SlideShare une entreprise Scribd logo
1  sur  57
Succeed with Lync, BYOD and WiFi 
Ståle Hansen 
Lync MVP 
Chief Technical Architect
When you do telephony, Lync will become a 
true productivity tool 
@StaleHansen
The Lync 2013 mobile client works on 
Microsoft, Apple and Android operating systems 
and is a strong solution for those 
enterprises seeking a UC and telephony 
client for their mobile devices. 
Gartner 2014 
Gartner Magic Quadrant for Corporate Telephony 2014 
http://www.gartner.com/technology/reprints.do?id=1-23HXCI1&ct=141022&st=sb @StaleHansen
Clients report poor call quality, 
dropped calls and system 
outages in implementations that didn't 
use a Lync integrator 
Gartner 2014 
Gartner Magic Quadrant for Corporate Telephony 2014 
http://www.gartner.com/technology/reprints.do?id=1-23HXCI1&ct=141022&st=sb @StaleHansen
LAN Wi-Fi 
Bring Your Own Device (BYOD) 
Choose Your Own Device 
Bring Your Own Disaster 
@StaleHansen
Users expect good 
performance in meeting 
spaces
Users consume the network in 
a different way today than 
yesterday 
Challenge 
@StaleHansen
Salesforce Marketing Cloud – 2014 Mobile Behavior Report 
http://www.exacttarget.com/sites/exacttarget/files/deliverables/etmc-2014mobilebehaviorreport.pdf
Goal 
Help you meet the expectations of mobile users
Succeed with Lync, BYOD and WiFi 
• Understand Lync Mobile media flow 
• Make sure logon is simple 
• Do unmanaged devices correct 
• Optimize WiFi for Lync 
• Evaluate security and authentication 
@StaleHansen
Ståle Hansen 
@StaleHansen
KNOW HOW LYNC MOBILE MEDIA 
FLOW WORKS 
@StaleHansen
Lync mobile sign in 
• Lyncdiscoverinternal.domain.com 
• Lyncdiscover.domain.com 
• Lync Mobile is an UCWA application 
• Will always connect to external web services 
– Internal UCWA and Externa UCWA attributes is 
reserved for future use 
@StaleHansen
Sign in process 
@StaleHansen
Media Path Enterprise Voice 
@StaleHansen
Media Path Enterprise Voice 
@StaleHansen
Lyncdiscoverinternal and certificates 
• Lyncdiscoverinternal pointing to Lync Front-End 
• If internal PKI is used 
• Unmanaged clients typically don’t trust Root CA 
• iOS clients will sign in fine 
• Android clients will give a redirect warning 
• Windows Phone will not be able to sign in 
– Use public certificates on Front-End Server 
– Or point lyncdiscover or lyncdiscoverinternal to external reverse 
proxy 
@StaleHansen
MAKE SURE LOGON IS SIMPLE 
@StaleHansen
User name should match 
mail address 
NetBIOS sign in is legacy 
@StaleHansen
@StaleHansen 
stale.hansen@msunified.net 
msunifiedstahanse
Do it right 
EXCHANGE WEB SERVICES (EWS) 
@StaleHansen
Outlook works perfectly with Exchange 
Using SCP records to locate autodiscover 
Lync client is introduced, no exchange integration works 
THE CHALLENGE, ON-PREMISES 
@StaleHansen
Lync use DNS-based discovery 
method 
• http://<smtpdomain>/autodiscover/autodiscover.xml 
• https://<smtpdomain>/autodiscover/autodiscover.xml 
• http://autodiscover.<smtpdomain>/autodiscover/autodiscover.xml 
• https://autodiscover.<smtpdomain>/autodiscover/autodiscover.xml 
• _autodiscover._tcp.<smtpdomain> 
@StaleHansen
MAPI fallback when EWS fails 
• Exchange delegation information (MAPI only) 
• Missed Conversations history and Call Logs are written 
– Retrieving conversation history fails 
• Voice Mail count only 
• Exchange integrated Archiving will work 
Major failures 
• Presence update based on calendar 
• Presence based on Out of Office messages 
• All mobile clients fail to connect to Exchange 
@StaleHansen
Features available only with EWS 
• Unified Contact Store 
• High-Resolution Photos 
• Meeting tab 
