ProCurve ONE Alliance - Niche Associates · • McAfee • Microsoft • ... looking to build customer loyalty by moving customer service and resources in to branch locations, closer

ProCurve ONE AllianceProCurve ONE Alliance

Now that you’re up to speed on ProCurve’s approach to the primary application issue plaguing businesses today, we’ll take a closer look at the partners and partner applications that are currently a part of the ProCurve ONE Alliance.

ProCurve ONE Alliance2 HP ProCurve Confidential

ProCurve ONE ApplicationsProCurve ONE Applications

Branch Office Services

Network Management

Wireless Services

Data Center Infrastructure Management

Security and Threat Management

Identity and Access Management

Physical Security

Collaboration

BUSINESS APPLICATIONS

NETWORK APPLICATIONS AND SERVICES

The ProCurve ONE Alliance program will replace the previous ProCurve Alliance program, and will eventually integrate all of the existing alliance partners. On this slide are listed both the pre-existing and the new ProCurve ONE Alliance partners. This training will concentrate on the new partners, which include:

• Aastra • AirTight• Avaya• Ekahau• F5• InMon• McAfee• Microsoft• Riverbed• .vantronix• VBrick

2


ProCurve ONE Applications Provided via Standalone AppliancesProCurve ONE Applications Provided via Standalone Appliances


Network Management

Wireless Services




Physical Security

Collaboration



NOTE:Solutions from these vendors are available today as distinct appliances that work with ProCurve networks.

All of these vendors are planning to port solutions to the Services Module during 2009. Dates will be communicated closer to the actual time.

To date, the following companies have signed on as new HP ProCurve ONE Alliance partners providing solutions that are available as standalone appliances:

• Aastra• Avaya• F5• McAfee• MicrosoftAnd• Riverbed

The next slides take a closer look at these partner offerings. Note that while these solutions are illustrated in the network topology slides as standalone appliances, all will be available soon on the ProCurve ONE Services zl Module, and most in 2009. Launch dates will be announced closer to the availability of each integrated solution.

3

AastraAastra


Aastra


COLLABORATION• VoIP/Unified Communications

APPLICATION• Aastra 5000 (IP PBX)

INTEGRATED INTO SERVICES MODULE:• Expected During 2009

To improve employee productivity while reducing costs, enterprises are migrating to the next generation of IP telephony solutions. Ensuring that their networking investments continue to reap rich dividends requires solutions that are secure, reliable, based on open standards, and adaptable to changing business needs. A leading company in the enterprise communication market, Aastra Technologies develops highly flexible, scalable, and secure traditional and VoIP communication products, and has invested heavily in research and development to promote open IP telephony. Aastra delivers one of the most complete portfolios of Unified Communications solutions. Spanning both the telephony and traditional LAN/WAN markets, Aastra’s products include communications servers, gateways, telephone terminals, VoIP endpoints, wireless products, and advanced software applications. Aastra’soperations are global, with more than 50 million installed lines around the world and a direct and indirect presence in more than 100 countries. Aastra 5000, or A5000, is an innovative VoIP software application that enables the convergence of video, messaging, and voice, using voice, fax, and video devices along with voice trunks. To create a single, integrated, enterprise-wide communications system, A5000 also provides a wide range of mobility services, including user Session Initiation Protocol, or SIP, mobility based on WiFi or DECT over IP. SIP is rapidly emerging as the de facto standard of standards-based IP telephony.

4

Aastra 5000Aastra 5000


Some of the notable features of A5000 include a SIP protocol ensuring it is compatible with all types of terminals, a SIP trunk interface for connecting to VoIP providers, and an architecture based on Linux. The quality of IP calls is enhanced through end-to-end VoIP, flow prioritization, and dynamic adaptation to the network status.In addition to the A5000 core telephony software, Aastra offers the following:

• Secured media gateways• Standard media gateways• A range of IP phones and softphones• A mobility solution inside the enterprise (using DECT over IP or VoWLAN) or outside (via fixed

mobile convergence)• A software subscription • And a full range of Unified Communications applications that help to increase user productivity

with features as click to call, multi-directory connectors, attendant services, phone management, and voice, video, and file sharing between several users

The complete solution brings to the customer LAN, WAN, wireless, and Unified Communications technology. And as we will discuss in the next slide, with the Aastra 5000 network communication system core software running in an HP ProCurve LAN/WAN environment, and best-of-breed telephony and Unified Communications applications and services from Aastra, customers can create a single, integrated, open, and enterprise-wide communications system to enhance individual and organizational productivity and lower communications costs while offering Web 2.0-style communications services.

5

The HP ProCurve/Aastra SolutionThe HP ProCurve/Aastra Solution


• ProCurve and Aastra deliver standards-based solutions for choice, flexibility, and lower TCO

• ProCurve provides robust, feature-rich intelligence at the network edge

• Centralized management as well as multiple security levels to help secure the communications infrastructure

*Also compatible with ProCurve MultiService Mobility solutions.

A key differentiator for the joint HP ProCurve and Aastra solution is the use of open standards. While competitors offer mainly proprietary VoIP solutions, ProCurve and Aastra share a commitment to deliver and support standards-based solutions that meet the needs of customers today and in the future. By embracing industry standards such as SIP, 802.1X, and Link Layer Discovery Protocol -Media Endpoint Discovery, or LLDP-MED, combined solutions from ProCurve and Aastra deliver choice and flexibility. This, in turn, helps customers to realize higher returns on their investment and lower TCO. And by providing robust, feature-rich intelligence at the network edge, the ProCurve architecture ensures a stable, reliable, and interoperable environment for Aastra’s IP telephony implementation. The ProCurve/Aastra solution also offers centralized management as well as multiple security levels to help secure the communications infrastructure, including embedded antivirus and virus throttling solutions, optional encryption of voice packets for confidentiality, and multi-user 802.1X-based network access control for IP phone handsets and endpoint devices. Together, ProCurve and Aastra deliver a best-of-breed Unified Communications solution while taking the cost and complexity out of just such a network venture.

