1. KEMP LoadMaster for Office365 Deployment
Jan Hindolff
Country Manager Nordics
KEMP Technologies
Mikael Lange
Pre-Sales Manager Nordics
KEMP Technologies

2. Agenda Intro of KEMP Technologies
KEMP LoadMaster for Office365 deployment
KEMP/Microsoft NDA Confidential

3. About KEMP What We Do The KEMP Difference
Make applications highly available
Improve scalability & performance
Secure and optimize application delivery
The KEMP Difference
Application/workload-centric
Platform independence/ubiquity
Easy to purchase, deploy and use
End Users
& Devices
Application
Workloads

4. About KEMP
New York City
Limerick
Munich
Singapore
Santa Clara

5. Strategic Partnerships

6. Technology Overview – the basics of Load Balancing
Secure
Application Firewall, IDS, IPS
Authenticate
Forms, RADIUS, 2FA, CAC, KCD
Persist
Cookie, SourceIP
Health Check
TCP, UDP, application
Load Balance
RR, Connection SDN Adaptive

7. Delivery Methods Cloud Bare Metal Virtual Cloud Hardware
Convert standard HP, Dell, Fujitsu and Cisco server platforms into full-featured, high performance ADC appliances making it possible for customers to capitalize on their existing vendor investment and achieve unparalleled app delivery performance levels.
Bare Metal
Created to support KEMP’s focus on private cloud while delivering mainstream hardware performance levels, Virtual LoadMaster provides a feature-complete solution with a high level of mobility, provisioning and elasticity across a wide range of hypervisor platforms.
Virtual
The LoadMaster hardware appliances combine x86 architecture, high speed networking interfaces, ASICs dedicated to SSL handling and KEMP’s proprietary software to deliver predictable performance levels.
Support for popular IaaS platforms including Microsoft Azure, vCloud Air and Amazon Web Services allows LoadMaster to provide the comprehensive Layer 7 ADC services required by many applications as customers implement their hybrid or public cloud strategy.
Cloud
Hardware

8. Azure-Hosted Workloads
LoadMaster Workloads
Exchange 2010 / 2013
Lync 2010 / 2013
Remote Desktop Services
SharePoint
Dynamics
Office Web Apps
Azure-Hosted Workloads
ADFS
IIS
Custom .Net Applications
VMware Horizon View
VMware Workspace
CRM Systems
Apache Servers
Oracle E-Business Suite
Oracle Weblogic
IBM Websphere
Mobile Device Management
Unified Communications
Intranet Applications
SAP
Moodle
Blackboard
EMC Syncplicity

9. Application Firewall Pack- Features
L7 Web Application Firewall (WAF)
ModSecurity engine
OWASP Top 10 mitigation
Real Time threat protection
Supports PCI-DSS compliance
Data Loss Prevention
Intrusion Detection/Prevention       

10. KEMP AFP Solution Topology
Non HTTP/HTTPS Attack
Legitimate Use
Network
Firewall
WAF Enabled
LoadMaster
Application
Servers
HTTP/HTTPS Attack

11. LoadMaster – Hardware Appliances
LoadMaster Model
LM-2400
LM-3000
LM-4000
LM-5000
LM-5400
LM-5600
LM-8000
LM-8020
All LoadMasters include 1st Year Basic Support
Specifications
Application Throughput
1.2 Gbps
1.7 Gbps
6.0 Gbps
11.0 Gbps
10.2 Gbps
20.0 Gbps
30.0 Gbps
Gigabit Ethernet Ports 4 2 8
10 Gigabit Fiber Ports (SFP+)
N/A 6
SSL TPS (2K Keys)
200
1000
2500
5000
7000
10,000
16,000
30,000
SSL TPS (1K Keys) 
2000
9,300
17,000
25,000
46,000
Layer 4 concurrent connections 
4,300,000
8,600,000
15,200,000
26,600,000
25,600,000
75,800,000
Real Servers / Virtual Services Supported
1000/256
1000/500
1000/1000
Web Application Firewall Pack (AFP) ü
TMG Replacement (Authentication, SSO) 
GSLB Multi-Site Load Balancing
Redundant Hot-Swap Power Supply
HTTP Compression
Content Caching
RESTful API

12. LoadMaster – Virtual Appliances
LoadMaster Model
VLM-200
VLM-2000
VLM-5000
VLM-10G
All LoadMasters include 1st Year Basic Support
Hypervisors and Cloud Platforms Supported
VMware vCloud Air ü
Microsoft Azure*
Amazon Web Services (AWS)*
VMware, Hyper-V, KVM, XEN, Oracle VirtualBox
Specifications
Balancer Throughput License
Up to 200 Mbps
Up to 2 Gbps
Up to 5 Gbps
Up to 10Gbps
SSL TPS License
Up to 200
Up to 1,000
Up to 10,000
Up to 12,000
Max Servers Supported / Virtual Clusters
1000/256
1000/1000
TMG Replacement (SSO, Pre-Auth, Security Logging)
GSLB Multi-Site Load Balancing
Web Application Firewall Pack (AFP)
HTTP Compression
Content Caching
RESTful API
* Hourly billing available ranging from $ $2.28 per hour USD MSRP

13. LoadMaster – Cloud Appliances
Use Case
By providing the same application delivery services available to on premise applications, Virtual LoadMaster running in vCloud Air, Azure and AWS reduces needed changes to applications as they are migrated. GSLB services and Ipsec VPN support also serve as key enablers to hybrid deployments.
Best Practices
Each cloud platform is different so have a clear understanding of unique network requirements; KEMP is here to help.
Take consideration of the platform’s fault domains for configuration of HA
If you have a working configuration in your on premise data center, use this as your starting point by porting it to your cloud LoadMaster instance
Customer example
Supply chain execution software provider, Accellos, leverages KEMP’s LoadMaster for Azure to support its suite of customer facing cloud services in Azure, enabling customers to remove cost and complexity.