• Contact Information 
• Presence based on Calendar Information 
• Conversation History 
– Missed Conversations 
– Missed Calls 
• Voice Mail Playback 
@StaleHansen
That is why we Lync folk care about 
Exchange Web Services 
@StaleHansen
Best Practice publishing EWS 
• DNS A Record for autodiscover.domain.com 
– SRV is supported, but not recommended 
– Multidomain? Use HTTP redirect 
• Publish using NTLM, no pre-authentication 
– EWS and autodiscover 
– Avoids authentication pop-up for EWS 
• No need to Set-AutodiscoverVirtualDirectory 
– Should point to HLB with correct autodiscover 
certificate 
@StaleHansen
DO UNMANAGED DEVICES CORRECT 
@StaleHansen
access and placement 
@StaleHansen
@StaleHansen
Policybased access
Clearpass onboarding and network 
authentication 
@StaleHansen
1. 
2. 
1. 
3. 
4. 
5. 
6. 
7. 
8.
OPTIMIZE WIFI FOR LYNC 
@StaleHansen
access vs quality 
@StaleHansen
WiFi 
• Signal Strength 
• Lync quality 
performance
WiFi problem areas 
• Shared medium 
• Limited band selection in 2.4 GHz band 
• Was designed for none-real time data 
usage 
• Deployed for access, not throughput 
@StaleHansen
How to optimize for voice over WiFi 
• WiFi tag Lync voice traffic with DSCP value 
– Through heuristic approach, deep packet inspection and guestimates 
– Use QoS to prioritize Lync voice traffic 
– Great for unmanaged devices 
• Move to 802.11n and 5ghz or 802.11ac 
• High-density AP deployments 
– Closer to users 
• Fast inter-AP handover support 
– All venderos stress end to end optimization 
– Endpoint -> WiFi -> LAN -> WAN -> LAN -> WiFi -> Endpoint 
@StaleHansen
End to end optimization 
@StaleHansen
No handover from WiFi to cellular 
@StaleHansen
Validate your WiFi network with Ixia 
• Discovery Phase 
– Understand what network environment exists 
– Understand user modalities 
• Modeling Phase 
– Determine Lync utilization per AP 
• Traffic Simulation 
– Using a Lync Traffic simulator, connect clients and apply real traffic to 
production network and monitor factors that affect the quality of Lync 
traffic: delay, jitter, and packet loss 
• Report 
– Analyze factors affecting quality and produce a full report with 
recommendations 
@StaleHansen
Validate your network 
• Network Stats (RSSI, PHY) 
– Target & other networks 
– HTTP speed test 
• Lync results per location 
– By traffic class (voice, video) 
– By client
EVALUATE SECURITY AND 
AUTHENTICATION 
@StaleHansen
Pre-authorization in DMZ 
Lync is not built in that manner 
today 
@StaleHansen
Challenges 
• Lync clients need to authenticate directly 
• Native passive authentication breaks 
exchange 
@StaleHansen
Passive authentication 
• Supported on WP8 and iOS 
• Works only with Lync, breaks Exchange 
Web Services 
– Meetings environment 
– Voice Mail environment 
– UCS will still work through the Lync Server 
@StaleHansen
• A number of third parties can sit in the HTTP 
flow/Reverse Proxy Role and add additional Security 
– Restrict sign in to selected devices 
– Authenticate specific devices to specific users 
– Use dedicated “lync mobile” credentials so that AD 
credentials to not sit on the phone 
• Vendors include 
– PointSharp 
– Lync Solutions 
– LyncShield 
@StaleHansen
PointSharp 
• Lync reverse proxy 
• App specific password 
• Device control 
• User identity 
• Pre-authentication 
• 2-factor auth 
@StaleHansen
Media 
Lync Web Services 
PointSharp Web Services 
Exchange Web Services
Goal 
Help you meet the expectations of mobile users
OPTIMIZE WIFI FOR LYNC AND 
UNMANAGED DEVICES 
@StaleHansen 
Want happy users?
Let’s discuss 
@StaleHansen
Thank you! 
Remember to evaluate the sessions 
@StaleHansen

