iPlanet presentation

Editor's Notes

• #13: Do you want people to know about your products/services? Start off with static web presence.
• #14: SSL support in software is out of the box, but performance can be further increased by installing a 3rd party hardware accelerator. It is important to satisfy any peak loads in a timely manner and this can be achieved by load balancing across more than one server running web server and using a DNS round robin to spread the load. Guide pricing EUR 1 400,00 ($1,495) per cpu. Note: All security related options are available in 40 bit 128 bit encryption. US Export Department need to give approval for shipment of 128 bit version.
• #15: Information from Gartner Group September 1998/January 1999 based on number of servers rather than number of sites. Apache probably hosts more virtual sites on a single server. Since Apache is widely used for hosting by ISPs, one Apache server may have multiple sites stored on a single server.
• #16: Once you are on the web, there is a need to filter static content according to the identity of the person asking. For example, static content could include confidential trade prices that only authorized resellers should be able to see. You also need a very scalable solution that is able to cope with large amount of users. For example, talk.com recruited one million new users in less than 14 months. Directory Server can be used as an excellent base to sell other products from.
• #17: UMS - User Management Services Delegating user access admin (Delegated Admin), synchronizing directories (Meta Directory)- see next two slides. Big message: Scalability and Synchronization B. The website then becomes so successful you have too many users to administer using traditional methods.
• #18: Alliance Directory Strategy Deliver an integrated product family that helps you manage the complete user life cycle It’s not just about LDAP anymore; it’s about a complete suite of tools that help you manage identities and trust across organizations. For who? E-commerce sites, enterprises, and ISPs How? Combine Sun and Netscape teams with compelling 3rd party partnerships Capitalize on early experience Why? Help companies make or save money with comprehensive user management infrastructure Michael will show you a demo that illustrates this concept.
• #19: (This is a quick overview slide- there’s a later slide with more detail) The iPlanet Unified User Management Suite is a complete infrastructure for managing the complex user infrastructure, particularly for e-commerce and hosting. The core of the suite is our iPlanet server, which is our proven, hardened LDAP directory. First Netscape, and now the Sun-Netscape Alliance, has really led the development and adoption of LDAP as a standard.All of the components if the iPlanet Unified User Management Suite are completely integrated with the iPlanet Directory Server Other components of the suite include iPlanet Meta- directory - which joins and updates user date to and from disparate systems iPlanet Certificate Management System - which provides the option for stronger security for some (or all) services. CMS our highly scalable PKI solution (public- key infrastructure) iPlanet Delegated Administrator - which provides real-time policy-driven self service AN additional component of the suite is Netegrity SiteMinder, a third party policy management solution built on top of our iPlanet Directory Server.
• #20: The Key benefits of this suite are Enabling rapid service deployment - and faster time to revenue, by leveraging a pre-existing complete user infrastructure. By Highly scalable for today’s complex e-commerce and hosting requirements- as well as tomorrows. As we’ve demonstrated over the past few years, we will continue to innovate for scalability and performance Deploy new, innovative services for your customers and partners that leverage the strong security of digital certificates . We believe that PKI for extranets should be completely integrated with your user management infrastructure, not developed and deployed separately. Reduce complexity with Simplified Administration Centralized policy management 1 button instantaneous, automatic creation of user profiles in all appropriate applications Automatic propagation of updated user profiles to all relevant applications, following flexible business rules 1 button instantaneous delete of user profile in all applications ERP systems revoke certificates Legacy applications Web application
• #21: Of course, the Directory server provides the cornerstone of the Unified User Management Suite, and is core to our ability to scale to millions of users. It provides a standards-based data store for customer, partner, and employee information. All of the products in the Unified User Management Suite are completely integrated with iPlanet Directory Server. Meta-Directory leverages iPlanet Directory to facilitate the rapid integration of existing user information from disparate sources, including account information and role-based access privileges. Meta-Directory thus provides the primary mechanism for joining user data. Delegated administrator leverages iPlanet Directory Server to enable real-time customer self-service for user and account management. It provides customizable templates for delegating directory management by means of hierarchically defined roles in related organizations. Netscape Delegated Administrator provides one way to maintain local control over local user information. Netscape Certificate Management System facilitates the deployment of a public-key infrastructure (PKI), Certificate Management System provides a highly flexible set of services for administering PKI policies centrally and controlling user credentials required for accessing sensitive resources. We also have included Netegrity SiteMinder as the policy server to enable web-sign sign on, as well as fine-grain access control.
