Who is Enterasys?

Enterasys Corporate Overview

Nikola Knežević, B.Sc.E.E.

Partner & CEO SOCP Consultant OpenScape Voice SOCA Service OpenScape Voice Cisco Certified Network Professional

Cisco Certified Network Associate - Voice

NES Communications doo Beograd ©2012 Enterasys Networks, Inc – All rights reserved.

Who is Enterasys?

 Originally founded as Cabletron Systems 25 years ago. Today we are part of the $5 billion joint venture with SIEMENS

 Enterasys ensures the performance, confidentiality, integrity, and availability of IT services and the business users that rely on them - Align the network with business application needs through identity-based “What you need, is what you get” policies - Service-oriented networks that ease deployment of priority & security by user and application - Ensure only the right users have access to the right information from the right place at the right time  Enterasys has thousands of customers in more than 70 countries - 100+ of the FORTUNE Global 500 - Strong presence in government and higher education  Company culture centered on the principle:

“There is nothing more important than our customers”  Visit us at www.enterasys.com ©2012 Enterasys Networks, Inc – All rights reserved.

Open Communication Portfolio

Services

Lifecycle

Professional

Managed

Hosted

UC Integration

Security

Devices and Clients

Voice

medium-to-very large SIP

Small IP UC system

Small IP system

Converged SME

Converged medium-to-large

Messaging

Mobility

Unified Communications UC Server

UC Application

Video

Contact Centers Contact Center

Campaign Management

Automated Outbound

Voice Portal

3rd Party Network Products

Networks Network Security Applications

Management Software

Switches & Routers

WLAN

Security

+ 3rd Party Partners

Business Continuity

Compliance

Identity & Privacy

©2012 Enterasys Networks, Inc – All rights reserved.

Threat Management & Data Security

Enterasys Proof Points Mission critical solutions active in all major markets Government

Healthcare

Hospitality

Evolving IT Landscape requires linking solutions to capitalize on industry trends

Manufacturing

Enterprises Education ©2012 Enterasys Networks, Inc – All rights reserved.

OneFabric Solutions Modular and flexible approach to solving network challenges

OneFabric Control Center (Unified security and management)

OneFabric Data Center

OneFabric Edge

OneFabric Security

One piece at a time. Evolve to a fabric-based network at your speed. ©2012 Enterasys Networks, Inc – All rights reserved.

Industry Data on Networking Challenges Calculated facts and figures

37%

90%

of network downtime is due to human error

of mean time to resolution is in identifying the problem

83%

75%

of a company’s network is used to “keep the lights on”

of problems are identified by end users, not through the IT department * Source: ZK Research November, 2011


Differentiating with Enterasys Innovation Delivering predictive management capabilities

Minimize or eliminate errors through visibility and automation

Predictive management of applications, networks, and devices

Comprehensive security and automation features allows for a fraction of IT resources

Real-time analytics and social media interface enables predictive management capabilities


Enterasys Access Edge Products Open and secure access edge for any wired or wireless client Wireless AP’s 

Industry’s only unified wired/wireless management



Industry leading performance



Industry’s only Lifetime Warranty

Chassis Switches K6, K10



Cost optimized, embedded application control technology



High performance, feature rich



Convergence ready – voice/video/data

Standalone/Stackable Switches – A4, B5, C5 & 800




Low cost standalone/stackables



High performance, port density



Industry’s best Lifetime Warranty

*Source: IDC

Enterasys Network Distribution Products Data aggregation requires resiliency & redundancy K6, K10 Chassis  Embedded distribution-layer security  High density, cost-optimized chassis  Highly competitive Lifetime Warranty

S-Standalone [SSA]



High performance, small footprint



State-of-the-art embedded application provisioning technology



Rich traffic control features

S3, S4 Chassis




Highly redundant architecture



Advanced POE support



10 year lifecycle design

*Source: IDC

Enterasys Network Core Products Extensible routing features connects large, distributed networks

S-Series – S4, S8

Voice Gateway Load



Highest density chassis

Balancer



40G/100G support



Rich routing feature set



Highly redundant design

UC Controllers


*Source: IDC

Enterasys Network Data Center Products Application delivery requires fast connectivity, high bandwidth S-Series – S4, S6, S8

