Copyright © 2006 Quest Software Title slide Copyright: 8 pt. Arial Anthony Moillic Directeur Technique Quest Software.

Présentation au sujet: "Copyright © 2006 Quest Software Title slide Copyright: 8 pt. Arial Anthony Moillic Directeur Technique Quest Software."— Transcription de la présentation:

1 Copyright © 2006 Quest Software Title slide Copyright: 8 pt. Arial Anthony Moillic Directeur Technique Quest Software

2 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black Les solutions Quest pour loptimisation du SI Quest Software fournit des solutions conçues pour accroître les performances et la productivité des applications, des bases de données et des infrastructures Windows.

3 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black Optimisez vos infrastructures Windows Les solutions Quest simplifient, automatisent et sécurisent la gestion des infrastructures Windows. Elles facilitent également la migration et ladministration intégrée des plateformes hétérogènes.

4 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black Gestion des Identités Quest Software aide les entreprises à simplifier la gestion des identités en étendant les fonctions natives dActive Directory aux environnements non-Windows et en ajoutant des fonctions dadministration avancées tels que lhabilitation par fonction ou rôle, laccès aux ressources, la gestion des mots de passe et laudit pour les systèmes Windows et non Windows

5 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black 4 La Gestion des identités En utilisant lexpertise de la gestion de Active Directory SIMPLIFIER Simplification de la gestion des identités en administrant les identités Unix/Linux/Java au travers dActive Directory AUTOMATISER Automatiser ladministration des identités sur les environnements cross-platform: provisionnement/de- provisionnement, gestion des mots de passe, audit SECURISER Securiser laccès des utilisateurs Unix/Linux/Javaau travers dActive Directory

6 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black 5 Les défis des environnements hétérogènes Mise en conformité Securité IDs/Logins Multiples Complexité –Trop dannuaires –Trop de mécanismes dauthentification Cher à maintenir Difficile à gérer Inefficace

7 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black 6 Situation: Votre environnement est un mix de systèmes divers disposant dannuaires multiples, denvironnements de stockage didentités et de mécanismes dauthentification

8 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black 7 Active Directory simplifie la situation pour les systèmes Windows Mais pour les environnements non-Windows, les annuaires et authentifications doivent être administrés de manière séparée -Annuaires Multiples -Identités Multiples -Logins Multiples -Non-sécurisé

9 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black 8 Quest permet lintégration des identités disparates Unix/Linux/Java en un seul environnement Active Directory sécurisé

10 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black 9 Puis, Quest aide à ladministration des environnements intégrés et augmente lefficacité de la gestion via le provisionnement et déprovisionnement des utilisateurs

11 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black 10 Renforcement des sécurités Grâce à une gestion forte des mots de passe pour tous les systèmes

12 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black 11 Et, adresser les besoins de mise en conformité en offrant laudit et la génération de rapports pour toutes les activités relatives aux identités sur lenrivonnement intégré

13 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black 12

14 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black 13

15 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black 14 Vu de lutilisateur final …

16 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black 15 Le point de vue de lutilisateur final HR System Solution de provisioning ? MIIS Délégation de laudit Suivi des changements et des processus Audit des événements Analyse des anomalies Rapport sur les identités

17 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black 16 Accès aux systèmes, applications et données Changements sur les applications en production et les configurations systèmes Disponibilité des systèmes et applications critiques Rétention des communications et données importantes Disponibilité des systèmes Foglight Management Xtensions for MOM Recovery Manager Availability Manager SharePlex LiteSpeed La vision Quest LIdentity and Access Management est un facteur majeur des projets de mise en conformité Change management Stat Group Policy Manager Vintela Authentication Services Management Xtensions for SMS InTrust Rétention des données Archive Manager Recovery Manager InTrust LiteSpeed Gestion des accès Vintela Authentication Services Vintela Single Sign-on for Java ActiveRoles Server InTrust Reporter Toad

