4- OSS- NS8 Industry Day Presentation Slides 20100625 Read-Only .pdf

A Combat Support Agency

Defense Information Systems Agency

DISN Operations Support SystemDISN Operations Support System

DISN OSS DISN OSS

Briefing to IndustryBriefing to Industry

Mr. Manuel Hermosilla OSS Division

Network Services Directorate June 2010

AgendaAgenda

• Overview

• Information Sharing System (ISS)

• Service Management Systems (SMS)

• Network Management Systems (NMS)

• Element Management Systems (EMS)

• Support Systems

• Governance

OSS Division: MissionOSS Division: Mission

Mission:

OSS Division

Mr. Manuel Hermosilla, Chief

Element Management Systems (EMS) Branch

Mr. Scott King, Chief

Network Management Systems (NMS) Branch

Mr. James Smith, Chief

System Management Systems (SMS) Branch

Mr. Alexander Torres, Chief

Program Support and Logistics Branch

Mr. Haywood Johnson, Chief

Operational Support Systems Division – Provides systems engineering and integration, planning, resourcing, fielding, sustaining and evolving secure solutions to instrument and automate the service fulfillment and assurance functions for the DISN using Net-Centric principles and technologies. The DISN

OSS will share its data assets for information superiority to the Commander-in-

Chief, Combatant Commanders, DoD, DISA, Services, Agencies and the Warfighter.

What is the DISN OSS?What is the DISN OSS?

• All the systems that provide operations, administration, maintenance, and performance (OAM&P) management functions:

– Service Fulfillment Functions: Inventory and Configuration Management, Order Management, Network Activation and Service Provisioning

– Service Assurance Functions: Alarm and Fault Management, Performance Management, Incident Management, and Release Management

• The network and related connectivity between both the managed objects (network devices), and the layers supplying management functions to those network devices

• Information sharing services to inform management, engineers, operators, and customers on the health and status of DISN services

The DISN OSS SolutionThe DISN OSS Solution

• Common information data model

• One integration interface per system

• Common integration technology

• Service-based integration environment

– Interfaces are “loosely” coupled, self-describing, and published

– Highly flexible

• “ADOPT” industry standards and models

– TeleManagement Forum (www.tmforum.org)

• TMF NGOSS

– Processes (eTOM) + Shared Information / Data (SID) model

• Telecommunications Management Network (TMN)

• Multi-Technology Network Management (MTNM)

• Multi-Technology Operations System Interface (MTOSI)

• OSS through Java (OSS/J)

– Web Services

– Enterprise Service Bus

Element Management

Network Inventory &

Configuration Management

Network

Problem

Management

Network

Event

Management

Network

Performance

Management

Network Management

Service Order

Management

Service Quality

Management

Service

Provisioning

Service Management

Service

Design

IP

EMS

MSPP

EMS

ODXC

EMS

DWDM

EMS

Voice

EMS

TDM

EMS

Service

Level Mgmt Order

Capture

Customer Relations

Network Elements

Operations Support System (OSS)

EndEnd--toto--EndEnd

SituationalSituational

AwarenessAwareness

Command &Command &

Control ofControl of

NetworkNetwork

ResourceResource

F u lf il li n g

A s s u ri n g

D

IS

N S e rv ic e s

Functionally Focused Capabilities

OSS FunctionsOSS Functions

DISN OSS Reference ModelDISN OSS Reference Model

Based on:

• ITU TMN

• TMF NGOSS

• Web Services

Where we started Where we started ……

ATM

EMS

AAA

Support

NIPR

DVS

DSN

TDM

DISN Core

MSPP

IP ODXC

OTS

DRSN

DCN

AAA

Support

EMS

CCV

AAA

EMSSupport

AAA

EMSSupport

Telemetry

Net

AAA

EMSSupport

AAA

EMS EMS

AAA

Support EMS

AAA

Support

Telemetry

Net

Concord

Managed

Elements

Management Plane

Separation

Element Management

System

Network

Management

System

Service

Management

System

ICATS

TMS

INMS

ICATS

TMS

INMS

Unsupported Apps

SIPR

EMS

AAA

Support

TDMS-PE

One-Way Isolator

RIMS

Spreadsheets

Unsupported Apps

RMS RMS

PAWS

WMS

DDOE

WWOLS-R

Boundary Protection

Boundary Protection

Customer

SIPRNet NIPRNet i3Tel

RIMS

Spreadsheets

DISA

NetOps

Centers

DISN

Tier 3

Where we are Where we are ……

ATM

EMS

AAA

Support

NIPR

DVS II

DSN

TDM MSPP

IP ODXC

OTS

DRSN

DCN

AAA

Support

EMS

CCV

AAA

EMSSupport

AAA

EMSSupport

Telemetry

Net

AAA

EMSSupport EMS

AAA

Support

Telemetry

Net

Concord

Managed

Elements

Management Plane

Separation

Element Management

System

Network

Management

System

Service

Management

System

ICATS

TMS

INMS

ICATS

TMS

INMS

Unsupported Apps

SIPR

TDMS-PE

One-Way Isolator

RIMS

Spreadsheets

Unsupported Apps

RMS RMS

PAWS

WMS

DDOE

WWOLS-R

Boundary Protection

Boundary Protection

Customer

SIPRNet NIPRNet i3Tel

RIMS

Spreadsheets

DISA

NetOps

Centers

DISN

Tier 3

AAA

Support

EMS

CCV

1 Thin Client per Operator

OSS Info Sharing Services

Alarms Inventory TT

DISA

NetOps

Centers

DISN

Tier 3

Where weWhere we’’re goingre going……

DCN

DISN

Managed

Elements

Data Communications Network (DCN) Management Plane Separation DCN

Element Management Layer (EML) Distributed Mgmt and Control

H

EMS

OSS Service Oriented Integration (SOI) Common Integration Infrastructure

H

EMS

Mediation

Common Communications Vehicle

Workflow Mediation

Common Communications Vehicle

Workflow

CDS

TMS

INMS

NCCM

NPM

OM SQM

Common Support Infrastructure and Access

(Access via OSS Thin Client)