Voice Gateway Load

Balancer



Highest density chassis



40G/100G support



Virtualization optimized



Highly redundant design



Supports top-of-rack or end-ofrow `

UC Controllers


*Source: IDC

Enterprise Network Management Products One management suite that unites a multi-vendor infrastructure OneFabric Control Center



Unified wired/wireless and 3rd party management



Centralized Voice and UC quality of service control



Social and mobile management interface



Network Access Control, BYOD, guest services

Voice Gateway Load

Balancer

UC Controllers


SecureStack A Series Stackable L2/L3/L4 Switch

Connectivity • 8 units per stack of switches

• 16000 MAC Address

• closed-loop stacking via RJ45

• Spanning Tree (802.1d, 802.1w, 802.1s)

• Redundancy of management

• 1024 VLAN 802.1Q

• Redundant Power Supply (optional)

• Link Aggregation 802.3ad

• Power over Ethernet IEEE 802.3af

• Remote Monitoring (RMON)

Convergence

Compliance

• Multi classification in layers 2/3/4

• Identity and user authentication

• Differentiated Services (DiffServ)

• Authentication 802.1x and MAC (RFC3580)

• 8 priority queues per port

• Integration with NAC Solution

• Management of queue Strict Priority and WRR

• MAC Locking per port dynamic and static


SecureStack A4 Series – Models

Models

Description

A4H124-24

24 x 10/100, (2) SFP Ports, (2) 10/100/1000 stacking/uplink RJ45 ports, Ext RPS

A4H124-24P

24 x 10/100 PoE (.af), (2) SFP Ports, (2) 10/100/1000 stacking/uplink RJ45 ports, Ext RPS

A4H124-48

48 x 10/100, (2) SFP Ports, (2) 10/100/1000 stacking/uplink RJ45 ports, Ext RPS .

A4H124-48P

48 x 10/100 PoE (.af), (2) SFP Ports, (2) 10/100/1000 stacking/uplink RJ45 ports, Ext RPS

A4H124-24FX

24 x 100Base-FX, (2) SFP Ports, (2) 10/100/1000 stacking/uplink RJ45 ports, Ext RPS

A4H254-8F8T

8 x 100Base-FX plus 8 x 10/100, (2) SFP ports, (2) 10/100/1000 stacking/uplink RJ45 ports, Ext RPS


800-Series Switches

Stackable L2 Switch


• 16000 MAC Address

• IEEE 802.3at high power PoE options

• VLANs Supported 225

• Optional redundant power for all models

• Traffic classification802.1Q




• Switching Capacity 104 Gbps

Convergence

Compliance


• IEEE 802.1X Port Authentication

• Multi-user Authentication Per Port

• MAC-based Port Authentication

• L2 Multicast Control

• IPv4 Static Routes / IPv6 Default Routing

• One-to-One and Many-to-One Port Mirroring

• Spanning Tree (802.1w, 802.1s)


Models

Description

08H20G4-24

24 port 10/100 800-Series Layer 2 switch with Quad 1Gb uplinks

08H20G4-24P

24 port 10/100 PoE (802.3at) 800-Series Layer 2 switch with Quad 1Gb uplinks

08H20G4-48

48 port 10/100 800-Series Layer 2 switch with Quad 1Gb uplinks

08H20G4-48P

48 port 10/100 PoE (802.3at) 800-Series Layer 2 switch with Quad 1Gb uplinks

08G20G2-08

8 port 10/100/1000 800-Series Layer 2 switch with Dual 1Gb uplinks

08G20G2-08P

8 port 10/100/1000 PoE (802.3at) 800-Series Layer 2 switch with Dual 1Gb uplinks

08G20G4-24

24 port 10/100/1000 800-Series Layer 2 switch with Quad 1Gb uplinks

08G20G4-24P

24 port 10/100/1000 PoE (802.3at) 800-Series Layer 2 switch with Quad 1Gb uplinks

08G20G4-48

48 port 10/100/1000 800-Series Layer 2 switch with Quad 1Gb uplinks

08G20G4-48P

48 port 10/100/1000 PoE (802.3at) 800-Series Layer 2 switch with Quad 1Gb uplinks


