14
The goal of ESG Lab reports is to educate IT professionals about data center technology products for companies of all types and sizes. ESG Lab reports are not meant to replace the evaluation process that should be conducted before making purchasing decisions, but rather to provide insight into these emerging technologies. Our objective is to go over some of the more valuable feature/functions of products, show how they can be used to solve real customer problems and identify any areas needing improvement. ESG Lab’s expert third-party perspective is based on our own hands-on testing as well as on interviews with customers who use these products in production environments. This ESG Lab report was sponsored by VCE. © 2015 by The Enterprise Strategy Group, Inc. All Rights Reserved. The Challenges Based on a survey of 302 organizations operating in North America, ESG found that more than three-quarters (78%) of respondent businesses reported utilizing video surveillance technology. 1 Although video surveillance has traditionally been a task handled by facilities or physical security groups, IT departments are increasingly involved as these implementations continue to evolve from analog cameras with proprietary DVRs to IP-based solutions with networked storage options. Respondents were asked to identify the greatest challenges with respect to these implementations, and many were related to IT infrastructure, as seen in Figure 1. Figure 1. Top Five Challenges with Current Video Surveillance Implementations Source: Enterprise Strategy Group, 2015. 1 Source: ESG Research Brief, Video Surveillance: Now on IT’s Watch, December 2013. 26% 28% 29% 29% 30% 0% 5% 10% 15% 20% 25% 30% 35% Difficult for IT to manage growing volumes of video surveillance data Onsite camera failures Impact on network bandwidth High cost of onsite service/maintenance calls Search and retrieval of video surveillance footage required for investigations, etc. At a high level, what would you say are your organization’s greatest challenges with your current video surveillance implementations? (Percent of respondents, N=150, multiple responses accepted) ESG Lab Review Integrated Security with Video Surveillance on VCE Vblock System and EMC Isilon Date: June 2015 Authors: Tony Palmer, Senior Lab Analyst, and Jon Oltsik, Senior Principal Analyst Abstract: This ESG Lab review documents hands-on testing of the ability of the VCE Vblock System and VCE Technology Extension for EMC Isilon storage to drive value from video surveillance as part of an overall security strategy. Testing focused on the functionality, security, simplicity, and performance of the converged VCE solution, which is designed to provide a scalable, flexible, end-to-end platform for video surveillance deployments.

ESG: Integrated Security with Video Surveillance on VCE ... · The goal of ESG Lab reports is to educate IT professionals about data center technology products for companies of all

Embed Size (px)

Citation preview

The goal of ESG Lab reports is to educate IT professionals about data center technology products for companies of all types and sizes. ESG Lab reports are not meant to replace the evaluation process that should be conducted before making purchasing decisions, but rather to provide insight into these emerging technologies. Our objective is to go over some of the more valuable feature/functions of products, show how they can be used to solve real customer problems and identify any areas needing improvement. ESG Lab’s expert third-party perspective is based on our own hands-on testing as well as on interviews with customers who use these products in production environments. This ESG Lab report was sponsored by VCE.

© 2015 by The Enterprise Strategy Group, Inc. All Rights Reserved.

The Challenges

Based on a survey of 302 organizations operating in North America, ESG found that more than three-quarters (78%) of respondent businesses reported utilizing video surveillance technology.1 Although video surveillance has traditionally been a task handled by facilities or physical security groups, IT departments are increasingly involved as these implementations continue to evolve from analog cameras with proprietary DVRs to IP-based solutions with networked storage options. Respondents were asked to identify the greatest challenges with respect to these implementations, and many were related to IT infrastructure, as seen in Figure 1.

Figure 1. Top Five Challenges with Current Video Surveillance Implementations

Source: Enterprise Strategy Group, 2015.

1 Source: ESG Research Brief, Video Surveillance: Now on IT’s Watch, December 2013.

26%

28%

29%

29%

30%

0% 5% 10% 15% 20% 25% 30% 35%

Difficult for IT to manage growing volumes of videosurveillance data

Onsite camera failures

Impact on network bandwidth

High cost of onsite service/maintenance calls

Search and retrieval of video surveillance footagerequired for investigations, etc.

