IBM Tivoli Event and Network Management Portfolio

1. IBM Tivoli Event and Network Management Portfolio

2. IBM Tivoli/Netcool OMNIbus (Event/Fault Management Solution) IBM Tivoli Netcool/OMNIbus and Network Manager Event and Network Management PortfolioIBM Tivoli Event/Fault Management Capabilities Event/Fault Management Event andAvailability Management The goal of EVENT MANAGEMENT is EVENT CONSOLIDATION, PRIORITIZATION AND ENRICHMENT from various management domains to improvemean-time-to-recovery (MTTR). IBM Tivoli/Netcool Network Management Availability Management IBM Tivoli Network Manager (Network State) (Discovery, Topology Visualization for Root Cause Analysis) Configuration Management IBM Tivoli Netcool Configuration Manager (Network Configuration) (Change and Configuration, Backup and Restore and Policy Management) Performance Management IBM Tivoli Netcool Performance Manager (Network Performance) (Monitor, Alert, Performance (streaming analytics) for Incident Avoidance)

3. Hyperlink to report Average Annual Benefit in Millions 12.1 Million .01 Million 9.7 Million 1.7 Million * “A Return on Investment Analysis of IBM Tivoli Netcool”, IDC January 2009 IBM Tivoli Netcool/OMNIbus ROI Benefits • IDC’s research indicates a high level of business value • Increased revenue by $1.7 million or $0.54 per subscriber • New services delivered to market 37% faster • Earlier and increasing revenue • Improved mean-time-to-repair adevice or system by 54% • Saved $9.5 million annually • Operations staff costs savingsof $482,162 • Reduced capital expenditure by$1.3 million • Consolidated NOC’s • Reduced expenses by 70% • Annual savings of $293,801

4. Event Consolidation

5. Would you drive your car in a rain storm without wipers? Consolidated Operations ManagementThe Customer Problem Can Be Overwhelming! Messages from IT tools can accumulate on consoles like rain on a windshield

6. Consolidated Operations ManagementThe Solution is Consolidated Operations Management The problem is actually much, much worse! • Single user interface • Efficient and scalable • Automation • Correlation • Expansive coverage

7. IBM Tivoli Netcool/OMNIbusConsolidated Operations Management It is about moving from a collection of “Productive Departments” to become an “Effective and Efficient Organization” • “Single Pane of Glass” for all events • Faster problem resolution • Reduced training cost • Effective organization • Widest coverage of event sources • Collect events from any source with over two hundred out-of-the-box probes to consolidate events from virtually any management system or device • Efficient and scalable • Correlation / Automation • Out-of-the-box correlation • Event Deduplication • Correlate events across silos

8. Add network, topology-based “root cause” analysis IBM Tivoli OMNIbus and Network ManagerAdd Event Management’s “Single Pane of Glass” • Single Pane of Glass • Faster problem resolution • Reduced training cost • Widest coverage of event sources • Correlate events across silos • Collect events from any source • Efficient and scalable • Correlation and Automation • Out-of-the-box • Custom SQL-based automations • Network Discovery • Visualize Network Topology • Root Cause Analysis

9. Event Prioritization

10. Enterprise Event Management Determines that the “Mission-Critical Application” has failed! OK, to wait until 8 to 5 Wake Someone Up! Discovery has Defined the Relationships Monitoring Raises a Resource Alert This is my Mission-Critical Application! Prioritizing a Mission-Critical Event This is my Mission-Critical Application! Which Application do I work first and when?

11. Event Enrichment

12. Emergency Phone Operator scenario: EO: Hello, emergency operator speaking. How can I help you? Caller: Help, I have an emergency. CLICK! (caller disconnected) IT Operator scenario: 144.124.108.101 Link Failed Consolidated Operations ManagementAn Example of a Lack of Event Enrichment What is the problem with these scenarios? They lack information to take action to resolve the problem.

13. Emergency Operator scenario: EO: Hello, emergency operator speaking. How can I help you? Caller: Help, I have an emergency. Come quickly. EO: What is your emergency? Caller: My house is on fire! EO: What is your address? Caller: 100 South Drive… EO: Is there anyone in the house? Caller: Yes, my two year old child is in the house. EO: Don’t worry, we are sending emergency services right away! IT Operator scenario: Ecommerce One Inc Cisco ASR 1000 AZ, 3rd Floor, Rack 2 Mike Smith: 410-777-0987 SLA: 2 min Application Name Device Type Device Location Contact Details SLA Details Consolidated Operations ManagementAn Example of a Event Enrichment Now we have “contextual” information needed to take action.