SecureStack B Series

Gigabit Ethernet Stackable Switch


• 16.000 MAC Address

• Dedicated closed-loop stacking



• 1024 VLAN 802.1Q



Compliance

Convergence • Multi classification in layers 2/3/4



• Authentication 802.1x, MAC, and PWA (optional)




• Secure Policies through Secure Networks


SecureStack C Series Gigabit Ethernet Stackable L2/L3/L4 Switch


• Routing IPv4 e IPv6

• Dedicated closed-loop stacking

• RIP, OSPF, VRRP, DVMRP, PIM e IGMP






• 1024 VLAN standard 802.1Q

Convergence

Compliance

• Multi classification in layers 2/3/4



• Authentication 802.1x, MAC, and PWA






G-Series

Connectivity • Switch-router – type modular

• Routing IPv4 e IPv6

• Swappable redundant power supplies


• Support up to 96 GbE ports or up to 12 10GbE + 24 GbE


• Power over Ethernet (PoE) IEEE 802.3af

Convergence

• Spanning Tree (802.1d, 802.1w, 802.1s) • 1024 VLAN 802.1Q

Compliance

• Multi classification layers 2/3/4






• QueueJunmanagement Strict Priority e WRR 09



G Series – Models

Models

Description

G3G124-24

24-port 10/100/1000 switch with two SFP combo ports and 3 modular expansion slots (power supply not included)

G3G124-24P

24-port 10/100/1000 PoE switch with two SFP combo ports and 3 modular expansion slots (power supply not included)

G3G170-24

24-port SFP switch with 3 modular expansion slots (power supply not included)

Input Output Modules (IOM) G3G-24TX

24 10/100/1000 port IOM with 2 Combo SFP ports

G3G-24SFP

24-port 1000BaseX IOM

G3K-2XFP

2-port 10GbE XFP IOM

G3K-4XFP

4-port 10 GbE XFP IOM

G3G-POE

Power over Ethernet daughter card


D-Series

Connectivity • Compact Switch with low noisy mechanism


• Recommended for classroom and meeting room


• Works in high temperature up to 60 ºC (50 ºC PoE)

• 1024 VLAN 802.1Q

• Redudant power supply (optional)


• Power over Ethernet (PoE) IEEE 802.3af

• Remote Monitoring (RMON)

Compliance

Convergence • Multi classification layers 2/3/4



• Authentication 802.1x, MAC, and PWA (optional)



• QueueJunmanagement Strict Priority e WRR 09


Page 21


Enterasys K-Series Flexible, Modular Switch With Premium Features, for Enterprise Edge to Small Core Deployments

Connectivity • Up to 216 1Gb edge ports and 8 10Gb uplinks

• Up to 4 power supplies, external PoE power expansion

• 40Gb of switching bandwidth is mapped to each slot


• 4 port 10 Gigabit SFP+


• New! - 24 port mini-RJ21

• Spanning Tree (802.1w, 802.1s)

• Hot-swappable I/O modules, power supplies and fan trays

• 1024 VLAN standard 802.1Q

Compliance

Convergence • Multi-layer packet classification


• Local Management interface


• Up to 11 priority queues per port





Enterasys S-Series

Terabit-class, Convergence-ready, Modular Switch for Edge-to-Core and Data Center Deployments

Connectivity • 10/100/1000 with PoE, 1G SFP, 10G SFP+

• Full IPv4/v6 Switching and Routing capabilities

• Highest density chassis

• Multi-Terabit modular highly resilient switch/router family

• 40G/100G support

• Multiple performance classes and form-factors scale from coreto-edge and datacenter