Contenu connexe

Tendances

Maximize Application Performance and Bandwidth Efficiency with WAN Optimization
Maximize Application Performance and Bandwidth Efficiency with WAN OptimizationMaximize Application Performance and Bandwidth Efficiency with WAN Optimization
Maximize Application Performance and Bandwidth Efficiency with WAN OptimizationCisco Enterprise Networks
 
PLNOG14: SteelCentral NPM Solution - Tomasz Winiarski
PLNOG14: SteelCentral NPM Solution - Tomasz WiniarskiPLNOG14: SteelCentral NPM Solution - Tomasz Winiarski
PLNOG14: SteelCentral NPM Solution - Tomasz WiniarskiPROIDEA
 
Endpoint Agent Part 2: Monitoring SaaS Apps from Anywhere
Endpoint Agent Part 2: Monitoring SaaS Apps from AnywhereEndpoint Agent Part 2: Monitoring SaaS Apps from Anywhere
Endpoint Agent Part 2: Monitoring SaaS Apps from AnywhereThousandEyes
 
Getting Started with ThousandEyes
Getting Started with ThousandEyesGetting Started with ThousandEyes
Getting Started with ThousandEyesThousandEyes
 
Software defined networking (sdn) deep dive 3rd-party ecosystem apps and the ...
Software defined networking (sdn) deep dive 3rd-party ecosystem apps and the ...Software defined networking (sdn) deep dive 3rd-party ecosystem apps and the ...
Software defined networking (sdn) deep dive 3rd-party ecosystem apps and the ...Aruba, a Hewlett Packard Enterprise company
 
Extending mobility to remote networks with aruba instant, remote APs, and clo...
Extending mobility to remote networks with aruba instant, remote APs, and clo...Extending mobility to remote networks with aruba instant, remote APs, and clo...
Extending mobility to remote networks with aruba instant, remote APs, and clo...Aruba, a Hewlett Packard Enterprise company
 
Talari Customer Overview_2015
Talari Customer Overview_2015Talari Customer Overview_2015
Talari Customer Overview_2015Serhat Cakmakoglu
 
Endpoint Agent Part 3: LAN, Wireless, Gateways and Proxies
Endpoint Agent Part 3: LAN, Wireless, Gateways and ProxiesEndpoint Agent Part 3: LAN, Wireless, Gateways and Proxies
Endpoint Agent Part 3: LAN, Wireless, Gateways and ProxiesThousandEyes
 
Enterprise Agents: Deployment Best Practices
Enterprise Agents: Deployment Best PracticesEnterprise Agents: Deployment Best Practices
Enterprise Agents: Deployment Best PracticesThousandEyes
 
Endpoint Agent Part 1: End User Experience
Endpoint Agent Part 1: End User ExperienceEndpoint Agent Part 1: End User Experience
Endpoint Agent Part 1: End User ExperienceThousandEyes
 
Introduction to ThousandEyes
Introduction to ThousandEyesIntroduction to ThousandEyes
Introduction to ThousandEyesThousandEyes
 
Brkaci 1002
Brkaci 1002Brkaci 1002
Brkaci 1002ccherel
 

Tendances (20)

Adapting to evolving user, security, and business needs with aruba clear pass
Adapting to evolving user, security, and business needs with aruba clear passAdapting to evolving user, security, and business needs with aruba clear pass
Adapting to evolving user, security, and business needs with aruba clear pass
 
Maximize Application Performance and Bandwidth Efficiency with WAN Optimization
Maximize Application Performance and Bandwidth Efficiency with WAN OptimizationMaximize Application Performance and Bandwidth Efficiency with WAN Optimization
Maximize Application Performance and Bandwidth Efficiency with WAN Optimization
 
PLNOG14: SteelCentral NPM Solution - Tomasz Winiarski
PLNOG14: SteelCentral NPM Solution - Tomasz WiniarskiPLNOG14: SteelCentral NPM Solution - Tomasz Winiarski
PLNOG14: SteelCentral NPM Solution - Tomasz Winiarski
 
Endpoint Agent Part 2: Monitoring SaaS Apps from Anywhere
Endpoint Agent Part 2: Monitoring SaaS Apps from AnywhereEndpoint Agent Part 2: Monitoring SaaS Apps from Anywhere
Endpoint Agent Part 2: Monitoring SaaS Apps from Anywhere
 
Getting Started with ThousandEyes
Getting Started with ThousandEyesGetting Started with ThousandEyes
Getting Started with ThousandEyes
 
Software defined networking (sdn) deep dive 3rd-party ecosystem apps and the ...
Software defined networking (sdn) deep dive 3rd-party ecosystem apps and the ...Software defined networking (sdn) deep dive 3rd-party ecosystem apps and the ...
Software defined networking (sdn) deep dive 3rd-party ecosystem apps and the ...
 
Location Analytics – Key Considerations and Use Cases
Location Analytics – Key Considerations and Use CasesLocation Analytics – Key Considerations and Use Cases
Location Analytics – Key Considerations and Use Cases
 
Network management with Aruba AirWave
Network management with Aruba AirWaveNetwork management with Aruba AirWave
Network management with Aruba AirWave
 
Defining Advanced AAA Policies for Access Networks
Defining Advanced AAA Policies for Access NetworksDefining Advanced AAA Policies for Access Networks
Defining Advanced AAA Policies for Access Networks
 
Extending mobility to remote networks with aruba instant, remote APs, and clo...
Extending mobility to remote networks with aruba instant, remote APs, and clo...Extending mobility to remote networks with aruba instant, remote APs, and clo...
Extending mobility to remote networks with aruba instant, remote APs, and clo...
 