6

Target MarketTarget Market

7 HP ProCurve Confidential

Target Verticals• Healthcare• Administration• Banking and insurance

Target Enterprise• Medium and large enterprises: 300 to

several thousand users• Enterprise telephony server more

than 8 years old (PBX)• Possible projects underway:

• Connecting enterprise sites • Providing a homogeneous telephony

network and services• Providing continuity service or

disaster recovery • Contact center development• New building integration• Integrating purchased company into

the enterprise

ProCurve ONE Alliance

HP ProCurve and Aastra have formed an alliance to deliver best-in-class IP Unified Communications solutions targeting the healthcare, administration, and banking and insurance industries, and businesses of between 300 and several thousand users. The business itself can be comprised of one or many sites on a national or continental scale. The ProCurve/Aastra sales opportunity is strongest in companies with enterprise telephony software that is more than eight years old, and companies with projects underway to:

• Connect enterprise sites • Provide a homogeneous telephony network and services• Provide continuity service or disaster recovery • Develop a contact center • Integrate a new buildingOr• Integrate a purchased company into the enterprise

Avaya


COLLABORATION• VoIP/Unified Communications

APPLICATION• Avaya IP Telephony and Unified Communications solutions

INTEGRATED INTO SERVICES MODULE:

AvayaAvaya

8ProCurve ONE Alliance8 HP ProCurve Confidential

• Expected During 2009; Demonstrated in Jan. 09

With intense global competition and challenging economic conditions, enterprise customers are looking to build customer loyalty by moving customer service and resources in to branch locations, closer to the end customer. At the same time, however, they seek to simplify the infrastructure, and infrastructure management, to conserve costs. Consistently recognized as a global leader by industry and technology experts, Avaya delivers IP Telephony and Unified Communications solutions that help companies transform their businesses to achieve marketplace advantage. Avaya simplifies complex communications to make processes more intelligent, employees more productive, and customers better satisfied. A commitment to open standards enables their technologies to work with other vendor’s solutions to unlock the value and potential of any customer’s network. More than one million businesses worldwide, including nearly 90 percent of the Fortune 500, use Avaya solutions.

8

Avaya IPT and UC SolutionsAvaya IPT and UC Solutions


Find an expert within the business to help a customer.

Expert

Customer Call Center

Receive/retrieve all messages from one mailbox.

Your office extension number travels with you.

Build customer loyalty. Simplify the infrastructure.

Avaya IP Telephony and Unified Communications solutions enable employees out of their offices or working in a different location to remain accessible to customers and coworkers via a set of consistent features across all branch telephony systems or via various Unified Communications options. For example, employees working in a different office location for the day could log in to an available phone and have their extension number and all their personalized features available on that phone. Similarly, mobile employees could receive all of their messages (voice mail, email, and fax), and retrieve them from, one mailbox, and be notified of important messages and callers. Avaya provides extensive integration with vendors such as Microsoft, IBM, and Nokia, to provide customers with Unified Communications solutions that are accessible any time, anywhere, and on the device or client of their choice.While providing improved customer service, companies can also reduce support costs and the number of employees required to manage communications systems. For example, centralized contact center agents can handle requests from customers across all channels (branch, voice, chat from the company site, and requests transferred from self service) and access necessary applications and databases to provide full-service capabilities to bank customers. And when employees need to find an expert anywhere within the business to help a customer, they can do so easily via a graphical interface showing availability and status, and providing a click-to-dial capability to connect to the right resource and address customer issues in real time.

9


The HP ProCurve/Avaya SolutionThe HP ProCurve/Avaya Solution

• Active leaders in driving convergence standards to reduce operational costs

• Close coupling of applications with the network enables apps to activate security features and make intelligent forwarding decisions

• Fully interoperable, reliable, and secure IP telephony solutions for lower TCO

*This diagram represents an Avaya DevConnect certified topology.

HP ProCurve and Avaya are partnering to bring integrated IP networking and telephony application solutions to enterprises, with industry-leading total cost of ownership. In addition to ProCurve’s open and reliable products and proven planning, design, implementation, and support services, the joint ProCurve/Avaya solution includes Avaya’s Communication Manager, which provides centralized call control for a resilient, distributed network of media gateways and a wide range of analog, digital, and IP-based communication devices. Avaya leverages the standards-based Session Initiation Protocol, or SIP, to improve the connectivity and openness of Communication Manager. This translates into reduced costs for trunking and connecting systems, faster deployment of new capabilities, and increased options for linking communications and business systems to increase competitive advantage. Avaya also delivers gateways, IP telephones, Unified Communications applications, contact center applications, and implementation and support services of their own.Active leaders in driving open industry convergence standards, ProCurve and Avaya have worked together to develop, deploy, and advocate for the standards, such as 802.1X; Link Layer Discovery Protocol, or LLDP; and LLDP - Media Endpoint Discovery, or LLDP-MED, which make their joint solution superior. The co-authored and co-deployed LLDP-MED, for example, addresses the unique demands of video and voice in a converged network and helps to significantly reduce operational costs for your customers:

• Plug-and-play provisioning eliminates the need to manually configure the phone or switch port when deploying new IP phones, or for any subsequent moves, adds, or changes.

• VoIP devices can be automatically identified and tracked, simplifying the management and maintenance of inventory.

• And LLDP-MED enables phones and other devices to manage power consumption more effectively, with for example fine-grained power allocation and endpoint power priority settings.

In addition, the close coupling of Avaya applications with the ProCurve network enables applications to activate security features such as VPN tunnels and firewall ports. And Internet telephony applications such as Avaya Communication Manager can make different routing decisions based on awareness of network conditions. The flexible, fully interoperable, and secure IP telephony solutions created by deploying Avaya intelligent communications solutions on ProCurve’s best-in-class network infrastructure solutions meet the stringent performance, reliability, and voice quality requirements demanded by business-class customers.

10



Target Verticals• Financial services• Retail• Manufacturing • Government• Healthcare

Target Enterprise• >1,000 employees• Multiple locations or a large number

of branch-office locations (~30+)• Enterprises experiencing:

• High TCO for communications systems

• Difficulty deploying new communications capabilities to branch locations

• Poor employee productivity and responsiveness to customers


This slide lists many of the verticals for which the ProCurve/Avaya solution is a good fit. Target customers for the ProCurve/Avaya solution are enterprises with more than 1,000 employees and multiple locations or a large number of branch-office locations. These customers are making strategic investments in convergence to lower costs and improve return on investment.

