Face2Face Forum – Netherlands

Face2Face Forum – Netherlands

© 2010 Progress Software Corporation. All rights reserved.2

Agenda

Progress Software Update• Colleen Smith

OpenEdge Business Strategy and Product Roadmap• Rob Straight

User Interface Options and Directions• Mike Ormerod

Addressing Security & Compliance Issues• Rob Straight

Using Actional with your OpenEdge Application• Mike Ormerod


How Business Makes Progress

Progress enables organizations to achieve the highest level of business performance

We call thisOperational Responsiveness

We enable our customers and partners to deliver RESPONSIVE APPLICATIONS

with FASTER TIME-TO-VALUE


Anticipate

& Respond

Competitive Pressures

$$$ Pressures

Pressures to Evolve or Perish

Technology InhibitorsCustomer Demand

Operational Responsiveness Is a Must Have


Delivering Operational Responsiveness

ResponsiveBusiness

Applications

ResponsiveInformation

Management

ResponsiveProcess

Management


ResponsiveBusiness

Applications

Application DevelopmentPlatforms


Management

Enterprise DataSolutions

Delivering Operational Responsiveness

ResponsiveProcess

Management

Enterprise Business Solutions


Delivering Operational Responsiveness with Responsive Process Management

Driving Operational Responsiveness through event driven visibility, dynamic business response and continuous business process improvement

Visibility, Sense and Respond, Continuous Process Improvement

Ability to respond and apply corrective actions

Anticipate what WILL happen in your business, not react to what HAS happened

Continually improve the business processes without disrupting existing infrastructure

ResponsiveProcess

Management

Enterprise Business Solutions


Key Elements of a Business Process

Metrics & Measurements

Workflow Description

Business Rules

Information

People and Systems

=

Pro

cess

+ +

+


We work in Global Distributed Heterogeneous Environment

People

Technology & Systems

Need for common understanding and awareness of role


Improving Processes Executed in Distributed Heterogeneous Environment

People

Process

Technology & Systems

Prioritizes and monitors events, while initiating actions


Why BPM? - Gartner

Goal: Application Modernization• Improve visibility and change management

Goal: Broader and better coordination of processes - Workflows• Rapid time for new application• Extension to existing applications

Goal: Continuous Process Improvement• Business transformation

Goal: Business agility for key processes• Process re-design• Process flow deployment by organization


Key Components of Progress Savvion BPM

Process Modeler

Process Asset Manager

BPM ServerBPM Studio

Document Management System

Business Rule Management System

BPM Portal

BusinessExpert

Information Access and Integration

Visibility Into Integration Processes

Business Event Processing

SOA Infrastructure


Achieving Operational Responsivenesswith Responsive Information Management

Driving Operational Responsiveness by delivering the fastest, most flexible data access and integration platform for unifying, delivering, and exchanging enterprise information

Enterprise information is fragmented

It is critical to maintain process performance

Responsive process requires the Right Information, in the Right Form, at the Right Time


Management

Enterprise DataSolutions


Driving Operational Responsiveness by delivering the industry’s best business application development platforms with the fastest time-to-value

Delivering Operational Responsiveness with Responsive Business Applications

Simplify the creation of service-enabled applications

Provide deployment flexibility for public and private clouds

Continuously ease new technology adoption

ResponsiveBusiness

Applications

Application DevelopmentPlatforms

© 2010 Progress Software Corporation16

Business Application Evolution

Pricing/Usage Models

Applications &

Services

Devices & Users

Ecosystem/ Collaboration

Business LogicData Management

Integration/Workflow

Model-DrivenTools/Architecture

Scalability Reliability Service LevelManagement

Virtualization Hardware Network

Application Development

Platform

Infrastructure

Delivery of Application or

Service

Deploy in the Cloud (Public or Private)

Personalization/Mobility

Multi-tenancyUser Interface

FlexibilitySecurity &ComplianceA complete “in the box” Platform for ISVs,

Business Service Providers, and Direct End Userslooking to optimize Service Delivery in the Cloud

From a User’s perspective:“Get a Login”

© 2010 Progress Software Corporation. All rights reserved.

What is Cloud Computing?

A style of computing where scalable and elastic IT-enabled capabilities are delivered as a service using Internet technologies.

– Gartner, August 2009

Cloud Services

Cloud Providers (can be private)

Pay just for what you use– low price of entry Simple self-service, scale up or down with global reach

Focus on differentiation, not infrastructure

Development Process/Service Creation

Deployment/Application Delivery

Automated provisioning Efficient utilization and monitoring

Simple management

Cloud Consumers


What is your cloud-computing strategy?

