19
Security Capabilities of IPAM Innovation Days

Security Capabilities of IPAM

Embed Size (px)

DESCRIPTION

Security Capabilities of IP Address Management (Juniper Innovation Days 2014)

Citation preview

Page 1: Security Capabilities of IPAM

Security Capabilities of IPAM

Innovation Days

Page 2: Security Capabilities of IPAM

What is IPAM ?

Page 3: Security Capabilities of IPAM

IPAM meansManagement of IP Addresses &Host Names

Control the associated Services

DNS & DHCP

Centralised Documentation of everything

IP-related

Page 4: Security Capabilities of IPAM

Why IPAM ?

“I’m managing DNS & DHCP

since 20 Years ...”

“... and I never had

an Outage.”

Page 5: Security Capabilities of IPAM

Legacy Tools

Page 6: Security Capabilities of IPAM

Mobility and Cloud are changing IT

Past

Present Future

Phones

PrintersDesktops

PhysicalVirtual

VDI

Cloud

Mobile

SDNM2M

Wearable

Page 7: Security Capabilities of IPAM

Today’s and Future Challenges

... no Auditing

... no Automation

... no Visibility

... no Consistency Checks

... no Chance for IPv6

Page 8: Security Capabilities of IPAM

IPAM ... for AutomationRequest

Network

DHCP

Asset

Multiple Admins or Systems involved

Page 9: Security Capabilities of IPAM

IPAM ... for Automation

RequestAutomate

Validate

Delegate

Page 10: Security Capabilities of IPAM

IPAM ... for Auditing

Who? Where? When?

What?

Page 11: Security Capabilities of IPAM

IPAM ... for Visibility

Reporting

Alarming

Page 12: Security Capabilities of IPAM

IPAM ... for Consistency Checks

Built-in & free of Charge

L2 / L3 Discovery

192.168.191.5 reclaimableGi0/5 VLAN2

192.168.191.6 reclaimableGi0/6 VLAN2

192.168.191.11 mismatchGi0/11 VLAN2

192.168.191.16 unknownGi0/16 VLAN2

AA-BB-CC-DD-EE-05

AA-BB-CC-DD-EE-06

AA-BB-CC-DD-EE-11

AA-BB-CC-DD-EE-16

IP Reconciliation

Page 13: Security Capabilities of IPAM

IPAM ... for IPv6

192.0.2.53

SLAAC

http://www.insinuator.net/2013/10/ipam-requirements-in-ipv6-networks/

2001:db8:2::53

Page 14: Security Capabilities of IPAM

IPAM is central

Inte

rnal

External

Beyond

Page 15: Security Capabilities of IPAM

Let’s use this PositionAccessControl

Finger Printing

DNS Threat

Protection

Page 16: Security Capabilities of IPAM

Who’s BlueCat ?

GartnerHighest Possible

Rating

Debt FreeInvest back in

business

> 2000Customers

> 30%Revenue Growth

FY99 - FY14

Company

Page 17: Security Capabilities of IPAM

Who’s BlueCat ?

< 1%Industry’s Lowest Hardware Failure

94Local Depots

24x7x5 Onsite

5M+ IPsIndustry’s Most

Scalable DDI

200K QPSIndustry’s Fastest 1U DNS Appliance

Technology

Page 18: Security Capabilities of IPAM

Thank you for your time.Andreas Taudte

Sales Engineer

Page 19: Security Capabilities of IPAM

Special Thanks toRoberto „Rober-Raik“ Tello Oiz.