14. LoadMaster – Bare Metal
LoadMaster Model
LMB-1G
LMB-2G
LMB-5G
LMB-10G
All LoadMasters include 1st Year Basic Support
Server Platforms Supported
Hewlett Packard ProLiant DL ü
Dell R Series
Oracle X4-2
Fujitsu Primergy RX
Cisco UCS C Series
Cisco UCS B Series
Ultra high performance licensing available
Specifications
Balancer Throughput License
Up to 1 Gbps
Up to 2 Gbps
Up to 5 Gbps
Up to 10 Gbps
SSL TPS License
Up to 1000
Up to 10,000
Up to 20,000
Max Servers Supported / Virtual Clusters
1000/256
1000/1000
TMG Replacement (SSO, Pre-Auth, Security Logging)
GSLB Multi-Site Load Balancing
Web Application Firewall Pack (AFP)
HTTP Compression
Content Caching
RESTful API

15. Customer Support Centers
Follow the Sun Support
EMEA
Americas
APAC

16. LoadMaster – Support
Worldwide Support Capability with 97% customer satisfaction
3 Levels of Support
Basic
Premium
Premium+
Services
Migration, Remote Configuration
Resources
Support for free Evaluation Units
Documentation and Deployment Guides
Application Templates

17. Typical Office 365 Deployment scenarios with KEMP Solutions

18. Virtual LoadMaster for Azure Introduction
Optimized to run natively inside of the Microsoft Azure Cloud as IaaS VM
Delivers full Layer 7 load balancing and application delivery services for Azure-hosted workloads.
Same feature set like on premise versions
Helps customers to seamlessly move their private cloud Enterprise applications into a hybrid deployment using Microsoft Azure and scale their app delivery services as needs increase.
A free commercial perpetual license with web support
Phone support is available for purchase
Paid upgrade version for higher performance are available

19. VLM for Azure Advantages
 Features
Azure Load Balancer
KEMP VLM for Azure
Network Level L4 load balancing
Yes
Application-Aware L7 load balancing No
High Availability
Yes using Traffic Manager
Hybrid Traffic Distribution
Load balance across Azure VNET regions
Yes (Internal Azure and external network)
Scheduling methods
Round Robin Only
L4 / L7
Server persistence
L4 / L7 (Cookie and more)
SSL Termination/Offload
Content Caching/Compression
Least Connection Scheduling
VM Resource Availability Awareness
Support Basic Tier VM (~20% Savings)
Support Standard Tier VM
Cost competitive.

20. Exchange Mailbox Migration to Office365
ADFS Proxy
ADFS Farm
Situation:
Migrate Exchange Mailbox to Office365
Need long running Source IP affinity
SSO with ADFS
ADFS.KEMPdemo.com
LoadMaster Solution:
Source IP affinity with configurable session timeout
Layer 7 Health Checking
Dedicated Template for Exchange
Exchange Specific Sizing Tool
Azure Site-to-Site VPN
ADFS.KEMPdemo.com
Data migration to Office365
ADFS Proxy
ADFS Farm
On Premise Data Center
Exchange Servers 20

21. Office365 Always-On SSO with ADFS
ADFS Proxy
ADFS Farm
Situation:
Integrating Office365 into hybrid solution
Ensure 24x7x365 access infrastructure
Need Always-On ADFS for SSO
ADFS.KEMPdemo.com
LoadMaster Solution:
Support for on premise or Azure-hosted ADFS
Support for hybrid solution
Support for LoadMaster HA
Layer 7 Health Checking
Support for Server Name Identifier needed for ADFS 3.0
Most deployment options to fit specific needs
Global Server Load Balancing (GSLB) capabilities allows enhanced DNS res
Ability to load balance both HTTPS and SMTP
Azure Site-to-Site VPN
ADFS.KEMPdemo.com
ADFS Proxy
ADFS Farm
On Premise Data center 21

22. ADFS in Azure

23. Easy to create via Templates and Deployment guide

24. With GEO Loadbalancing (GSLB)
We could configure the FQDN for ADFS both On Premise and the Cloud based
Using one VIP service all the time
In this case On Premise Data Center
GSLB is on both Azure and on the on Premise Datacenter.
GSLB is a DNS LB solution with a health check for the services on the LoadMaster.

26. Log in to Office 365

27. Redirected to the on Premise AD FS farm
So if we do a netstat we could see that we are connected to the on premise site.

28. Office365 Always-On SSO with ADFS
ADFS Proxy
ADFS Farm
LoadMaster Solution:
If the On Premise Data Center goes down?
Are we loosing the connection to Office 365 then?
ADFS.KEMPdemo.com
Azure Site-to-Site VPN
ADFS.KEMPdemo.com
So the GEO in the Azure is now telling us that the datacenter is down and we should now only direct traffic to the Azure enviroment.
ADFS Proxy
ADFS Farm
On Premise Data center 28

29. So if we now ping adfs.kempdemo.com
So if we ask for adfs.kempdemo.com we could see that the Azure site is now answering.

30. So if we do a new netstat we could see that we are connected to the azure site and not to the on premise site.

31. So combinding KEMP LoadMaster On-Premise and KEMP LoadMaster for Azure with the Azure networking Platform KEMP are able to create a highly availble hybrid solution to authenticate to Office365 with site resilience regardless of outages
Contact Info:
Jan Hindolff, Country Manager Nordics
Mikael Lange, Pre Sales Manager Nordics
KEMP LoadMaster Product Info:

32. Try a VLM. www. kemptechnologies
Try a VLM? days fully functional VLM-5000 with Premium support. Both for on premise and for Azure

33. Questions?