Roadmap for exteNd™ and Nsure® Technologies

Loren Russon

Director of Product Management

Novell, Inc.

Ashish Larivee

Director of Product Marketing

Novell, Inc.

Widely disparate resources and devices

Fragmented view of Applications and identities

Diverse, distributed audiences

Severe security and privacy constraints

Today's
Fragmented
Enterprise

LDAP | Laptops | PBX/CTI | Databases | OS | Legal
Customer Portal | HR | Accounting
Network | Employee Portal

The IT Crisis

Connectivity – the Internet

Interoperability – Web Services

Adaptability – Identity

Identity, Roles, Policy, Compliance

The Requirements

Identity-Driven Computing

Identity-Driven Computing Model

Fragmented Business Entities / Identities

Manage Identities

Integrate attributes to determine Role

Identity-Driven Computing Model

Comprehensive services to identity-enable applications

Identity-Driven Computing Model

Integrate, Secure and Manage the enterprise

Identity

Stores /

Applications

Integrate

Automate

Access

Comply

Novell Virtual Directory Services

Novell Identity Manager

Novell exteNd Suite (App Server, Director, Composer)

Novell File System Factory

Enhanced Provisioning

Module

Novell SecureLogin

Novell Access Manager/
iChain

Novell Security Manager

Novell Audit

Databases

ERP

Directories

CRM

Identity-Driven Products
Novell Nsure & exteNd

Novell eDirectory (Security & Authentication Services)

Novell Certificate Network Logon

Novell BorderManager

Packages
SAP, PS, Oracle,
Siebel, etc.

LDAP
A/D, eDir, etc.

RDBMS
Oracle, DB/2, etc.

Custom

External Identity

Stores / Applications

Access Management

& Federation

Audit & Compliance

Portal & Self-Service

Business Process Management

Enterprise Identity Stores

MetaDirectory

Visual Modeling of IDM Infrastructure

Policy &

Configuration

Virtualization

Identity-Driven Products
Deployment Scenario

Identity Management
Single Aggregated View of Identity

Identity

Manager

Packages
SAP, PS, Oracle,
Siebel, etc.

LDAP
A/D, eDirectory etc.

RDBMS
Oracle, DB/2, etc.

Custom

Enterprise Identity Stores

Identity Driven Products & Solutions
Novell Nsure Identity Manager

Business Challenge: How can I manage user access and rights to network resources across network, platform and application boundaries?

Solution: ‘Identity Manager’ is a complete Identity and authentication infrastructure for your end-users, business partners and customers.

Features

Comprehensive password management

Role-based access privileges

Simplified policy definition

Delegated administration

Better monitoring and reporting

USER
LIFECYCLE

Non-repudiative security

Logging, monitoring & auditing

Expanded self-service

White pages & self-service

Comprehensive, automatic password policy enforcement

Empowered users

Password management suite

Administration leverage

Role-based entitlements

Greatly simplified configuration

Expanded effective delivery force

New policy definition model

Benefits

Features

Nsure Identity Manager 2
Primary Enhancements

Identity & Provisioning Portal for IDM2
Enhanced Provisioning Modules

Approval Workflow for Provisioning

Allows users/managers to initiate requests for anything that can be provisioned

IT system access (accounts, group memberships, etc.)

Assets (cell phone, new chair, credit card, etc.)

Allows users to participate in request workflows

Users receive email notification of a pending approval task (URL included)

Click on URL, authenticate, and take action:

Approve, Disapprove, Delegate, Refuse

Users can also see ‘inbox’ of all their tasks

Administrative views

Summary view: statistics, bottlenecks, etc.

Enhanced Provisioning Modules
Approval Workflow for Provisioning Request

Enhanced Provisioning Modules
Lightweight Use Administration

Lightweight User Administration

Allows the Administrator to create users from within the Portal (outside the HR system), and request resources

Supports temporary, volunteer or other similar kinds of employees/users with legitimate needs for resources

Particularly interesting in the EU due to strict employment laws

Supports customers without a formalized HR system

Supports administration of extranet/internet users (e.g. partners, customers)

Enhanced Provisioning Modules
Delegated Administration

Delegated Administration

Various rights can be delegated to various roles:

Supports customers and partners administering their own employees

Supports self-administration and data validation

Supports delegation of rights to assistants or others while unavailable (eg. vacation)

Advanced White Pages & Organization Chart

Similar to eGuide, with more functions and improved appearance

Additional functions:

Alphabetic, geographic, skills views

Collapsible/expandable views

Print, export (file, PDA, SMS)

Ability to initiate advanced actions from there

Improved appearance:

Based on exteNd Director portal

Enhanced Provisioning Modules
Advanced Whitepages & Organization Charts

Enhanced Provisioning Modules
People/Resource/Skills Search

Enhanced Provisioning Modules
Sample Screen – example of initiating advanced action

Designer for Nsure Identity Manager

Visual, drag & drop IDE for IDM2 Deployment

Lay out the system visually, then configure

Leverages Policy Builder and DirXML® Script for defining policies

Based on Eclipse framework

Work online or offline

Save projects/configurations with version control

Document new or existing deployments

http://www.novell.com/coolsolutions/dirxml/designer.html

Designer for Identity Manager:
Graphical Modeling Tool – Policy Management

“Project Spitfire”

Target release date – Q4 2005

Self-service management of personal attributes and passwords

Self-service requests for entitlements/access to resources

Workflow support for approval of entitlements/access requests

Delegated administrative capabilities (allowing others to act on the end-user's behalf)

Lightweight user management

Advanced white pages and organizational charting

Rich-client designer tools based on Eclipse

Common integration modules connecting to more identity sources

Simplified packaging based on functionality

Novell Nsure Identity Manager
2005 Roadmap

What’s Coming Next

Current Status

Nsure Identity Manager 2.0.1

Market leader in Meta-directory

Comprehensive user life-cycle management

Cornerstone of Identity Management strategy

Access & Agreggation of Identity
Novell Virtual Directory Services

Virtual

Directory

Services

Virtual

Directory

Services

Identity

Manager

Packages
SAP, PS, Oracle,
Siebel, etc.

LDAP
A/D, eDirectory etc.

RDBMS
Oracle, DB/2, etc.

Custom

Enterprise Identity Stores

Identity Driven Products & Solutions
Novell Virtual Directory Services

Business Challenge: How can I manage user access and rights to network resources across network, platform and application boundaries?

Solution: ‘Novell Virtual Directory Services’ is an application-specific directory that enables application developers to reference multiple corporate directory stores seamlessly.

Features

Integration with many other ID Stores (AD, NT, SunOne)

Operations can be Local, Referenced or Chained

Authentication via UserID/ Password or SAML (modularity for future expansion)

Novell Virtual Directory Services

Applications

Need access to centrally stored Identities

Need to make modifications to that data

Need to store their own app-specific identity data

Schema
changes

Applications need identity services, but the directory has become a highly protected asset.

Glass House

CHANGES

BDobbs

Password

Telephone #

Address

Novell Virtual Directory Services

All LDAP calls

BDobbs

Preference 1

Preference 2

Application

NVDS

NVDS conjoins the attributes into a single identity for the application

BDobbs

Password

Telephone No.

Address

App Pref 1

App Pref 2

Authoritative Identity requests

Central Identity

Apr May Jun

Jan Feb Mar

Oct Nov Dec

1Q05

4Q04

2Q05

Oct Nov Dec

Jul Aug Sep

4Q05

3Q05

Committed and interlocked FCS date

Committed project (FCS targeted but not interlocked)

Target project (but uncommitted)

Planned end of life

Novell Virtual Directory Services
2005 Roadmap

Seamless integration with native management utilities

Application-specific directory-style private data store

Ability to store some identity attributes locally while connecting to an existing corporate directory for authentication and authorization

Ability to support multiple identity stores

Novell eDirectory™

Microsoft Active Directory

Sun Java System Directory Server

What’s Coming In 2005 (Target: Summer)

Current Status

New to market – Embedded Application Directory

Open architecture, standards based

Cornerstone of Identity Services Foundation

Current Version: 1.0

Identity Driven Products & Solutions
Access Management

Aggregated View

of Enterprise

Identity

Virtual

Directory

Services

Identity

Provider

Policy

Server

Common

Proxy

Agent

Federated

Identity Store

Identity Driven Products & Solutions
Access Management – iChain®, SecureLogin, BorderManager

Business Challenge: How can I manage user access and rights to network and web resources across network, platform and application boundaries?

Solution: ‘Novell Access Management Products’ are a comprehensive suite of access and security products that simplify login, manage access control policies and enable protection of resources.

