IBM SmartCloud Enterprise presentation which took place in Tallinn, EE on 09/10/2012 during IBM Baltics Forum 2012.

1. IBM SmartCloud Enterprise
A Secure Infrastructure for Test and Development
Piotr Pietrzak
IBM Forum 2012 – Estonia
Tallinn, October 9, 2012

2. IBM SmartCloud Enterprise at a glance
Features and functions:
Your servers and personal Choice of nine virtual (Intel) server configurations
computers (PCs)
Choice of operating systems:
• Linux®; Red Hat, Novell SUSE or bring your own
• Windows Server® 2003 and 2008
Software image choices:
Your firewall • Pick a pre-configured IBM or IBM Partner image
• Construct a Linux image in the cloud from software bundles using
IBM SmartCloud IBM and partner tools
• Import or copy an existing Linux image
Enterprise
Storage choices:
• Persistent storage; fixed blocks up to 10TB
IBM firewall • Object/File storage; web accessible file storage with nearly
Optional VPN unlimited capacity
gateway
Options to dynamically add/delete multiple blocks of Virtual
IBM unique security and
authentication model
servers isolated in virtual private network environments.
Management Premium support services as a supplement to forums, with
infrastructure
optional add-on operating system support
Private and shared
VLANs
Choice of six sites: US (2), Canada, Germany, Japan &
Singapore with massive capacity.
Virtual machines Payment options:
and virtual storage • Pay-as-you-go
IBM global delivery centers
• Reserved capacity package options.
What’s new? / 3Q2012
More at: ibm.com/cloud/solutions/enterprise • Increased SLA from 99.5% to 99.9%
Cloud Portal: ibm.com/cloud/enterprise • Optional Platinum-M2 virtual machine – 32GB of RAM
2 • Cloning of Windows domain controller instances2012 IBM Corporation
©

3. Nine server and eight attachable persistent storage options enable you
to configure systems to match a wide variety of workloads.
32-bit configurations 64-bit configurations
Virtual machine (VM)
Options
Copper Bronze Silver Gold Copper Bronze Silver Gold Platinum
Virtual CPUs
1 1 2 4 2 2 4 8 16
with 1.25 Gigahertz
Virtual memory (GB) 2 2 4 4 4 4 8 16 16
Instance storage (GB) 60 60+175 60+350 60+350 60 60+850 60+1024 60+1024 60+2048
• Intel architecture servers can be provisioned with Linux (Red Hat,
Novell SUSE or customer provided) or Microsoft Windows Server
(2003 or 2008) and your choice of middleware.
• Prices start well under 10 cents per hour* for a virtual machine,
including operating system. Reserved capacity options provide pools
of resources at discounted rates.
• Dynamically attach and detach up to three extra blocks of persistent
(RAID protected) storage to an instance, preformatted (ext3) or raw
in eight sizes from 60 GB to 10 TB.
*US prices for 32-bit copper configuration with Windows Server or SUSE Enterprise Linux, current as of December 5, 2011. Prices subject to change.
3 © 2012 IBM Corporation

4. The IBM SmartCloud Enterprise software asset catalogs provide a
software store for your server configurations.
The ‘public’ catalog contains a growing list of operating system images with or without selected software
and software bundles from IBM (Lotus®,WebSphere®, DB2®, Informix®, Cognos®, Tivoli®, Rational®),
Alphinat, Aviarc, BeyondTrust, CohesiveFT, Corent, Grid Robotics, Kaavo, NetEnrich, OpenCrowd, Pragma
Systems, Servoy, SugarCRM or Zeus. The licensing options include:
• “Pay-as-you-go” (“PAYG”), with hourly rates: You choose the desired software, accept the license
terms online, and receive a monthly usage bill.
• “Bring your own license” (“BYOL”): You own or buy a software license and can use the prebuilt
image in the catalog.
Your ‘private’ and ‘community’ catalogs provide a place for you to store and manage customized copies
of public images and images you build in the cloud or import.
4 © 2012 IBM Corporation

5. You can have your server environment running in minutes and pay for it
only as long as you need it.
The self-service portal, designed for ease of use, guides you through
setting up what you need and triggers the automated provisioning of
your servers.
Click and choose Choose the hardware and Application provisioned
the software you need usage configuration and ready to run
Step 1 Step 2 Step 3
5 © 2012 IBM Corporation