Talari Customer Overview_2015
Talari Customer Overview_2015Talari Customer Overview_2015
Talari Customer Overview_2015
 
Wi-Fi Security Fundamentals
Wi-Fi Security FundamentalsWi-Fi Security Fundamentals
Wi-Fi Security Fundamentals
 
Endpoint Agent Part 3: LAN, Wireless, Gateways and Proxies
Endpoint Agent Part 3: LAN, Wireless, Gateways and ProxiesEndpoint Agent Part 3: LAN, Wireless, Gateways and Proxies
Endpoint Agent Part 3: LAN, Wireless, Gateways and Proxies
 
Aruba ClearPass Exchange Deep Dive
Aruba ClearPass Exchange Deep DiveAruba ClearPass Exchange Deep Dive
Aruba ClearPass Exchange Deep Dive
 
Enterprise Agents: Deployment Best Practices
Enterprise Agents: Deployment Best PracticesEnterprise Agents: Deployment Best Practices
Enterprise Agents: Deployment Best Practices
 
Endpoint Agent Part 1: End User Experience
Endpoint Agent Part 1: End User ExperienceEndpoint Agent Part 1: End User Experience
Endpoint Agent Part 1: End User Experience
 
Mobility certification through CWNP and Aruba
Mobility certification through CWNP and ArubaMobility certification through CWNP and Aruba
Mobility certification through CWNP and Aruba
 
Advanced Aruba ClearPass Workshop
Advanced Aruba ClearPass WorkshopAdvanced Aruba ClearPass Workshop
Advanced Aruba ClearPass Workshop
 
Introduction to ThousandEyes
Introduction to ThousandEyesIntroduction to ThousandEyes
Introduction to ThousandEyes
 
Brkaci 1002
Brkaci 1002Brkaci 1002
Brkaci 1002
 

En vedette

Case study Lonza
Case study LonzaCase study Lonza
Case study LonzaChris Potts
 
Ruckus: Emerging Smart WiFi Support of IP-based Voice Services
Ruckus: Emerging Smart WiFi Support of IP-based Voice ServicesRuckus: Emerging Smart WiFi Support of IP-based Voice Services
Ruckus: Emerging Smart WiFi Support of IP-based Voice ServicesScanSource, Inc.
 
Mobile Voice and Messaging: Global Trends and Analyses
Mobile Voice and Messaging: Global Trends and AnalysesMobile Voice and Messaging: Global Trends and Analyses
Mobile Voice and Messaging: Global Trends and AnalysesAli Saghaeian
 
VoWiFi testing challenges
VoWiFi testing challengesVoWiFi testing challenges
VoWiFi testing challengesDave Crossley
 
Presentation on Vowifi
Presentation on VowifiPresentation on Vowifi
Presentation on Vowifisrishti jain
 
LPWA – Giving a Voice to Things
LPWA – Giving a Voice to ThingsLPWA – Giving a Voice to Things
LPWA – Giving a Voice to ThingsAPNIC
 
Cellular Services over WiFi
Cellular Services over WiFiCellular Services over WiFi
Cellular Services over WiFi3G4G
 
Calling VoWiFi... The Next Mobile Operator Service is here...
Calling VoWiFi... The Next Mobile Operator Service is here... Calling VoWiFi... The Next Mobile Operator Service is here...
Calling VoWiFi... The Next Mobile Operator Service is here... Cisco Canada
 
Mobile Telecoms Tech & Market Disruptions - April 2015 Version
Mobile Telecoms Tech & Market Disruptions -  April 2015 VersionMobile Telecoms Tech & Market Disruptions -  April 2015 Version
Mobile Telecoms Tech & Market Disruptions - April 2015 VersionDean Bubley
 
AQuA - End-to-End Drive Testing Technology (VoLTE, VoWiFi, RCS)
AQuA - End-to-End Drive Testing Technology (VoLTE, VoWiFi, RCS)AQuA - End-to-End Drive Testing Technology (VoLTE, VoWiFi, RCS)
AQuA - End-to-End Drive Testing Technology (VoLTE, VoWiFi, RCS)Sevana Oü
 

En vedette (11)

Skinny IT VO WIFI
Skinny IT VO WIFISkinny IT VO WIFI
Skinny IT VO WIFI
 
Case study Lonza
Case study LonzaCase study Lonza
Case study Lonza
 
Ruckus: Emerging Smart WiFi Support of IP-based Voice Services
Ruckus: Emerging Smart WiFi Support of IP-based Voice ServicesRuckus: Emerging Smart WiFi Support of IP-based Voice Services
Ruckus: Emerging Smart WiFi Support of IP-based Voice Services
 
Mobile Voice and Messaging: Global Trends and Analyses
Mobile Voice and Messaging: Global Trends and AnalysesMobile Voice and Messaging: Global Trends and Analyses
Mobile Voice and Messaging: Global Trends and Analyses
 