What are the business problems it will solve?

What are the business opportunities it will create?

What is your timetable for delivering those capabilities?

Strategic issues for CIOs in 2010


Why SaaS/Cloud?

For Application/Service Development Organizations:

Access to more users Gain economies-of-scale Reduce costs Standardization of offerings Greater focus on core competency


Why SaaS/Cloud?

For Application End-users

Predictability Rapid time to value More deployment flexibility Cost effective Dynamic interaction

OpenEdge Roadmap

Rob Straight – Senior Manager, Product Management


OpenEdge Vision

OpenEdge will become the leading SaaS Platform for ISVs and Business Service Providers to simplify service development and delivery for the Cloud resulting in greater Operational Responsiveness

Proof points:• The industry’s first true multi-tenant database – Release 11• Flexible deployment to a wide variety of public and private cloud

providers• The leading SaaS enablement program for ISVs and BSPs• Large, growing community of SaaS providers


OpenEdge Business Initiatives

Application Modernization• Continue to Provide Competitive Technology• Expand Value With Other Progress Products

Continued Growth• Acquisition of new customers through partners • Innovation through software as a service (SaaS)

Strengthen the OpenEdge Market Position• Differentiate OpenEdge in the market • Aggressively expand market awareness


7 Keys to Success

•Going from 1 to NMulti-tenancy

•Ensuring that data and applications are accessed only by those who need to know

Security & Compliance

•Being able to easily use the UI technologies that meet the needs of the customerUser Interface

Flexibility•Ensuring the application looks like the tenant and

end-user wantPersonalization

•Ability to easily integrate to any other application and provide workflow/process integration

Integration/Workflow

•Always available and scales to any sizeOperational Excellence

•Provide a highly productive environment focused on OpenEdge and industry best practices

Productivity


OpenEdge 10.2 Release Summary

2009Q1 Q2 Q3 Q4

10.2AUI Flexibility OpenEdge GUI for .NET

Operational Excellence OpenEdge Explorer

Productivity OpenEdge Architect

enhancements More object-oriented extensions

Q42008

10.2BSecurity & Compliance Transparent Database Encryption

UI Flexibility OpenEdge GUI for .NET usability

Operational Excellence Actional for OpenEdge Alternate database buffer pool

Productivity OE Architect new user support, and

ease of AppServer development JSON support


Deploying To The Cloud

Engaging with our customers• Amazon EC2 Support

– 10.2A/10.2B certified – Best practices and getting started

guides

Cloud Deployment - Future• OpenEdge runtime in the cloud• Other public cloud platforms• Push-button deployment

Community ofend-user customers

Technology Services

BusinessServices

ManagementServices

SoftwareServices

Getting to the Cloud with EaseOperationalExcellence


OpenEdge Takes You There

1998 2000 2002 2004 2006 2008 2010© 1998 Progress Software Corporation 28

Client

4GL

HTML

Java

VB / C

C++ / Java

Open AppServer

Uni

vers

al In

terf

ace Progress

Data Objects

4GL Business Objects

Uni

vers

al In

terf

ace

Uni

vers

al In

terf

ace

DatabaseDatabase

Interface

4GL

HTML

JavaBean

ActiveX

Corba IDL

Service

Native

HTTP

RMI

DCOM

IIOP

Progress Software Vision Universal Application ArchitectureProgress Software Vision Universal Application Architecture

JMSXMLEJB

Active-X

XML

Java

Email4GL

Client Sm

art Ada pters

LegacyPackaged Apps XML

System Smart Adapters

Progress

Oracle

SQL Server

DB2/400ODBCJDBCSe

rver

Sm

art A

dapt

ers

Universal Application Architecture

Applications

Application Framework

Integration

Application Server

Data Management

ClientProcessing

BusinessProcessing

AnalyticalProcessing

Appl

icat

ion

Man

agem

ent

Dev

elop

men

t Env

ironm

ent

OracleSQL ServerDB2ODBC

JDBCODBCSQL92

XMLJavaActiveXSOAP

SSLHTTP

HTTP/SHTML

ActiveXCOM

HTMLJava

JMSXMLSOAPWSDLJCA

LinuxAIX

SolarisHP/UX

Windows

Platforms

SNMP

OpenEdge The Progress E-Business P latformOpenEdge The Progress E-Business P latform