Features

Application single sign-on (Web, Java, Windows, terminal emulators, Citrix)

Secret storage of credentials

Centralized policy management

Proxy & agent support

Advanced authentication support

Firewall/VPN, remote access

Federated Identity – Access Manager

Nsure Access Manager enables the federation of identity data between business partners - as well as internal systems - without compromising users’ privacy

Provides single sign-on and the secure exchange of identity data between trusted systems using the Liberty Alliance specifications or general-purpose SAML

Manages identities and provisions users between business partners

Enforces role-based policies to control access to Web sites and other applications

Leverages proxy-based technology to dynamically Liberty- or SAML-enable services - without requiring modification to existing web applications

Supports B2B, B2C and B2E deployments

Use Case: Primary Authentication Point

Existing Web Apps & Servers

Liberty enabled services

Netegrity protected application

Odyssey IDP

As the primary authentication point, Odyssey will provide SSO to many different systems, either directly or through “In-the-flow” gateways or iChain gateways. All Identity exchange is digitally signed ensuring privacy and confidentiality.

“In-the-flow” Gateway

Liberty or SAML-enabled application

Use Case: Liberty-Enabled Provisioning

When a user becomes a member of a community (trust circle), Odyssey can automatically create an account using Liberty-enabled services with each partner (using Novell’s Service Provider) and federate the user, meaning that the user immediately gets Single Sign-On with any partner, and each partner is able to access a common set of user information, such as preferences, credentials, etc.

SSO

Partner C

Partner B

Partner A

Partner D

Partner E

Partner F

Community/
Identity Provider

SSO

Use Case: Liberty-Enable Legacy
System

User authenticates to the “in-the-flow” gateway using the Liberty Alliance Identity Provider.

Policy decisions are made and enforced

Access is granted; web SSO can be achieved with back-end web applications

Identity injection can leverage Liberty Web Services

Data is encrypted between gateway and browser

In-the-flow Gateway

Web Servers (incl 3rd Party)

Odyssey IDP

Novell Applications (iFolder, NetStorage etc)

1

2

1

Thin Client

3

5

4

Liberty or SAML-enabled application

Novell Access Manager

Next Generation Web Access and Federated Identity Management

Liberty Alliance / SAML 2 enabled authentication and Identity Exchange

Liberty-enabled Access Gateway (updated iChain proxy)

New Policy Engine

Java Agents

SSL-VPN

iManager Administration

Support for Active Directory

Expected Release Date

Q4 2005

Novell Security Manager
Powered by Astaro

Six critical network security applications

Firewall

VPN Gateway

Virus Protection

Intrusion Protection

Spam Protection

Surf Protection (URL Filtering)

Integrated management platform

Management

Platform

Surf

Protection

(URL Filtering)

Virus

Protection

Firewall

VPN

Intrusion

Protection

Spam

Protection

Linux

Kernal

Novell Security Manager

Next Generation Security Appliance

Tighter integration with Novell eDirectory & Novell Virtual Directory Services (advanced authentication, authorization storage services)

Common proxy architecture between Novell's gateway products

Support for legacy and new access control rules

Integrated management and auditing frameworks

Expected Release Date

Q3 2005 - update

Q2 2006 – full integration

Novell Access Management Products
2005 Roadmap

Novell Access Manager (Formerly known as iChain) - target release date Q4 2005

Novell SecureLogin 3.5.2 – target release date APR-2005

Novell BorderManager 3.8 EP – target release date Q3-2005

What’s Coming Next

Current Status

iChain 2.3 - Web Access Management, Web Single Sign-On

SecureLogin 3.5.1 - Host Single Sign-On

BorderManager 3.8 – Identity-driven firewall/VPN and IAC

Novell Security Manager 5.1 – Linux-based Security Appliance

Identity Driven Products & Solutions
Novell Nsure Audit

Features

Secure event centralization

Event aggregation

Non-repudiative logging

Policy-based, real-time notification, alerts, and monitoring

Reporting

Business Challenge: How can I track all of the activities of users, applications and systems across the network?

Solution: ‘Nsure Audit’ is a complete secure event management framework that enables you to keep track of all activities in your network.

Secure Logging Server

Platform Agent

Notification

Service

Logging Service

Filter

SMTP

Flat File

Driver

Monitoring

Applications

Report

Generator

SNMP

SYSLOG

Storage

Java

CVR

…

Crystal Reports

Java API

TCP/IP

(TLS)

Alerts/

Notifications

JMS Event Adapter

Oracle

SQL Server

MySQL

File System

[11:58:18] MyApp\ IMAP\ Authentication: Valid login for account “FMSmith" from 137.65.47.144
[11:58:18] MyApp \POP3\ Authentication: Valid login for account "pfeiffer" from 195.224.28.4

C API

…

Monitoring Service

Disconnected

Mode Cache

Administrator

Nsure Audit Architecture Today

Application

Application

Application

SQL

Driver

Filter

How is Nsure Audit unique?