Boundary Protection

OSS Info Sharing Services

Alarms Inventory TT OM SQM

SIPRNet Web 2.0 for

DISN Information

Network Management Layer (NML) Centralized End-to-End Situational Awareness

Service Management Layer (SML) Centralized Service Management

DISA NetOps Centers

DISN Tier 3

Information Sharing Services (ISS)

Web Content Consumer

Web Services Consumer

ATM

NIPR

TDM

ODXC

OTS

MSPP

SIPR

PAC, CONUS, EUR, SWA

DISA (IP, Optical, Net Mgmt)

Boundary Protection

Planned FY10

Planned FY10/11

Planned Summer 10

ADIMISS

How we have gotten here…

Managed

Elements

Element Management

System

(Distributed)�

Common Integration

Infrastructure

EMS

Mediation

Common Communications Vehicle

Workflow

Fully integrated and automated global situational awareness

Highly flexible and scalable integration architecture

Controlled, predictable access to managed elements

OSS Info Sharing Services

Alarms Inventory TT OM SQM

OM SQM

Web Content Consumer

Web Services Consumer

Web 2.0 for

DISN Information

Centralized

End-to-End

Situational Awareness

Centralized

Service Management

Fully integrated and automated service management & reporting

TT

NM

CM

PM

Presentation OutlinePresentation Outline

• DISN OSS Overview

• OSS Layer (e.g. ISS)

– Overview

• What is its purpose in DISN OSS

• List of component systems/applications

– OSS Layer Architecture

• Component System/Application Section (one for each listed above)

– Purpose and Use within the OSS Layer

– Logical architecture

– Technologies and/or COTS products

Information Sharing System Information Sharing System

(ISS)(ISS)

ISS Reference ModelISS Reference Model

Based�on:

• ITU�TMN

• TMF�NGOSS�

•Web�Services

ISS OverviewISS Overview

• Provides both M2M and H2M methods of sharing DISN OSS data

• A strategic capability for Net-Centric Operations Warfare

• An enabler of

– The Joint Concept of Operations (JCONOPS) for NetOps

– DoD CIO NetOps Strategic Vision

– GIG Enterprise Management (DoDI 8410.02)

• Discoverable & consumable data about the health & status of the DISN for end-to-end GIG awareness

• Centralized portal of DISN information

• E-bonding with customers, providers, & suppliers

ISS OverviewISS Overview (cont(cont’’d)d)

• There are two separate ISSs—one Unclassified and one SECRET

• Includes the following components

– Single Sign-on

– OSS Central Portal

– Web Services

– Reference Data Management Solution

– Contact Data Management Solution

– Service Quality Management

ISS ArchitectureISS Architecture

Black Network Resources

DCN Users

Bi-Directional Integration

Via the CCV

BLACK

Non-DCN Users

CCV

EMS

EMS

Northbound

Interfaces

OSS Enclave

Info Sharing Zone

Red Network Resources

EMSs

DCN Users

Bi-Directional Integration

Via the CCV

RED

Non-DCN Users

CCV

CDS

CDS

CCV RED

DCN

OSS Enclave

Info Sharing Zone

CCVDCN

XML

Gateway

RDB

OSS Apps

Web

Services

External

Apps

Northbound

Interfaces

OSS Central

Web

Server

LDAP

Server

DB

Server

LDAP

DB

App

Server

RDB

Web

Services

XML

Gateway

External

Apps

ISS TechnologyISS Technology

• Enterprise Service Bus

• “Connects and mediates all communications and interactions between services.”

Sonic ESB

• Application Server

• Hosts multiple mid-tier applications on a shared server Tomcat Version 6.0.18

• Operating System

• Leverage high availability features of the OS such as IPMP and

ZFS

Solaris Version 10

• Open Source HTTP server

• Load balances all traffic to back end application servers Apache Httpd Version 2.2.14

PurposeTechnology

Single SignSingle Sign--on Overviewon Overview

• Single sign-on (SSO) is a property of access control of multiple, related, but independent software systems.

• User logs in once and gains access to all systems without being prompted to log in again at each of them

• Benefits of single sign-on:

– Reduces password fatigue from different user name and password combinations

– Reduces time spent re-entering passwords for the same identity

– Security on all levels of entry/exit/access to systems without the inconvenience of re-prompting users

– Centralized reporting for compliance adherence.

Black Network Resources

DCN Users

Bi-Directional Integration

Via the CCV

BLACK

Non-DCN Users

CCV

EMS

EMS

Northbound

Interfaces

OSS Enclave

Info Sharing Zone

Red Network Resources

EMSs

DCN Users

Bi-Directional Integration

Via the CCV

RED

Non-DCN Users

CCV

CDS

CDS

CCV RED

DCN

OSS Enclave

Info Sharing Zone

CCVDCN

XML

Gateway

RDB

OSS Apps

Web

Services

External

Apps

Northbound

Interfaces

OSS Central

Web

Server

LDAP

Server

DB

Server

LDAP

DB

App

Server

RDB

Web

Services

XML

Gateway

External

Single SignSingle Sign--On ArchitectureOn Architecture

Single SignSingle Sign--on Technologyon Technology

Relational database utilized by CASOracle Version 10g

“LDAP application layer protocol gateway designed to deliver high availability, virtual directory, data distribution, enhanced directory access control, and schema compatibility”

Sun Directory Server Enterprise Edition Version 6.3.1

Authorizes an authenticated userSpring Security

Version 2.0.5

• CAS - Central Authentication Service

• A Single Sign On open source authentication system for applications residing within the Information Sharing Zone

Jasig CAS Version 3.2.1

OSS Central OverviewOSS Central Overview

• OSS Central

– Human to Machine interface for sharing DISN OSS data

– Centralized web portal of DISN information

– OSS Central consumes data from ISS application servers and provides the data through the medium the user selects

– OSS Central acts as an aggregator of content and applications that DISN OSS applications provide

– Similar to all web sites on the Internet, users can navigate the DISN OSS Central without training

OSS Central FeaturesOSS Central Features

• Content aggregation, with a common, unified view across all content

• Personalization, with persistence that tailors the content and portal layout to a user’s preferences

• An integrated universal search engine to search across all ISS data sources

• Single sign-on with attributes based access control and authorization for accessing all information

• Forums for different communities of users and topics

• Detail logging and reporting to audit user activity for specific features and content

