®
IBM Software Group
IBM Software Solutions
Automation, Storage, Security
Computing Day 2004
Boštjan Gabrijelčič
Automation, Storage, Security
May 2004
© 2004 IBM Corporation
IBM Software Group | Tivoli software
IT Evolution
Organizational
Productivity
Personal and Departmental
Productivity
Administrative
Productivity
Mainframe
Client / Server
Network
On Demand
IBM Software Group | Tivoli software
Addressing the Challenges
The Future of Automation and Virtualization
“Access (in particular, the Internet) has changed workload levels from
relatively predictable to spiky - forcing enterprises to overprovision their
servers. Roughly 75 percent of server CPU power is not being used at
any one time worldwide.”
Estimated Average Server Utilization (%)
2002
2008
One-Processor
15
25
Two-Processor
25
40
Four-Processor
30
60
Eight(+)-Processor
35
60
Source: Gartner "The Future of Server Virtualization", T. Bittman, July 2003
IBM Software Group | Tivoli software
Traditional IT Environment
100
• Variable peak workloads
80
• Just-in-case, manual provisioning
• IT personnel focus on maintenance
• Labor intensive processes result in
high labor costs
% Utilization
Islands of Processing Power
60
40
20
0
8AM
• Low resource utilization increases
capital costs
10AM
NOON
2PM
4PM
6PM
Corporate banking – morning peak
Branch Bank Teller– afternoon peak
Home Banking – evening peak
“Just-in-Case” Provisioning
% Utilization
100
Low overall resource utilization throughout the day
80
60
40
20
0
8AM
9AM
10AM
11AM NOON
1PM
2PM
3PM
4PM
5PM
6PM
7PM
8PM
9PM
8PM
IBM Software Group | Tivoli software
The difference between Orchestration and Provisioning
Orchestration =
Provisioning =


Analyzes business environment
and identifies how to resolve
situation
Web
Database
Application
Firewall
Web
Database
Application
Email
Identity
Mgmt
Account
Mgmt
Internet Banking
Resolves situation by adding, deleting,
or changing appropriate resources
Firewall
Email
Identity
Mgmt
Media
Web Enabled ATMs
Free Resource Pool
IBM Software Group | Tivoli software
Extending Intelligent Orchestration: On Demand
Capacity
IBM Tivoli Intelligent Orchestrator
Availability
Security
Application Infrastructure
Optimization
Provisioning
Capacity Issues are
detected by System and
Application Level
Monitors.
Intelligent Orchestrator
determines that the
Service Level may
become effected if
something isn’t done.
Policy defined states that
if Capacity is above
“threshold”, provision new
server to environment.
Available Today
IBM Software Group | Tivoli software
Increase Availability
Turning Infrastructure Investments into a Value Center
 Manage the infrastructure in terms of business priorities
 Focus resources on the systems that deliver the greatest impact to the
business
IBM Software Group | Tivoli software
Comprehensive Approach to Systems Management
Business Service Management
Correlation and Automation
Configuration
& Change
Monitoring
Business Runtime Environment
IT
Resources
Application
Transactions
Business
Processes
IBM Software Group | Tivoli software
The Tivoli Portfolio for Event Management
Measure and manage the impact of IT on the business
Real-time Management
IBM Tivoli Business
Systems Manager
IBM Tivoli
NetView
IBM Tivoli
Enterprise
Console
Relationship
Registry
IBM Tivoli
Monitoring for
Transaction Performance
IBM Tivoli
Monitoring
Family
Proactive Management
IBM Tivoli
Service Level Advisor
IBM Tivoli
Risk Manager
Reporting and Business
Intelligence Integration
Tivoli
Data Warehouse
IBM Tivoli Management
3rd Party Management Applications
IBM Software Group | Tivoli software
Events & Integration
Adding storage to Business Impact Management
Tivoli Service
Level Advisor
Tivoli Business
Systems Manager
Tivoli
NetView
Tivoli
Enterprise
Console
TEDW