18 Copyright © 2006 Quest Software Title slide Copyright: 8 pt. Arial Une approche pragmatique, par étapes 17

19 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black Provisionner AD à partir de sources extérieures Un utilisateur est créé dabord sur un système externe à Active Directory –RH –Pages Blanches –… Créer son identité dans le SI le plus efficacement possible est primordial Eviter les interventions manuelles 18

20 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black 19 Provisioning Manuel Compte utilisateur Appartenance aux groupes Localisation, Login Unique, Mot de passe, Accès distant … Applications & Bases de données Unix/Linux & Java Localisation, permissions NTFS, permissions Partage Choix de la banque dinformation, Génération dAlias Contrôle daccès, Liste de distribution Email Cross-Platform pour les applications non-intégrée à AD Bàl Exchange Messagerie Instantanée Répertoire personnel Notifications Linux/Unix Enabled Réconciliation ADLDS (ADAM) Mgrs, IT et RH Administrateurs AD Séniors Administrateurs Exchange Seniors Help Desk Support Administrateurs Sécuriré Admins ADLDS Admins des Applications Création Configuration Inform Coûteux / Erreurs humaines Nécessite des heures … ADAM/ ADLDS

21 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black 20 Policy Provisioning automatique Compte utilisateur Create Configure Appartenance aux groupes de sécurité Localisation, Génération de login unique, Génération de mot de passe complexe Accès distant Applications & Bases de données Unix/Linux & Java Localisation, permissions NTFS, permissions sur les partages Sélection contrôlée de la banque dinformation, Génération des Alias Contrôle des accès, appartenance aux listes de distributions Cross-Platform pour les applications non-intégrée à AD Bàl Exchange & Messagerie Instantanée Répertoire personnel et accès aux partages Notifications Linux/Unix/Java Enabled Réconciliation ADLDS (ADAM) Managers, HR et Support Inform ActiveRoles Server Abordable/Efficace/Sans erreur Réalisé en quelques minutes MIIS Help Desk | Personnel moins qualifé | Directement des RH | MIIS, Tivoli, SUN, HP ADAM/ ADLDS

22 Copyright © 2006 Quest Software Title slide Copyright: 8 pt. Arial Démonstration n°1 Provisioning dun compte 21

23 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black Scénario de la démonstration Un utilisateur est créé sur un annuaire LDAP externe Microsoft MIIS reconnaît cette création de compte Microsoft MIIS crée le compte sur Active Directory Quest ActiveRoles Server prend le relais pour la mise en œuvre de règles automatiques de gestion pour: –créer son répertoire personnel, –sa boite aux lettres, –son appartenance aux groupes « techniques » 22

24 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black Provisioning / Reprovisioning / Deprovisioning La même démarche sapplique dès quun employé change de fonction ou quitte la société Les mêmes règles sapplique que les actes administratifs proviennent de lannuaire métier ou dopérations faites par ladministrateur en direct La reconciliation des actes administratifs est possible La traçabilité est toujours assurée 23

25 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black 24 ActiveRoles Server Deprovisioning automatique Verrouillage Configuration Désactivation du compte, Affecter/Effacer Attributs, Déplacer à la corbeille, Planifier pour suppression dans 60-90 jours Revocation des accès, assigner les permissions aux responsables ou administrateurs Assigner Self, Cacher dansla GAL, Assigner les permissions aux responsables ou administrateurs Supprimer et Enregistrer les appartenances aux Groupes et Listes de distribution Initialiser le deprovisioning Cross Platform Désactiver Linux/Unix/Java Deprovisioner ADLDS Managers, RH et Support Informer Compte utilisateur Répertoire personnel et accès aux partages Bàl Exchange Messagerie Instantanée Appartenance aux groupes de sécurité Applications & Base de données Unix/Linux & Java Notifications/ Génération de rapports Policy MIIS Mise en conformité simplifiée Accomplie en quelques secondes Help Desk | Personnel moins qualifé | Directement des RH | MIIS, Tivoli, SUN, HP ADAM/ ADLDS

