Wednesday, November 19, 2014

Collaborate in the Cloud

Employee collaboration and access to communication tools are essential for workplace productivity. Organizations are increasing their use of Microsoft Office 365, a subscription-based service that provides hosted versions of familiar Microsoft applications. Most businesses choose Exchange Online as the first app in Office 365 they adopt.
The challenge with any SaaS application such as Office 365 is that user authentication is usually handled by the application itself, so user credentials are typically stored and managed in the cloud by the provider. The challenge for IT is to properly authenticate the employee (whether located inside or outside the corporate network) to a highly available identity provider (such as Active Directory).
Authentication without complexity
DIAG-PMAP-AVAIL-24708-app-avail-between-hybrid-data-centers
Even though Office 365 runs in a Microsoft-hosted cloud environment, user authentication and authorization are often accomplished by federating on premises Active Directory with Office 365. Organizations subscribing to Office 365 may deploy Active Directory Federation Services (ADFS) on premises, which then authenticates users against Active Directory.
Deploying ADFS typically required organizations to deploy, manage, and maintain additional servers onsite, which can complicate or further clutter the infrastructure with more hardware. SAML (security assertion markup language) is often the enabler to identify and authenticate the user. It then directs the user to the appropriate Office 365 service location to access resources. SAML-enabled applications work by accepting user authentication from a trusted third party—an identity provider. In the case of Office 365, the BIG-IP platform acts as the identity provider.
For example, when a user requests his or her OWA email URL via a browser using Office 365, that user is redirected to a BIG-IP logon page to validate the request. The BIG-IP system authenticates the user on behalf of Office 365 and then grants access. The Office 365 environment will recognize the individual and provide their unique Office 365 OWA email environment. The BIG-IP platform provides a seamless experience for Office 365 users and with the federated identity that the BIG-IP platform enables, the IT team is able to extend SSO capabilities to other applications.
The benefit of using the BIG-IP platform to support Office 365 with SAML is that organizations can reduce the complexity and requirements of deploying ADFS. By default, when enabling Office 365, administrators need to authenticate those users in the cloud. If an IT administrator wants to use the corporate authentication mechanism, ADFS must be put into the corporate infrastructure. With the BIG-IP platform, organizations can support authentication to Office 365 and the ADFS requirement disappears, resulting in centralized access control with improved security.
Secure collaboration
Because email is a mission-critical application for most organizations, it is typically deployed on premises. Organizations using BIG-IP-enhanced Microsoft Exchange Server and Outlook can make it easier for people to collaborate regardless of their location. For example, if a company wanted to launch a product in Europe that had been successfully launched in the United States, it needs workers and contractors in both locations to be able to communicate and share information.
In the past, employees may have emailed plain-text files to each other as attachments or posted them online using a web-based file hosting service. This can create security concerns since potentially confidential information is leaving the organization and being stored on the Internet without any protection or encryption. There are also concerns about ease of use for employees and how the lack of an efficient collaboration tool negatively impacts productivity.
Internal and external availability 24/7
To solve these issues, many organizations move from the locally managed Exchange Server deployment to Microsoft Office 365. Office 365 makes it easier for employees to work together no matter where they are in the world. Employees connect to Office 365 using only a browser, and they don’t have to remember multiple usernames and passwords to access email, SharePoint, or other internal-only applications and file shares.
In this scenario, an organization would deploy the BIG-IP platform in both the primary and secondary data centers. BIG-IP LTM intelligently manages all traffic across the servers. One pair of BIG-IP devices sits in front of the servers in the core network; another pair sits in front of the directory servers in the perimeter network. By managing traffic to and from both the primary and directory servers, the F5 devices ensure availability of Office 365—for both internal and external (federated) users.
Ensuring global access
To provide for global application performance and disaster recovery, organizations should also deploy BIG-IP GTM devices in the perimeter network at each data center. BIG-IP GTM scales and secures the DNS infrastructure, provides high-speed DNS query responses, and also reroutes traffic when necessary to the most available application server. Should an organization’s primary data center ever fail, BIG-IP GTM would automatically reroute all traffic to the backup data center. BIG-IP GTM can also load balance the directory servers across data centers to provide cross-site resiliency.
The BIG-IP platform provides the federated identity services and application availability to allow organizations to make a quick migration to Office 365, ensuring users worldwide will always have reliable access to email, corporate applications, and data.
ps
Related:

Connect with Peter: Connect with F5:
o_linkedin[1] o_rss[1] o_twitter[1]   o_facebook[1] o_twitter[1] o_slideshare[1] o_youtube[1]

Thursday, November 13, 2014

AWS re:Invent 2014: That’s a Wrap!