Data Protection
Storage Resource Management
SAN/ Storage Network Management
Storage
Infrastructure
Devices
File Systems
Volume Mgrs
Media
Managers
Virtualization
DAS
Element
Managers
SAN
iSCSI
Reporting and
Business Intelligence
Integration
Subsystem
Reporting
NAS
Fibre Channel
Performance
TAPE
IBM Software Group | Tivoli software
Tivoli Storage Manager
 Ensures application
availability by protecting
data
 Simplifies storage
administration
 Improves ROI through
efficient use of storage
media
 Provides backup and
restore; archive and
retrieval; space
management; disaster
recovery; autonomic
storage management
IBM Software Group | Tivoli software
Progressive Backup Methodology


Take an initial "full" backup and then backup only changed files
No redundant weekly or monthly "full" backups
Week 1
Monday
Tuesday
A1
Wednesday
Thursday
Friday
A2
A
B
B1
B2
C
D
C1
D1
C2
Full +
Incremental
A1
B1
C1
D1
B2
C2
Full +
Differential
A1
B1
C1
D1
B2
C2
Progressive
Backup
A1 A2
B1 B2 B3
C1 C2 C3
D1
B3
RESTORE
C3
A2
C3
A2
B2
C2
A2
B2
C2 C3
B3
A2
B2 B3
C2 C3
5 Tapes
9 Files
2 Tapes
9 Files
1 Tapes
4 Files
IBM Software Group | Tivoli software
Tivoli Storage Resource Manager
 Monitor storage
resources to ensure
application availability
through policy-based
automation
 Optimize storage
capacity utilization
 Create and manage with
storage policies
IBM Software Group | Tivoli software
Tivoli SAN Manager
 Visualize SAN resources
just as you visualize
network resources
 Automatically detect SAN
composition
 Detect errors and isolate
faults within the SAN
IBM Software Group | Tivoli software
IBM Tivoli Storage Solutions in Action
Server & Storage Consolidation
Stage 1: Planning
• SRM: Analyze storage, identify critical / non-critical data
• TSM: Backup applications & critical data
Stage 2: Deployment
• SAN Mgr: Monitor SAN, avoid / fix problems
• TSM: Migrate backed up data to new environment
• SRM: Track how the changes are effecting the
environment
Stage 3: Management
• SAN Mgr: Monitor SAN, avoid / fix problems
• TSM: Backup, archive and restore / recovery
• SRM: Monitor storage, correct problems, forecast needs
IBM Software Group | Tivoli software
An integrated storage management solution
Storage Utility concept
Tivoli Enterprise
Storage Management Views
Storage Environment
T ivo li Disco very In terface
E
n
t
e
r
p
r
i
s
e
C
o
n
.
.
.
E
v
e
n
t
G
r
o
u
p
s
O
p
t
i
o
n
s
Just keep examining ev
Just keep examining
Just keep examining ev
Just keep examining
Just keep examining
Just keep examining
Just keep examining
E
n
t
e
r
p
r
i
s
e
C
o
n
s
o
l
e
_
Business Impact
Management
Event Correlation and
Automation
Monitor Systems and
Applications
X
Awesome Reports
Just keep examining
S
o
u
r
c
e
G
r
o
u
p
s
O
p
t
i
o
n
s
H
e
l
p
E
v
e
n
t
G
r
o
u
p
s
E
v
e
n
t
S
o
u
r
c
e
s
D
a
t
a
b
a
s
e
T
i
v
o
l
i
P
l
u
s
T
i
v
o
l
i
/
S
e
n
t
r
y
S
y
s
t
e
m
L
o
g
f
i
l
e
s
Just keep examining ev
Just keep examining
Just keep examining ev
Just keep examining
Just keep examining
Just keep examining
Just keep examining
Just keep examining
Just keep examining
Just keep examining
N
e
t
w
o
r
k
s
E
v
e
n
t
M
e
s
s
a
g
e
L
i
s
t
E
v
e
n
t
V
i
e
w
T
a
s
k
s
A
u
t
o
m
a
t
e
d
T
a
s
k
s
H
e
l
p
Just keep examining
N
u
m
b
e
r
o
f
M
e
s
s
a
g
e
s
22
2
2
2
T
o
t
a
l
:
1
1
U
p
d
a
t
e
O
N
Just keep examining ev
Just keep examining
D
a
t
a
b
a
s
e
s
x
F
A
T
A
L
C
R
I
T
I
C
A
L
M
I
N
O
R
O
P
E
N
S
e
r
v
i
c
e
s
C
l
a
s
s
C
L
O
S
E
D
C
L
O
S
E
D
C
L
O
S
E
D
D
B
_
T
a
b
l
e
_
F
u
l
l
D
B
_
T
a
b
l
e
_
F
u
l
l
D
B
_
T
a
b
l
e
_
F
u
l
l
W
A
R
N
I
N
G
A
C
K
N
O
W
L
E
D
G
E
D
S
e
v
e
r
i
t
y
F
A
T
A
L
F
A
T
A
L
F
A
T
A
L
O
r
i
g
i
n
H
A
R
M
L
E
S
S
U
N
K
N
O
W
N
C
L
O
S
E
D
H
o
s
t
N
a
m
e
Th e q u ick b ro wn fo x ju mp s o v er th e lazy d o g .