F5F5

*ProCurve ONE Services zl Module includes a lifetime warranty on the module itself, with 5 years for the hard-disk*ProCurve ONE Services zl Module includes a lifetime warranty on the module itself, with 5 years for the hard-disk*ProCurve ONE Services zl Module includes a lifetime warranty on the module itself, with 5 years for the hard-disk*ProCurve ONE Services zl Module includes a lifetime warranty on the module itself, with 5 years for the hard-disk

F5


DATA CENTER INFRASTRUCTURE MANAGEMENT


• Application Delivery/Load Balancing

APPLICATION• BIG-IP Local Traffic Manager (LTM)

INTEGRATED INTO SERVICES MODULE:• Available End of 2009

Applications provide the information, communication, and control that drive businesses forward. Thus, inefficiencies, delays, and failures in application delivery can cost your customers millions in wasted budgets, damage to reputations, application downtime, and lost opportunities. F5 is the global leader in application delivery networking. Enterprises, service providers, and Web 2.0 content providers worldwide—including seven of the top Fortune 10 companies—trust F5 to keep their applications running. And F5’s BIG-IP Local Traffic Manager, or LTM, is an application delivery networking system that provides an intelligent and adaptable means of securing, optimizing, and delivering applications to help your customers effectively run their businesses.

12

F5 BIG-IP Local Traffic ManagerF5 BIG-IP Local Traffic Manager


BIG-IP LTM delivers the best of both worlds. Its specially designed architecture merges a high-performance switching fabric with individual, best-in-class hardware optimizers to offload system CPU. And it also provides application security, stopping attacks while simultaneously serving legitimate users. With the BIG-IP Local Traffic Manager running on their network, your customers can:

• Provide a comprehensive solution that can integrate with all applications, not just Web-based protocols

• Serve priority applications first and offload expensive server cycles• Increase server capacity through a rich set of infrastructure optimization capabilities • Reduce bandwidth costs through intelligent HTTP compression, bandwidth management, and

more• Provide security features, including DoS protection, cloaking, and filtering out application

attacks, which cannot be addressed elsewhere in the network

And• Provide complete application fluency, enabling network-speed full payload inspection, and

programmable, event-based traffic management to understand and act upon application flowsBIG-IP LTM is not the only BIG-IP product in the F5 arsenal. BIG-IP product modules let your customers easily incorporate new functionality—everything from Web acceleration to a Web application firewall and spam filtering—so they can quickly adapt to changing application and business challenges. Customers can effortlessly deploy any of the F5 BIG-IP application delivery networking solutions to:

• Reduce business costs and improve worker efficiency• Reduce physical assets and build better efficiencies to reduce infrastructure costs • Improve security to address regulatory requirements and protect the business

And in addition, the modular architecture reduces energy, power, and cooling costs, while driving green technology practices.

13

The HP ProCurve/F5 SolutionThe HP ProCurve/F5 Solution


• Delivers breadth without expense and limited agility

• Any application can run efficiently and reliably on a ProCurve Adaptive Network

• BIG-IP LTM maintains optimal performance for each device and addresses diverse issues at network speeds

ProCurve enables customers to implement a standards-based network that adapts to the changing needs of users, applications, and organizations—enabling any application to run efficiently and reliably on a ProCurve network. BIG-IP LTM adapts as well, independently maintaining optimal performance for each connecting device, and providing complete payload inspection and transformation capabilities, event-driven iRules, and session-aware switching to address diverse issues at network speeds.Together, the ProCurve open architecture and F5 application delivery networking solution add intelligence, flexibility, manageability, and speed to the network while allowing company applications to do what they were designed to do—perform—and employees to do their jobs as well. As partners these two market leaders can deliver the breadth of the Cisco offering without the expense and circumscribed agility of a proprietary solution.

14



Target Verticals• Financial Services• Telecommunications• Technology• Entertainment/media• Government• Transportation

Target Enterprise• >10,000 employees• Revenues of $1B+ • Global presence with larger sub HQs

and many branch offices• Remote and mobile workforce• Multiple data centers with backup

sites• Compliance concerns• Continuing need to improve business

efficiency


This slide lists many of the verticals for which the ProCurve/F5 solution is a good fit. The target enterprise has:

• More than 10,000 employees• Revenues of a billion dollars or more• A global presence• A remote and mobile workforce• Multiple data centers with backup sites• Compliance issuesAnd• A continuing need to improve business efficiency

The most important factors that indicate a strong sales opportunity include the increasing use of mobile devices and concerns about regulatory compliance.

McAfee


SECURITY AND THREAT MANAGEMENT• Network Security• Messaging and Web Security

APPLICATION• Web/Email Security, Firewall, IPS


McAfeeMcAfee


• Eventual Integration; Joint Bundle in 2009

These days, the threats are tougher and the perpetrators trickier. Online risk is so complex that businesses have to stay on top of it constantly—and efficiently. If they don’t, it can overwhelm their resources and the business itself.McAfee protects what the world values—from personal photos and music to the confidential records of global enterprises—and has delivered superior protection to millions worldwide for 20 years. McAfee helps large enterprises manage risk with a process approach and by integrating threat protection with compliance management. Mid-sized businesses manage risk by balancing what they take on themselves and what they outsource to McAfee and its partners. And home users get what they need as well: one product with automatic updates that is both effective and invisible.McAfee and HP ProCurve are building data center solutions that combine McAfee's industry leading network security products with ProCurve's new family of data center switching products. These solutions provide the throughput, breadth, and depth of protection needed in today's mission-critical data centers. ProCurve and McAfee help your customers address challenges such as power consumption, availability, security, and compliance while building a next-generation data center.McAfee plans to offer Web and email security, a high-throughput firewall, and a standalone intrusion prevention system to ProCurve ONE customers. These services will be bundled for 2009, and eventually available on the ProCurve ONE Services zl Module as well.

16

Microsoft


IDENTITY AND ACCESS MANAGEMENT• User Provisioning

APPLICATION• Microsoft Network Policy Server (NPS) (Windows Server 2008)


MicrosoftMicrosoft

17ProCurve ONE Alliance17 HP ProCurve Confidential

• Expected During 2009; Demonstrated in Jan. 09

Increased mobility, dissolution of the network perimeter, regulatory compliance, protection from an ever-growing list of malware, and the mainstreaming of Web-based technologies…. These are only some of the many reasons that security remains a top priority for businesses of any size. But despite the number of security measures deployed, networks continue to be compromised. There are many vectors of attack, including those who knowingly or unknowingly bring threats into the company’s network. In the end, existing security measures are not enough: effective network security requires a solid architecture and a sound security strategy that mitigates risk and returns control to an organization. Microsoft’s Network Access protection, or NAP, enforces health requirements by monitoring and assessing the health of client computers when they attempt to connect or communicate on a network. NAP helps organizations with health policy validation, health policy remediation, and post-connect compliance.To take advantage of NAP, administrators define system health requirements in the form of policies on Microsoft’s Network Policy Server, the Remote Authentication Dial-In User Service, or RADIUS, component of Windows Server 2008. NPS is the replacement for the Internet Authentication Service, or IAS, component of Windows Server 2003.