I wrap up a great week from AWS re:Invent. We really appreciate you taking the time to view these and hope they are helpful as you journey to the cloud. Plus, we have a lot of fun producing them. Special thanks to Jeff Stathatos, Cyrus Rafii and Alex Rublowsky for guest spots along with Courtney, Natasha, Jeanette and Cyrus for holding the lens. Reporting from the SANS Convention Center in Las Vegas, thanks!

 

ps

Related:

 

Connect with Peter: Connect with F5:
o_linkedin[1] o_rss[1] o_twitter[1]   o_facebook[1] o_twitter[1] o_slideshare[1] o_youtube[1]

AWS re:Invent 2014: F5 Licensing for the Cloud (feat Rublowsky)

Alex Rublowsky, Dir. Licensing Business Models, gives a full overview of F5’s licensing models for the cloud, particularly AWS Marketplace. He details our new Utility Licensing offering by the hour service (30 Day Free Trial Available), our Bring your Own License (BYOL) model which is available for customers with current licenses purchased via other channels and the Volume License program for those with large environments. Alex does a great job explaining each and the benefits for customers.

 

ps

Related:

 

 

Connect with Peter: Connect with F5:
o_linkedin[1] o_rss[1] o_twitter[1]   o_facebook[1] o_twitter[1] o_slideshare[1] o_youtube[1]

Wednesday, November 12, 2014

AWS re:Invent 2014: LineRate to the Rescue (feat Rafii)

Cyrus Rafii, F5 Director of Business Development, gives us an update on all the cool, new stuff happening with F5 LineRate. He talks about the new F5 LineRate Amazon EC2 beta and explains some of the differences between BIG-IP and LineRate and in what scenarios an organization might deploy each. A tale of two proxies! He also discusses a recent customer case study from HOSTING.

 

ps

Related:

 

 

Connect with Peter: Connect with F5:
o_linkedin[1] o_rss[1] o_twitter[1]   o_facebook[1] o_twitter[1] o_slideshare[1] o_youtube[1]

AWS re:Invent 2014: BIG-IP Test Drive on AWS (feat Stathatos)

Jeff Stathatos, F5 Solution Architect, shows how easy it is to test drive BIG-IP for SharePoint on AWS. With a few clicks of a mouse, organizations get high availability of the SharePoint Cluster along with SSL offload for top notch performance. Jeff explains how organizations configure the service along with some of the benefits of deploying BIG-IP with SharePoint.

ps

Related:

Connect with Peter: Connect with F5:
o_linkedin[1] o_rss[1] o_twitter[1]   o_facebook[1] o_twitter[1] o_slideshare[1] o_youtube[1]

Tuesday, November 11, 2014

AWS re:Invent 2014: Find F5

Sporting a cool LineRate t-shirt, I show you how to find F5 booth 303 at AWS re:Invent. AWS re:Invent is a learning conference that offers 3 days of technical content so attendees can dive deeper into the AWS cloud computing platform. F5 storylines this week include an offering of a BIG-IP Test Drive for SharePoint, a Free 30 Day Trial for all utility-based BIG-IP services, F5 LineRate Amazon EC2 beta along with F5’s Silverline DDoS Protection…which you can deploy alongside AWS! Learn how you can maximize your Cloud investment. Reporting from Las Vegas!

ps

Related:

 

Connect with Peter: Connect with F5:
o_linkedin[1] o_rss[1] o_twitter[1]   o_facebook[1] o_twitter[1] o_slideshare[1] o_youtube[1]

Wednesday, November 5, 2014

CloudExpo 2014: The DNS of Things

With Levi's Stadium as a backdrop, I share a bit about the Internet of Things and the strain it will place on the Domain Name System (DNS) along with a preview of his DNS of Things session at CloudExpo/ThingsExpo at the Santa Clara Convention Center. Reporting from Silicon Valley.  Check out F5's DNS solutions at https://f5.com/solutions/architectures/intelligent-dns-scale

 

ps

Related

 

Connect with Peter: Connect with F5:
o_linkedin[1] o_rss[1] o_twitter[1]   o_facebook[1] o_twitter[1] o_slideshare[1] o_youtube[1]