Integration with Novell products

As Novell’s official audit product, Nsure Audit collects events from the broadest set of Novell products (and the list is growing…)

Data integrity and security

Event signing and event chaining protect the integrity of logged data, making it forensically robust (non-repudiative)

Policy enforcement

Unauthorized changes to eDirectory values are detected and reset to appropriate values, as specified by company policy

Notifications

Administrators can be notified in real-time through a variety of methods if suspicious activity occurs or if logging applications go down

Real-time system monitoring tools

Administrators can build easy-to-read, dynamic dashboards with monitoring applications or Web services

Reporting and analysis tools

Prewritten Crystal reports, SQL queries wizard, iManager plug-ins and LETrans are included

What distinguishes Nsure Audit from other logging systems?

Nsure Audit Tomorrow

Centralized configuration, management and deployment.

Compliance focused reporting and monitoring

Policy-based management of platform agents.

Multi-tiered event filtering.

Management console plug-ins

Expanded instrumentation and log collection

Third party event correlation and analytics

Apr May Jun

Jan Feb Mar

Oct Nov Dec

1Q05

4Q04

2Q05

Oct Nov Dec

Jul Aug Sep

4Q05

3Q05

Committed and interlocked FCS date

Committed project (FCS targeted but not interlocked)

Target project (but uncommitted)

Planned end of life

Expanded instrumentations; Microsoft desktop and server OS and Active Directory event logging

SYSLOG harvester

Event filtering

Telephony notification channel

JMS connectivity driver

IBM DB2 database support

Event dashboard

Novell Nsure Audit
2005 Roadmap

What’s Coming In 2005 (Target: Fall)

Current Status

Nsure Audit

Current Version: 1.0.3

Identity Driven Products & Solutions
Custom Development & SOA – exteNd

Business Challenge: How can I securely deliver relevant business information, at the appropriate time, to the people who need it?

Solution: ‘Novell exteNd Suite’ is a powerful combination of identity, integration and portal services that enables rapid development and deployment of your service-oriented Web applications.

Features

Rapid Design Tools & Wizards

Web services & business integration assembly (connectors)

Composite application and portlet modeler (Pageflow & forms)

Standards-based Portal

Express portal

Personalization and rules engine

Device transcoding

Standards-based Application Server support (WebSphere, WebLogic, JBoss)

Identity Management Integration

Existing Systems

Transactions

Packages

Utilities

Collaboration

Docs/Content

Network

Leverage existing systems

Leverage existing systems

Services-Oriented Application Development
Novell exteNd: Leverage Existing Systems

Service-oriented Integration

Process management
Integration Services

1

Employees

B2B

Partners

Customers

Business Requirements

Identity-based Solution

Build new applications

Services-Oriented Application Development
Novell exteNd: Building New Applications

Service-oriented Interaction

Device support

Personalization

Presentation

2

Existing Systems

Transactions

Packages

Utilities

Collaboration

Docs/Content

Network

Employees

B2B

Partners

Customers

Business Requirements

Identity-based Solution

Web

Services

Web

Services

Web

Services

Services-Oriented Application Development
Novell exteNd: Protecting Existing Systems

Protect existing systems

Secure Identity Management

Single sign-on

Identity management

Security

3

Employees

B2B

Partners

Customers

Business Requirements

Identity-based Solution

Existing Systems

Transactions

Packages

Utilities

Collaboration

Docs/Content

Network

Services-Oriented Application Development
Novell exteNd: Protecting Existing Systems

Identity Integration

Portal content can be assigned and managed based on the identity in eDirectory™. (ie. User/Group/Container and Dynamic Groups)

Portal user identity can be maintained and managed from Novell eDirectory.

Meta-data can be stored inside e-Directory

Close affinity with Nsure products

Novell eDirectory, Novell iChain, Novell Nsure Identity Manager, Nsure Audit

Novell Custom Development & SOA Products
2005 Roadmap

What’s Coming Next

Current Status

exteNd Suite 5.2 – Enterprise & Professional

Comprehensive SOA development environment

Visual tools to enhance productivity

Cross-platform and standards-based

Recognized with several industry awards

extend 5.2.1 (Chutney)

Targeted release date March 2005

Support for Jboss Application Server & SLES9

Foundation for Enhanced Provisioning Module

Masala

Include Open Source Jboss Application Server

Standards – WSRP, BPEL etc.