17


Microsoft Network Policy Server (NPS)Microsoft Network Policy Server (NPS)

NPS servers provide health policy checks and coordinate with Active Directory any time a computer attempts to obtain a health certificate or to connect to an 802.1X access point, a VPN server, or a Dynamic Host Configuration Protocol, or DHCP, server. Client computers that are not in compliance with the health policy can be granted restricted network access until their configuration is updated and brought into compliance with policy. Depending on how NAP is deployed, noncompliant clients can be quarantined or they can be automatically updated so that users can quickly regain full network access without manually updating or reconfiguring their computers.Along with NPS, NAP comprises additional client and server components such as NAP Agent client software and remediation and policy servers.

18


The HP ProCurve/Microsoft SolutionThe HP ProCurve/Microsoft Solution

• Microsoft = server and client security; ProCurve = network security

• ProCurve complements the NAP architecture with effective port security using 802.1X

• A secure, adaptive, comprehensive joint NAC solution

• Enables IT to focus on the business instead of the network

Microsoft focuses on server and client security; HP ProCurve focuses on network security. ProCurve switches and wireless access points complement Microsoft’s NAP architecture with effective port security technology. ProCurve also provides a unified wired and wireless solution to access the network that eliminates the need for two separate management systems.Combining Microsoft NAP with a ProCurve network and ProCurve Identity Driven Manager, or IDM, results in a more dynamic and adaptive infrastructure that marries control at the edge of the network and client integrity. The integration of NAP for endpoint policy management and IDM for policy-based network provisioning provides administrators with a secure, adaptive, and comprehensive network access control solution that can address medium to large enterprise solutions with multiple NPS/RADIUS server environments. ProCurve IDM interacts with the NPS RADIUS server in Windows Server 2008, at the core of Microsoft NAP. Thus, IDM can use the result of the NAP statement of health in the IDM policy definitions to apply appropriate IDM policy-based network access rights as users and devices connect to the network. Together, Microsoft NAP and ProCurve IDM are able to authenticate network users, enforce endpoint policies, and provide policy-based network provisioning for authenticated users and devices. They provide a transparent and secure network service whose operation doesn’t appear on the daily workflow list.Microsoft and ProCurve are longtime collaborators. Shared projects includes defining the IEEE 802.1X open standard—upon which NAP and IDM are built—and involvement within the Trusted Computing Group, developing and promoting open, industry-standard specifications.In addition to IDM, ProCurve's network access control solution is comprised of ProCurve’s switches and access points, the ProCurve Network Access Controller 800, the NAC Endpoint Integrity Agent, and any IEEE 802.1x supplicant. It is part of the broader ProCurve ProActive Defense solution, a comprehensive network security strategy that simultaneously combines proactive, offensive security with responsive, defensive security, within a trusted network infrastructure.The ProCurve/NPS solution is the first of several solutions ProCurve and Microsoft are partnering to provide.

19


Footer text20 HP ProCurve Confidential

Applicable to all customers across all industries that need to secure their network from unwanted access

The ProCurve/Microsoft solution is applicable to all customers across all industries that need to secure their network from unwanted access.

Riverbed


BRANCH OFFICE SERVICES• WAN Optimization

APPLICATION• Steelhead


RiverbedRiverbed


• Integration in Late 2009

Business no longer just happens at headquarters. Companies often have remote offices, and they almost always have mobile workers. And with this new distributed workforce comes a critical dilemma: IT is forced either to support a massive, distributed IT infrastructure or to let employees suffer with poor application performance across the wide area network.With Riverbed’s market-leading wide area data services (or WDS) solutions, companies can have the best of both worlds: a simplified IT infrastructure and high-speed application performance. Riverbed Steelhead appliances deliver a complete WDS solution by addressing network, application, and storage limitations—all the key factors that slow application performance over WANs.

21

Riverbed SteelheadRiverbed Steelhead


The global leader in WDS solutions, Riverbed connects organizations’ data centers, branch offices, and remote workers with LAN-like speed. Deployment in the network significantly reduces bandwidth utilization as well as the impact of latency on applications used in branch offices. Unlike point products that improve one part of the wide area performance problem—such as data compression, quality of service, or TCP optimization—WDS is a comprehensive solution to application performance problems. Riverbed Optimization System, or RiOS, software powers Riverbed Steelhead WDS products through a combination of patent-pending data reduction, TCP optimization, and application-level protocol optimizations. Together, these technologies, along with RiOS management capabilities, provide a comprehensive solution for enterprise WDS.The acceleration of Exchange, Windows, FTP, HTTP, Web applications, Lotus Notes, MS SQL, and other key business applications dramatically speeds up collaboration and productivity for startups to global enterprises. And Riverbed Steelhead Mobile software accomplishes the same goals for mobile workers wherever they are. As a result, IT architects have the freedom to consolidate file servers, email servers, network-attached storage, and tape libraries from remote offices to data centers—without degrading performance. Organizations can quickly and securely back up and replicate data across the wide area network from systems that are hundreds or even thousands of miles apart. Business productivity dramatically increases while the IT organization gets a nimbler, more secure, more affordable, and easier-to-manage IT infrastructure.