© 2003 Progress Software Corporation35Sim

plify

you

r bus

ines

sS

impl

ify y

our b

usin

ess

Service Oriented Architecture

Service-OrientedArchitectureStandards Platform

Integration

Process-OrientedApplications

Business Process

Business Process

Business Process

User Interface Methods

It’s always been about Business Applications Continuous Evolution

through the IT paradigms

• OpenEdge 11 Eases SaaS/Cloud Computing

• OpenEdge 10 Enabled SOA • V9 Delivered Distributed Computing

• V8 was Client/Server


D I S C L A I M E R

Roadmap Information

This roadmap is for informational purposes only, and the reader is hereby cautioned that actual

product development can, and often does, vary significantly from roadmaps. This roadmap may not be interpreted as any commitment on behalf of Progress, and future development, timing and release of any features or functionality described

in this roadmap remains at our sole discretion.

D I S C L A I M E R


Isolating Sharing

Better economy of scaleSimpler managementTarget like-customersLeast cost to serve

Easier customization, securitySimpler throttling controlTarget dissimilar customersNo transformation

Tenant2 Tenant3

App App App

DB DB DB

Infra. Infra. Infra.

Tenant1

Isolated Tenancy

Tenant1 Tenant2 Tenant3

App

DB

Infrastructure

Shared Tenancy


App App App

DB DB DB

Infrastructure

Infrastructure Tenancy


DB DB DB

Infrastructure

App

ApplicationTenancy

Multi-Tenancy


Multi-Tenant Tables

Multi-tenancy built into the database

Data physically partitioned by tenant identity

Built-in tenant level authentication

Minimal application changes – just set a per-database tenant id

Simplify Development of Multi-tenant Applications Multi-tenancy

1 Lift Line Skiing 2 Urban Frisbee 3 Hoops Croquet

Tenant 1partition

1 Thundering Surf 7 Fanatical Athletes 8 Game Set Match

Tenant 2partition

2 Hide Tide Sailing 7 Pedal Power 9 Hoops Croquet

Tenant 3partition

CustomerSchema


Multi-Tenant Tables: Data Access

Keys unique per tenant or unique per table

Simplifies Development of Multi-tenant Applications Multi-tenancy

Tenant 1partition



Tenant 2partition


Tenant 3partition

CustomerSchema




Query is tenant specific


Tenant 1partition



Tenant 2partition


Tenant 3partition

CustomerSchema

Tenant 1 Partition

FIND CUSTOMER WHERE CUST_NUM=2.





Query is tenant specific “Super” tenant query





CustomerSchema

Super Tenant

For each customer:Display cust-num, name




Query is tenant specific “Super” tenant query Tenant ID virtual

column


1 1 Lift Line Skiing 1 2 Urban Frisbee 1 3 Hoops Croquet

2 1 Thundering Surf 2 7 Fanatical Athletes 2 8 Game Set Match

3 2 Hide Tide Sailing 3 7 Pedal Power 3 9 Hoops Croquet

CustomerSchema

Super Tenant

For each customer:Display tenantid(customer), cust-num, name.


Multi-Tenant Tables: Tenant Provisioning

Tenant creation via DDL & Dictionary Identification (via schema table)

• Database specific tenant ID• User friendly names• App specific IDs

Tenant level activation/deactivation Runtime security by user by tenant Governors: Limit resource usage


Tenant 1partition


Tenant 2partition


Tenant 3partition

CustomerSchema



Table Partitioning

Types of Table Partitioning• Range- the key is within a range of values, e.g. year,

territory, invoice amount, etc.• List: each partition is assigned a list of values, e.g.

male/female, country, etc.• Composite- a combination of Range and/or List

Phase 1: The Foundation for Multi-Tenancy• Initial use case of tables partitioned by tenant ID• Focus of OE11.0

Phase 2: Horizontal Data Partitioning (Range/List) • Focus of OE11.1

Operational Excellence


Multi-tenancy

Operational Features of Multi-Tenancy and Table Partitioning

Partition Maintenance• Object move• Add/drop tenants/objects• Backup/restore, recovery• Data dump/load• Index maintenance tools

Monitoring



Tenant 1partition


Tenant 2partition


Tenant 3partition

CustomerSchema


Application

Tenant A

User A1

Login Session

A1-1

Tenant B

User A2 User B1 User B2

Login Session

A1-2

Login Session

A2-1

Login Session

A2-2

Login Session

B1-1

Login Session

B1-2

Login Session

B2-1

Login Session

B2-2

Multi-tenant AppServer

Context Management built into the AppServer• Supports multi-tenancy in addition to general use