6. IBM SmartCloud Enterprise can help you gain savings, quality
improvements and speed to market.
Cloud computing from IBM can help you:
• Reduce IT labor cost by over 50 percent1—reduce the cost
and time to provision a software environment with reduced labor
for configuration and without installation costs
• Virtually eliminate capital expense and realize significant
software license savings through more rapid access to elastic
server capacity
• Reduce provisioning cycle times from weeks to minutes—
for faster time to market and more time for innovation
• Improve quality—eliminate over 30 percent1 of all defects that
come from faulty configurations; standard configurations help
reduce risk and deliver higher service quality
• Enable more effective development—preconfigured integrated
IBM Rational® developer group tools and best practices
• Improve governance and reduce risk of large
server deployments
1
Based on results from IBM’s Technology Adoption Program. Your results may vary, and client-specific results can only be ascertained after a return on investment analysis.
6 © 2012 IBM Corporation

7. When considering a new technology such as cloud, there are always
challenges and dependencies that need to be addressed.
Today’s data center Tomorrow’s cloud environment
We know that:
? ? Who ensures security?
It is located at X Where is it located?
? Where is it stored?
It is stored in server Y
We have backups ? ? Who backs it up?
in place Who has access?
How resilient is it?
Our administrators control ? How do auditors observe?
access
Our uptime is sufficient How does our security
team engage?
The auditors are happy
Our security team is engaged Technical concerns:
 Extended network security
 Isolation failure
 Insecure or incomplete
data deletion
 Additional software layers
7 © 2012 IBM Corporation

8. IBM Security Solutions to address the challenges of cloud computing
Helping clients begin their journey to the cloud with relevant security expertise
 Compliance ownership
 Cross border constraints
GRC  e-discovery process
 Access to logs and audit trails
 Merging patch, change, and configuration
management policies
 Rapid provisioning/de-provisioning of users
 Federated identity management
 Data segregation
 Intellectual property protection
 Data preservation and investigation
 Multi-tenancy and shared images
 Virtualized environments
 Open public access
 Physical data center security and resiliency
8 © 2012 IBM Corporation

9. Security governance, risk management and compliance
Security governance, risk management and compliance
Customers require visibility into the
IBM Security Framework security posture of their cloud.
Implement a governance and audit management program
Establish 3rd-party audits (SAS 70, ISO27001, PCI)
Provide access to tenant-specific log and audit data
Create effective incident reporting for tenants
IBM Cloud Security
Guidance Document Visibility into change, incident, image management, etc.
Support for forensics and e-Discovery
Supporting IBM Products, Services and Solutions
IBM Professional Security Services – IBM Managed Security Services -
cloud security consulting Services – hosted security event and log
cloud security strategy roadmap Enhanced
management
Assessing security to create a
roadmap to reduced risk Cloud-based security services
IBM Security A comprehensive evaluation of an A cloud-based security service designed to provide
Products and Services organization's existing security policies, security incident and event management (SIEM)
procedures, controls and mechanisms. functionality at a lower cost.
9 © 2012 IBM Corporation

10. People and Identity
People and Identity
Customers require proper authentication
IBM Security Framework of cloud users.
Implement strong identity and access management
Privileged user monitoring, including logging activities, physical monitoring and
background checking
Utilize federated identity to coordinate authentication and authorization with
enterprise or third party systems
A standards-based, single sign-on capability can help simplify user logons for
IBM Cloud Security both internally hosted applications and the cloud.
Guidance Document
Supporting IBM Products, Services and Solutions
IBM Tivoli Federated Identity IBM Tivoli Security Information
Manager and Event Manager
Securely manage cloud identities Optimize security & compliance
Employ user-centric federated identity efforts
IBM Security
management to increase customer Monitor user activity for accidental or
Products and Services satisfaction and collaboration malicious activity that could put
information at risk
10 © 2012 IBM Corporation

11. Data and Information
Data and Information
Customers cite data protection as their
IBM Security Framework most important concern.
Ensure confidential data protection
Use a secure network protocol when connecting to a secure
information store.
Implement a firewall to isolate confidential information, and ensure that
IBM Cloud Security all confidential information is stored behind the firewall.
Guidance Document
Sensitive information not essential to the business should be securely
destroyed.
Supporting IBM Products, Services and Solutions
IBM Data Security Services IBM Information Protection
Protect data and enable business Enhanced Services – managed backup
innovation cloud
Solutions for network data loss Flexible, automated backup and
IBM Security prevention, endpoint encryption, recovery managed service
Products and Services endpoint data loss prevention, and Located onsite or offsite using public
log analysis and/or private cloud technology
11 © 2012 IBM Corporation