Ju st k eep ex amin in g ev ery lo w b id q u o ted fo r zin c etch in g s.
M
e
s
s
a
g
e
1
5
7
.
8
3
.
2
7
.
3
3
D
a
l
l
a
s
1
5
7
.
8
3
.
2
7
.
3
0
L
o
n
d
o
n
1
5
7
.
8
3
.
2
7
.
2
8
A
u
s
t
i
n
1
5
7
.
8
3
.
2
7
.
3
4
C
R
I
T
I
C
A
L
C
L
O
S
E
D
D
B
_
C
a
p
a
c
i
t
y
C
L
O
S
E
D
D
B
_
C
a
p
a
c
i
t
y
C
R
I
T
I
C
A
L
C
L
O
S
E
D
D
B
_
C
a
p
a
c
i
t
y
C
R
I
T
I
C
A
L
T
o
k
y
o
1
5
7
.
8
3
.
2
7
.
3
3
P
r
i
n
t
e
r
s
C
L
O
S
E
D
Event
and
monitoring
information
Users
File systems
LUNs
DAS
Application,
Database
LUNs
SAN
NAS
C
L
O
S
E
D
C
L
O
S
E
D
O
P
E
N
S
y
d
n
e
y
1
5
7
.
8
3
.
2
7
.
3
5
L
A
1
5
7
.
8
3
.
2
7
.
3
6
D
B
_
C
a
p
a
c
i
t
y
D
B
_
C
a
p
a
c
i
t
y
C
R
I
T
I
C
A
L
C
R
I
T
I
C
A
L
R
E
O
1
5
7
.
8
3
.
2
7
.
3
7
P
a
r
i
s
D
B
_
C
a
p
a
c
i
t
y
C
R
I
T
I
C
A
L
1
5
7
.
8
3
.
2
7
.
3
8
D
B
_
C
a
p
a
c
i
t
y
W
A
R
N
I
N
G
1
5
7
.
8
3
.
2
7
.
3
9
D
e
t
r
o
i
t
H
o
u
s
t
o
n
A
p
p
l
i
c
a
t
i
o
n
s
V
i
e
w
M
e
s
s
a
g
e
s
V
i
e
w
A
c
t
i
o
n
S
t
a
t
u
s
A
c
k
n
o
w
l
e
d
g
e
M
e
s
s
a
g
e
C
l
o
s
e
M
e
s
s
a
g
e
TEC
NetView
TSRM
Management
and
control
Incident
Open
Incident
Closed
TSANM
TotalStorage
Device Managers
ITIL
Problem/
Change
Management
Processes
IBM Software Group | Tivoli software
Solution for Event Correlation Distributed Architecture
TEC
TEC Server
Network
Dependency
Correlation
TEC Correlation
Gateway
Network
root cause
NetView
Switch
Analyzer
IBM Tivoli
Monitoring
Network
events
TEC
Correlation
Gateway
Security events
3rd Party events
IBM Software Group | Tivoli software
Security Event Management for TEC Customers
NetView
Firewalls
Adapters
TEC Console
TEC Server
Correlation &
Automation
Risk Manager
Correlation
Adapters
Intrusion
Detection
IBM Software Group | Tivoli software
IBM Tivoli Configuration Manager
Inventory
Software Distribution




Scans Hardware/Software Configurations
Stores/Updates information in a relational
database
Data is used for:
 Reporting
 Automated Alerts
 Feeds to Asset Management
 Targets for Software Distribution





Centrally package and install software
automatically on client machines over a
network
Push and Pull Modes
Multiple Platforms
Automated Install Plans
Desired State Management
Guaranteed Delivery / Bandwidth Mgmt
Integrated &
Automated
IBM Software Group | Tivoli software
License Manager Covers Numerous Software
Licensing Models
Licensing Models
License Type
Quantity
Target Rules
Restrictions
Simple Installs
100
None
None
CPU Licensed
50
Serial# 1254-482-444
None
Memory Restricted
12
None
Less than 512 MB
Variations
License Type
Simple Concurrent
Capacity Based
User Bound
Multi-use Based
Concurrent Rules
No more than 70 users at the same time
No more than 4096 MB of memory concurrently
Only user 2P-99835 is allowed to use this license
Multiple sessions on the same machine use a single license
IBM Software Group | Tivoli software
Identity Management Addresses
Process Inefficiencies
Automate complex, administrator-intensive
business processes
Provisioning New Users
Managing