4 levels: Application, Tenant, User, Session Context automatically switched on a request basis as

needed

Multi-tenancy Operational Excellence


Application ServerAgent



Application

ServerBroker Context

Data Cache

Context Management

Storage Service

ABL Batch

Loader

OE Database

DEFINE CONTEXT-TABLE PriceList FOR “TENANT”

Context-Managed AppServer

Context management service pre-loaded with context for performance

Data cache shared across agents Declarative approach simplifies development


High Availability Through Online Operations, Robustness, and Improved Diagnostics


High Availability – 24x7 Production Operation

Near-100% Online Database Maintenance• Improve performance of DB utilities (index rebuilds, table &

index moves, migration to Type II storage areas)• Avoid application restarts for DB schema changes

Server Property Changes in Real Time• No need to stop and restart the server

Improved Ability to Monitor AppServer• Better error diagnostics• R-code monitoring



High Availability – Performance

Table Scans Without Overhead of Using an Index• If entire table needs to be scanned, using the index adds

overhead

Auto Update of SQL Database Statistics• Optimizer has more current information, leading to increased

database performance

Dynamic Query Join Optimization for DataServers

Maximize operating performance


Built-in authentication and authorization system

Ajax tools Microsoft WPF/Silverlight JSON-RPC

Latest Web services standards

REST

Database multiple linguistic sorting

Actional – payload, DB interceptor Manage remote jobs

OpenEdge Architect Object-oriented extensions- remote objects, reflection


Productivity

Personalization

Integration

User InterfaceFlexibility

Security & Compliance

Taking You Higher With OpenEdge 11

© 2010 Progress Software Corporation43 43

OpenEdge User Interface Options and Directions

Flexible and open support for leading RIA technologies

Mike Ormerod– Architect, SaaS and Cloud Computing Strategy


Rich Internet Applications- The Best of “Both Worlds”

Extend the market of a traditional desktop application with the reach of a web application• Multi-platform support• No installation or automated install and updates

Enhance the user experience of a web application with the richness of a desktop application• Look and feel of desktop applications• Increased productivity for user

45

RIA for me is all about expanding the experience for the user.*

Raymond Camden Camden Media, Inc.

A Rich Internet Application's key job, is to move the ability to do

work to the web.* Tony MacDonell Teknision Inc.Combine the flexibility,

responsiveness and ease of use of desktop applications with the broad reach of the

Web. - Ken Wilner


Framing the RIA Market:Three User Personas

The Infrequent User

• Needs access from anywhere

• Uses application rarely and briefly

• Demands immediate feedback

• Expects familiar web usage pattern

• Needs intuitive UI with no training

The Occasional User

• Needs access from limited locations

• Uses app periodically and for a short time

• Limited setup acceptable

• Willing to use new usage paradigms

• Can learn as they go

The Power User

• Works from same location every day

• Uses application most of day

• Initial setup okay with clear benefits

• Expects domain-specific features, desktop integration

• Productivity is top priority, training expected

46


Three Types of RIA Applications Mapping Each to an RIA Technology Choice

Information-based pages• Browser-based with some interactive controls • No desktop integration; supports all platforms• Navigational elements: Hyperlinks, bookmarks,

history…• Maximum reach, zero footprint

47





Rich browser application• Browser-based with desktop-like interactive controls• Limited desktop integration• Limited navigational elements• Limited reach; some platform limitations

48

Browser Plug-in





Rich browser application• Browser-based with desktop-like interactive controls• Limited desktop integration• Limited navigational elements• Limited reach; some platform limitations

Rich desktop application• Native, highly interactive controls• Full desktop integration• App runs locally -Full (incremental) install over web• Low reach; limited platforms

49

Browser

Plug-in

Desktop RIA


RIA Technology Landscape

Two Types of Ajax• Lightweight Ajax

- JavaScript libraries

• Heavyweight Ajax- Component frameworks

Browser plug-in• Plug-in runtime offers rich functionality

Desktop RIA• Web deployment with automated updates

50

Browser

Plug-in

Desktop RIA


RIA Technology: Lightweight Ajax

Enhance the user experience of traditional Web pages• Spot enhancements / incremental upgrade• Asynchronous page updates• Adds limited interactive elements Programming in JavaScript and HTML XML or JSON typically used for communication

Open source libraries simplify programming complexity – over 150• Hide most browser differences• UI controls , XML helper functions, XMLHttpRequest object

51

Popular choices: • YUI (Yahoo)