22


The HP ProCurve/Riverbed SolutionThe HP ProCurve/Riverbed Solution

• Steelhead appliances address key factors that slow application performance over WANs

• ProCurve’s Adaptive Network provides a seamless, cohesive, personalized user experience

• Single solution delivers leading WAN optimization with a best-of-breed switching solution

Riverbed’s global partnership with HP has expanded into a strategic partnership with HP ProCurve through the ProCurve ONE Alliance. The joint solution delivers leading WAN optimization with a best-of-breed switching solution—a compelling alternative to Cisco infrastructure. ProCurve’s Adaptive Network provides a seamless, cohesive, personalized user experience, delivering the services that are expected and needed. And IT managers benefit from the real-time visibility and insight afforded by centralized management.No longer hindered by geographical and technological boundaries, organizations deploying Riverbed on their ProCurve infrastructure can:

• Consolidate IT infrastructure• Enable greater productivity for remote offices• Decrease frustration for end users• Dramatically shorten backup and replication time• Reduce bandwidth congestion significantly; delay expensive upgrades or avoid them altogetherAnd• Devote IT resources to growing the business

RiOS software will be ported eventually to the ProCurve ONE Services zl Module to deliver a single solution for branch offices of 20 to 50 users. For larger branch offices, customers can choose from dedicated appliances of varying sizes.

23



Target Verticals• Financial services• Professional services (legal,

consulting, realty, outsourcers, etc.)• Manufacturing• Media and communications• Architecture, engineering, and

construction (A/E/C)• Energy• Healthcare/biotechnology/

pharmacology• Government• Retail• Transportation/logistics• Technology • Service providers

Target Enterprise• 2–15 remote offices• 500–1,000 employees• $100M–$1B revenue• Enterprises experiencing:

• Poor application performance in distributed environments

• Insufficient, expensive, or congested network bandwidth to remote offices

• Difficulties in successful IT consolidation

• Challenges with slow remote data backup and replication

• Increasing demands of the mobile workforce

This slide lists many of the verticals for which the ProCurve/Riverbed solution is a good fit. Target customers for the solution include enterprises of between two and 15 remote offices, 500 and 1,000 employees, and 100 million and a billion dollars in revenue. The sales opportunity is strongest in companies experiencing:

• Poor application performance in distributed environments• Insufficient, expensive, or congested network bandwidth to remote offices• Difficulties in successful IT consolidation• Challenges with slow remote data backup and replicationOr• Increasing mobile workforce demands


ProCurve ONE Integrated ApplicationsProCurve ONE Integrated Applications


Network Management

Wireless Services




Physical Security

Collaboration



To date, the following companies have signed as new HP ProCurve ONE Alliance partners providing ProCurve ONE Integrated applications—which as you will recall, means that all of these applications are integrated into the ProCurve ONE Services zl Module:

• AirTight• Ekahau• InMon• .vantronixAnd• VBrick

The next slides take a closer look at these partner offerings.

25

AirTight


SECURITY AND THREAT MANAGEMENT• Wireless IPS

APPLICATION• SpectraGuard Enterprise

INTEGRATED INTO SERVICES MODULE: FEB. 2009

AirTightAirTight


As wireless technology proliferates in the enterprise, “wired” network security investments are insufficient to protect the enterprise from wireless vulnerabilities. But a lack of trust in wireless security prevents enterprises from fully leveraging wireless technology to improve business productivity. These enterprises face the following challenges when addressing wireless security:

• Visibility into wireless security risks at both headquarters and remote offices• Understanding which wireless connections pose a genuine threat• The inability to proactively block, locate, and remove unauthorized wireless devices• Limited IT resources and expertise to manage wireless security

AirTight networks, the global leader in wireless intrusion prevention systems (or WIPS), enables customers to detect, classify, and act upon all wireless assets in the air, simplifying the discovery, remediation, and removal of wireless threats. AirTight is the only company to offer a purpose-built WIPS, SpectraGuard Enterprise, with state-of-the-art and backward-compatible 802.11n sensors. Customers can protect both their 802.11n and legacy 802.11abg infrastructure.

26

AirTight SpectraGuard EnterpriseAirTight SpectraGuard Enterprise

*ProCurve ONE Services zl Module includes a lifetime warranty on the module itself, with 5 years for the hard-disk


The AirTight system forms a shield around the wireless airspace.

It stops hackers from penetrating the wireless network.

It stops authorized clients from connecting to unsecure APs from neighboring networks.

As threats to the wireless network emerge, SpectraGuard instantaneously notifies the network administrator. The AirTight system can also be configured to provide on-demand or regularly scheduled reports that detail the threats seen in the wireless airspace and also provide an inventory of all access points and devices.In addition, AirTight can shut down threats as they occur. The AirTight system forms a shield around the wireless airspace, stopping hackers from penetrating the secure wireless network. In like manner, AirTight can stop corporate authorized wireless clients from inadvertently connecting to unsecureexternal access points from neighboring networks. Administrators can quickly and accurately identify the location of threats on a floor map for isolation and removal. And SpectraGuard’s classification policies are robust, enabling it to accurately differentiate between a rogue AP and a neighbor or external AP, and resulting in far fewer false alarms that require manual intervention, and thus a lower TCO. SpectraGuard Enterprise delivers comprehensive protection against a wide variety of existing and emerging wireless security threats such as Denial of Service attacks, Wireless Encryption Privacy (or WEP) cracking attacks, misconfigured APs, and rogue APs, including 802.11n AP attacks. Even if your customer has not deployed 802.11n, an 802.11n rogue or network threat can still occur; companies need visibility into that threat scenario. AirTight’s classification engine automatically scans, classifies, and blocks all wireless security threats without manual intervention.

27

The HP ProCurve/AirTight SolutionThe HP ProCurve/AirTight Solution


• Superior threat detection and blocking, accurate location tracking, minimal false alarms

• Unified wired and wireless management and security

• Easy deployment and maintenance of the module

• Superior total cost of ownership

The HP ProCurve/AirTight solution consists of AirTight’s SpectraGuard Enterprise server software running on the ProCurve ONE Services zl Module, SpectraGuard sensors, and centralized management. The sensors monitor wireless activity, perform local analysis, and report summary information to the server securely using industry-standard Advanced Encryption Standard (or AES) encryption. The ProCurve and AirTight SpectraGuard solution is a perfect fit for customers looking for strong wireless security and rapid deployment with simplified setup and configuration. AirTight differentiates itself from its competitors through superior threat detection and blocking capabilities, accurate location tracking of rogue devices, and minimal false alarms. And AirTight’s robust wireless intrusion prevention technology, when combined with unified wired and wireless management and security via ProCurve Manager and ProCurve Identity Driven Manager, the ease of deployment and maintenanceof the ProCurve ONE Services zl Module, and the reliability of the ProCurve platform, provides this comprehensive wireless security with superior total cost of ownership as well.

