Discovery Discovery Scoping DDM 8.0 Advanced

More documents

Recommendations

Info

Discovery: Risk vs. Value vs. Time&EffortTime&Effort curveRisk vs. ValuecurveLimitedNetflowInsecure Protocols, e.g. NTCMD, TelnetRiskRisk avoidance“goal”MorenetflowCredential-lessDiscoveryAdministrative Credentialed DiscoveryManagement’s goal – balanced risk vs. benefitNon-Admin Credentialed Discovery - common loginNon-Admin Credentialed Discovery - server by serverTime&EffortNotesNo DiscoveryicmpServer login (TTY), WMI, SNMP, Application uid/pw (Best Value vs. Risk)SUDO for ‘ls’ and ‘cat’ commands due to likelihood of incorrect file permissionsValueNtcmd, root, sudo, etc.Low effort – large value – large risk – insecureOnly recommeded for small shops1. 100% secure = no value – can’t access anything!2. No Credentials = some value3. Best Value = Basic (non-admin) Credentials = biggest single-step gain in value vs. risk4. All Credentials (including Application-level) provides the most value5. No need to be insecure (vs. no risk) by using “bad” protocols6. Effort-Time curve – major effort to go credential-less – value is hard-earned7. Even a little credentials require much less effort and provide much more value8. Most time&effort = repeatedly, iteratively requesting each credential on an element-by-element basis9. MANAGEMENT must get IT Security buy-in – effort risk will be rejected if value is not understood36HP CONFIDENTIAL - ENABLEMENT ONLY, NOT FOR CUSTOMER USE.
Real-World Discovery Flow Case StudyInput CI Discovery Pattern Discovered CI TypesDomain IP rangeICMP_Net_Dis_IPbICMP_Net_Dis_IPcipKnown_ip_no_DNSDNS_Net_Dis_DNSNameipLegendip w/DNS w/o host typeIP IntegrationwindowsunixID’dIPsEnrichmentrestDiscovered obj.ip_of_win WMI_Net_Dis_Connection ntDiscovery Patternip_of_unixTTY_Net_Dis_ConnectionunixTriggerip_not_unix(win + rest)SNMP_Net_Dis_ConnectionSNMP_Net_Dis_NW_DevNt+unixHostsNW devHosts via TCPhost“LIGHT” SNMP_Net_Dis_TCP“LIGHT” TTY_Net_Dis_TCP“LIGHT” TCP_Net_Dis_PorthostipportCreateDependency linkslinksException Rpt.Host IntegrationReview/Discard still-unidentifiable hostsStatus, usage,Location,ownerID’dHosts37HP CONFIDENTIAL - ENABLEMENT ONLY, NOT FOR CUSTOMER USE.
Page 4: Discovery should be Approached Holi
Page 8 and 9: The Basic Sizing Process1. Start wi
Page 12 and 13: How do I Profile the Consumers?•
Page 15 and 16: UCMDB Population Strategies© 2008
Page 17 and 18: Why an Efficient Approach is Needed
Page 19 and 20: Research Stage - Model Research•(
Page 21 and 22: Research Stage - Technology Researc
Page 27 and 28: UCMDB Performanceand Capacity Plann
Page 29 and 30: Why an Efficient Approach is Needed
Page 31 and 32: Discovery Approach - Get only what
Page 33 and 34: Discovery Recommendations(BP) Keys
Page 35: Scope vs. Breadth of Discovery Patt
Page 39 and 40: Performance and Capacity Planning©
Page 41 and 42: Partially and Fully Resident ModeTh
Page 43 and 44: Are you approaching the limit?When
Page 45 and 46: Example UCMDB BreakdownLinks are mo
Page 47 and 48: UCMDB Hardware Sizing© 2008 Hewlet
Page 49 and 50: Basic Sizing ElementsSizing = Initi
Page 51 and 52: Hardware RequirementsResults * MayV
Page 53 and 54: UCMDB - Block diagram53HP CONFIDENT
Page 55 and 56: Deployment XMLMemory checkProcesses
Page 57 and 58: Deployment XMLEnterprise Deployment
Page 59 and 60: Putting it all togetherAssemble int

Discovery Discovery Scoping DDM 8.0 Advanced

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?