• jQuery

• Prototype

• ExtJS

• DOJO


Traditional Web Architecture

52

Web Server

Business Application

HTTP(params) HTML(data)/CSS – New page

Browser

Server

<html> …/html>


Lightweight Ajax Architecture

53

Web Server


HTTP(params) HTML(data)/CSS

Browser

Server

Web Server


HTTP(data) XML/JSON

Server

BrowserTraditional

JavaScript event HTML/CSS/data

Ajax Engine

<html> <body> <h1>HelloWorld </h1> </body> </html>


RIA Technology: Heavyweight Ajax

Full web application or new UI component Framework components for client and

server services• Programming in JavaScript or code

compiled to JavaScript• Complex Ajax UI controls and custom

behavior• Services:

- Web Services and REST support- Data compression / normalization- Database integration

Limited development tools Commercial offerings available

54

Popular choices: • Google Web Toolkit

• ASP.NET Ajax

• Isomorphic SmartClient

• Open Laszlo

• Backbase


Heavyweight Ajax Architecture

55

Web Server


HTTP(data) XML/JSON

Server

Browser


Ajax Engine Framework Components

Web Server


HTTP(data) XML/JSON

Server

Browser


Ajax Engine

Lightweight

Server Framework Components

function $onModuleLoad(){ var cs, i, n; cs = $wnd.jsonData; for (i = 0, n =

cs.length; i < n; ++i) { $wnd.alert('Hello, ' + (cs[i].FirstName + '

' + cs[i].LastName)); }


RIA Technology: Browser Plug-in

Full web application or new UI component

Purposed platform specific browser plug-in – limited platform support

56

Popular choices: • Microsoft Silverlight

• Adobe Flex

Proprietary framework and language• Program in specified language• Complex custom controls and custom behavior• Data-binding model

Extensive Web server services• Compression• Communication• Server push

Full-featured development environment with rich WYSIWYG UI designer


Browser Plug-in Architecture

57

Web Server


HTTP(data) XML/JSON

Server

Browser


Browser Plug-in

Server Components

function $onModuleLoad(){ var cs, i, n; cs = $wnd.jsonData; for (i = 0, n =

cs.length; i < n; ++i) { $wnd.alert('Hello, ' + (cs[i].FirstName + '

' + cs[i].LastName)); }

Ajax Engine


RIA Technology: Desktop RIA

Can be used to extend reach of existing desktop application

Runs natively on desktop• Full branding

Provisioned over the Web • Automatically installed and

incrementally updated (Smart Client)• Terminal services, e.g. Citrix

Tight integration with the desktop• Drag n’ drop• Off-line mode• Local storage

Back-end services are platform specific

58

Popular choices: • OpenEdge GUI for .NET

• OpenEdge WebClient

• Microsoft WPF, WinForms

• Adobe AIR

• Java AWT/SWT/Swing


Forrester Study“Ajax is Not Enough for Power Users”

59


InfrequentUser

OccasionalUser

PowerUser

Browser Plug-in

Silverlight, Flex

Desktop RIAOpenEdge GUI for .NET,

OpenEdge WebClient, Adobe AIR

Lightweight /Heavyweight Ajax jQuery, extJS, GWT

Matching RIA Users and Design Centers

60


One35%

Two26%

Three21%

Four+

18%

Number of UIsCurrent

65% - More than one UI

One21%

Two44%

Three14%

Four+21%

Number of UIs3-5 Years

76% - More than one UI

Number of User Interfaces – OpenEdge Partners May 2008

61


Percent Usage by UI Type

62

Char

acte

r

Web

Ajax

Li

brar

y

Ajax

Fr

amew

ork

Asp.

Net

Java

Web

Flas

h/Fl

ex

Silv

erlig

ht

Ope

nEdg

e GU

I

Ope

nEdg

e GU

I fo

r .NE

T .NET

Java

Basic Light-weight

Ajax

HeavyweightAjax

BrowserPlugins

Desktop

0%

20%

40%

60%

80%

100%

31 36

101424 17

Current 3-5 Years

88%/72%

8%/11%18%/32%


Use Lightweight / Heavyweight Ajax for…

Easy access from “any” browser Limited interactive experience Multiple platform support Zero footprint Best for incremental changes to an existing

Web application Easy update and deployment model

63

Infrequent User

Ajax client with OpenEdge WebSpeed Ajax client with OpenEdge Web Services

ASP.NET with OpenEdge Open Client for .NET Java Server Pages (JSP) with OpenEdge Open Client for Java

AJAX CLIENTS WITH 10.2B:


