Top Banner
Security Capabilities of IPAM Innovation Days
19

Security Capabilities of IPAM

May 30, 2015

Download

Technology

Andreas Taudte

Security Capabilities of IP Address Management
(Juniper Innovation Days 2014)
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Security Capabilities of IPAM

Security Capabilities of IPAM

Innovation Days

Page 2: Security Capabilities of IPAM

What is IPAM ?

Page 3: Security Capabilities of IPAM

IPAM meansManagement of IP Addresses &Host Names

Control the associated Services

DNS & DHCP

Centralised Documentation of everything

IP-related

Page 4: Security Capabilities of IPAM

Why IPAM ?

“I’m managing DNS & DHCP

since 20 Years ...”

“... and I never had

an Outage.”

Page 5: Security Capabilities of IPAM

Legacy Tools

Page 6: Security Capabilities of IPAM

Mobility and Cloud are changing IT

Past

Present Future

Phones

PrintersDesktops

PhysicalVirtual

VDI

Cloud

Mobile

SDNM2M

Wearable

Page 7: Security Capabilities of IPAM

Today’s and Future Challenges

... no Auditing

... no Automation

... no Visibility

... no Consistency Checks

... no Chance for IPv6

Page 8: Security Capabilities of IPAM

IPAM ... for AutomationRequest

Network

DHCP

Asset

Multiple Admins or Systems involved

Page 9: Security Capabilities of IPAM

IPAM ... for Automation

RequestAutomate

Validate

Delegate

Page 10: Security Capabilities of IPAM

IPAM ... for Auditing

Who? Where? When?

What?

Page 11: Security Capabilities of IPAM

IPAM ... for Visibility

Reporting

Alarming

Page 12: Security Capabilities of IPAM

IPAM ... for Consistency Checks

Built-in & free of Charge

L2 / L3 Discovery

192.168.191.5 reclaimableGi0/5 VLAN2

192.168.191.6 reclaimableGi0/6 VLAN2

192.168.191.11 mismatchGi0/11 VLAN2

192.168.191.16 unknownGi0/16 VLAN2

AA-BB-CC-DD-EE-05

AA-BB-CC-DD-EE-06

AA-BB-CC-DD-EE-11

AA-BB-CC-DD-EE-16

IP Reconciliation

Page 13: Security Capabilities of IPAM

IPAM ... for IPv6

192.0.2.53

SLAAC

http://www.insinuator.net/2013/10/ipam-requirements-in-ipv6-networks/

2001:db8:2::53

Page 14: Security Capabilities of IPAM

IPAM is central

Inte

rnal

External

Beyond

Page 15: Security Capabilities of IPAM

Let’s use this PositionAccessControl

Finger Printing

DNS Threat

Protection

Page 16: Security Capabilities of IPAM

Who’s BlueCat ?

GartnerHighest Possible

Rating

Debt FreeInvest back in

business

> 2000Customers

> 30%Revenue Growth

FY99 - FY14

Company

Page 17: Security Capabilities of IPAM

Who’s BlueCat ?

< 1%Industry’s Lowest Hardware Failure

94Local Depots

24x7x5 Onsite

5M+ IPsIndustry’s Most

Scalable DDI

200K QPSIndustry’s Fastest 1U DNS Appliance

Technology

Page 18: Security Capabilities of IPAM

Thank you for your time.Andreas Taudte

Sales Engineer

Page 19: Security Capabilities of IPAM

Special Thanks toRoberto „Rober-Raik“ Tello Oiz.