14. IBM Tivoli Netcool/OMNIbus (Event/Fault Management Solution) IBM Tivoli OMNIbus and Network Manager IBM Tivoli Netcool Network Management IBM Tivoli Network Manager - - - - - Network State - - - - - (Discovery, Topology Visualization, Availability Monitoring for Root Cause Analysis) Availability Management IBM Tivoli Netcool Configuration Manager - - - - - - - Network Configuration - - - - - - - (Backup and Restore, Change and Configuration and Policy Management) Configuration Management IBM Tivoli Netcool Performance Manager - - - - - - - - - - Network Performance - - - - - - - - - - (Performance Optimization, Trending and Capacity Planning for Incident Avoidance) Performance Management Event and Network ManagementIBM Tivoli’s Network Management Portfolio The goal of NETWORK RESOURCE MANAGEMENT is to manage NETWORK STATE, CONFIGURATION and PERFORMANCE to improve mean-time-to-recovery (MTTR) and move to Incident Avoidance. Event/Fault Management Event andAvailability Management

15. The Problems facing Network Administrators Network Growth Raises Capital and Operational Costs Networking is having positive 2010 growth • “The first quarter was an exceptionally good quarter for theEthernet switch market…..typically, first calendar quarterstend to be seasonally weak, but 1Q 2010 was quite different.” Rohit Mehra, IDC analyst New Technologies are driving the networking infrastructure • The Ethernet switch and router markets saw strong growth in the first quarter, driven by demand for such applications as VOICE AND VIDEO OVER IP, VIRTUALIZATION and CLOUDCOMPUTING, according to research firm IDC. • “The breadth of the network market recovery is very encouraging, with all regions and market segments making a contribution….of all enterprise IT priorities, NETWORKING CLEARLY REMAINS A KEY BUILDING BLOCK, playing an important role in the next-generation IT infrastructure.” Cindy Borovick, IDC Analyst “Virtualization, Cloud Fuel Rebound in Ethernet Switch, Router Markets”, eWeek IDC Share, May 26, 2010

16. Increasing number of vendors and network device types Cisco, Juniper, Alcatel, Lucent, Nokia Siemens, Ericsson, Huawei, Motorola, Tellabs and more. . . . Routers, Switches, Gateways, DSLAM, Softswitches, IMS, LTE (4G), SBCs, access points, fiber terminals and more Increasing network complexity 100’s to 100,000’s of heterogeneous devices are being deployed Manual processes don’t scale Business conditions demand doing “better with less” Each network vendor typically supports multiple operating system families Customers typically have deployed multiple OS versions even within a single vendor Each network device model has its own unique set of commands and operating system version The Problems facing Network Administrators Network Complexity Raises Operational Costs

17. Configuration Errors largest cause ofnetwork outages Caused by manual configuration errors 60% Network complexityoutpacing scripting Average configuration errors per device 30 Routine tasksconsuming resources Of engineering time spent on manual configurations 45% Inconsistent securityposture open to threat Of security breaches fromnon-compliant devices 80% The Problems facing Network Administrators Documented Costs and Impacts of Network Complexity Sources: Dataquest. EMA, Yankee, Infonetics Research

18. IBM Tivoli Network ManagerNetwork StateDiscovery, Topology Visualization, Availability Monitoring for Root Cause Analysis

19. Today’s Network Challenges The Network is constantly changing • The network environment is dynamic • Impossible to visualize on a single screen allthe heterogeneous vendor’s networking environments • Difficult to visualize the "logical" with the “physical” network structure • Increased management complexity with new technologies such as VoIP, MPLS and VPN Sense and Isolating that the network is the problem • Many times users know before us that the network has failed • How do we quickly sense and isolate the network as the problem • Identifying the root cause of an event storm is not easy Things are getting worse… • Expected to do “better with less” • We are fighting fires rather than supporting new business initiatives • Does our current network state match our inventory systems.