• #23: Netscape’s Directory 4.0 and 3.0 products are used as a Meta directory today. However, customers like WorldCom (note we have a great audio tape of WorldCom talking about their meta-directory that is available for distribution) must take the directory and write perLDAP scripts to integrate the directory with other existing directories. What our mainstream customers want from us is the ability to be able to do this out of the box. As a result, we are partnering with ISOCOR, a leading X.500 vendor (note: they don’t like being positioned this way but we want to position them into an X.500 corner) and licensing their source code for connectors to existing directories and for their “join” technology which integrates disparate data from different directories about the same user into a single user entry. Netscape will also be developing some connectors. We will also be publishing the specifications for building additional connectors so third parties will be able to construct their own connectors. We will be presenting this to the IETF for standardization and we believe that with Netscape, the leading LDAP directory vendor partnering with ISOCOR, the leading X.500 vendor, we can create a standard for developing future connectors.
• #25: Full details available at: http://home.netscape.com/cms/v4.0/index.html iPlanet Netscape Certificate Management System is a highly scalable certificate-based security solution that enables protection of sensitive data and allows companies to expand the delivery of personalized services on the Internet. The system builds on the scalable user management and access control offered by Netscape Directory Server and provides a cost-effective solution that allows companies to issue, manage and revoke their own X.509v3 public-key digital certificates. Highly scalability supports millions of users . Deployed for e-commerce and extranet web applications scaling to millions of users. It supports standard Internet browsers, including Netscape Communicator and Microsoft Internet Explorer, without requiring additional client or server software. It also provides out-of-the-box support for industry-leading web servers, VPNs, and routers. Flexible configurations deliver a low-cost solution . Enables smooth integration with existing systems, processes, and policies, giving organizations powerful in-house control of their security infrastructure. By leveraging this integration, organizations can minimize ongoing administration costs and optimize their ability to manage incremental growth. Flexibility and extensibility allows it to be integrated easily with existing security systems, including out-of-the-box integration with Kerberos and SecurID authentication systems. Customizable and extensible systems . Can be extended through third-party products such as hardware tokens, cryptographic accelerators, and authentication modules. Organizations can dynamically customize their configurations using published application programming interfaces for authentication, policy modules, and custom extensions.
• #26: Delegated administrator is a unique capability that Netscape offers on top of our Directory. It is available either standalone or a part of our Directory for Secure E-commerce. Ford was one of the inspirations for building this product as we realized that any business to business e-commerce application that supported even just a few thousand users would need to delegate administration to the customers, partners or suppliers that were accessing the site in order to provide better service and lower overall maintenance of the application itself. (see the Ford example for an explanation of the problem). Delegated admin lets the company offering the application manage the system while their customers, partners and suppliers, do the user management of additions, deletions and changes. Note that company A can only manage its employees while Company B can only manage its employees. Neither company A nor company B can see each others data. It is deployed by editing customizable HTML templates and the user can manage directory attributes and content. The system administrator can delegate as much or as little control as they want. Note: This is a big differentiator for us as the competition does not understand the importance of this capability but any directory prospect will get it if you tell them the Ford example.
• #27: SiteMinder acts as a login concentrator and offers single web site sign-on even though content may reside on multiple servers. Guide pricing Intranet EUR 48,54 per user Extranet EUR 24,32 per user.
• #28: Contains SPN, Sunscreen EFS, Sunscreen SPF 100 and 200, and SKIP (Simple Key Internet Protocol). Ability to create VPNs (Virtual Private Networks) Secure point-to-point communication. Allows employees to gain appropriate access to internal resources remotely from any place on the net. Stealth feature makes firewall invisible to attackers (hackers). Secure Socket Layer (SSL) is used on application level security, whereas - this product is IP (protocol) layer based (uses SKIP). Guide price from EUR 3 300,00 to EUR 11 000,00 depending of amount of users. Key features - speed, stealth feature, fail over support over encrypted connections, support 15 network interfaces. Many customers in financial services.