OSS Central FeaturesOSS Central Features

• Portlets: Trouble Tickets, Alarms, Inventory, Performance Summary, Quick Search, SQM, Order status, Circuit status, Promina, ASI

• Features: Flash capabilities, Multiple profiles per user, Global filter setting, Export data to XML, RSS

• Account Provisioning: Portlet for coordinating and approving DD Form 2875 account requests

• Training: CBTs are primary training source

OSS Central ArchitectureOSS Central Architecture

Black Network Resources

DCN Users

Bi-Directional Integration

Via the CCV

BLACK

Non-DCN Users

CCV

EMS

EMS

Northbound

Interfaces

OSS Enclave

Info Sharing Zone

Red Network Resources

EMSs

DCN Users

Bi-Directional Integration

Via the CCV

RED

Non-DCN Users

CCV

CDS

CDS

CCV RED

DCN

OSS Enclave

Info Sharing Zone

CCVDCN

XML

Gateway

RDB

OSS Apps

Web

Services

External

Apps

Northbound

Interfaces

OSS Central

Web

Server

LDAP

Server

DB

Server

LDAP

DB

App

Server

RDB

Web

Services

XML

Gateway

OSS Central TechnologyOSS Central Technology

• Application Server

• Leverage high availability solutions WebLogic Version 10.3

Relational database used to store user preferences and other persistent data for the web portal

Oracle Version 10g

• Open Source implementation of an Enterprise Information Portal, using Java and XML.

• A portal makes network resources (applications, databases and so forth) available to end-users.

• Users can access the portal via a web browser, WAP-phone, pager or any other device.

• Acts as the central hub where information from multiple sources are made available in an easy to use manner

Jetspeed Version 2.1.3

Web Services OverviewWeb Services Overview

• Machine to Machine interface for sharing DISN OSS data

• Utilize Industry Standards

• MTOSI – Inventory Web Service

• GST v2.0 – Tickets Web Service

• MTOSI – Alarms Web Service

• GST v1.0 – Authorized Service Interruption Web Service

• Utilizes XML over SOAP

Web ServiceWeb Servicess ArchitectureArchitecture

Black Network Resources

DCN Users

Bi-Directional Integration

Via the CCV

BLACK

Non-DCN Users

CCV

EMS

EMS

Northbound

Interfaces

OSS Enclave

Info Sharing Zone

Red Network Resources

EMSs

DCN Users

Bi-Directional Integration

Via the CCV

RED

Non-DCN Users

CCV

CDS

CDS

CCV RED

DCN

OSS Enclave

Info Sharing Zone

CCVDCN

XML

Gateway

RDB

OSS Apps

Web

Services

External

Apps

Northbound

Interfaces

OSS Central

Web

Server

LDAP

Server

DB

Server

LDAP

DB

App

Server

RDB

Web

Services

XML

Gateway

Web Services TechnologyWeb Services Technology

• Application Server

• Hosts multiple mid-tier applications on a shared server Tomcat Version 6.0.18

• “Secure services, applications and data with customizable, scalable and automated service visibility and governance.”

WebSphere DataPower XML Security Gateway

XS40

Version 3.8.0.3

RDMS OverviewRDMS Overview

• The Reference Data Management Solution (RDMS) provides a single repository for DISN OSS Reference Data

• It includes a Data Repository, a web services interface and a GUI

• Two services are available

– Request/Response service: The requestor sends the name of the table in the request, the response contains the data in a tab-delimited format wrapped in XML.

– Publication/Subscribe service: The requestor creates a subscription for changes to the reference data. When the data changes in one of the reference tables, the name of the table is sent to all subscribers.

• RDMS exists in both the classified and unclassified Information Sharing Zones (ISZs).

RDMS ArchitectureRDMS Architecture

RDMS TechnologyRDMS Technology

Technology Purpose

Sonic ESB 7.6 • Enterprise Service Bus

• CCV runs on Sonic ESB

Solaris 10 Operating System

• Leveraging the high availability features of the OS such as IPMP and ZFS

Oracle Version 11g Relational database used to store reference data and stored procedures

Contact Mgmt OverviewContact Mgmt Overview

• The Contact Management Solution provides a single repository and web services interface for OSS contact data

• It consists of

– Data Repository

– Web Services interface

– Portlet GUI

• It is deployed in both the RED and Black ISZs

• It allows OSS systems and OSS Central Users to search for contacts, create new contacts, update contacts, and delete existing contacts.

• All systems will use the same contact store to prevent duplicate data in the OSS

Contact Mgmt ArchitectureContact Mgmt Architecture

Contact Mgmt TechnologyContact Mgmt Technology

Technology Purpose

Sonic ESB 7.6 • Enterprise Service Bus

• CCV runs on Sonic ESB

Solaris 10 Operating System

• Leveraging the high availability features of the OS such as IPMP and ZFS

Oracle Version 11g Relational database used to store contact data and stored procedures

Service Quality Management Service Quality Management

(SQM)(SQM)

SQM OverviewSQM Overview

• New capability to be hosted in ISZ and OSS Enclave

• Provides collection, analysis, and reporting of information about DISN services

• Provides management level and decision-making information to:

– Customers

– DISN product and service managers

– COCOMs, Services and Agencies

• Monitors and reports metrics relating to the operations of the services

• Enables the detection of deviations from the regular or expected level of performance

• Collects and correlates data to service and service-level definitions

SQM PurposeSQM Purpose

• The SQM information repository will contain:

– Physical representation of network resources

– Logical representation of circuits and services

– The relationship between the logical and physical resources

– Service-to-network resource relationships

– Customer-to-service relationships.