At a high level, what would you say are your organization’s greatest challenges with your current video surveillance implementations? (Percent of respondents, N=150,

multiple responses accepted)

ESG Lab Review

Integrated Security with Video Surveillance on VCE Vblock System and EMC Isilon

Date: June 2015 Authors: Tony Palmer, Senior Lab Analyst, and Jon Oltsik, Senior Principal Analyst

Abstract: This ESG Lab review documents hands-on testing of the ability of the VCE Vblock System and VCE Technology Extension for EMC Isilon storage to drive value from video surveillance as part of an overall security strategy. Testing focused on the functionality, security, simplicity, and performance of the converged VCE solution, which is designed to provide a scalable, flexible, end-to-end platform for video surveillance deployments.

ESG Lab Review: Integrated Security with Video Surveillance on VCE Vblock System and EMC Isilon 2

© 2015 by The Enterprise Strategy Group, Inc. All Rights Reserved.

Of the five most commonly cited video surveillance challenges, three—search and retrieval of archive footage; impact on network bandwidth; and difficulty managing growing volumes of video surveillance data—have direct storage and/or network infrastructure implications. ESG believes that video surveillance deployments present these challenges to IT departments for multiple reasons, including the transition from analog to digital surveillance equipment (which is driving demanding network traffic), increasing storage capacity requirements, stringent physical/cybersecurity requirements, and a potential lack of video surveillance knowledge/experience on the part of IT. While IT professionals know all about servers, storage, and networking equipment, many haven’t been able to invest enough time in learning about surveillance equipment from a technology perspective to gain the expertise needed to deal with image quality, compression, imaging, and physical security best practices. A platform where surveillance and security workloads can be fully supported can enable organizations to better utilize their existing skill sets while removing the burden of building environments to support video surveillance from scratch.

Trends in Physical and IT Security Convergence

The convergence of physical and IT security has been discussed publicly for more than a decade, and experts have been predicting that organizations will be able to merge the technologies of physical security (e.g., the card readers and scanners that admit employees into their buildings) with IT security (e.g., the authentication and authorization applications and servers that allow users to access corporate networks and assets on their computers).

Factors driving the convergence of physical and IT security include the movement of cameras from coax connected devices feeding DVRs to Ethernet connected devices feeding IT-managed storage repositories over IT-managed networks. As the industry moves from analog tapes to digital images, organizations can deploy more cameras at higher resolution, which drives the need for more storage capacity and performance, more network connectivity, and the processing power to run video management software (VMS) to make sense of it all.

Physical security systems, traditionally the first bulwark against unauthorized access to physical corporate assets, have also been relied on to protect digital assets. Bad actors wishing to gain access to corporate applications and protected data needed to gain entry to a company's offices. In the age of universal internet access, IT assets and

proprietary data can no longer be completely protected by physical security systems.

Multi-factor access authentication—the merging of physical and network access control—is providing a torrent of big data that can be leveraged by analytics platforms. Video and image analysis, facial recognition, ID card swipes/scans, computer/network logons, and biometrics can be used to automatically recognize patterns and detect anomalies.

Virtualization is playing a big role in convergence as well, enabling organizations to scale the deployment of VMS and video analytics software in virtual servers, and improving manageability and online scalability to enable management by non-IT security personnel or general server administrators without the need for dedicated networking, storage, and server specialists.