• #29: Guide pricing Mail - EUR 1 650,00 per 100 users Deluxe - EUR 11 000,00 per 100 users. Webtop is an innovative product developed from internal resources at SUN. It has been estimated that Sun saves in excess of $10m per year by removing the need for modem racks and reducing call charges.
• #30: Want to provide dynamic content/information based on real-time database access? No one likes to read yesterday’s news. Examples of the need to provide dynamic content are where you would like to view your suppliers’ inventory and possibly place orders (one and two-way transactions).
• #33: Design center = Deployment environment. Today’s requirement for internet application is somewhat similar to the old client/server world , requirement on scalability, reliability and availability. However, the measurement of success is quite different. You now have to satisfy many more users, with more features, and your business depends on it. Therefore, NAS was designed with the following req. in mind: - High performance and scalability - 24x7 availability - Ease of integration with existing system - Standards-based, cross platform solution As a result, our customers enjoy the following benefits quicker time to market, lower costs expand business horizons - extend internal business process beyond organizational boundaries support the increased applications demands (client/server metrics are miniscule)
• #34: Since the Alliance now own the #1 and #2 application servers, customers may enquire about which products to buy. Here is the application server strategy/mission statement/roadmap. 1. For new prospects who have just begun to evaluate application servers, the recommendation is to build on top of the Java2 Enterprise Edition programming model and the product to do that with is Netscape Application Server (NAS) 4.0. 2. For existing NetDynamics customers who want to upgrade their capacity, they should buy NetDynamics 5.x. 3. Existing NAS customers should continue to upgrade. 4. The new Alliance Application Server 6.0 which will be released in first half 2000 will be based on the Java 2 Enterprise Edition programming model. It will also contain compatibility modes for existing NetDynamics 5 and NAS 4 APIs (non-J2EE). Both NetDynamics 5 and NAS compatibility engines will be available through 2002. 5. For those NetDynamics customers who are on 3.x or 4.x, they should upgrade their applications to NetDynamics 5.x in order for the compatibility mode to run in the Alliance Application Server.
• #35: In addition the customer may want to order items that are not now in stock but are only built to order. E.g., Dell computers. In this case it would be beneficial to integrate with the suppliers ERP system to minimize delay and possible rekeying of data (data re-entry). Your customer may already have real time transaction systems that may need to be accessed.
• #38: To increase efficiency of the entire electronic process it may become necessary to automate more of the business processes. This can be done with Netscape Process manager.
• #39: By integrating tightly with a LDAP Directory Server, workflow processes do not need to be updates if the Corporate Directory is updated i.e. relocation of personnel. Guide Pricing EUR 82,50 per user.
• #40: Do you want to connect to business partners and suppliers? Once you have dynamic content you might want to complete the integration with all of your other data sources and then be able to extend this to the outside world so that your suppliers and customers are allowed access. Note: ECXpert can also be used to complete the internal infrastructure.
• #41: Now that electronic relationships have been formed with your customers and suppliers you now need to manage this relationship with communication products. It also allows you to use these products in innovative ways. For example, it may be possible to connect a diagnostic laptop to a heavy machinery and any parts that may be required could be communicated to the maintenance company and if necessary on to the distributor for spares.
• #45: Key Enhancementss: Scalable Webmail (support of Web Mail Access Protocol in the Server) enables the browsers to communicate with the Messaging server directly rather than indirectly through a Web server. This release also delivers the Windows NT version of the Messaging Server which may be a requirement for customer with multiplatform server environments.
• #46: Questions How does Sun consulting tie into this?
• #48: This is the release known as SIMS 4.0 today. Some of its core enhancements deliver towards providing hosted messaging services. If a company want to support multiple domains on a single server or enable delegated administration to transfer some of the daily administration tasks (user and mailing list management) to their customers, they can easily do that with this release of the Messaging Server. Our goal is to provider better out-of-the-box Netscape Directory integration with this release, for those customers who may have existing investments in the Netscape Directory.
• #50: This is the release known as SIMS 4.0 today. Some of its core enhancements deliver towards providing hosted messaging services. If a company want to support multiple domains on a single server or enable delegated administration to transfer some of the daily administration tasks (user and mailing list management) to their customers, they can easily do that with this release of the Messaging Server. Our goal is to provider better out-of-the-box Netscape Directory integration with this release, for those customers who may have existing investments in the Netscape Directory.
• #57: 3