Use Browser Plug-in for…

Want balance between client platform independence and a rich interactive experience

Near-zero footprint; plug-ins almost ubiquitous

64

Occasional User

Microsoft Silverlight with OpenEdge Open Client for .NET Microsoft Silverlight with OpenEdge WebSpeed

Microsoft Silverlight with OpenEdge Web Services Adobe Flex with OpenEdge Open Client for Java

Adobe Flex with OpenEdge Web Services Adobe Flex with OpenEdge WebSpeed

BROWSER PLUG-INS WITH 10.2B:


Use Desktop RIA for…

Limited platforms – mobility is not an issue Tight integration with the desktop is critical Local installation allowed by IT Maximize leverage in-house OpenEdge skills Works the way you want it when you want it

65

Power User

OpenEdge GUI for .NET / GUI with WebClient OpenEdge GUI for .NET / GUI /Character with Citrix

or Terminal Services Microsoft WPF/WinForms with OpenEdge Open Client for .NET

Adobe AIR with OpenEdge Open Client for Java

DESKTOP RIAS WITH 10.2B:


OpenEdge Business Application – Reach vs. Development Effort

OpenEdge GUI

WPF

AIR Flex

Silverlight

Lightweight Ajax

OpenEdge GUI for.NET

Heavyweight Ajax

Leve

l of D

evel

opm

ent E

ffor

t

ReachMIN MAX

Easy

Com

plex


UI Decision Tree

67

http://communities.progress.com/pcom/docs/DOC-60938

http://communities.progress.com/pcom/docs/DOC-60938


OpenEdge 11.0 Roadmap

Lightweight / Heavyweight Ajax• JSON parser in ABL (read and write)• REST Adapter to OpenEdge AppServer• REST binding to OpenEdge WebSpeed• Web tooling in OpenEdge Architect

Browser Plug-in• Microsoft Silverlight RIA Services Adapter and Proxies• REST Adapter to OpenEdge AppServer• REST binding to OpenEdge WebSpeed

RIA Desktop• OpenEdge GUI for .NET designer improvements• Updated UltraControls

68


Summary

Start with the end-user• Ajax for the infrequent user• Browser plug-ins for the occasional user• Desktop RIA for power users

Pick the lightest-weight approach that meets your needs• You might want multiple UIs

Factor in the skill sets of the developers

Follow the guidelines and principles of the OERA • Plan for the future• http://communities.progress.com

69


Rob Straight – Senior Manager, Product Management

Addressing Security and Compliance Issues

OpenEdge Transparent Data Encryption


Introduction

The Need to Provide Security for Data Continues to Increase

Touches Many Market Segments: Finance, Retail, Healthcare, and more

Governments Have Enacted Legislation to Enforce Compliance of Data


Compliance Legislation Examples

European Union Data Protection Directive • Protects individuals personal information

Payment Card Industry (PCI) Health Insurance Portability & Accountability Act

(HIPPA) Sarbanes-Oxley Act (SOX)

• Public company accounting reform and investor protection

“Must Have” Conformanceto do Business


Data Security Options

1. Use Built-In Encryption Functions 2. Encrypt Data Using O/S or SAN File Encryption 3. 3rd-Party Encrypted SAN 4. RDBMS encrypts only to disk, only for policy-selected

data


Option 1: OpenEdge Built-In Encryption Functions

Requires significant rewrite and ongoing maintenance of existing code• Operates on the data field level

Does not encrypt the database:• Poor performance- data not indexed, no range searches• Limited effectiveness from a security perspective -

programmers put in position of “security risk”- mistakes, oversights, dishonesty can happen

• Might not pass auditors review Customer has to manage the encryption keys

manually SQL reports do not decrypt values


Option 2: Encrypt Data Using O/S or SAN File System

Performance is an issue – heavier overhead than DB encryption• Microsoft says file encryption is too slow for DB

Security administrators must manually track the encryption keys for anything archived

Security administrators cannot prevent the writing out of clear-text data• The DB and some OS utilities can write to other file systems

that may not be encrypted


Option 3: 3rd-Party Encrypted SAN

Same issues as file system: security of the data outside the secured environment not guaranteed• Backups, dumps, journal files, etc.• Anything “unencrypted in memory” can be written


Option 4: Database Encryption At Rest

The solution chosen by most database vendors

Industry expectations are “encryption at rest” because the major database vendors have proven this approach is performant,

and less hassle than encrypting file systems.Carl G. Olofson, IDC Analyst for Databases


n=260

n=260

Why Database Encryption?


n=260

n=260

Encryption – Industry View: Management


OpenEdge 10.2B Transparent Data Encryption

Option for Enterprise Database: At-Rest (storage area level) Encryption• Data secure on-disk, backup, and dump• Data is unencrypted In-Memory = (up to) normal

speed

Secure Key Store and Key Management• Change keys on-line

Policies control use of utilities

Industry standard encryptions• AES, DES, triple DES, etc.