• Rich routing feature set

• 6+ Tb backplane capacity

• Highly redundant design

S-Series Flexibility • Standalone and Modular Form-Factors

• Distributed system and PoE power

• 3 Performance Classes for scalable edge-to-core deployments

• Integrated PoE power systems

• Industry leading port density & flexibility

• Unified multi-platform firmware

• 2, 4, 12 and 48 ports connectivity


S-Series Form Factors

Product

SSA

S-1

S-3

S-4

S-6

S-8

Height

1 RU

2RU

7 RU*

9 RU*

20 RU*

14.5 RU

Slots

-

1

3

4

6

8

Air Flow

SideSide

SideSide

SideSide

SideSide

FrontBack

Side-Side

Max. 10/100/1000/SFP Density

48

72

180

288

432

576

Max. 10G Density

4

16

12

64

96

128

* PoE4 adds 2 RU, PoE8 adds 3RU

S-1

S-3

S-4

SSA

S-8 S-6


Granular Application Control Critical Topology

Policy Defined Networks

• OSPF Routing • STP • RIP Business Applications • VOIP • SAP/Oracle App’s Best Effort • HTTP • Email • FTP Unauthorized • Possible Worm

Individual Users

Policy Creation 1. Categorization • • • •

Switch Port VLAN User Flows

Access Control • Deny • Allow • Contain

• Class of Service • Priority / QoS • Rate Limit • Rate Shaping

• KAZZA

Enterasys Benefits • Policies assigned to services • • •

Devices Users Applications

• Prioritization • Granular control • Embedded security


25

Enterasys Wireless

Connectivity • Indoor and Outdoor solution

• Access Points 802.11a/b/g /n available

• Centralized management and user location

• LAN-TO-LAN and BSS Infrastructure

• High Availability and high density of WIFI users

• RF Planning

• Solution for medium and large WIFI networks

• Centralized multi-Controller management platform for large wireless networks

• WIDS and Rogue detection

Convergence

Compliance

• Effectively serve convergence needs for multiple vertical industries • VoWLAN optimized - End to end high quality and secure voice • Fixed Mobile Convergence (FMC) feature set

Jun 09

• User identity and authentication

• HiGuard security Comprehensive defense against WLAN security threats • Traffic routed through the Controller or locally - always perform encryption and QoS


Wireless AP - Models

AP3705i

AP3710i

Indoor Access Points WS-AP3705i

Dual Radio 802.11a/b/g/n, 2x2:2 MIMO indoor access point with four internal antenna array and integrated clips for flush rail drop ceiling mounting

WS-AP3710i

Dual Radio 802.11a/b/g/n, 3x3:3, indoor access point with six internal antenna array

WS-AP3710e

Dual Radio 802.11a/b/g/n, 3x3:3, indoor access point with six reverse polarity SMA connectors for external antennas

WS-AP3715i

Dual radio 11abgn 3X3:3 MIMO indoor access point with integrated antennas and redundant E/N data ports

WS-AP3715e

Dual radio 11abgn 3X3:3 MIMO indoor access point with six external antenna ports and redundant E/N data ports (requires external antennas sold separately)


Wireless AP - Models

AP3765i Outdoor Access Points WS-AP3765i

Dual Radio 802.11a/b/g/n, 3x3:3, industrial outdoor access point with six internal antenna array

WS-AP3765e

Dual Radio 802.11a/b/g/n, 3x3:3, industrial outdoor access point with six reverse polarity SMA connectors for external antennas (requires antennas to be ordered separately)

WS-AP3767e

Dual Radio 802.11a/b/g/n, 3x3:3 with redundant SFP E/N ports, industrial outdoor access point with six reverse polarity SMA connectors for external antennas (requires antennas and external power adapter to be ordered separately)


Wireless Controllers - Models

Models

Description

WS-C25

Maximum 50 APs. Maximum 100 APs in failover mode.

WS-C5210

Maximum 1000 APs. Maximum 2000 APs in failover mode

WS-V2110-8

Virtual Controller expandable to 248 APs, 496 in failover mode


Enterasys IdentiFiTM Wireless Solutions Experience Matters

Industry-leading wired and wireless LAN solution  3 decades of experience serving global customers  One of the fastest growing WLAN vendors 2012  Industry's only end-to-end architecture – OneFabricTM  2012 Award winning connectivity solutions  2012 Award winning customer service  Multi $1M+ wireless project wins

 There is nothing more important than our customers

2012 Best Application

2012 Network Innovation Award

30


NetSight® Management Suite Management SNMP

Network Access Control Patches S.O. Anti-vírus Firewall

Secure Policies

 



......