28



Target Verticals• Financial services• Government• Retail• Transportation• Education• Healthcare• Technology

Target Enterprise• Medium to large enterprises with 50

or more APs currently installed• Widespread enterprise adoption of

802.11—especially 802.11n• Companies planning broad WLAN

deployment• High-profile wireless attacks raising

security concerns • Regulatory compliance concerns


This slide lists many of the verticals for which the ProCurve/AirTight solution is a good fit. The target company is typically a medium to large enterprise that has or is deploying a WLAN on a broad scale, and is aware of the security issues associated with wireless networks or has to meet government or industry compliance requirements.

EkahauEkahau

*ProCurve ONE Services zl Module includes a lifetime warranty on the module itself, with 5 years for the hard-disk*ProCurve ONE Services zl Module includes a lifetime warranty on the module itself, with 5 years for the hard-disk*ProCurve ONE Services zl Module includes a lifetime warranty on the module itself, with 5 years for the hard-disk


Ekahau


WIRELESS SERVICES• Location Engine

APPLICATION• Ekahau Positioning Engine (central to the RTLS solution)

INTEGRATED INTO SERVICES MODULE: FEB 2009

Regaining control and improving workflow is critical in any business environment where accountability of high-value assets and people is needed. A leader in providing Wi-Fi based real-time location system (or RTLS) solutions, Ekahau, Inc. offers the only software-based real-time location tracking of assets and people on the market: Ekahau RTLS. Consisting only of tags, location server software, and an application suite, Ekahau RTLS enables tracking over large geographic areas, multiple facilities, and outdoor spaces, with minimal installation and setup time required. Ekahau'scustomers, including several Fortune 500 companies worldwide, are realizing the benefits of Wi-Fibased location services and innovative Wi-Fi network planning and optimization tools.

30


Ekahau Positioning EngineEkahau Positioning Engine

Ekahau Positioning Engine (on the ProCurve ONE Services zl Module)

Ekahau Vision (optional)

T301 family of tags

HP ProCurve Adaptive Network

Locate lost equipment to cut costs and limit liability.

Pinpoint equipment and personnel to save both time and lives.

Analyze shopping patterns to maximize profit.

Keep the line moving to boost productivity.

So, just who benefits from this granular level of control? Among the industries for whom the solution is a perfect fit:

• Hospitals can locate lost equipment to cut costs and limit liability. • Mining companies can pinpoint equipment and personnel to save both time and lives.• The manufacturing industry can keep the assembly line moving to boost productivity.• And retail stores can analyze shopping patterns to maximize profit.

As for the system itself, the center of the Ekahau RTLS solution, the Ekahau Positioning Engine, or EPE, continually monitors the system, collects and analyzes data from the tags, and makes that data available to the Ekahau extensible application programming interface (or API). Ekahau location algorithms inside the EPE leverage more than 15 years of intensive research on statistical modeling and probabilistic math, enabling superior performance. And customers can use the open API to develop reporting and analysis systems easily that fit into their existing work patterns. The optional Ekahau Vision provides a sophisticated, though easy-to-use, graphical user interface for those needing to query the system in real time. A located object will appear in its actual location atop an architectural floor plan. A user can query groups of tags or individual tags to locate an asset, even when that object is locked away in a storage closet. Vision can search across several Wi-Fi networks simultaneously, enabling the location of equipment and people in distant cities.

31

The HP ProCurve/Ekahau SolutionThe HP ProCurve/Ekahau Solution



• Patented algorithms enable best-in-class location of assets

• Installation is quick, easy, and inexpensive

• ProCurve provides the ideal hosting environment:

• Fast and robust network

• Consistent results

*Also compatible with ProCurve MultiService Mobility solutions.

**

Most solutions require expensive equipment installation and cabling. Implementation is often invasive, requiring drilling into walls and lifting ceiling tiles that carry the threat of contamination. In contrast, Ekahau’s solution consists of software and asset tags. Installation is simple and safe, and there is no disruption to operations while the system is being deployed.Ekahau’s system becomes even easier to deploy through integration with the ProCurve ONE Services zl Module, which eliminates the need for a separate server for RTLS, and is itself easy to install and manage. But ProCurve brings to the Ekahau RTLS solution more than its simple and cost-effective Services Module: From core to edge, ProCurve offers an ideal environment for hosting an Ekahau system. Though the Ekahau system demands little bandwidth to monitor its tags in the field, the faster and more robust the network, the more consistent the results will be. Especially when tracking human movement, fast updates from tags are needed to monitor mobility.

32



Target Verticals• Healthcare • Mining• Manufacturing• Logistics • Process Industries• Government• Hospitality• Retail

Target Enterprise• Any business for which the

accountability of high-value assets and people is needed


This slide lists many of the verticals for which the ProCurve/Ekahau solution is a match. As for the target enterprise, ProCurve and Ekahau can help any business in which the accountability of high-value assets and people is needed to regain control and improve workflow.

InMon


NETWORK MANAGEMENT• Network

APPLICATION• Traffic Sentinel


InMonInMon


Managing a network in today’s business environment is challenging: the continuous focus on cost reduction, containing security threats, and addressing legal requirements is exhausting an already taxed IT staff, and driving the need for full, effortless visibility of the traffic on the network.A leading supplier of network monitoring solutions and the inventor of the industry-standard sFlowstatistical sampling technology, InMon Corporation is pioneering the use of sFlow to develop scalable, cost-effective solutions for network-wide traffic monitoring, analysis, and reporting. sFlowenables businesses to accurately monitor network traffic at Gigabit speeds and higher, and it scales to manage tens of thousands of agents from a single point. InMon’s Traffic Sentinel provides comprehensive traffic analysis, defending against threats to network availability and security, and enabling delivery of essential voice, email, Web, database, and other services.