• The SQM will provide search, reporting, and trend reporting capabilities for support of quality and performance management processes and their sub-processes in a unified and configurable manner

SQM Target ArchitectureSQM Target Architecture

Service Management Systems Service Management Systems

(SMS)(SMS)

SMS Reference ModelSMS Reference Model

Increases and Facilitates Integration Efficiencies

Based�on:

• ITU�TMN

• TMF�NGOSS�

•Web�Services

• Includes the implementation and sustainment of OSS systems that are responsible for:

– Processing orders

– Data Sharing (M2M and Human to Machine(H2M))

– Warehouse Management

• Includes the following components

– World Wide On-Line System (WWOLS)

– Warehouse Management System (WMS)

Service Management Systems (SMS)Service Management Systems (SMS)

World Wide Online System World Wide Online System

(WWOLS)(WWOLS)

WWOLS OverviewWWOLS Overview

• The World Wide On-Line System (WWOLS) is the DISA telecommunications asset database

• Contains data on circuits/trunks/links that comprise the Defense Information System Network (DISN), and provides data automation support to provision/allocate these assets

• This data includes detailed circuit/trunk/link information, including end points, routing, trunk channelization, usage, availability, and historical documentation; including Request for Service (RFS), Telecommunication Service

Requests (TSR), Telecommunications Service Orders (TSO), and completion reports

• Contains address, facility power, and telecommunication equipment for DISN facilities

WWOLS Overview WWOLS Overview

• Deployed at DECCs StL and Cols on SIPRnet and

NIPRNet

• 1000+ global users

– Supports external customers and DISA provisioning centers at St Louis, Hawaii, Stuttgart and DISA HQ

• Help Desk: Tier 1 &2 at GNSC

– Tier 3 support at DISA HQ in NCR

• Subsystems:

– Oracle DB

– Email service on SIPR and NIPR

– Contingency Access Server

– Web Server hosts front end web application

WWOLS WWOLS ArchitectureArchitecture

WWOLS Deployment ArchitectureWWOLS Deployment Architecture

DECC Columbus

NIPRNet

Users

CSD/OSS Firewalls

RED

SIPRNet Users

Exchange

Server

EMAIL Processor

Email

Processor

Exchange

Server

CAS

WWOLS DB Server

CAS

WWOLS Web Server

DISNet

Firewalls

DISANet

Firewall

BLACK

CSD/OSS

Firewalls

TDX Guard

DECC Montgomery

RED

SPA

DECC St Louis

RED

RED

EMAIL Processor

WWOLS DB Server

CAS

WWOLS Web Server

SIPRNet Users

CSD/OSS Firewalls

Exchange

Server

DISNet

Firewalls

SIPRNet

Users

RED

Exchange

Server

Email

Processor

CAS

DISANet

Firewall

BLACK

CSD/OSS

Firewalls

CSD/OSS

Firewalls

BLACK

BLACK

CSD/OSS

Firewalls

WWOLS Zone

W W

O L

S

Z o n e

WWOLS Zone

W W

O L

S Z o n e

WWOLS TechnologyWWOLS Technology

• Incoming Checks incoming (receive) directory for messages. Removes wrapper, assigns WWOLS message ID and puts into WWOLS Autodinmsg tables

• Outgoing Checks WWOLS directory for outgoing (send) messages, adds WWOLS wrapper and formats autodin message as required for email and sends message to CAS

C++ Modsix

• Mid-tier architecture web application server.

• Provides secure http internet service between the client users and the database tier.

Internet Information Server (IIS) 6.0

• Leverages MS .net framework to build the application layer for the WWOLS Web provisioning tool.

• VB .net is the programming language used to interact with the databse layer.

• ASP .net enables communication between the mid-tier application server and client web browser.

MS ASP.net

WWOLS TechnologyWWOLS Technology

• Incoming

Collects messages from email servers, does minimal validation and formatting, adds wrapper for TDX, Checks Contingency Access Server

(CAS) for availability, and performs Secure FTP (SFTP) of message to

CAS

• Outgoing

Checks all CAS for availability and performs Secure FTP (SFTP) of message from any CAS having messages for that email processor

Email Processor (Visual Basic)

• Moves messages through classification boundary

• Incoming

Checks incoming (receive) directory for messages from Email Processor, adds message extension and moves messages to directory awaiting

TDX (or guard) pickup

• Outgoing

Checks outgoing (send) directory for messages from TDX, removes message extension and moves them to directory for Email processor pickup

Contingency Access Server (CAS) (Shell Scripts)

WWOLS TechnologyWWOLS Technology

•Relational database used to store WWOLS data and stored procedures

•Provides grid control technologies

•Porvides communication layer to mid-tier application server.

Oracle Version 11g

Scripting Language used to perform client side functionality.Javascript

Provides asynchronous calls to the database layer to display dynamic content.

AJAX

Operating System

• Leveraging the high availability features of the OS such as

IPMP and ZFS

Solaris 10

Warehouse Management System Warehouse Management System

(WMS)(WMS)

WMSWMS OverviewOverview

• Hosted at Ashburn, VA, CACI facility

• Provides inventory and order management of equipment used for service implementation and maintenance activities on the DISN

• Provides DISN life cycle support

• Supports audit inquiries

WMS Subnet

NIPRNet

WMS Servers

DISN WMS Users

(CONUS, EUR, PAC, SWA)

Firewall

Gateway Router

WMS Production Architecture

BLACK

DISN WMS TechnologyDISN WMS Technology

Technology Purpose

COTS Warehouse Management System

(WMS) – HK

Systems iFulfill

Version 7.1.7

The WMS is a client-server application that manages the telecommunications equipment stored in the DISN warehouse and forward holding areas. This equipment is deployed in response to user telecommunications requirements. This product supports logistics processes including receiving, put away, inventory control, cycle counts, outbound order management and shipping.

Oracle Version 9i

Relational database used to store equipment and shipment data.

Crystal Reports Version 10

Report development tool.