Connectivity • Interactive GUI SNMP for management

• VLAN configuration 802.1Q

• Dynamic topology map L2 and L3

• Protocol Configuration

• Event, alarm and CSIRT management

• Spanning Tree, CDP, GVRP, FST, SpanGuard, ...

• User and devices location

• Statistics, reports and visibility

• Customizable windows to manage (Flex View)

• Inventory, backups and upgrades

Convergence

Compliance

• QoS Provisioning:

• Network Access Control - NAC

• Multi-frame classification layer 2/3/4

• Support Secure Networks™ Architecture

• Differentiated Services (DiffServ) and CoS

• Guest management wired and wireless

• Compliance documentation report

• Port Web Authentication for dummies


Enterasys Network Access Control Network Access Patches S.O. Control Anti-vírus

 



Firewall

......

Connectivity • Infrastructure integration – easy to use

• Agent based or agent less embedded

• Based on RFC 3580, 802.1x, MAC Authentication, Subnet Authentication and WEB Authentication to deploy pre and pos control and authorization

• Secure Networks on demand and centralized reporting for all network

• Ip phone auto-authentication and QoS provisioning up to 3000 devices per appliance

• Where, when and who is accessing the network • Remediation Services embedded

Compliance

Convergence • Ip phone and camera authentication

• Compliance for all devices in the network

• Auto-QoS for all devices in the network • Automatic traffic shaping

• Assessment embedded, including dissolvable agent for guest users

• Auto discovery from convergence devices

• Auto remediation and risk reporting


Dragon Intrusion Detection and Prevention

Threat Notification! Action: Deny traffic

1001100111101010 1001100111101010

Connectivity • Intrusion Detection and Prevention Systems

• Rebuilding TCP sessions for forensic analysis

• Library with +7.500 Signatures

• Virtual sensors at same hardware appliance

• Multiples models and systems integration

• VLAN, IP Subnets, TCP/UDP well-know ports and physical ports

• Management and configuration through GUI • Packet capture and forensic analysis

• Many response actions: Snipping, Shunning, DIR (ASM integration)

Compliance

Convergence • H323 and SIP dynamic inspection

• Acceptable use policy for device, IP subnets and users

• Anomaly, signature and protocol baseline analysis

• Security all-in-one for CSIRT

• DDoS protection for convergence systems

• Collets evidences and perform forensic analysis

• Reporting of use for convergence devices

• Security Reporting easy to use


Dragon Security Command Console – DSCC Dashboard (Overview)

Behavioral Analysis

CSIRT Incident Response

Compliance Reporting

Features • GUI interactive monitoring

• Security offense management

• Security log and security correlation:

• Security Incident evaluation (credibility, relevance and severity)

• Support +10.000 kind of logs

• Behavioral analysis for network, based on security events, IDS/IPS integration and xFLOW

• Parsing and log customization

• One click management

• Security risk management

Incidents Management

Compliance Reporting

• Advanced incident drill down management:

• Customizable security reporting

• IP Address, user, event, date and hour

• Templates of reports and regulation:

• Magnitude evaluation

• SOX, BASE II, HIPPA, CoBIT, ...

• Automate Incident Response (ASM integration)

• Weekly reporting and notification


Security Information & Event Manager (SIEM)

Dashboard

Incident

Behavioral

Management

Management

Prioritize

(Overview)

Normalize

Visibility

Organize

Filter

Compliance

Reporting

Correlation NetFlow J-Flow Q-Flow

Operation Systems Applications

Firewalls

IDS/IPS

Switches Routers


Flow Sensors

OneFabric Control Center Unified management solution  Simple Automated End to End Management Solution  Policy base application delivery management  Multi-Vendor Unified Network Identity and Access Management

Private Cloud Public Cloud

Convergence of data centers to access edge

Social Media Interface


Technology Partners Aligned with Enterasys


“There is nothing more important than our customers”

NES Communications doo Beograd Bulevar Despota Stefana 15

www.enterasys.com

Thank You!

11 000 Belgrade, Serbia (former Siemens Enterprise Communications doo Beograd) A Siemens Enterprise Communications Company