12. Application and Process
Application and Process
Customers require secure cloud
IBM Security Framework applications and provider processes.
Establish application and environment provisioning
Implement a program for application and image provisioning.
A secure application testing program should be implemented.
Ensure all changes to virtual images and applications are logged.
IBM Cloud Security
Guidance Document Develop all Web based applications using secure coding guidelines.
Supporting IBM Products, Services and Solutions
IBM WebSphere DataPower Secure IBM Application Security Services
Enhanced Hybrid Cloud Connector for Cloud
IBM WebSphere DataPower Security assessment services for cloud
Cast Iron Appliance XH35 applications
Leverages standard protocols to Identify and eliminate security and privacy
IBM Security provide multiple layers of connection risks associated with your cloud
Products and Services security for private, public or hybrid applications.
clouds.
12 © 2012 IBM Corporation

13. Network, Server and End Point
Network, Server and End Point
Customers expect a secure cloud
IBM Security Framework operating environment.
.
Maintain environment testing and vulnerability/intrusion management
Isolation between tenant domains
Trusted virtual domains: policy-based security zones
Built-in intrusion detection and prevention
IBM Cloud Security
Guidance Document Vulnerability Management
Protect machine images from corruption and abuse
Supporting IBM Products, Services and Solutions
Managed Security Services – hosted IBM Professional Security Services –
Enhanced vulnerability management cloud security consulting – cloud
Identify vulnerabilities and manage risk security assessment
to reduce cost Provide cloud providers with an
IBM Security Cloud-based security service to identify assessment of their security controls
Products and Services vulnerabilities across network devices, Leverage international standards and best
servers, databases and web practices to provide public or private
13 applications cloud providers © 2012 IBM Corporation

14. Physical Security
Physical Security
Customers expect cloud data centers to be
IBM Security Framework physically secure.
.
Implement a physical environment security plan
Ensure the facility has appropriate controls to monitor access.
Prevent unauthorized entrance to critical areas within facilities.
Ensure that all employees with direct access to systems have full
IBM Cloud Security background checks.
Guidance Document
Provide adequate protection against natural disasters.
Supporting IBM Products, Services and Solutions
IBM Physical Security Services
Defend and help secure physical environments
A full suite of digital security solutions and site assessments that can be
IBM Security integrated with your network and IT systems
Products and Services
14 © 2012 IBM Corporation

15. IBM SmartCloud Enterprise is designed to address key client concerns
of control, reliability, and security
Control. Web-based portal allows authorized users to log on at any time and
monitor, manage and control their virtual environments. Administrator and user
roles offer enterprise-level control of cloud assets and spending, including full
usage detail downloads. Built-in APIs allow you to customize and
automatically control your cloud server capacity.
Reliability. Around-the-clock monitoring and management of the IBM
SmartCloud infrastructure with a service level agreement. Features like ‘anti-
collocation’ and ‘virtual IP addressing’ help enable you to build resiliency into
your cloud server environments. Backup and recovery and monitoring services
are available separately.
Security. Built into the solution, ranging from tight physical security of the IBM
SmartCloud delivery centers to IPS and vulnerability scanning of the IBM
SmartCloud infrastructure. Optional security options such as virtual private
networking can help you extend your existing security disciplines to the cloud.
15 © 2012 IBM Corporation

16. Why choose IBM to realize cloud computing value?
• IBM has one of the broadest bases of cloud
solutions in the market and is a thought leader
in cloud standards, optimization and integration.
• Our public cloud services offer flexible,
enterprise-oriented delivery models to help
enable enterprises to more securely partition
their environment, virtual and dedicated.
• IBM is world-leading in middleware,
development and testing tools
• We have expertise and best practices gained
from years of experience managing and
operating security-rich enterprise data centers
around the world.
16 © 2012 IBM Corporation

17. Thank you for your time today.
Questions?:
Next Steps:
• Request IBM SmartCloud Enterprise trial
from your IBM sales representatives
• Identify candidate cloud workloads
• Ask your IBM sales representative for a
SmartCloud Enterprise workload migration
workshop
For more information:
ibm.com/smartcloud/solutions/enterprise
Contact:piotr.pietrzak@pl.ibm.com
http://twitter.com/piotrpietrzak
17 © 2012 IBM Corporation