Netconnect 2006

I attended the 6th annual NetIQ Global Users conference in May, held in Orlando, FL. It was a wonderful chance to meet a lot of the people that I have worked with over the past 6 years as a NetIQ employee in the Technical Support and the Professional Services departments. I was also flattered by the fact that several customers remembered me from my days in Technical Support. Staying on after the conclusion of the conference, I attended two days of training on NetIQ's Security Manager product.

Netconnect 2006 was organized into five product demonstration and education tracks, including:

IT Automation
This track covered customizing, automating and tuning the AppManager (AM) Suite, including threshold automation and workload management with AppManager Performance Profiler (AMPP).

IT Service Management
This track focused on the convergence of security management with service level management, and how to transition your IT services from event management to service management. Products covered within this track included AM, VigilEnt Policy Center (VPC) and Analysis Center (AC).

Compliance and Risk Management
This track reviewed the impact of governmental regulations on IT from many perspectives, including preparing for audits, rules of evidence, organizational policy management, etc. Products examined were the Security Compliance Suite and the Risk and Compliance Center.

Security Management
This track presented NetIQ's broad coverage of security monitoring, automated response and reporting. Products presented were Security Manager (SM) and the Security Compliance Suite.

Change Control and Windows Administration
This track reviewed issues of managing operational changes and enforcing IT policies for Windows systems in a cost-effective manner. NetIQ's product lineup in this area recently expanded with the introduction of Change Administrator for Windows. Additional products covered included NetIQ Change Guardian for Active Directory (CGAD), Directory & Resource Administrator (DRA) and Group Policy Guardian (GPG).

As my personal goal in attending NetConnect was to broaden my awareness of NetIQ’s security and policy compliance solutions, I focused on the Security Management track, specifically SM. Workshops I attended included an overview of new features in SM 5.5; using the Security Compliance Suite to ensure compliance; integrating SM with AM, and the SM Essentials class. Here are some quick highlights.

SM is made up of three major components – Event Manager, Intrusion Manager and Log Manager.

-- Event Manager monitors the Windows event logs for security related incidents and executes responses and notifications based on best-practices rules. All incidents and responses are collected into a backend SQL database. This is the first phase of the complete event management life-cycle.

-- Intrusion Manager builds on Event Manager to help secure systems from internal/external, malicious/benign, or accidental/policy-based violations. For example, Intrusion Manager lets you monitor root and administrator logon failures, security configuration changes, or possible buffer overflow attacks. The monitoring rules are based on security industry best practices, and can be extended to custom configurations.

-- Log Manager copies all the information collected by Event Manager and Intrusion Manager to a separate SQL Server database designed for the analysis and reporting of security status across the enterprise. Log manager exposes knowledge articles on the analyzed events to supplement the administrator's understanding of each security scenario.

A core feature of SM is its ability to monitor with "event correlation", in which rules are configured to cover sequences of events filtered for various attributes such as criticality, time and number of occurrences.

Some of the new features in SM version 5.5 include:

AutoSync Technology
NetIQ provides new modules and module updates based on requested features or newly discovered security vulnerabilities. These updates are posted to the AutoSync Server. In the SM administrator console, these updates can be obtained by running the Module Installer. The Module Installer queries the AutoSync Server and distributes any updates available to the deployed agents as required.

Agentless Monitored Computer
The newest version of SM now supports agentless monitoring. An agentless computer is monitored by a proxy agent on another computer.

Protection for Oracle Database Servers
Security Manager now offers monitoring for Oracle database servers. Changes to security roles and user accounts can be monitored, along with the status of the audit subsystem.

The value of NetConnect was certainly worth the time and money to attend. I plan to release more detailed reports on the Security Compliance Suite in the months ahead.

OIS 5.0

I'll be working on a review of Opalis Integration Server version 5.0, specifically covering the product value and how it integrates with other Systems Management platforms, namely NetIQ AppManager and Microsoft Operations Manager.



Refer to www.JMACINC.com for the rest of the story.

itSMF USA 2006 Conference & Expo -- Call for Presentations

This is the outline of the topics for which the IT Service Management Forum is seeking proposals around the following suggested topics or others you believe would be of interest to. I post their outines here as it is an excellent summary of the current areas of interest to the Systems Management industry.

Metrics and Measurements
- Performance Management
- Score Card, making metrics useful and practical, etc.
- Critical Success Factors when implementing the processes
Financial Management
- Budgeting
- Costing of Services
- Activity Based Costing
Governance
- BS 15000/ISO 20000
- SOX
Configuration Management
- CMDB – how to plan and implement in a multiple authoritative database environment
- Auto discovery versus manual population of Configuration Items using CI attributes
- Success stories
ITIL v3
- Web-based products
- Lifecycle model
Service Level Management
- User Satisfaction measures
- Reliability of IT (Availability/Capacity)
- Service Level Management (SLAs)
- Writing and Negotiating OLAs
- Where to start with SLOs
- How to gather requirements
- Approaching the business partner
- How to measure and report
- Service Catalog
- How to find/define the services
- What should a catalog look like
- Who is the audience
IT Service Continuity
- Lessons/success stories learned from 2005
Maturity Models (CMM, Service, Asset Management)
- Making sense of them all

Refer to www.JMACINC.com for the rest of the story.

Thoughts on 'ITIL IT Service Management Essentials'

By Dipendra Bantawa.

In October 2005 I attended the two day workshop on “ITIL IT Service Management Essentials (Certification Course)” conducted by Pink Elephant at the “IT Infrastructure Management Conference” in Orlando, Florida. The course is divided into two days with an exam at the end of the second day. It introduces ITIL terminology and concepts and prepares students for the “Foundation Certificate in IT Service Management” exam, the pre-requisite for other ITIL certifications.

While I passed this exam on my first attempt, the teacher warned us that there is a not insignificant failure rate. The most honest tip I can offer for passing this exam is to put aside your career experiences and familiar terminologies and instead immerse yourself with ITIL concepts and terminology--unless, of course, you have participated in an ITIL-based project and are already well versed in the framework. I would also advise you to read some official ITIL materials such as the “itSMF Pocket Guide” in advance of the training.

After a thorough introduction to ITIL definitions, the focus of the workship becomes ITIL’s five operational processes and five tactical processes. The course invites attendees to imagine how they might utilize ITIL to fill gaps in or reshape their current IT processes, and our breaks were marked by lively exchanges on the differences between ITIL and other approaches.

Many organizations around the globe have adopted and implemented ITIL processes successfully, and I highly recommend this workshop as a good starting point. For general information on ITIL activities and certification, check out the IT Service Management Forum. I also recommend The ITIL Community Forum as a peer resource.