No application changes!


A High-Level View of Encryption

Client <SSL> Server

Database on Disk

Encrypted Messages

Shared Memory

BackupsDump/Load

Encrypted Data

Encrypted Data

Encrypted Data


OpenEdge Transparent Data Encryption

Protects Data in DB Tables & Indexes (block-level)• Type I storage areas in their entirety • Type II storage areas – on a per-table and per-index basis

Full Protection Throughout the Data Lifecycle• On disk, backups, binary dumps

Industry standard cipher algorithms– AES, DES, triple DES, etc.

Clear-Text Access for Authenticated Clients• No performance degradation for in-memory operations

Secure, Separate Encryption Key “Store”


Your Cipher Choice

Governance Business rules Your choice, your responsibility - balance strength &

performanceRC4-1

28

AES-128

AES-192

AES-256

DES-56

DES3-168

Security Strength 0 – no encryption

DES-PBE

10

10

RC4-128

AES-128

AES-192

AES-256

DES-56/PBE

DES3-168

Performance Cost

0 – no encryption

*Graphical data is relative


n=260

Challenges Addressed by TDE


How Fiserv Makes Progress - Case Study

Benefits• TDE will ensure data privacy across the entire lifecycle• Maintain competitive advantage and ability to interface with

third parties by adhering to PCI DSS• Increased IT performance will save time and reduce costs

“We always try to improve our performance and get things to run faster. We tested a fully encrypted database and there was only a 4% decrease in

performance versus an unencrypted database. We tested that with alternative data pools, we actually gained back almost 2% of that initial

performance degradation. We believe with additional fine tuning the performance will continue to improve.”


Why Use OpenEdge Transparent Data Encryption?

Gives You Control Over Who Can Access Private Data• Works regardless of who has a copy of the data or where

the data resides Easy To Implement Low Cost Solution Configurable Transparent

• No need to change your OpenEdge application, database design, or data

© 2010 Progress Software Corporation. All rights reserved.89 89

Maximize Your OpenEdge Investment with Actional Transaction Management

Mike Ormerod– Architect, SaaS and Cloud Computing Strategy


Why are we here?

With the growing complexities of today’s infrastructure, you need end-to-end visibility that optimizes the value of each transaction …


Lost in interconnected complexityFind your way … the easy way! (And get a map!)


Unravel the Complexity

Ensure the success of every important business transaction

OpenEdge-based applications are one piece of the complete picture.


Business Transaction Assurance: New levels of Visibility and Management

Expanding the boundaries beyond OpenEdge applications with:

…the ability to capture and track all transactions automatically and continuously

…the ability quickly and easily pin-point issues through root cause analysis

…the ability to produce the best business outcomes with real-time process optimization


Why is it so important?

• Visibility into customer experience

• Assure no process steps are missed or lost

• Early detection of performance and availability issues

• Guarantee of SLAs

• Decreased time and resources to fix issues


“Verizon's servers [for BB Storm] seemingly meeting the same fate as AT&T's and

Apple's on iPhone 3G launch day”

“Computer glitch causes massive United flight delays”

“Customers report major Salesforce.com outage”

Without Visibility and Management......Customer Satisfaction/Reputation Impact


Contributing Factors Leading to Failures

Market Survey Stats Reveal Combined Effects

“Growth in the volume of transactions has increased transaction failures in 70% of companies surveyed.”

“Companies surveyed lost between $11 – 16M in revenue per year due to transaction failures”

“On average 90% of these companies stated it takes approx 2 hours & 10 employees to address each lost order”

Results from the Vanson Bourne Market Survey - 2009


A Spectrum of Visibility

Where do you fit today?

And, where do you need to be in the future?

Complete Visibility

Zero Visibility


Example One –

Scenario• Minimal visibility into

environment• Non-mission critical

application• Application outages

- Minimal Revenue Loss- Acceptable Data Loss

Desired State: More Configuration capabilities• Maintain Status Quo• No Business Requirement

for additional monitoring• Process level information• Single tool for configuration

and management

OpenEdge Explorer


OpenEdge Explorer using common OpenEdge Management framework:Browser-based interface means:

• No more Windows dependency• Access from anywhere

Single tool for configuration and managementMore functionality, e.g.