Reference Model ContextReference Model Context

NMS OverviewNMS Overview

• The DISN Network Management Systems (NMS) provide a unified operational view of the DISN that includes:

– Network situational awareness

– Network Incident, Problem, and Change management

– Network performance management

– Configuration management

– Network Service reporting

• There are five primary systems that comprise the DISN NMS:

– The Integrated Network Management System (INMS)

– The Reports Management System (RMS)

– The Global Trouble Management System (GTMS)

– The Network Change and Configuration Management / Order Management (NCCM/OM) System

– The Document Management (DM) System

NMS ArchitectureNMS Architecture

INMS OverviewINMS Overview

The INMS provides:

• DISN Situational Awareness through fault monitoring and Performance Management to DISA operators and global customers

• Graphical and text alarm displays, with extensive alarm filtering capabilities, and the ability to actively view the status in near-real time

• Display of associated trouble tickets and trend analysis

• Near real time displays of aggregated and correlated alarm and performance data from the servicing EMS, geographic and logical map view with drill-down capabilities

• Common operational picture of the major DISN networks, and the ability to actively view the status of those networks

• Integrated network topologies

• A single platform for accessing multiple systems

INMS Architecture

INMS TechnologyINMS Technology

Rule sets and client supportMicrosoft .NET v2.0

Relational database used to store user preferences. Rule sets, circuit configurations, graphics, and alarm history

SQL Server 2005

COTS product with customized configuration and rule sets to provide DISN network topology and related alarm situational awareness

NeuralStar v8.3

RMS OverviewRMS Overview

The RMS provides:

• Common reporting platform to provide trending reports based on information managed by each of the NMS components

• Ability to proactively determine potential network problems by providing daily, weekly, and monthly trend analysis reports

• Stored and ad hoc reporting capability from NMS databases

• Reports are scheduled, unscheduled, on demand, and distributed

RMS Architecture

RMS TechnologyRMS Technology

Relational database used to store user preferences, role-based rule sets, and report objects

SQL Server 2005

COTS product provides near-real time, automated or ad-hoc, status, metrics, and performance reports on data retrieved from various NMS data sources via an easily accessible global web interface. Reports are uniquely designed based on customer requirements from DISA site personnel from around the globe

Business Objects XI V3.1

Global TMS (GTMS) OverviewGlobal TMS (GTMS) Overview

• DISA’s standard trouble ticketing system utilized at all Network Support Centers and other DISA Network

Operations Centers (NOCs)

• Provides DISA the capability to track and share information about significant events that occur on the

DISN

• Provides Situational Awareness about the network, system and security operations to DISA and S/A/CC

• Provides a means to notify and coordinate global and theater circuit and system outages with all supported COCOMs and Agencies

• Sends automated and semi-automated notification messages on significant network events

GTMS Architecture

GTMS TechnologyGTMS Technology

Open Source COTS product providing applications with Web interface

Apache Tomcat v6.0

Relational database used to store user preferences, active and historical Incident and Problem tickets and other persistent data

Oracle v10g R2

COTS product with customized configuration and workflow to provide different user communities with appropriate Incident, problem and change tracking support

Remedy ARS v7.1

NCCM OverviewNCCM Overview

• NCCM is the configuration and change management system for the DISN and integrates configuration management workflow, process automation, and scheduling for current and future network planning purposes throughout the system lifecycle of each

DISN configuration item

• Enables the storage and display of physical and logical configurations of the DISN

• Identifies specific equipment, deployment of DISN equipment in the DISN inventory, and the logical configurations of the equipment

NCCM TechnologyNCCM Technology

COTS product providing applications with Web interfaceWebLogic v9.2

Object oriented database used to store network configurations, templates, workflows, reports and user data for managing the DISN configuration data of record

Oracle v10g R2

COTS product with specific configurable modules for Resource Inventory, Discovery and Reconciliation & Design and Planning to provide users one source for all DISN network configuration data

NetCracker v7.3

Order Management OverviewOrder Management Overview

• OM system is a key element of the overall Rapid Agile Provisioning (RAP) initiative

• Provides workflow between the DISN Order Entry system and NCCM to achieve the DISN request fulfillment via flow-through provisioning of DISN technologies

Order Management TechnologyOrder Management Technology

COTS product providing applications with Web interfaceWebLogic v9.2

Object oriented database used to store network configurations, templates, workflows, reports and user data for managing the DISN configuration data of record

Oracle v10g R2

COTS product with specific configurable modules for Order Management, Service Inventory & Service Provisioning and Activation Modules to support of the Rapid Agile Provisioning (RAP) initiative to achieve significant operational enhancements

NetCracker v7.3

NCCM/OM Architecture

Document Management OverviewDocument Management Overview

• The Document Management (DM) system is a single repository for all DISN OSS documents

• The DM System allows related documents that support the NCCM to be accessible and available to the NCCM customer base

• DM is implemented through the use of open source, off the shelf software

• External access is through the OSS Central DM portal

Document Management Architecture

Document Management TechnologyDocument Management Technology

COTS product add-ins (Cluster and Replicator) used to allow Alfresco servers within a multi-server, high availability environment to share a common content store and to synchronize document content in the primary production site with the COOP site

Veritas v5.0MP3

Object oriented database used to store content metadata which includes the format of the content, the date content is created, the language the content is in, content security settings and audit information. Oracle Data Guard is used to synchronize database information in the primary production site with the COOP site

Oracle v10.2.0.4

COTS Document Management product to capture, share and retain DISA documents, enabling users to integrate with enterprise portals, to customize document metadata, to version, to search and to support the Rapid Agile Provisioning (RAP) initiatives to achieve significant operational enhancements

Alfresco v3.2.0

Reference Model ContextReference Model Context

Increases and Facilitates Integration Efficiencies

Based on:

• ITU TMN

EMS OverviewEMS Overview

• Includes the systems, data, and processes that actively monitor and control a population of network elements

• These systems mediate between the network elements and the network management layer

• The EMS directly controls the network elements and executes commands from the upper layers

• Only the EMS has direct communications with the network elements

EMS OverviewEMS Overview

• Includes the following components

– IP Fault Management EMS - IBM Tivoli Netcool

– IP Performance Management EMS - CA eHealth

– Performance Management EMS VoIP/VoSIP (VoIP EMS) - CA eHealth for Voice

– IP CCM - ArcSight NCM, Visionael NRM

– IP Route Management - Packet Design Route Explorer

– Low-speed TDM EMS (TDM EMS) - NET netMS

– MSPP EMS - Cisco CTM

– ODXC EMS - Sycamore SilvxManager

– OTN EMS - Ciena ON-Center

– Encryptor EMS - General Dynamics GEM, SafeNet SMC

– Voice EMS – ADIMSS GOTS (on JBoss, Oracle, Nortel Passport)

EMS ArchitectureEMS Architecture

IP Fault Management EMS IP Fault Management EMS

OverviewOverview

• Responsible for fault management of the DISN IP networks and other select IP managed devices