VoWiFi testing challenges
VoWiFi testing challengesVoWiFi testing challenges
VoWiFi testing challenges
 
Presentation on Vowifi
Presentation on VowifiPresentation on Vowifi
Presentation on Vowifi
 
LPWA – Giving a Voice to Things
LPWA – Giving a Voice to ThingsLPWA – Giving a Voice to Things
LPWA – Giving a Voice to Things
 
Cellular Services over WiFi
Cellular Services over WiFiCellular Services over WiFi
Cellular Services over WiFi
 
Calling VoWiFi... The Next Mobile Operator Service is here...
Calling VoWiFi... The Next Mobile Operator Service is here... Calling VoWiFi... The Next Mobile Operator Service is here...
Calling VoWiFi... The Next Mobile Operator Service is here...
 
Mobile Telecoms Tech & Market Disruptions - April 2015 Version
Mobile Telecoms Tech & Market Disruptions -  April 2015 VersionMobile Telecoms Tech & Market Disruptions -  April 2015 Version
Mobile Telecoms Tech & Market Disruptions - April 2015 Version
 
AQuA - End-to-End Drive Testing Technology (VoLTE, VoWiFi, RCS)
AQuA - End-to-End Drive Testing Technology (VoLTE, VoWiFi, RCS)AQuA - End-to-End Drive Testing Technology (VoLTE, VoWiFi, RCS)
AQuA - End-to-End Drive Testing Technology (VoLTE, VoWiFi, RCS)
 

Similaire à Succeed with #Lync BYOD and WiFi

O365con14 - lync to the future
O365con14 - lync to the futureO365con14 - lync to the future
O365con14 - lync to the futureNCCOMMS
 
Sundray hospitality wlan solution wifi - wireless - hotel - Info Tech Middl...
Sundray hospitality wlan solution   wifi - wireless - hotel - Info Tech Middl...Sundray hospitality wlan solution   wifi - wireless - hotel - Info Tech Middl...
Sundray hospitality wlan solution wifi - wireless - hotel - Info Tech Middl...Ali Shoaee
 
Optimizing Global Application Delivery Webinar
Optimizing Global Application Delivery WebinarOptimizing Global Application Delivery Webinar
Optimizing Global Application Delivery WebinarGinny Au
 
Don't Get Schooled: Performance and Security Tips from a Leading Education Sa...
Don't Get Schooled: Performance and Security Tips from a Leading Education Sa...Don't Get Schooled: Performance and Security Tips from a Leading Education Sa...
Don't Get Schooled: Performance and Security Tips from a Leading Education Sa...Meghan Weinreich
 
Ready, Set, SD-WAN: Best Practices for Assuring Branch Readiness
Ready, Set, SD-WAN: Best Practices for Assuring Branch ReadinessReady, Set, SD-WAN: Best Practices for Assuring Branch Readiness
Ready, Set, SD-WAN: Best Practices for Assuring Branch ReadinessThousandEyes
 
SnapComms Technical overview
SnapComms Technical overviewSnapComms Technical overview
SnapComms Technical overviewSnapComms
 
SnapComms Technical Overview
SnapComms Technical OverviewSnapComms Technical Overview
SnapComms Technical Overviewleanne_abarro
 
Presentation network design and security for your v mware view deployment w...
Presentation   network design and security for your v mware view deployment w...Presentation   network design and security for your v mware view deployment w...
Presentation network design and security for your v mware view deployment w...solarisyourep
 
How to Plan for a Lync Deployment on a Global Scale
How to Plan for a Lync Deployment on a Global ScaleHow to Plan for a Lync Deployment on a Global Scale
How to Plan for a Lync Deployment on a Global ScalePerficient, Inc.
 
Level 3 Hybrid WAN/SDN Defined
Level 3 Hybrid WAN/SDN DefinedLevel 3 Hybrid WAN/SDN Defined
Level 3 Hybrid WAN/SDN DefinedScott Burns
 
Level 3 hybrid wan
Level 3 hybrid wan Level 3 hybrid wan
Level 3 hybrid wan Scott Burns
 
Level 3 hybrid wan
Level 3 hybrid wanLevel 3 hybrid wan
Level 3 hybrid wanScott Burns
 
Concurrency presentation
Concurrency presentationConcurrency presentation
Concurrency presentationTed Wentzel
 
Concurrency presentation
Concurrency presentationConcurrency presentation
Concurrency presentationTed Wentzel
 

Similaire à Succeed with #Lync BYOD and WiFi (20)

O365con14 - lync to the future
O365con14 - lync to the futureO365con14 - lync to the future
O365con14 - lync to the future
 
Customer Keynote - Microsoft Lync
Customer Keynote - Microsoft LyncCustomer Keynote - Microsoft Lync
Customer Keynote - Microsoft Lync
 
Sundray hospitality wlan solution wifi - wireless - hotel - Info Tech Middl...
Sundray hospitality wlan solution   wifi - wireless - hotel - Info Tech Middl...Sundray hospitality wlan solution   wifi - wireless - hotel - Info Tech Middl...
Sundray hospitality wlan solution wifi - wireless - hotel - Info Tech Middl...
 