ESG interviewed two large organizations in various stages of converging their physical and IT security strategies: one is a multinational pharmaceutical developer and manufacturer, and the other is a large health management organization. Both organizations reported enhanced physical security due to this initiative, which has provided them with the ability to expand the scope and effectiveness of monitoring, while VMS and analytics enable them to positively verify identity and ensure compliance with stringent government regulations. Deploying a converged security approach on a converged infrastructure platform like VCE clearly makes a lot of sense for these organizations and should for businesses in other

ESG spoke with the Security Access Architect at a

multinational pharmaceutical development and

manufacturing organization where convergence is

happening today. The Architect noted, “What used

to be a manual, multiple day process, reviewing

numerous tapes in search of a specific event, can

now be accomplished in about an hour, leveraging

multiple data sources using analytics software to

match users’ faces to their digital identity in a

converged system environment.”

ESG Lab Review: Integrated Security with Video Surveillance on VCE Vblock System and EMC Isilon 3

© 2015 by The Enterprise Strategy Group, Inc. All Rights Reserved.

verticals as well. Converged infrastructure reduces technological and organizational cost and complexity and could help organizations to better prioritize risk and create a comprehensive converged security business plan.

In addition to the pharmaceutical and healthcare organizations interviewed, organizations in many diverse industries are driving integrated security in converged system environments.

Transportation – Monitoring airports, train stations, and roads to strengthen counter-terrorism, monitor theft, and improve traffic control.

State and Local Education (SLED) – Law enforcement, school surveillance, and facility management to ensure public safety, prevent crimes, and report suspicious behavior.

Energy – Monitoring oil, gas, electricity, and utility systems to protect power plants and grids, monitor asset use, and detect anomalies.

Hospitality and Property Management – Monitoring casinos, hotels, malls, and real-estate management to detect fraud, provide behavior-based customer offers, and collect environmental evidence.

The Solution: VCE Vblock System and EMC Isilon Storage for Video Surveillance

The VCE Vblock System is a well-known and extensively deployed integrated computing platform (ICP) that combines best-of-breed technologies from industry-leading vendors. VCE offers a range of Vblock Systems that businesses can choose from to suit their workload needs. With Cisco compute and networking, EMC storage and data protection, and VMware virtualization and management, Vblock Systems are designed to make it simpler and quicker for organizations to deploy a complete IT platform that has been pre-integrated, pre-validated, and pretested with release certification matrices (RCM) serving as a basis for VCE seamless support. Building off the preexisting success of VCE’s integrated computing platform, VCE released the VCE Technology Extension for EMC Isilon storage to extend the business value of VCE. Organizations can now deploy highly distributed video surveillance at the edge along with centralized high camera count environments to provide end-to-end video surveillance infrastructure on Vblock Systems with EMC Isilon and VNX. Benefits of the platform include:

Flexible scale-out capacity and performance from Vblock Systems with EMC Isilon to avoid traditional scale-up limitations in very high-capacity environments. This scale-out approach provides improved data protection, data access, resiliency, high availability, manageability, and cost savings. The VCE architecture is open and modular so that organizations can deploy video and other security products in conjunction with databases, enterprise applications, and custom applications.

Augmenting video storage and retrieval with security and data analytics where analysis of video in conjunction with examining data feeds from multiple sources can enhance physical security and discovery activities.

Predictable high availability and reliability for extremely large data sets. As data sets reach petabyte scale, the pre-engineered Vblock Systems with scale-out Isilon storage offer high levels of component redundancy, helping to eliminate single points of failure.

Data protection. The VCE Foundation for Data Protection takes advantage of technologies from EMC, including EMC Avamar, EMC Data Domain, EMC RecoverPoint, and EMC VPLEX. Offered as the VCE Technology Extension, EMC Isilon takes the integrated data protection of the complete solution a step further by offering additional capabilities such as data at rest encryption for files, snapshotting, remote replication, and NDMP backups. VCE provides pre-validated, factory integrated solutions for these EMC protection solutions, extending the VCE experience.

Networking technology choice. Video surveillance workloads are network-heavy, and the ability to choose and architect the leading networking technologies is key to success—contrasting with servers and appliances. Vblock Systems can employ Cisco Nexus 9000 Series Application Centric Infrastructure switches to provide application-driven automation, open software support, and hardware-based multi-tenancy.