• Collects fault information via standard IP protocols (such as SNMP, ICMP ping, ssh and syslog) and is responsible for discovery of new devices on the network

• Other tools within the IP EMS can notify the IP Fault EMS of event conditions such as configuration changes, performance degradation or routing anomalies

• Where rules are defined, the IP Fault EMS has the capability to perform root cause analysis and event enrichment from data sources

• Events are forwarded to the NMS for network situational awareness

IP Fault Management EMS IP Fault Management EMS

ArchitectureArchitecture

IP Fault Management EMS IP Fault Management EMS

TechnologyTechnology

Technology Purpose

Omnibus 7.2 (now IBM Tivoli Netcool/ OMNIbus)

Collects enterprise-wide event information from many different network data sources and presents a consolidated view of this information to operators and administrators

Precision 3.7(now IBM Tivoli Network Manager IP Edition)

Brings detailed network discovery, device monitoring, topology visualization, and root cause analysis (RCA) capabilities to the Netcool suite

Impact 4.1 Provides a common platform for external data access and integration

Webtop 2.1 A suite of graphical operator tools that provide the front end for customizing filters and service views

Oracle 10g Relational database used to store user preferences and other persistent data. The database is currently bundled with this version of eHealth

IP Performance Management IP Performance Management

EMS OverviewEMS Overview

• Provides performance management capabilities for IP and ATM DISN devices

• Back-end polling servers collect and aggregate data and provide reporting functionality for enclave users

• Front-end console servers provide reporting capabilities for report consumers outside of the enclave

• The administration GUI is accessible via the Windows

Terminal Services server

• Regularly scheduled XML data pushes update the

Information Sharing system

IP Performance Management EMS IP Performance Management EMS

IP Performance Management IP Performance Management

EMS TechnologyEMS Technology

Technology Purpose

CA eHealth v6.1

• Collects performance data from across the network, notifies of performance concerns, and gathers historical performance information

• Users can view the current state of Key Performance Indicators and view real-time and historical reports

Oracle v10g

Relational database used to store user preferences and other persistent data. The database is currently bundled with this version of eHealth

Veritas Cluster Server v

5.0 MP1

Provides high availability to the eHealth pollers

VoIP EMS OverviewVoIP EMS Overview

• Integrates and automates performance management of multi-vendor, multi-technology voice and data networks

• Automatically and continuously collects voice call statistics from a variety of IP voice systems to present a complete picture of the health of the IP voice network

• Measures the following statistics:

– Voice Quality Impairments by Day – Identifies the cause of low voice quality

– Service Availability from call and messaging systems

– Network Volume & Voice CoS Volume by Day – Shows total voice and data traffic

– Number of Calls by Day, including attempted-but-not-completed calls

– MOS Distribution by Day – Breaks down calls by quality

– Call Volume and System User Statistics

VoIP EMS ArchitectureVoIP EMS Architecture

VoIP EMS TechnologyVoIP EMS Technology

Technology Purpose eHealth for Voice v4.0

A client-server system designed to report on captured VoIP statistics

IP CCM EMS OverviewIP CCM EMS Overview

• The IP EMS change and configuration management (CCM) tool consolidates change and configuration management for all DISN devices onto a single platform

• Provides DISA the capability of performing inventory management, configuration management and enhanced provisioning across all DISN devices

IP CCM EMS ArchitectureIP CCM EMS Architecture

IP CCM EMS TechnologyIP CCM EMS Technology

Technology Purpose

ArcSight Network

Configuration Manager v4.7

• Central management of network devices

• Automated network device discovery

• Configuration and OS image libraries

Visionael Data

Collection v8.1

• Collects inventory information from the various IP network devices on the DCN

• The polled data is stored in a local HSQL database which, in turn, is connected to by the CCV server to collect the data for distribution to NCCM/ICATS

IP Route Management IP Route Management

OverviewOverview

• Configured as a passive routing peer that does not inject routes or forward any traffic

• Records the routing protocol updates (e.g. OSPF, EIGRP, IS-IS, BGP) from its peers, then computes a network-wide routing topology to serve as the basis for monitoring, visualization, diagnostic and analysis tools

IP Route Management IP Route Management

IP Route Management IP Route Management

TechnologyTechnology

Technology Purpose

Packet Design Route Explorer (REX 8.5)

• Real-time Route Recorder that captures the complete stream of routing updates received on all active interfaces and stores them in a persistent Routing Event data store

• Routing Analysis and Presentation Engine processes raw routing events into visualization and report analysis formats

• HTTP and HTTPS for web-based reports

• X-Windows and VNC for configuration, monitoring, analysis and visualization

• SNMP and Syslog client interfaces for traps and syslog-based alarm generation

• Provides historical routing event audit trail for forensic analysis

LowLow--speed TDM EMS speed TDM EMS

OverviewOverview

• Provides management capabilities for the N.E.T.

Promina Series (800, 400, 200, and 100) and the N.E.T.

Promina Broadband System (BBS) equipment

• Includes a comprehensive, unified and consolidated management interface for N.E.T. mission-critical converged voice and data networks

• Provides secure access to netMS and managed equipment

• Supports comprehensive configuration and inventory management

LowLow--speed TDM EMS Architecturespeed TDM EMS Architecture

LowLow--speed TDM EMS speed TDM EMS

TechnologyTechnology

Technology Purpose

N.E.T. netMS v3.4

An all-JAVA management system with an easy-to-use graphical user interface

Oracle v10g

Relational database used to store user preferences and other persistent data

MSPP EMS OverviewMSPP EMS Overview

• Provides advanced capabilities in fault, configuration, performance and security management of the MSPP devices deployed on the DISN

• Manages Cisco optical network elements such as ONS

15454 SONET, ONS 15454 SDH, ONS 15310 CL and

ONS 15310 MA

MSPP EMS ArchitectureMSPP EMS Architecture

MSPP EMS TechnologyMSPP EMS Technology

Technology Purpose

Cisco Transport Manager v8.5 patch 390.3

• Alarm Browser and Alarm Log views that provide a robust listing of all current and historical alarms and events; support for 60 concurrent users

• Integrated IP, SONET, SDH, Ethernet and DWDM management in a single scalable platform

