Think New: Securing and Greening Your IT at The Same Time

May 2010

Chris Andrew | VP Security Technologies

Agenda

Why Go Green?

Solution Overview» Wake-On-LAN (WOL)

» Power Policy Wizard

» Power Management Reports

Q & A

2

Why Go Green?

Environmental Impact

The global IT and communications industry accounts for approximately 2% of all global CO2 emissions1

There are currently over 1 billion PCs, projected to be 2.25 billion by 20152

4

Sources: 1.Gartner, May 2007 2.Forrester Research

Financial Impact

Energy costs –typically around 10% of an IT budget—could account for 50% of the average IT budget in just a few years1

“By 2010, about half of the Forbes Global 2000 companies will spend more on energy than on hardware”2

5

Sources: 1.Mark, Roy, House Green Lights EPA Data Centers Study, Internetnews.com (July 13, 2006) 2.Businessweek.com: CEO Guide To Green Computing. From Gartner

6

Industry Averages

» The average desktop PC wastes nearly half the power it consumes

» Servers lose approximately one-third of their power as heat

» 90% of desktops don’t use power management settings

7

Save a Buck, Save the Planet!

PC Energy Savings make fiscal sense» Power savings alone

Energy rebate programs are available» Up to $3 per PC depending on where

you live

Save money, reduce emissions…» This is NOT a “carbon offset”

8

Best Practices

Implement Power Management software» Hibernate desktops after hours

» Require a monitor-off policy

» Studies show 250 to 300kWh/ year per PC

Replace old desktops & monitors with EnergyStar rated models» Could save 140kWh/ year per PC

Virtualize servers» Reduce server count

» Reduce cooling requirements

9

Downsides to Power Management

End User complaints» Computer takes too long to boot

» Lost my work because you shutdown my PC!

Sleeping computers cannot be managed» Software can’t be deployed

» Policies updates cannot be applied

» Remote desktop unavailable

Can also make the network less secure» Computers that are turned off can’t be scanned

» Patches cannot be installed to a computer that is hibernating

» AV Updates can be delayed

» Security Policies cannot be implemented until all nodes connect

10

The Green IT Mandate

1. Save CO2 Emissions

2. Save Money

3. Save Waste

… without sacrificing security

… without loosing manageability

… without alienating your user base !

Solution Overview

12

Solution Areas

Wake-On-LAN» Securing / Managing your systems

Power Policy Wizard» Defining and distributing power policies for your systems

Power Management Reports» Qualifying for a power company rebate

New feature included with L.E.M.S.S. 7.0 SP1:

Wake-On-LAN

Wake-On-LAN Overview

Allow maintenance of systems that are powered down

» Patch Deployment

» Policy Updates

» Software Distribution

Perform system maintenance during off hours» No interruption to end users

Requested feature from customers» Many of our enterprise scale customers have

asked for this feature

14

15

Use of Enterprise Service Bus Platform

First add on plug-in for the L.E.M.S.S. platform» Installs on top of L.E.M.S.S. 7.0 SP1

» Wakeup requests are PUSHED to the Wakepoint

» Wakepoint posts back its status and subnet ranges

EDS Module (Server Plug in)» Server threads that read and write the Endpoint Wake Times data

» Sends out the wake requests every 5 minutes

EPS Module (aka “Wakepoint”)» Client side module that processes the wakeup requests

» One Wakepoint per network segment; when we ship…

21

Waking Machines by Hours Of Operation

Use your existing agent Hours Of Operation policy» Agent can communicate and download patches

» Ideal time to wake up is at the beginning of HOP period

» Multiple HOP times can be defined each day

25

Waking Machines Using Daily Wake Times

• Use when Hours Of Operation are not established

• Same wake time for every computer within a group

Power Policy WizardRequires Lumension® Content Wizard

Power Policy Overview

Establish corporate wide policy» Hibernation settings

» Turn Off Monitor settings

» Turn Off HDD settings

Reach all endpoints» Deploy with GPO

» Non-domain computers

» Laptops

Enforce compliance over time» Verify that the policy stays applied

34

Add-On module for L.E.M.S.S. 7.0 SP1

Power Management Reports

Power Management Reports

Power Savings Calculator» “What if” calculations on power usage

» Model some power savings scenarios

Gather information required for a rebate» PCs under management

» Licenses installed

» Power Savings

Power Monitoring» Measure actual endpoint uptime

» Monitor states (on/ monitor-off/ sleep,..)

Dashboard

41

42

Qualifying for a Rebate

Step One: Identify a plan» E.g. Aim to have Desktop and Laptop PCs idle or sleeping for 16+ hours per

day, instead of running 24 x 7 x 365

Step Two: Apply to your Power Company» Calculate your savings

» Submit formal or informal plan

» Varies by power company

Step Three: Implement your plan » Purchase Power Management software, etc

Step Four: Document your results» Receive your rebate

43

44

Estimate Your Power Savings

• Check local Power Company requirements» Is there a form to fill out?

» Is a formal plan required?

» Are laptop computers eligible?

» Etc…

• Calculate your power savings estimates» By machine type» By power savings strategy

• Submit your application for a rebate

45

46

47

Power Management Dashboard

48

Uptime Report

• Deploy new power management settings» Active Directory / Domain Policy

» Local Power Policy using Power Wizard

• Monitor uptime over time» Uptime should decrease rapidly» Find the groups /etc that are out of compliance

49

50

51

Energy Usage Report

• Measures estimated energy consumption» Factors in uptime and machine type» Quickly locate the groups that will save the most money

52

53

Demos are available in the Resource Center –

http://www.lumension.com/Products/Endpoint-Management-Security-Suite/Endpoint-Power-Management.aspx

Global Headquarters8660 E. Hartford Dr.

Suite 300

Scottsdale, AZ 85255

1.888.725.7828

info@lumension.com