Optimizing Global Application Delivery Webinar
Optimizing Global Application Delivery WebinarOptimizing Global Application Delivery Webinar
Optimizing Global Application Delivery Webinar
 
Don't Get Schooled: Performance and Security Tips from a Leading Education Sa...
Don't Get Schooled: Performance and Security Tips from a Leading Education Sa...Don't Get Schooled: Performance and Security Tips from a Leading Education Sa...
Don't Get Schooled: Performance and Security Tips from a Leading Education Sa...
 
Ready, Set, SD-WAN: Best Practices for Assuring Branch Readiness
Ready, Set, SD-WAN: Best Practices for Assuring Branch ReadinessReady, Set, SD-WAN: Best Practices for Assuring Branch Readiness
Ready, Set, SD-WAN: Best Practices for Assuring Branch Readiness
 
SnapComms Technical overview
SnapComms Technical overviewSnapComms Technical overview
SnapComms Technical overview
 
SnapComms Technical Overview
SnapComms Technical OverviewSnapComms Technical Overview
SnapComms Technical Overview
 
amir_(1) (1) (1)
amir_(1) (1) (1)amir_(1) (1) (1)
amir_(1) (1) (1)
 
IT Infrastructure Project
IT Infrastructure ProjectIT Infrastructure Project
IT Infrastructure Project
 
Presentation network design and security for your v mware view deployment w...
Presentation   network design and security for your v mware view deployment w...Presentation   network design and security for your v mware view deployment w...
Presentation network design and security for your v mware view deployment w...
 
How to Plan for a Lync Deployment on a Global Scale
How to Plan for a Lync Deployment on a Global ScaleHow to Plan for a Lync Deployment on a Global Scale
How to Plan for a Lync Deployment on a Global Scale
 
Level 3 Hybrid WAN/SDN Defined
Level 3 Hybrid WAN/SDN DefinedLevel 3 Hybrid WAN/SDN Defined
Level 3 Hybrid WAN/SDN Defined
 
Level 3 hybrid wan
Level 3 hybrid wan Level 3 hybrid wan
Level 3 hybrid wan
 
Level 3 hybrid wan
Level 3 hybrid wanLevel 3 hybrid wan
Level 3 hybrid wan
 
SeattleFall1
SeattleFall1SeattleFall1
SeattleFall1
 
Webinar | Cloud PBX and Skype
Webinar | Cloud PBX and Skype Webinar | Cloud PBX and Skype
Webinar | Cloud PBX and Skype
 
Concurrency presentation
Concurrency presentationConcurrency presentation
Concurrency presentation
 
Concurrency presentation
Concurrency presentationConcurrency presentation
Concurrency presentation
 
F5 TLS & SSL Practices
F5 TLS & SSL PracticesF5 TLS & SSL Practices
F5 TLS & SSL Practices
 

Dernier

Automating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps ScriptAutomating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps Scriptwesley chun
 
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProduct Anonymous
 
Boost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfBoost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfsudhanshuwaghmare1
 
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, AdobeApidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobeapidays
 
Boost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivityBoost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivityPrincipled Technologies
 
AWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of TerraformAWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of TerraformAndrey Devyatkin
 
Scaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationScaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationRadu Cotescu
 
Top 10 Most Downloaded Games on Play Store in 2024
Top 10 Most Downloaded Games on Play Store in 2024Top 10 Most Downloaded Games on Play Store in 2024
Top 10 Most Downloaded Games on Play Store in 2024SynarionITSolutions
 
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...apidays
 
2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...Martijn de Jong
 
Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)wesley chun
 
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers:  A Deep Dive into Serverless Spatial Data and FMECloud Frontiers:  A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FMESafe Software
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerThousandEyes
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUK Journal
 
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...DianaGray10
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processorsdebabhi2
 
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc
 
A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)Gabriella Davis
 
Top 5 Benefits OF Using Muvi Live Paywall For Live Streams
Top 5 Benefits OF Using Muvi Live Paywall For Live StreamsTop 5 Benefits OF Using Muvi Live Paywall For Live Streams
Top 5 Benefits OF Using Muvi Live Paywall For Live StreamsRoshan Dwivedi
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024The Digital Insurer
 

Dernier (20)

Automating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps ScriptAutomating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps Script
 
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
 
Boost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfBoost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdf
 
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, AdobeApidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
 
Boost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivityBoost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivity
 
AWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of TerraformAWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of Terraform
 
Scaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationScaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organization
 
Top 10 Most Downloaded Games on Play Store in 2024
Top 10 Most Downloaded Games on Play Store in 2024Top 10 Most Downloaded Games on Play Store in 2024
Top 10 Most Downloaded Games on Play Store in 2024
 
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
 
2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...
 
Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)
 
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers:  A Deep Dive into Serverless Spatial Data and FMECloud Frontiers:  A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
 
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processors
 
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
 
A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)
 
Top 5 Benefits OF Using Muvi Live Paywall For Live Streams
Top 5 Benefits OF Using Muvi Live Paywall For Live StreamsTop 5 Benefits OF Using Muvi Live Paywall For Live Streams
Top 5 Benefits OF Using Muvi Live Paywall For Live Streams
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
 

Succeed with #Lync BYOD and WiFi

  • 1. Succeed with Lync, BYOD and WiFi Ståle Hansen Lync MVP Chief Technical Architect
  • 2. When you do telephony, Lync will become a true productivity tool @StaleHansen
  • 3. The Lync 2013 mobile client works on Microsoft, Apple and Android operating systems and is a strong solution for those enterprises seeking a UC and telephony client for their mobile devices. Gartner 2014 Gartner Magic Quadrant for Corporate Telephony 2014 http://www.gartner.com/technology/reprints.do?id=1-23HXCI1&ct=141022&st=sb @StaleHansen
  • 4. Clients report poor call quality, dropped calls and system outages in implementations that didn't use a Lync integrator Gartner 2014 Gartner Magic Quadrant for Corporate Telephony 2014 http://www.gartner.com/technology/reprints.do?id=1-23HXCI1&ct=141022&st=sb @StaleHansen
  • 5. LAN Wi-Fi Bring Your Own Device (BYOD) Choose Your Own Device Bring Your Own Disaster @StaleHansen
  • 6. Users expect good performance in meeting spaces
  • 7. Users consume the network in a different way today than yesterday Challenge @StaleHansen
  • 8. Salesforce Marketing Cloud – 2014 Mobile Behavior Report http://www.exacttarget.com/sites/exacttarget/files/deliverables/etmc-2014mobilebehaviorreport.pdf
  • 9. Goal Help you meet the expectations of mobile users
  • 10. Succeed with Lync, BYOD and WiFi • Understand Lync Mobile media flow • Make sure logon is simple • Do unmanaged devices correct • Optimize WiFi for Lync • Evaluate security and authentication @StaleHansen
  • 12. KNOW HOW LYNC MOBILE MEDIA FLOW WORKS @StaleHansen
  • 13. Lync mobile sign in • Lyncdiscoverinternal.domain.com • Lyncdiscover.domain.com • Lync Mobile is an UCWA application • Will always connect to external web services – Internal UCWA and Externa UCWA attributes is reserved for future use @StaleHansen
  • 14. Sign in process @StaleHansen
  • 15. Media Path Enterprise Voice @StaleHansen
  • 16. Media Path Enterprise Voice @StaleHansen
  • 17. Lyncdiscoverinternal and certificates • Lyncdiscoverinternal pointing to Lync Front-End • If internal PKI is used • Unmanaged clients typically don’t trust Root CA • iOS clients will sign in fine • Android clients will give a redirect warning • Windows Phone will not be able to sign in – Use public certificates on Front-End Server – Or point lyncdiscover or lyncdiscoverinternal to external reverse proxy @StaleHansen
  • 18. MAKE SURE LOGON IS SIMPLE @StaleHansen
  • 19. User name should match mail address NetBIOS sign in is legacy @StaleHansen
  • 21. Do it right EXCHANGE WEB SERVICES (EWS) @StaleHansen
  • 22. Outlook works perfectly with Exchange Using SCP records to locate autodiscover Lync client is introduced, no exchange integration works THE CHALLENGE, ON-PREMISES @StaleHansen
  • 23. Lync use DNS-based discovery method • http://<smtpdomain>/autodiscover/autodiscover.xml • https://<smtpdomain>/autodiscover/autodiscover.xml • http://autodiscover.<smtpdomain>/autodiscover/autodiscover.xml • https://autodiscover.<smtpdomain>/autodiscover/autodiscover.xml • _autodiscover._tcp.<smtpdomain> @StaleHansen
  • 24. MAPI fallback when EWS fails • Exchange delegation information (MAPI only) • Missed Conversations history and Call Logs are written – Retrieving conversation history fails • Voice Mail count only • Exchange integrated Archiving will work Major failures • Presence update based on calendar • Presence based on Out of Office messages • All mobile clients fail to connect to Exchange @StaleHansen