Certification. VCE validates EMC Isilon OneFS software as part of its system validation process to deliver the VCE Technology Extension for EMC Isilon, which maintains ongoing VMS certifications with vendors including Milestone, Genetec, Aimetis, Verint, DVtel, Next Level, and Surveillus.

ESG Lab Review: Integrated Security with Video Surveillance on VCE Vblock System and EMC Isilon 4

© 2015 by The Enterprise Strategy Group, Inc. All Rights Reserved.

Video requires 2-60 Mbps of bandwidth, depending on resolution, frame rate, and the codec being used, so it is important to understand how the network topology of the customer will define the solution and overall system. Figure 2 depicts some common deployments.

In core data centers and campus environments, the networks typically have enough bandwidth that the primary data flow goes from the distributed IP cameras or encoders back to a centralized set of servers as a streaming video feed, where video management software (VMS) servers typically apply proprietary processing that allows distribution to viewing and analytics systems.

The data flow from there is straightforward: It uses a network storage protocol (SMB/NFS/HTTP) to store the video in real time or as an archive process. There are numerous VMS vendors with differing levels of storage management capability. Some vendors can perform storage tiering, others may have a live buffer and an archive tier, and some allow for event-based archival.

At remote sites, the cameras will typically stream to a local server with local storage, mainly due to limited WAN bandwidth. The local VMS instance will send that back to the central site via standard or proprietary protocols, but all of this data movement is managed by the VMS and is typically done after hours as an archive process. Additional designs have multiple streams from the remote cameras using lower frame rates and resolutions to send over the WAN.

Most VMS vendors process data coming in and store it in a proprietary manner so the VMS application is responsible for all data indexing. Thus, the application handles the data migration within and across tiers.

Figure 2. VCE Vblock System with VCE Technology Extension for EMC Isilon for Video Surveillance

VCE strives to offer an open, flexible, and cost-effective platform for video content storage and analysis, focused on larger video surveillance deployments that have an “edge to core” architecture. EMC and VCE produce reference architecture and sizing guides, and ensure certification with a broad partner ecosystem of VMS and camera providers to provide tested end-to-end solutions. VCE with EMC provides a highly scalable and available system with the ability to add cameras on the fly, while integration with Hadoop enables organizations to perform analytics on surveillance data.

ESG Lab Review: Integrated Security with Video Surveillance on VCE Vblock System and EMC Isilon 5

© 2015 by The Enterprise Strategy Group, Inc. All Rights Reserved.

ESG Lab Tested

ESG Lab tested the VCE Vblock System with VCE Technology Extension for EMC Isilon solution for video surveillance at EMC’s Surveillance System Test and Validation Lab in Durham, North Carolina. EMC has made a multi-year investment to create an advanced test and certification lab solely focused on video surveillance. The lab contains leading technology from all major video surveillance vendors in order to validate best-of-breed physical security applications (VMS) with EMC’s portfolio of products. EMC conducts platform performance benchmarking, fault tolerance testing, and high availability validation for both virtual and non-virtual architectures.

The test bed utilized by ESG for this report included a VCE Vblock System 340 with the VCE Technology Extension for EMC Isilon storage.2 A combination of physical IP cameras and emulated cameras were used to feed video streams to Genetec VMS instances hosted on Cisco UCS infrastructure virtualized by VMware vSphere.

Figure 3. The ESG Lab Test Bed

One of the benefits of the VCE solution is the ability to manage the systems through a single pane of glass, along with individual management interfaces. Figure 4 shows VCE Vblock and Isilon being managed via the vSphere web client.

2 Complete configuration details can be found in the Appendix.

ESG Lab Review: Integrated Security with Video Surveillance on VCE Vblock System and EMC Isilon 6

© 2015 by The Enterprise Strategy Group, Inc. All Rights Reserved.

Figure 4. Managing VCE Vblock System and EMC Isilon with the vSphere Web Client

During ESG Lab testing, EMC Isilon OneFS management software, seen in Figure 5, was used to monitor the Isilon system during performance and availability testing.