Productive Users
De-Provisioning Users
Deploying New Initiatives
Users wait up to 3 weeks for activated accounts
Help Desk costs $20 per call for password resets
30-60% of existing accounts are invalid
Up to 30% of development for controlling access
to applications and data
IBM Software Group | Tivoli software
A Robust Model for Authorization
Policy
Server
Input:
TAM
Objects/
Rules
Result:
 Identity
 Object
 Actions
Requester
User
Registry
 Yes
 No
Policy
Enforcer
Target
IBM Software Group | Tivoli software
Provisioning with Tivoli Identity Manager
Provisioning
Policy
User
Role
Identity Access Privacy
Directory
Directory Integration
Service
(Resource)
 Users assigned to Roles based on responsibilities
 Role members are provisioned to resources via a
Provisioning Policy
IBM Software Group | Tivoli software
Reconciliation Compares “What Is” to
“What Should Be”
Provisioning
Policy
User
Role
Identity Access Privacy
Directory
Directory Integration
Service
(Resource)
 Policy enforced during reconciliation (I.e. permissions on
resource)
 TIM can “roll back” unauthorized changes made by local
admin
 Reconciliation identifies orphan accounts
 Adopted, suspended, restored or de-provisioned
IBM Software Group | Tivoli software
IBM Identity Management Solutions
Continue to be Recognized for Leadership











2003 Frost & Sullivan Market Engineering Leadership Award
2003 Crossroads A-List Award for Integrated Identity Management Solution
2003 Network Computing Well-Connected Award Finalist
2003 SC Magazine Reader Trust Awards – Best General Security Finalist
2003 LinuxWorld Product Excellence Award – Best Security Solution Finalist
Information Security Names IBM Tivoli to The Influence List for 2003-2008
2003 Top WLAN Companies of the Year for Leadership in Wireless Security
IBM Tivoli Positioned in the Leader Quadrant in Gartner’s Magic Quadrant
IBM Tivoli Access Manager Sets New Performance Records – Mindcraft Benchmark
IBM Tivoli Wins Information Security Excellence Award for Second Year in a Row
2002 Information World Editor’s Choice Award for Security Software
Automation Blueprint
IBM Software Group | Tivoli software
IBM Automation Blueprint
Business Driven Service Management
Tivoli Business Systems Manager
Tivoli Service Level Advisor
Tivoli License Manager
Policy Based Orchestration
Tivoli Intelligent Orchestrator
Availability
Security
Optimization
Provisioning
Tivoli Monitoring Family
Tivoli Access Manager
Tivoli Storage Resource Mgr
Tivoli Provisioning Manager
Tivoli Enterprise Console
Tivoli Privacy Manager
Tivoli Workload Scheduler
Tivoli Identity Manager
Tivoli Storage Mgr Family
IBM Directory Server
Tivoli Web Site Analyzer
Tivoli Storage Resource Mgr
Tivoli System Automation
IBM Directory Integrator
Tivoli Risk Manager
Virtualization
Tivoli Configuration Mgr
®
IBM Software Group
IBM Software Solutions
Automation, Storage, Security
Computing Day 2004
Boštjan Gabrijelčič
Automation, Storage, Security
May 2004
© 2004 IBM Corporation