job flow and control Every change at fingertips Saved historical configurations Simple side by side comparisons Powerful configuration search © 2013 Infoblox Inc. All Rights Reserved.12

Change Automation Embedded jobs and scripts Templates for easy customization Easily import existing Perl scripts Powerful variable- based jobs User-based, role access controls Scheduled and triggered jobs © 2013 Infoblox Inc. All Rights Reserved.13

Intuitive Change Control Simplified switch port changes Strong user access rights Network tasks within NIOS GUI Enable single touch for common changes User initiated and triggered tasks Automatic detailed updates and sync © 2013 Infoblox Inc. All Rights Reserved.14

Is My Network Still Compliant? Different drivers External mandates Internal security policies Networking best practices Typically reactive When something breaks When audit is required Manually intensive Massive log files CLI access Manually collect, aggregate, tabulate and present findings 15 © 2013 Infoblox Inc. All Rights Reserved.15

Policy and Compliance Management 16 Embedded compliance rules Customizable best practice templates Manage multiple policies Proactive violation detected Multiple remediation options Current and historical views © 2013 Infoblox Inc. All Rights Reserved.16

Configuration Analysis 17 Unique pre-packaged expertise Identifies common misconfigurations Customizable alerting Recommended remediation options Understand concept of the network Network Scorecard views © 2013 Infoblox Inc. All Rights Reserved.17

Powerful Reporting 18 Single-click compliance reports Pre-packaged and customizable Powerful filtering Executive and detailed reports On-demand or scheduled User-based view rights © 2013 Infoblox Inc. All Rights Reserved.18

So Many Firewall Changes – So Little Time © 2013 Infoblox Inc. All Rights Reserved.19  Spike in number of security policy changes  IT headcount not keeping pace  Multiple point products add confusion  Network SLAs impacted negatively  Expensive and diminishes security effectiveness Manual Firewall Change Needed Hours/DaysNetwork Provisioning Time Search For Devices 1 Figure Out Impacted Devices 2 Determine Correct Config 3 Compare Change to Standards/ Compliance 4 Request Change/ Implement Manually 5 Reconfirm Correctness and Compliance 6 LEGACY APPROACH TO FIREWALL POLICY CHANGE IMPLEMENTATION

Rule and ACL Analysis Built-in multi-vendor expertise Automatic alerts of common issues ContinuousmonitoringContinuousmonitoring Finds hidden, over- lapping & duplicates Automated discovery Topology path views views © 2013 Infoblox Inc. All Rights Reserved.20

Search and Alerting CustomizablesearchesCustomizablesearches Flexible multiple device options Flexible multiple device options Blacklisting reduces risk Blacklisting Whitelisting ensures access Whitelisting Automatic alerts “Simple English” commands commands © 2013 Infoblox Inc. All Rights Reserved.21

Integrated Provisioning Integrated provisioning Creates vendor- specific syntax Push changes to one or multiple devices User-based access controls User-based Testing and rollback options Testing and rollback options Change monitoring and tracking © 2013 Infoblox Inc. All Rights Reserved.22

Taking Automation to the Next Level © 2013 Infoblox Inc. All Rights Reserved.23 Improve capabilities with dynamic value look ups Dynamic Better configurations based on understanding neighbors Topology Maintain control with role-based access and rights Control Reduce time with multi-device coordinated change Flexibility Eliminate scripts by leveraging intuitive GUI across multiple vendors and devices Ease of use

Infoblox Network Automation Dynamically Controlling Your Network