Figure 5. EMC Isilon Cluster Overview in OneFS

VCE Vblock Systems with VCE Technology Extension for EMC Isilon provide high-performance scale-out storage that is deployed in a cluster accessed as a single file system. Storage performance and capacity are scaled by adding nodes to

ESG Lab Review: Integrated Security with Video Surveillance on VCE Vblock System and EMC Isilon 7

© 2015 by The Enterprise Strategy Group, Inc. All Rights Reserved.

the cluster, online and non-disruptively. Servers can be added to the VCE system to drive more throughput to the storage as well as computational power for analytics. Figure 6 summarizes the tests run by ESG Lab against the VCE System 340 with EMC Isilon.

Figure 6. Testing Availability and Scale-out in a Single System

To test performance and capacity scale-out, a new node was added to the Isilon cluster and a new server was added to drive more traffic. Availability tests included failing a NIC, a hard drive, and an entire node, all while an active workload was running. First, ESG Lab opened the external network throughput rate display in OneFS. While the display was running, availability was tested. ESG Lab failed a drive, a NIC in a server, and an entire node, in succession.

ESG Lab Review: Integrated Security with Video Surveillance on VCE Vblock System and EMC Isilon 8

© 2015 by The Enterprise Strategy Group, Inc. All Rights Reserved.

Figure 7. Network Throughput During Simulated Failures

As seen in in Figure 7, throughput remained steady through the entire series of tests, with no impact. After the tests completed, ESG Lab used the VMS software, as seen in Figure 8, to go back and look at a captured video stream at the precise moments of each simulated failure. The videos were stored perfectly, with no dropped frames.

Figure 8. Video Storage and Playback During Simulated Failures.

Next, a node was added to the Isilon cluster with one click—one of the simplest upgrade procedures of any cluster tested by ESG Lab—followed by two new servers to drive additional video streams. As seen in Figure 9, adding the node had no negative impact on throughput and as soon as the new servers were brought online, throughput increased.

ESG Lab Review: Integrated Security with Video Surveillance on VCE Vblock System and EMC Isilon 9

© 2015 by The Enterprise Strategy Group, Inc. All Rights Reserved.

Figure 9. Network Throughput During Node Addition

Why This Matters

Of the five most commonly cited video surveillance challenges, three—search and retrieval of archive footage; impact on network bandwidth; and difficulty managing growing volumes of video surveillance data—have direct storage and/or network infrastructure implications.3

To adequately address the needs of video surveillance, a solution must be able to provide consistent performance, simple scalability, compatibility with a wide range of VMS systems, and the ability to run analytics in the same platform.

VCE Vblock Systems with EMC Isilon address this issue because their validation and testing is designed to ensure that implementation, use, and management deliver maximum ease of use, protection, value, reliability, and consistency of performance.

ESG Lab validated that VCE Vblock Systems with EMC Isilon are well suited to deliver high-performance, highly available video surveillance infrastructure in a scalable, flexible package. EMC Isilon’s single file system architecture provides an ideal foundation to independently scale video storage and compute resources to meet performance and capacity requirements as needed.

3 Source: ESG Research Brief, Video Surveillance: Now on IT’s Watch, December 2013.

ESG Lab Review: Integrated Security with Video Surveillance on VCE Vblock System and EMC Isilon 10

© 2015 by The Enterprise Strategy Group, Inc. All Rights Reserved.

The Bigger Truth

Video surveillance deployments present many serious challenges to IT departments, including the transition from analog to digital surveillance equipment and the accompanying additional network traffic; increasing storage needs; physical and cybersecurity requirements; and the potential shortage of video surveillance knowledge/experience on the part of IT.

Digital video surveillance can tax traditional infrastructures and create bottlenecks, while limited flexibility makes it hard for organizations to reliably and cost-effectively scale resources independently of one another. More importantly, security and reliability risks come to the fore as businesses attempt to merge physical security and cybersecurity using analytics applications like Splunk that utilize data from multiple feeds to correlate video surveillance with cybersecurity.