20. IBM Tivoli Network ManagerDiscovery and Topology Visualization for Root Cause Analysis Scalable Flexible Network Discovery • Provides end to end visibility of heterogeneous networks • Optimize network asset utilization and extract the maximum return from existing investments • Reconcile the ‘as-built’ view of the network vs. ‘as-planned’ views stored in off-line network design, inventory and provisioning systems Real time web-based Network Visualization • Centralizes the management of complex networks into one user interface • Task-oriented UI helps operations staff locate, troubleshoot and resolve network problems • Integrate fault management with network availability, configuration and performance views Accurate Monitoring and Root Cause Analysis (RCA) • Reduces the mean time to resolution of network faults and increase reliability • Automatically determines root cause separating actionableevents from symptomevents • Ensures staff have meaningful, contextual information at their fingertips

21. Multiple Device Failure Events A Single Device Failure IBM Tivoli Network ManagerNetwork Events without Root Cause Analysis Application Failure Switch One Application Slowdown DMZ

22. Root Cause Event Multiple Symptom Events A Single Device Failure IBM Tivoli Network ManagerNetwork Events with Root Cause Analysis Application Failure Switch One Application Slowdown DMZ

23. Accuracy Dynamic root cause analysis (RCA) is based on discovered network topology not static rules End-to-end network connectivity out to the desktop IT Operations views for “sense and isolation” of the problem (generic device) combined with Subject Matter Expert (SME) views for problem resolution Flexible Discovery Full or partial scheduling Network change can trigger incremental discovery Customization Support new devices on-the-fly Control what attributes are retrieved Add new root cause analysis (RCA) algorithms based on unique environments Data Access Discovery information available for TADDM and 3rd party integrations IBM Tivoli Network ManagerUnique Networking Capabilities Breadth of coverage • Unparalleled vendor, device and protocol support • New technology support provided at no additional charge • Rapid new device and version deployment model IBM Tivoli Netcool/OMNIbus integration • Lower cost of ownership with an integrated Tivoli Integrated Portal (TIP) user environment • Shared user management • Single sign-on • Increased Operator Efficiency • Launch in-context between network health, configuration and connectivity information • Common reporting model

24. Tivoli Netcool Configuration ManagerNetwork ConfigurationBackup and Restore, Change and Configuration and Policy Management

25. IBM Tivoli Netcool Configuration ManagerNetwork Backup and Recovery Management When you need it the most . . . . . • Backup & restore device configurations with a non-disruptive roll back • Full historical or incremental backup and restore capability • Deploy operating system patches and updatesthen automatically reapply device configurations • Achieve higher service availability by shorteningand/or eliminating configuration backup andrestore maintenance windows.

26. IBM Tivoli Netcool Configuration ManagerNetwork Change and Configuration Management • Tivoli Netcool Configuration Manager manages network device configurations by storing each devices’ specific configuration in an external, centralized common data store in near real-time to determine • Which device was touched • Who touched the device • What was changed on the device • When was the change made • Why was the change made • Centralize and automate the configuration changes in a reliable and errorless manner in the network and rollback when necessary. • Enables near real-time policy enforcement of access, security and configuration changes • Alerts on configuration changes and policy violations

27. IBM Tivoli Netcool Configuration ManagerNetwork Policy Management • Policies capture a company’s unique best practices and enforce or replay those policies in a consistent, repetitive and error-free manner • Out-of-the-box policies such as the National Security Agency (NSA) Router Guidelines provide faster time to value • Easy to use drag-and-drop interface • Sophisticated, centralized policy repository • Establishes and enforces enterprise wide policies • Automatically discovers policy violations • Prioritizes violations by severity • Eliminates manual validation processes • Intelligent remediation • Dynamic remediation actions for non-compliant conditions • Key Performance Indicators (KPI) Scores • Executive level dashboard for tracking and prioritizing policy violations • Detailed violation list, prioritized by severity, for easy remediation • Scalable Policy Management to hundreds of thousands of devices

28. Alternatively, TNCM can submit theremedial action into workflow process IBM Tivoli Netcool Configuration ManagerPolicy Management Lifecycle Example This configuration change causes a violation of a defined policy A change is made to a device configuration either out of band or within TNCM Netcool Configuration Manager Policy re-evaluation correlates and clears events from the fault management system This triggers a trap to the fault management system as a (1) change event and a (2) policy violation Policy violation could trigger a remedial action to automatically correct this violation

29. Tivoli Netcool Performance ManagerNetwork PerformancePerformance Optimization, Trending and Capacity Planning for Incident Avoidance

30. Where are we going? Network Performance IBM Tivoli Netcool Performance ManagerThe Importance of Performance Management • If you can not measure it, you can not improve it. GC Carlton • Things that are measured tend to improve. John Kenneth Galbraith • Every service delivered today is connected to “the network”.Multiple times.