34


InMon Traffic SentinelInMon Traffic Sentinel

A virus propagates across the network

With InMon running on the network, performance issues become clear:

Misuse of network resources

No bandwidth for critical applications

You cannot effectively, efficiently manage what you cannot see. Is traffic productive or inappropriate? Are security threats spreading? Is the network under attack? How efficiently is the network meeting business requirements? And who is using the network the most? Traffic Sentinel helps you answer these questions.Specific challenges overcome with Traffic Sentinel include:

• Understanding if network resources are being misused• Detecting propagating worms or viruses• Ensuring real-time networking performance for a critical application• Meeting legal requirements—identifying who was connected where and when, what they were

doing, and if any inappropriate behavior occurred• Billing customers based on their usage of the networkAnd• Planning for future growth, by understanding current usage of the network, and trends over time

As the inventors of sFlow, InMon is best positioned to take full advantage of the technology. They fully understand the subtleties of generating accurate data and sophisticated analysis from traffic sampling across the network, and their products are designed from the ground up to use sFlow. InMon Traffic Sentinel includes features such as automatic topology discovery, quality of service monitoring, and rogue router discovery that uniquely leverage this technology. Traffic Sentinel also has a very broad spectrum of supported technologies for gathering data on network usage, enabling almost every device in the network to be monitored. The richness of data from each source is fully exploited, in contrast to other products where the lowest common denominator of all protocols is used. Traffic Sentinel also retains detail of the network traffic monitored, over a substantial period of time. Many competing products consolidate data, removing detail, before storing for future use. InMon Traffic Sentinel is sold as a software application, which is run on a RedHat Linux server or on a ProCurve ONE Services zl Module.


The HP ProCurve/InMon SolutionThe HP ProCurve/InMon Solution

• sFlow on every port allows full visibility of traffic, without impacting performance

• PCM provides device and configuration management, device discovery, and other management functions

• Traffic Sentinel adds capacity management, trend analysis, and performance optimization

Most HP ProCurve switches and wireless access points support sFlow. By using a central sFlowcollector and analyzer, such as InMon’s Traffic Sentinel, customers can take full advantage of this capability. Enabling sFlow on every port in the network allows full visibility of all network traffic, without impacting performance of the network. The complete network visibility provided by the InMonTraffic Sentinel together with the sFlow technology built into ProCurve switches eliminates guesswork, reduces downtime, and ensures the efficient operation of network services. Your customers can:

• Optimize network performance• Ensure quality of service• Enforce security policies• Identify suspicious behavior• Quickly respond to security threats• Account for network usageAnd • Reduce network costs

ProCurve Manager provides device management, configuration management, device discovery, and other management functions. Traffic Sentinel brings complementary capabilities for capacity management, historical trend analysis, and performance optimization.The availability of Traffic Sentinel on a ProCurve ONE Services zl Module integrates the measurement system directly into the network, ensuring that the critical information required by network engineers is available at their fingertips and under their control.

36



Target Verticals• Media companies (television, film, etc.)• Education• ISPs and Internet exchanges• Enterprises• Government

Target Enterprise• Customers with large networks• Network central to day-day business

operation• Customer cares about:

• Continued efficient operation of the network

• Cost reduction and maximum utilization of network resources

• The need to manage and contain security threats

• Increasing legal requirements


This slide lists many of the verticals for which the ProCurve/InMon solution is a good fit. The target enterprise is large with a network that is central to day-to-day business. The customer could have one large campus or multiple sites. The sales opportunity is strongest in companies concerned with:

• The continued efficient operation of the network• Cost reduction and maximum utilization of network resources• The need to manage and contain security threatsOr• Demonstrating that the network is tightly managed for legal reasons

vantronix


SECURITY AND THREAT MANAGEMENT• Network Security

APPLICATION• ZL1 Firewall


.vantronix | Secure Systems GmbH.vantronix | Secure Systems GmbH


Firewalls are the first line of defense even in the modern network. They are a key security component that cannot be replaced by client-based personal firewalls, Unified Threat Management solutions, or stateless access control lists on routers. More than just a border security solution between the Internet and the internal network, the modern firewall is an intelligent edge security solution between a number of subnets, VLANs, and logical security layers.Unfortunately, the firewall market is controlled by vendors that provide high-priced, proprietary solutions that do not fit into the open network environments businesses are clamoring for today. In contrast, the .vantronix | Firewall ZL1 is powered by OpenBSD, a UNIX-like operating system with a focus on portability, standardization, correctness, proactive security, and integrated cryptography—which is also widely regarded as the world’s most secure operating system. And the ZL1 is a sophisticated border security solution, integrating a firewall, load balancer, VPN, IPv6 gateway, and anti-spam services.

38

.vantronix ZL1 Firewall.vantronix ZL1 Firewall


Sophisticated border security:

The .vantronix | Firewall ZL1 inspects inbound and outbound traffic; controls access to internal, external, and restricted networks; prevents intrusion; protects against Denial-of-Service attacks; and provides queuing for quality of service. High availability is achieved using additional ZL1 devices deployed in a cluster configuration—without any additional licensing costs.As a load balancer, the ZL1 can extend the scalability of IT applications by virtualizing server pools behind single addresses to transparently cluster a database, e-commerce, mail, or service application. The integrated VPN functionality allows companies to securely extend the network to remote branches, interconnect with third-party organizations, and provide remote access for IT administrators. The VPN interacts with the firewall engine, enabling IT to enforce security policies on VPN connections. VPN functionality is based on proven, open standards and implementations, like the common and interoperable IPsec protocol and SSH-VPN.Unlike many other firewall solutions, the .vantronix ZL1 provides full support for IPv6. The unique IPv6 gateway will solve the number-one migration issue: interconnecting IPv4 and IPv6 networks.Finally, .vantronix provides a network-based anti-spam solution. The .vantronix solution rejects spammers before they're able to send any mail to the protected mail infrastructure, and without inspecting the mail contents. .vantronix offers greater efficiency at a lower cost.

39

The HP ProCurve/.vantronix SolutionThe HP ProCurve/.vantronix Solution



• Open, enterprise-grade border security solution meets the needs of critical environments

• Module provides computing power and integrated 10Gig Ethernet for excellent firewall performance

• ProCurve enables sophisticated intrusion protection and centralized management

An information security expert, .vantronix is an ideal partner for a high-end security solution in the ProCurve ONE Alliance. The ZL1 is a software-based solution integrated into and optimized for the ProCurve ONE Services zl Module. Together, HP ProCurve and .vantronix seek to replace proprietary solutions in customer networks with an open, enterprise-grade border security solution that satisfies the needs of critical environments and tightly integrates into the open HP ProCurve Adaptive Network. The ProCurve ONE Services zl Module provides sufficient computing power and integrated 10 Gigabit Ethernet for excellent firewall performance. The module directly communicates with the ProCurve switch over a 2x10Gig backplane connection for extended integration, including dynamic VLAN handling and switch control. The ProCurve/.vantronix solution also interoperates with both ProCurve Network Immunity Manager and ProCurve Manager Plus, for sophisticated intrusion protection and centralized management..vantronix is very experienced with HP: it is a principal strategy of the company that all high-end security appliances are based on quality hardware from HP. And .vantronix maintains a proven relationship with ProCurve as well. ProCurve and .vantronix share a common strategy with a strong focus on security, simplicity, quality, interoperability, and open standards.