  • 25. Features available only with EWS • Unified Contact Store • High-Resolution Photos • Meeting tab • Contact Information • Presence based on Calendar Information • Conversation History – Missed Conversations – Missed Calls • Voice Mail Playback @StaleHansen
  • 26. That is why we Lync folk care about Exchange Web Services @StaleHansen
  • 27. Best Practice publishing EWS • DNS A Record for autodiscover.domain.com – SRV is supported, but not recommended – Multidomain? Use HTTP redirect • Publish using NTLM, no pre-authentication – EWS and autodiscover – Avoids authentication pop-up for EWS • No need to Set-AutodiscoverVirtualDirectory – Should point to HLB with correct autodiscover certificate @StaleHansen
  • 28. DO UNMANAGED DEVICES CORRECT @StaleHansen
  • 29. access and placement @StaleHansen
  • 32. Clearpass onboarding and network authentication @StaleHansen
  • 33. 1. 2. 1. 3. 4. 5. 6. 7. 8.
  • 34. OPTIMIZE WIFI FOR LYNC @StaleHansen
  • 35. access vs quality @StaleHansen
  • 36. WiFi • Signal Strength • Lync quality performance
  • 37. WiFi problem areas • Shared medium • Limited band selection in 2.4 GHz band • Was designed for none-real time data usage • Deployed for access, not throughput @StaleHansen
  • 38. How to optimize for voice over WiFi • WiFi tag Lync voice traffic with DSCP value – Through heuristic approach, deep packet inspection and guestimates – Use QoS to prioritize Lync voice traffic – Great for unmanaged devices • Move to 802.11n and 5ghz or 802.11ac • High-density AP deployments – Closer to users • Fast inter-AP handover support – All venderos stress end to end optimization – Endpoint -> WiFi -> LAN -> WAN -> LAN -> WiFi -> Endpoint @StaleHansen
  • 39. End to end optimization @StaleHansen
  • 40. No handover from WiFi to cellular @StaleHansen
  • 41. Validate your WiFi network with Ixia • Discovery Phase – Understand what network environment exists – Understand user modalities • Modeling Phase – Determine Lync utilization per AP • Traffic Simulation – Using a Lync Traffic simulator, connect clients and apply real traffic to production network and monitor factors that affect the quality of Lync traffic: delay, jitter, and packet loss • Report – Analyze factors affecting quality and produce a full report with recommendations @StaleHansen
  • 42. Validate your network • Network Stats (RSSI, PHY) – Target & other networks – HTTP speed test • Lync results per location – By traffic class (voice, video) – By client
  • 43. EVALUATE SECURITY AND AUTHENTICATION @StaleHansen
  • 44. Pre-authorization in DMZ Lync is not built in that manner today @StaleHansen
  • 45. Challenges • Lync clients need to authenticate directly • Native passive authentication breaks exchange @StaleHansen
  • 46. Passive authentication • Supported on WP8 and iOS • Works only with Lync, breaks Exchange Web Services – Meetings environment – Voice Mail environment – UCS will still work through the Lync Server @StaleHansen
  • 47. • A number of third parties can sit in the HTTP flow/Reverse Proxy Role and add additional Security – Restrict sign in to selected devices – Authenticate specific devices to specific users – Use dedicated “lync mobile” credentials so that AD credentials to not sit on the phone • Vendors include – PointSharp – Lync Solutions – LyncShield @StaleHansen
  • 48. PointSharp • Lync reverse proxy • App specific password • Device control • User identity • Pre-authentication • 2-factor auth @StaleHansen
  • 49. Media Lync Web Services PointSharp Web Services Exchange Web Services
  • 50.
  • 51.
  • 52.
  • 53.
  • 54. Goal Help you meet the expectations of mobile users
  • 55. OPTIMIZE WIFI FOR LYNC AND UNMANAGED DEVICES @StaleHansen Want happy users?
  • 57. Thank you! Remember to evaluate the sessions @StaleHansen

Notes de l'éditeur

  1. Image is taken by Ståle Hansen (the speaker)
  2. Retrieving conversation history fails Exchange 2013 UCS fails No High-Resolution photos
  3. http://www.lyncexch.co.uk/mobile-security-with-pointsharp/
  4. In the first half of 2015, the next version of Lync will become Skype for Business with a new client experience, new server release, and updates to the service in Office 365. With the best of Lync, and the best of Skype, we believe that Skype for Business will again transform the way people communicate by giving organizations reach to hundreds of millions of Skype users outside the walls of their business.