The convergence of physical and IT security is being strongly driven by the technological advances in cameras and the software to manage them, the need to protect physical and digital corporate assets from increasingly sophisticated threats, and the desire to optimize operations and reduce costs.

Similar to the organizational challenges experienced within early VCE adopters—between network, storage, and server organizations—the organizational and cultural challenges associated with merging physical security and information security within IT loom large. Similar benefits and economies of scale can be expected by organizations with the vision and will to move toward convergence.

By leveraging an industry-proven ICP in VCE Vblock Systems and combining it with EMC Isilon and VMware vSphere, organizations get a fully integrated platform that meets and grows with their video surveillance and analytics requirements. Vblock Systems and Isilon deliver a scale-out infrastructure that achieves high levels of security, reliability, availability, and performance for video surveillance in production environments.

ESG Lab validated that VCE Vblock Systems with EMC Isilon delivered consistent video surveillance performance through multiple simulated hardware failures. EMC Isilon’s multi-protocol architecture provides a foundation to independently scale storage, while VCE Vblock Systems scale compute resources to meet performance and capacity requirements as needed. Although ESG tested EMC Isilon for video storage, users are not limited to Isilon and EMC VNX, VMAX, and XtremIO are all available in Vblock Systems. With the recent expansion of its portfolio, VCE offers VxBlock Systems designed to offer additional choices to customers. Customers can choose network virtualization solutions from VMware NSX or Cisco ACI. Vblock Systems and VxBlock Systems can also be combined with VCE Technology Extensions and VCE Vscale Blocks. Under the VCE Vscale Architecture, organizations can choose the right building blocks based on workload, performance and scaling requirements, and budgetary demands.

ESG Lab testing revealed that VCE Vblock Systems with EMC Isilon provide tangible benefits for organizations deploying video surveillance. Cisco, EMC, and VMware have invested in the differentiating features and functionalities integrated into VCE Vblock Systems to ensure that load is balanced across the infrastructure, ensuring maximum utilization. This enables the use of videos as part of a comprehensive security analytics strategy, with top-line benefits beyond what traditional physical video surveillance can offer. As video surveillance deployments grow and integrate with traditional digital security platforms, ESG Lab recommends checking out the VCE Vblock Systems with EMC Isilon for video surveillance to advance your overall security posture and strategy.

ESG Lab Review: Integrated Security with Video Surveillance on VCE Vblock System and EMC Isilon 11

© 2015 by The Enterprise Strategy Group, Inc. All Rights Reserved.

Appendix

Table 1. Test Environment—Key Components and Configuration for Vblock Systems with EMC Isilon

Element Configuration

VCE Vblock System 340

VCE Management

Advanced Management Platform (AMP-2) Fabric Interconnect

Cisco UCS 6248UP Fabric Interconnect Servers

7 X Cisco UCS B200 M3 Server Details

2 X Xeon Intel E5-2643 (3.3 GHz)

196GB memory (7 X 16 GB)

Host local storage: None (diskless; SAN Boot)

2 X Cisco UCS VIC-1240

Cisco UCS 5108 Blade Server Chassis Storage – EMC VNX 5400

Connectivity: Fibre Channel

Drive Count: 36 X 600GB 10K SAS (HUC10906)

Single RAID5 Storage Pool Configuration o 4 Drive vault o 30 Drives in Storage Pool-all LUNs listed below

provisioned from this pool o 2 Spare Drives o SAN Boot devices for UCS blades (7 LUNs X 20GB) o SAN VMS Boot LUNs (37 LUNs X 80GB) o SAN VMS database drives (37 LUNs X 80GB) o SAN VMS log drives (26 LUNs X 80GB) o SAN Boot devices for ESXi o Storage for ESXi and virtual machines (6 LUNs X 2TB)