40


Footer text41 HP ProCurve Confidential

Target Verticals• Healthcare• Financial• Telecommunications• Manufacturing• Security• Government• E-Commerce

Target Enterprise• Medium to large enterprises and

government organizations• Sophisticated requirements in IT

security

This slide lists many of the verticals for which the ProCurve/.vantronix solution is a good fit. In terms of the target enterprise, the solution meets the needs of medium-sized to large enterprises and government organizations with sophisticated requirements in IT security, and management and IT departments that demand a reliable, powerful, trusted, and high-quality first-level-of-defense firewall solution.

VBrick


COLLABORATION• Video Distribution

APPLICATION• ViP


VBrickVBrick


IP networks are increasing in capacity and robustness, making it easy to incorporate Video over IP to address the ever-more-critical need for communication and collaboration across the enterprise. VBrick’s core product offering is the industry’s leading networked video appliance, the VBrick Video Portal, or ViP. This Web-based video portal enables customers to capture and deliver live streaming video over any network. When combined with additional VBrick systems components and management software, the vBrick video appliance becomes the foundation of a complete video delivery system, EtherneTV, which can capture, record, manage, and distribute video across the enterprise.

42

VBrick ViPVBrick ViP


A world leader in live, online networked video solutions, vBrick provides a robust and comprehensive suite of enterprise video products that can connect people across the extended enterprise. Your customers can broadcast messages to employees, partners, and clients; impart information and initiatives; train staff at their own pace; monitor the infrastructure and react to changes in an instant; and enable constituents to collaborate across disparate offices around the world. The ViP automatically detects live video from any number of VBrick Windows Media appliances and presents it for immediate selection and viewing. The VBrick appliances may be on the same network as the ViP or they may be located anywhere in the world. The ViP can also display a list of stored video. It may be uploaded and delivered directly from the ViP’s internal hard disk, or the video may come from virtually any Web server or Windows Media streaming server.In addition, the ViP can host and display a list of video podcasts. These are uploaded to the ViP via the Podcast Transcoder or using third-party tools. A podcast subscriber simply enters the provided URL in iTunes or a similar viewer to subscribe to the company’s video podcasts.And when there is a priority event or emergency, the ViP can be used to automatically open a selected live or stored video on everyone’s desktop.

43

• Delivers exceptional reliability, ease of use, and performance in an affordable, cost-effective manner

• No additional rack space required

• Can be easily expanded and upgraded as new applications arise and the demand for live and stored video increases

The HP ProCurve/VBrick SolutionThe HP ProCurve/VBrick Solution


The VBrick solution's core components include:• A Windows Media appliance that encodes analog video from a camera into a Windows Media

compressed video stream and transmits this over an IP network• The Web-based portal for accessing live streams and on-demand audio and video assets for

PC clientsAnd • A Windows Media Video-on-Demand server that stores and streams recorded video assets

In the joint ProCurve/VBrick solution the ViP is installed on the ProCurve ONE Services zl Module, which provides an open source delivery platform. The ViP enables automated discovery of live video from VBrick Windows Media appliances, and provides access to video assets stored on the module or on any Web server or Windows Media streaming server. Users can locate available media assets from Windows PCs via Internet Explorer. When hosted on the module, the ViP requires no additional rack space to address the needs of your customers. And the integration of VBrick’s award-winning EtherneTV system with ProCurve’sfeature-rich, fault-tolerant, and enterprise-class routers and switches provides a timely, open solution that delivers exceptional reliability, ease of use, and performance in an affordable, cost-effective manner over a converged network.Compliance with international standards, the avoidance of proprietary protocols, and regular feature enhancements and software updates means that customers will get high-value returns on their network and streaming video investments. Unlike some competitor’s products, which get discontinued or quickly become obsolete, the ProCurve/VBrick product suite can be easily expanded and upgraded as new applications arise and the demand for live and stored video increases.

44



Target VerticalsEducation• Classroom recording• Video morning announcements• Event and emergency broadcasts• Distribution of digital content libraries• PodcastingEnterprise• Executive and event broadcasts• Digital signage• Training• Factory surveillance and process monitoringGovernment• Television news monitoring• City and town council meetings• Crisis communication• Military training and exercises• Highway surveillance

Target Enterprise• Large corporations for which geography

makes communications a challenge• Multiple locations• High percentage of telecommuters• Networks with video delivery bottlenecks• Video delivery over both internal network

and Internet• Medium corporations looking for cost-

effective ways to expand their reach• Live Webinars for end users• Live training sessions for channels• Internet delivery dominates


This slide lists many of the verticals for which the ProCurve/VBrick solution is a good fit.The sales opportunity is strongest in large corporations for which geography makes communications a challenge, and in medium-sized corporations looking for cost-effective ways to expand their reach.


ProCurve ONE combines leading networking solutions from alliance partners with ProCurve’s standards-based Adaptive Network to offer a compelling alternative to proprietary solutions.

ProCurve ONE Alliance—SummaryProCurve ONE Alliance—Summary

ProCurve ONE provides an ecosystem of leading networking solutions from alliance partners to provide your customers with choice so that they can select just the right solution to meet their needs. To this wealth of alliance offerings ProCurve brings its own considerable portfolio, the capabilities of which include, but are not limited to:

• A network that adapts to the needs of organizations, users, and applications • Extensive experience driving and delivering open standards for choice, flexibility, and lower

TCO• A unified, centralized wired and wireless environment• Sophisticated access control and user provisioning

And• The ProCurve ONE Services zl Module, which makes any solution even more cost effective and

easy to set up and maintain, and provides computing power and integrated 10Gig Ethernet for excellent performance

Together, each ProCurve/alliance partner solution offers a compelling alternative to the proprietary and costly products of competitors.

Network of Choice

Documents

ProCurve ONE Alliance - Niche Associates · • McAfee • Microsoft • ... looking to build customer loyalty by moving customer service and resources in to branch locations, closer