26 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black 25 Initiateurs Contrôle du changement et approbation ActiveRoles Server MIIS Notification de demande de changement Notifications des Approbations Notifications de Rejet XX Approuveurs Lobjet est géré par un utilisateur ou un groupe Tentative de changement Attributs Création Modifier ou Supprimer un objet Help Desk Personnel moins qualifié Directement des RH ou Platformes Supervision IT IT Administrator

27 Copyright © 2006 Quest Software Title slide Copyright: 8 pt. Arial Une approche pragmatique, par étapes 26

28 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black Etendre le périmètre dActive Directory et des GPOs soit par létablissement dune communication forte Microsoft MIIS Microsoft ILM 2007 soit par intégration Quest Vintela Authentication Services Quest Vintela Single Sign-on for JAVA 27

29 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black Une seule infrastructure technique 28 PasswordManager Active Directory & ADAM Directories Mid-Range & Main Frame Applications & Databases Microsoft MIIS SQL InTrust & Reporter SQL ActiveRoles Server SQL Intra/Inter/Extranet MMC/ Browser ActiveRoles provides ADSI/SPML/PowerShell Vintela Smart Cards UsersGroups Microsoft Exchange Home Folders & Resource Access Applications Access Computers SSO ADFS

30 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black Une seule infrastructure technique, cela signifie Une seule identité Un seul mot de passe –Reset –Complexité –Politiques différenciée par OU, par groupe* La Simplification de ladministration –Consoles –Sauvegarde / Restauration de la supervision –Microsoft Operation Manager 2007 de la mise en conformité de la traçabilité 29 * Avec Quest Password Manager

31 Copyright © 2006 Quest Software Title slide Copyright: 8 pt. Arial Démonstration n°2 Extension du périmètre dActive Directory à UNIX/Linux 30

32 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black Scénario de la démonstration Création dun compte sous Active Directory Activation de son identité sous UNIX/Linux Connexion sous Linux avec lidentifiant Active Directory Après 3 tentatives infructueuses de saisie de mot de passe sous Linux, le compte est verrouillé sous AD Le déverrouiller avec la MMC Utilisateurs et Ordinateurs permet de se connecter à nouveau sous Linux ou Windows 31

33 Copyright © 2006 Quest Software Title slide Copyright: 8 pt. Arial Démonstration n°3 Provisionner les applications: Oracle 32

34 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black Scénario de la démonstration Les informations daccès à Oracle sont intégrés à la console dadministration Mise en place de laccès à une des bases Oracle Microsoft MIIS prend le relais pour provisionner les comptes Oracle Vintela Authentication Services assure le SSO Connexion à Oracle à partir de Windows sans aucune demande didentification 33

35 Copyright © 2006 Quest Software Title slide Copyright: 8 pt. Arial Démonstration n°4 Une seule infrastructure = des solutions uniques et simples ! 34

36 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black Scénario de la démonstration Un utilisateur sous Windows se connecte en SSH sous UNIX Il essaie de se connecter sous Unix en compte root plusieurs fois Quest Management eXtensions for MOM détecte le trop grand nombre de tentatives Microsoft Operation Manager signale lalerte en temps réel 35

37 Copyright © 2006 Quest Software Title slide Copyright: 8 pt. Arial Conclusion 36

38 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black 37 En conclusion Les Solutions Quest et Microsoft pour La Gestion des Identités

39 Indications in green = Live content Indications in black = Edit in master Indications in white = Locked elements logo must not be moved, added to, or altered in any way. Background should not be modified. Presentation title: 12 pt. Arial Regular, light blue Slide heading: 28 pt. Arial Regular, black Maximum length: 1 lines Slide body: 22 pt. Arial Regular, black Recommended maximum length: 4 principal points Slide number: 8 pt. Arial bold, black Chart copy: 12 pt. Arial Bold, black Prochaines Etapes Session n°2 –Fédération didentité –Authentification Forte –Traçabilité 38