31. Alarm Alarm Alarm Alarm The same two traps are received . . . . but one is a much bigger problem. . . . . . IBM Tivoli Netcool Performance ManagerMoving to Incident Avoidance Ability to monitor, alert, collect, analyse, store and visualize performance data • Moves beyond availability to include volume, latency, errors, usage data over time Complements Fault/Event Management • Two faults/events are received below. By utilizing performance management data the network organization can be proactive and address a “resource constrained” slowdown or outage. IP is everywhere now and does not have quality built in – it needs to be monitored

32. IBM Tivoli Netcool Performance Manager • Network performance solution that addresses both operational and business intelligence requirements: • Operational requirement - provide real-time operational data and monitoring views using the operations console • Business Intelligence requirement – provide business intelligence through ad-hoc reporting with TCR/Cognos • Expansive performance management scope • End-to-end network performance reporting • Cross domain performance reporting (network, server and application) with ITM’s Tivoli Data Warehouse • Converged wireless and wireline (fixed/IP) networks • Streaming analytics for real-time aggregation and threshold monitoring • Temporal and Spatial capabilities • Proven, scalable distributed architecture

33. IBM Tivoli Netcool Performance ManagerTechnology Packs for Rapid Technology Deployment Over 150 technology packs: • QOS Network Traffic Management • Latency / jitter • Carrier and Enterprise Unified Communications • IP Telephony (Call managers) • Flow Monitoring • IPFix, Netflow • MPLS • Access • WIFI, WIMAX • DSL, GPON, CMTS, MSAN • Service Aware Probes (VoIP, IPTV) • IPTV (probes, PEVQ, IP Multicast, Video servers) • IMS • CSCF / BGCF, MGW, AS, MGC, MGW • Largest set of out-of the-box management capabilities for strategic services, technologies and hardware vendors • Integrates Best Practices for managing a specific technology • Includes Data Collection, KPI Definitions, Analytics, Threshold Definitions and Reports • Consolidated Tech Pack process for fixed and wireless • Enablement for Business Value Report Packs (e.g. across technologies and across vendors) • Technology Pack Dev Kit (TPDK) for Customers/Partners for rapid deployment of custom wireless Technology Packs

34. Branch Office A Branch Office B Gatekeeper IP Phones IP Phones Application Servers IP PBX PSTN IP - WAN Router/Media Gateway IP Phones Headquarters IBM Tivoli Netcool Performance ManagerTechnology Pack Example - Cisco IP Telephony • VoIP is becoming integral to many corporations global voice strategy • Managing the availability and performance of these VoIP environmentsis viewed as a mission critical application • VoIP is becoming an “IT solution” that has to be managedappropriately • TNPM provides VoIP performance monitoring for Cisco UnifiedCommunications Manager, Call Manager and CiscoGateway and Gatekeepers

35. Network Network Network Mission CriticalApplication Managing the end-to-end network experience End-User IBM Tivoli Netcool Performance ManagerComposite Resources for End-User Experience A Composite Resource models multiple wireline resources as a single entity • Allows for reporting against a single network logical entity or end-to-end service path Benefits of composite resources • Better reflection of the end-user network experience (e.g. health indices) • Makes performance indicators more relevant to Service Quality Management (SQM) • More intuitive way to report on complex configuration metrics • Generate smarter alarms

36. Data Center Data Center CSP TNPM Network Composite ResourcesFrench Customer Solution – SLA Verification IBM Tivoli Netcool Performance Manager • Raises an alert when objective is not being met • Identifies and isolates potential networking issue • Provides Predictive Analytics on the near and far horizon • Ensures Service Level Objective (SLO) met by the Communication Service Provider (CSP) Who identifies the network is slow and who isolates the problem when it slows down? Customer Communication Service Provider Customer Is this “black box” affecting my mission critical application performance?

37. IBM Tivoli Netcool/OMNIbus (Event/Fault Management Solution) IBM Tivoli OMNIbus and Network Manager IBM Tivoli Netcool Network Management IBM Tivoli Network Manager - - - - - Network State - - - - - (Discovery, Topology Visualization, Availability Monitoring for Root Cause Analysis) Availability Management IBM Tivoli Netcool Configuration Manager - - - - - - - Network Configuration - - - - - - - (Backup and Restore, Change and Configuration and Policy Management) Configuration Management IBM Tivoli Netcool Performance Manager - - - - - - - - - - Network Performance - - - - - - - - - - (Performance Optimization, Trending and Capacity Planning for Incident Avoidance) Performance Management Event and Network ManagementSummary Event/Fault Management Event andAvailability Management

38. IBM Tivoli Event and Network Management Portfolio