8Gb Fibre Channel Networking—8 lanes from switch to VNX

Networking

Switches: 48 ports Cisco

A pair of N5K-C5548UP capable of 10 Gigabit Ethernet, Fibre Channel, and FCoE switch

EMC Isilon (offered as VCE Technology Extension for EMC Isilon storage)

NL400 144TB HDD 12GB 2x10GE and 2x1GE Nodes: 19

OneFS 7.1.1

Protection Policy: +3

Dual 10 Gig Ethernet connectivity per Isilon node

Capacity Sizing: Not to exceed 85% usable

Storage Efficiency: 84.2%

ESG Lab Review: Integrated Security with Video Surveillance on VCE Vblock System and EMC Isilon 12

© 2015 by The Enterprise Strategy Group, Inc. All Rights Reserved.

Element Configuration

Video Management Software (VMS) – Genetec

Genetec Security Center 5.2

o Archiver Server o Directory Server o Omnicast

Quantity 36 Archiving Servers for capacity and performance

Cameras

Quantity:2000

Codec: H.264

Resolution: 1920x1080 pixels (full HD)

Framerate: 18

Audio: none

Compression: 30 (0 – lowest; 100 – highest)

Recording: 24x7 (motion recording disabled)

Bitrate: 2500 kbps

Retention: 30 days

Evidence Retention / Archive Playback

200TB

Evidence Video Retention: 1 year

Max # Archive playback stations: 5

Max # streams playback per station: 4

Hypervisor

vSphere 5.5 – EMC PowerPath/VE enabled

vCenter 5.5

Storage: o VNX – VM datastores o Isilon – video storage

vSphere Distributed Switch with multiple VLANs

Virtual Machines

VMware vSphere 5.5 o VM version 10 o VMware Tools installed

6 VMs per server o 8GB memory o 4 vCPUs

ESG Lab Review: Integrated Security with Video Surveillance on VCE Vblock System and EMC Isilon 13

© 2015 by The Enterprise Strategy Group, Inc. All Rights Reserved.

Table 2. VCE Solution Surveillance Sizing Guidelines by Camera Count

Camera

Number of cameras 500 2000 3500 5000

Camera resolution (pixels)

1920X1080 1920X1080 1920X1080 1920X1080

Camera framerate (fps) 18 18 18 18

Camera Codec H.264 H.264 H.264 H.264

Audio: none

Camera Compression (0-100)

30 30 30 30

Camera bitrate (kbps) 2000 2000 2000 2000

Recording duration (full time record)

24x7 24x7 24x7 24x7

Retention Time (days) 30 30 30 30

Evidence Retention / Archive Playback

Evidence Amount (1% of capacity)

40TB 161TB 283TB 404TB

Evidence Retention Period

1 year 1 year 1 year 1 year

Concurrent Archive playback streams

20 20 20 20

Isilon

Required Usable Capacity (TB)

365 1458 2550 3643

Number of VMS Servers 4 14 24 34

Number of Nodes 5 16 25 36

Node Type NL400 108TB HDD

12GB NL400 144TB HDD

24GB NL400 144TB HDD

24GB NL400 144TB HDD

12GB

OneFS Version 7.2 7.2 7.2 7.2

Protection Policy +2d:1n +3d:1n1d +3n +3n

Network Connection 2 X 10GbE per node 2 X 10GbE per node 2 X 10GbE per node 2 X 10GbE per node

Design to use % of capacity

85% 85% 85% 85%

Storage Efficiency 80% 83% 84% 84%

Hypervisor VMware vSphere 5.5/VE enabled

VM version 10 VM version 10 VM version 10 VM version 10

vCenter 5.5 VMware Tools

Installed VMware Tools

Installed VMware Tools

Installed VMware Tools

Installed

Storage VNX - VM datastores

VNX - VM datastores

VNX - VM datastores

VNX - VM datastores

VSphere Distributed Switch

Multiple VLANs Multiple VLANs Multiple VLANs Multiple VLANs

ESG Lab Review: Integrated Security with Video Surveillance on VCE Vblock System and EMC Isilon 14

© 2015 by The Enterprise Strategy Group, Inc. All Rights Reserved.