• CORBA fault and inventory integration, GUI-based NE configuration and integrated A-to-Z circuit provisioning

• User-defined domain explorer network views with “bubble-up” alarm severity propagation and drill-down capabilities to isolate fault conditions and service-delivery impact\

• Real-time network surveillance with configurable pop-up alarm and event notifications

• Provides alarms/events to Integrated Network Management

System (INMS) and provides inventory data to Common

Communication Vehicle (CCV)

Oracle v10g

ODXC EMS OverviewODXC EMS Overview

• System provides a comprehensive fault, configuration, performance and security management for ODXC devices deployed on the DISN

• Manages Sycamore optical network elements such as

SN16000 and SN9000

ODXC EMS ArchitectureODXC EMS Architecture

ODXC EMS TechnologyODXC EMS Technology

Technology Purpose

SilvxManager v8.5

• Northbound EMS-to-NMS interface mediation through the EMS

CORBA and SNMP

• Alarm Browser and Alarm Log views that provide a robust listing of all current and historical alarms and events

• Integrated SONET, SDH, Ethernet and management in a single scalable platform

• CORBA fault and inventory integration, GUI-based NE configuration, integrated A-to-Z circuit provisioning

• User-defined domain explorer network views with “bubble-up” alarm severity propagation and drill-down capabilities to isolate fault conditions and service-delivery impact

• Real-time network surveillance with configurable pop-up alarm and event notifications

Oracle v10g

OTS EMS OverviewOTS EMS Overview

• System provides a comprehensive fault, configuration, performance and security management for OTS devices deployed on the DISN

• Manages Ciena optical network elements such as

CN4200 and CoreStream 6000

OTN EMS ArchitectureOTN EMS Architecture

OTS EMS TechnologyOTS EMS Technology

Technology Purpose

Ciena v8.3.1 Patch 05

• Northbound EMS-to-NMS interface mediation through the EMS

CORBA

• Alarm Browser and Alarm Log views that provide a robust listing of all current and historical alarms and events

• CORBA fault and inventory integration, GUI-based NE configuration, integrated A-to-Z circuit provisioning

• User-defined domain explorer network views with “bubble-up” alarm severity propagation and drill-down capabilities to isolate fault conditions and service-delivery impact

• Real-time network surveillance with configurable pop-up alarm and event notifications

Oracle v10g

Encryptor EMS OverviewEncryptor EMS Overview

• The Encryptor EMS responsible for management of DISN crypto devices

• These systems collect status from crypto devices, store status information in the database and forward them to

NMS for situational awareness

• It allows operators to make configuration changes and perform firmware upgrades to crypto devices

Encryptor EMS ArchitectureEncryptor EMS Architecture

Encryptor EMS TechnologyEncryptor EMS Technology

Technology Purpose

GEM 8 Used for management of General Dynamics KG-175A encryptors

GEM X Used for management of General Dynamics KG-175A and KG- 175D encryptors. It will eventually replace GEM 8

SMCII 3.1C Management system for Type III SafeNet encryptors

SMCII 3.0T Management system for Type I SafeNet encryptors.(KG-340)

TDM Voice EMS OverviewTDM Voice EMS Overview

• The Voice EMS collects performance, billing, alarm and configuration data from the DSN switching systems

• Manages TDM voice switch elements such as the AT&T 5ESS and Deutsche Telekom EWSD

Voice EMS ArchitectureVoice EMS Architecture

Voice EMS TechnologyVoice EMS Technology

Technology Purpose

ADIMSS GOTS developed solution to manage TDM switches

Reference Model ContextReference Model Context

Based on:

• ITU TMN

Support Systems Overview Support Systems Overview

Support Systems

– Supports network management operations including Authentication, Authorization and Accounting (AAA), IP address management, Domain

Name Service (DNS) and operator workstations

Security Systems

– Protects networks from denial of service attacks, unauthorized access, IP address spoofing and other vulnerabilities

– Provides perimeter protection for the LAN borders

– Provides a centralized solution for firewall management, logging and reporting

Support Systems OverviewSupport Systems Overview

• Includes the following components

– AAA/LDAP - Authentication and directory services

– DNS - BIND

– Thin Client - Oracle Sun Ray, Microsoft Windows Terminal Services

– SAN - NetApp

– OSS Systems Management - Oracle Grid Control

– Firewall - McAfee Enterprise Firewall, Control Center

– NIDS - McAfee NUBA

– HIDS - McAfee ePO

– Application Switch - Avaya/Nortel Alteon 2424

– XML Security Gateway - IBM WebSphere DataPower XS40

– Common Communications Vehicle – Progress Sonic ESB, HP SOA

Systinet

Support Systems ArchitectureSupport Systems Architecture

AAA OverviewAAA Overview

• Authentication, Authorization and Accounting (AAA)

– The RSA ACE/Server provides token-based AAA through RADIUS services for accessing the network elements, and AAA through LDAP for accessing the Solaris Operating Environment within the TNC

– For the Solaris systems in the TNC, the LDAP Password Authentication Module (PAM) on the Solaris servers will be used to direct all authentication requests to the LDAP server

• LDAP provides the ability to have a single, token-based authentication database for all OSS Solaris servers

AAA ArchitectureAAA Architecture

AAA TechnologyAAA Technology

• Interfaces with RSA ACE server

• Redundant servers sync with LDAP replication Sun ONE Directory

Server

Technology Purpose

RSA Advanced

ACE/Server

• Management component of the RSA SecurID solution, used to verify authentication requests and centrally administer authentication policies

Solaris Pluggable

Authentication

Module (PAM)

• Directs all authentication requests to the LDAP server

DNS OverviewDNS Overview

• The Domain Naming Service (DNS) supports the DISN OSS to resolve host names of network elements

• Two Authoritative DNS servers per Theater

• Each Theater has its own domain

DNS ArchitectureDNS Architecture

DNS TechnologyDNS Technology

Technology Purpose

BIND DNS

v9.6.1

Resolve host names of servers and elements to IPs

ThinThin--client Overviewclient Overview

• The DISN OSS implements a thin-client architecture based on the Sun Ray Thin Client solution provided by

Oracle

– Sun Ray thin clients are stateless, zero-administration clients that process keyboard and mouse inputs and screen and sound output, leaving all application processing and storage on the server

– The “Hot Desking” technology of the Sun Ray solution allows user sessions to be completely mobile, enabling them to move from one Sun Ray thin client to another without bringing down their logged in sessions

– The components of the thin-client architecture include the Sun Ray Thin Client, the Sun Ray Server, Windows Terminal Services and Solaris

ThinThin--client Architectureclient Architecture

Thin Client TechnologyThin Client Technology

Technology Purpose

Sun Ray Thin Client

2FS, 3+

Stateless network devices that provide the network end-user computing experience

Sun Ray Server v4.0

Provides access to Solaris based applications, operating environment for users, and serves thin client sessions

Windows Terminal Services for OSS use, Citrix ICA Client for Citrix server access

Provides access to MS Windows based applications and operating environment for users

SAN OverviewSAN Overview

• Storage Area Network is used for centralized data storage.