• Log viewer• List AppServer connections• Customizable user roles • Process system level

information

Configure Your OpenEdge Environment from Your BrowserProgress Explorer

OpenEdge Explorer

OE10.2A - OpenEdge Explorer!


Example Two -

Scenario• OpenEdge Application

- Mission Critical- Business Transaction with

other Applications• Application Outage

- Potential Revenue Loss- Business Reputation would

suffer

Desired State: Operational Continuity• Visibility into

- Application Environment- Specific Business

Transactions• Users need application

availability

OpenEdge Management


OpenEdge Management

Operational Continuity

•Minimal Planned Downtime Online utilities

•Minimum care and feedingAuto DefragLoad Balancing App Servers

•Non-stop Execution Failover clusters (in the box) AppServer failover

•See situations before they become problems

•Automatically adjust settings as needed

• Maximize uptime and operational efficiency

•Further reduce Progress’ already low cost of ownership.

Proactive Management


Scenario• OpenEdge Application

- Mission Critical- Business Transactions

integrate with other mission critical applications

• Application Outage- Potential Revenue Loss- Business Reputation

Suffers

Desired State: End-to-End Visibility• Visibility into

- Application Environment- Entire Business Transaction

flows• Guaranteed application

availability - SLA’s are becoming critical

Example Three -

Progress Actional


Introducing Actional For OpenEdge

Interceptors for AppServer, Sonic Adapters, WebSpeed, and Web Services

Easily configure with OpenEdge Explorer

No application changes required


Before Actional There are no painted lines on the data center floor!

PartnerGW CustomerGW OrderMgmt

Logistics

Inventorymgmt

OrderIQ

Tax.writenow.com

FinanceFdb.wirtenow.com

B2b.fedix.com

Idb.writenow.com

warehouseemea

Ldb.writenow.com


PartnerGW CustomerGW OrderMgmt

Logistics

Inventorymgmt

OrderIQ

Tax.writenow.com

FinanceFdb.wirtenow.com

B2b.fedix.com

Idb.writenow.com

warehouseemea

Ldb.writenow.com

Actional EnterpriseStep 1: Install Actional Agents on Key Services

Actional Agents add less than

5% overhead even under themost stressful situations


Actional EnterpriseStep 2: Let the Application Run

Actional automatically discovers process flows and maps dependencies end-to-endwith no custom coding or configuration


Actional EnterpriseStep 3: Define Policies

Auditing, service levels, detecting missed deadlines, lost transactions, …


Actional EnterpriseStep 4: Triage and Locate Issues

Actional can snapshot individual transactions that violate policies to easily isolate the root cause of problems… with

no added overhead


Hippocratic Oath: First do no harmThe cure is usually worse than the disease

Business Transaction Assurance:Why Progress?

Patented track-and-traceDo you know where your transactions are?

• Auto discovery No surprises• End-to-end No blind spots• Content visibility Business aware

• Track-and-trace No manual correlation• Online configuration No downtime• Minimal overhead Always on

The cure is not worse than the disease


208% ROI achieved in less than 12 months at a leading Financial Services Organization”

“Actional cuts the number of people required to fix a problem in production was reduced by 85%”

“Amount of time needed to resolved a problem in preproduction was reduced by 70%”

Forrester Consulting - Commissioned ROI Analysis

PLUS…………………. Reduction in development time required for service monitoring Reduction in time required for weekly reporting Reduction in the number of production incidents Increased revenue as a result of reduced application downtime


A Spectrum of Visibility

What tools are available to help you?

Progress Actional

Existing Out of the Box Tools

OpenEdge Management


Summary

End-to-end Visibility to monitor and govern services and applications

Design-time to run-time application validation, visibility and control

Ensure the success of every important business transaction

High Performant, Scalable, Patented, Product Leader, Proven ROI


Save the date for EMEA PUG Challenge 2010! first joint conference of all European Progress Users Groups November 18 & 19 (Thursday/Friday), Cologne/Germany 2 days fully packed with technical and business oriented sessions and

workshops, mini expo for tools 5 parallel tracks on OpenEdge and Progress Software Integration

Technologies top-class international speakers from Progress Software and

independent organizations social evening event / dinner party on Thursday

http://www.pug-challenge.eu for more details!

http://www.pug-challenge.eu/


Documents

Face2Face Forum – Netherlands