Virtual Machines VMware vSphere 5.5 VM version 10 VM version 10 VM version 10 VM version 10

VMware Tools installed VMware Tools

installed VMware Tools

installed VMware Tools

installed VMware Tools

installed

6 VMs per Server/Blade 8GB RAM memory 8GB RAM memory 8GB RAM memory 8GB RAM memory

4 vCPUs 4 vCPUs 4 vCPUs 4 vCPUs

VCE Vblock System 340

VCE management Advanced

management Platform (AMP-2)

Advanced management

Platform (AMP-2)

Advanced management

Platform (AMP-2)

Advanced management

Platform (AMP-2)

Fabric Interconnect Cisco UCS 6248UP Cisco UCS 6248UP Cisco UCS 6248UP Cisco UCS 6248UP

Servers 2 X Cisco UCS B200

M4 4 X Cisco UCS B200

M4 4 X Cisco UCS B200

M4 6 X Cisco UCS B200

M4

Per Server Details 2 X Xeon Intel E5-

2643 2 X Xeon Intel E5-

2643 2 X Xeon Intel E5-

2643 2 X Xeon Intel E5-

2643

Xeon @ 3.4 GHz Xeon @ 3.4 GHz Xeon @ 3.4 GHz Xeon @ 3.4 GHz

192GB RAM 192GB RAM 192GB RAM 192GB RAM

Memory is 6 x 32GB

GB Memory is 6 x 32GB

GB Memory is 6 x 32GB

GB Memory is 6 x 32GB

GB

SAN Boot SAN Boot SAN Boot SAN Boot

No local storage No local storage No local storage No local storage

2 X Cisco UCS VIC-

1340 2 X Cisco UCS VIC-

1340 2 X Cisco UCS VIC-

1340 2 X Cisco UCS VIC-

1340

Cisco Blade Server Chassis

UCS 5108 UCS 5108 UCS 5108 UCS 5108

Datastore Storage EMC VNX 5400 EMC VNX 5400 EMC VNX 5400 EMC VNX 5400

Drives count (600GB 10K SAS - HUC10906)

5 disk storage pool 10 disk storage pool 15 disk storage pool 20 disk storage pool

Storage connectivity Fiber Channel (UCS

FI) Fiber Channel (UCS

FI) Fiber Channel (UCS

FI) Fiber Channel (UCS

FI)

Vault Drives 4 4 4 4

Spare Drives 2 2 2 2

SAN Boot LUNs for UCS Blades

2 4 4 6

SAN VMX Boot LUNS 4 14 24 34

SAN VMX Database LUNs

4 14 24 34

SAN VMS Log LUNs 4 14 24 34

Total LUNs 14 46 76 108

Fiber Channel implementation

8Gb - 8 lanes 8Gb - 8 lanes 8Gb - 8 lanes 8Gb - 8 lanes

Networking Pair of Cisco Nexus

9396 Pair of Cisco Nexus

9396 Pair of Cisco Nexus

9396 Pair of Cisco Nexus

9396

# of Port 48 Port 48 Port 48 Port 48 Port

All trademark names are property of their respective companies. Information contained in this publication has been obtained by sources The Enterprise Strategy Group (ESG) considers to be reliable but is not warranted by ESG. This publication may contain opinions of ESG, which are subject to change from time to time. This publication is copyrighted by The Enterprise Strategy Group, Inc. Any reproduction or redistribution of this publication, in whole or in part, whether in hard-copy format, electronically, or otherwise to persons not authorized to receive it, without the express consent of The Enterprise Strategy Group, Inc., is in violation of U.S. copyright law and will be subject to an action for civil damages and, if applicable, criminal prosecution. Should you have any questions, please contact ESG Client Relations at 508.482.0188.