– The high availability options provided by a SAN offer continuous operations during re-configurations and failures

– It provides increased flexibility, scalability, and economies of scale

– A separate NFS server is used for local storage

SAN ArchitectureSAN Architecture

SAN TechnologySAN Technology

Technology Purpose

SAN (NetApp) Provides high-speed storage via fiber channel interface

OSS Systems Management OSS Systems Management

OverviewOverview

• Based on Oracle Grid Control, the OSS Systems

Management (OSM) software allows systems administrators to manage the DISN OSS

• The OSM software automates systems management and reduces troubleshooting time by identifying problems before they become outages

• The OSM monitors all components of the DISN OSS to include servers, databases, web servers, applications and appliances

OSS Systems Management OSS Systems Management

OSS Systems Management OSS Systems Management

TechnologyTechnology

Technology Purpose

Oracle Grid Control v10gR4

• Monitor Thresholds and alert operators when thresholds are exceeded

• Manage systems, monitor components

• Identify the root cause of incidents

• Performance, configuration, security, compliance reporting

• Robust Job Scheduling

Oracle v10g

Stores status, performance, configuration and report information about the entire OSS

Firewall OverviewFirewall Overview

• Provides perimeter protection for the DISN OSS

– Traffic filtering, proxy services, network address translation and audit logging

– Protects the DISN OSS from denial-of-service attacks, unauthorized access, IP address spoofing

• McAfee Enterprise Firewall deployed in pairs for HA;

supports up to 26 Ethernet ports

Firewall ArchitectureFirewall Architecture

Firewall TechnologyFirewall Technology

Technology Purpose

McAfee Enterprise Firewall

Enforces the perimeter policies for the DISN OSS

McAfee Enterprise Firewall Control Center

Provides a centralized solution for firewall management, logging and reporting

NIDS OverviewNIDS Overview

• Policy development and security analysis solution that detects network anomalies

• Performs real-time evaluation of the packets flowing through the network against policy specification

• Allows operators to run queries, generate reports and refine policy definition

NIDS ArchitectureNIDS Architecture

NIDS TechnologyNIDS Technology

Technology Purpose

McAfee Network User Behavior Analysis

(NUBA)

• The Network Intrusion Detection System (NIDS)

• The NUBA consists of a single monitor (appliance) and the NUBA

Monitor application. The application provides a graphical environment for defining the network under analysis and the policies that govern the intended use of the network

HIDS OverviewHIDS Overview

• The mandated security management platform for servers

• HBSS ePO servers within the OSS enclave interact with HBSS SuperAgents, which in turn interact with Agents on each OSS asset

• The ePolicy servers for the classified and unclassified implementation of HBSS will be deployed into a separate security zone located off the DISN OSS firewall at the primary DECC location

• These security zones (unclassified and classified) are configured to allow the ePolicy server to reach SuperAgents (and thus Agents) located both within the OSS enclave (i.e., DCN-connected) and outside the OSS enclave (e.g., SIPRNet, NIPRNet)

• The ePolicy server for each classification will serve all assets with deployed agents for the SMS, NMS and EMS layers

HIDS ArchitectureHIDS Architecture

HIDS TechnologyHIDS Technology

Technology Purpose

McAfee ePO (ePolicy Orchestrator)

• Applies and monitors security policy on servers

• Provides notifications of breaches and can initiate countermeasures

Application Switch OverviewApplication Switch Overview

• The Alteon Application Switch monitors the availability of the applications using their real IP addresses.

– The Alteon can use a ping function to determine machine-level availability.

– It can test well known ports such as HTTP, FTP, RADIUS, DNS, SMTP, etc.

– Can use custom scripts to monitor application-specific TCP ports.

– HA for the Alteons is handled via Virtual Router Redundancy Protocol (VRRP).

Application Switch Application Switch

Application Switch Application Switch

TechnologyTechnology

Technology Purpose

Radware Alteon 2424 Maintains the status of each real IP address associated with the virtual IP address and forwards client session requests to the available real IP address with the highest priority

XML Security Gateway XML Security Gateway

OverviewOverview

• Analyzes XML and SOAP messages, which are transparent to firewalls

• Encrypts and decrypts XML data

XML Security Gateway XML Security Gateway

XML Security Gateway XML Security Gateway

TechnologyTechnology

Technology Purpose

IBM WebSphere DataPower XS40

Self-contained unit with all XML security gateway functions contained within the chassis

CCV OverviewCCV Overview

• The Common Communications Vehicle (CCV) is the integration backbone that enables and facilitates the service-oriented integration architecture for the DISN

OSS applications

• Guarantees message delivery

• Mediates between different data formats and transport technologies

CCV ArchitectureCCV Architecture

CCV TechnologyCCV Technology

Technology Purpose

Progress Sonic ESB v7.6.1

Standards-based integration platform that combines messaging, web services, data transformation, and intelligent routing to reliably connect and coordinate the interaction of significant numbers of diverse applications across extended enterprises

Progress SonicMQ v7.6.1

The messaging infrastructure

HP SOA Systinet The service registry

DISN OSS Governance RulesDISN OSS Governance Rules

DISN OSS Project Management ArtifactsDISN OSS Project Management Artifacts

All division projects must produce, update, and publish the following artifacts in the division electronic project file repository on the DKO:

• Project Planning Document (PPD) –…