Identity enabled throughout

Virtual Directory Services, IDP

Identity Driven Products & Solutions
Key Entry Points - Novell Nsure & exteNd

Integration and Interaction

Access Security

Identity Management

Personalized Portal

Business Process Management

Web Services

Authentication

Single Sign-on

Authorization

Auditing

Directory MetaDirectory

Provisioning

Password Management

Role Based Profiling

Integration

Nsure

exteNd

Cumulative Return On Investment

Integrate, Secure & Manage the Enterprise

through Services, Context & Policy

Single / Reduced Sign-On Provisioning/De-provisioning

Desktop, Server management Policy-based mngt.

Application level Security

Password Synchronization Composite Applications

Aggregated / Federated Identity Process Automation

Identity-Driven Enterprise

Multiple identity stores	Role-based Access

Partnership with JBoss

Next step in Identity-Driven Computing

Application Services Foundation

Identity Services Foundation

Today's Announcements

Novell & JBoss Partnership

Open Source Model for mature technologies

Superior delivery model for standards-based technologies

Accelerating delivery of JEMS for enterprises

Code examples include: WS-SDK, WSRP, Portlet lib (~75 portlets) and the page model

Engineering resources include: 10 committers

Open Source support eco-system

Novell provides global enterprise support

Novell's identity-enabled innovation

Security

Federation

Personalization

Workflow and process flow

Web Services creation

Cross-platform

A recent JBoss customer survey showed that 69% run on Linux, with a significant proportion of those on SLES.

Identity Management

Access Management

Resource

Management

Architectural Foundation

Novell Offerings

HW / OS

Cross Platform

Cross Hardware

Application Services Foundation

Identity Services Foundation

Mgmt Services Foundation

Tool Framework

Identity Portal

Bus. Process Mngt.

XML Integration

Workflow

Portal Server & Portlets

Policy Management

Audit & Logging

Federation

Authn. & Authz.

Synch / Virtual Identity

Remote Control

Audit & Monitor

Patch & Update

S/w Dist. / Packaging

OS Provisioning

INTEGRATE

SECURE

MANAGE

J2EE Application Server / Policy Server

Nsure Identity

Manager

Nsure

Provisioning

Nsure Access

Manager

Nsure Security

Manager

Nsure Secure

Login

ZENworks Resource

Management

Novell

Tool/Eclipse

Open Source / Standards

Partner

Novell Identity-Driven Products

Related Sessions

IO154 - Novell Nsure Identity Manager 2 Overview and Futures

IO152 - Web Access Management - Novell iChain and Beyond

IO156 - Novell Security Manager powered by Astaro: Introduction and
Overview

IO155 - Nsure Audit: What's New and Beyond

TUT283 - Novell SecureLogin: Advanced Deployment Strategies In An Age Of
Regulatory Compliance

TUT348 - Identity Driven Storage Management on NetWare, Linux, and
Windows: File System Factory Installation and Configuration

TUT278 - Directory Services Futures

TUT250 - Identity-Enabled Applications with Novell Virtual Directory Services

TUT246 - Novell iManager Introduction and Configuration

TUT266 - Meeting Next Generation Secure Access Requirements with
Smart Cards and Digital Certificates

TUT145 - Configuring Novell eDirectory for 802.11 Wireless Authentication

TUT146 - Deploying Kerberos Authentication

Questions & Answers

Over the next 30 minutes, we’ll talk about:

Some of the pressing business challenges we see our customers grappling with today.

Novell’s strategy and approach for addressing those issues.

Why businesses can trust Novell as a strong, viable, and strategic business partner.

Over the next 30 minutes, we’ll talk about:

Some of the pressing business challenges we see our customers grappling with today.

Novell’s strategy and approach for addressing those issues.

Why businesses can trust Novell as a strong, viable, and strategic business partner.

Over the next 30 minutes, we’ll talk about:

Some of the pressing business challenges we see our customers grappling with today.

Novell’s strategy and approach for addressing those issues.

Why businesses can trust Novell as a strong, viable, and strategic business partner.

Over the next 30 minutes, we’ll talk about:

Some of the pressing business challenges we see our customers grappling with today.

Novell’s strategy and approach for addressing those issues.

Why businesses can trust Novell as a strong, viable, and strategic business partner.

Loosely based on NIST standard. Future versions will have much more robust role definition capabilities.

Loosely based on NIST standard. Future versions will have much more robust role definition capabilities.

Integration with many other ID Stores:

Active Directory

SunOne directory

eDirectory

Other instances

Future/potential integrations: SQL Databases, XML data sources, NT Domains, etc.

Operations can be:

Local: handled within the embedded directory store

Referred: redirected to another store (application is aware)

Chained: transparently redirected to another store (application is not aware)

Authentication: UserID/Password or SAML (modularity for future expansion)

Here is a diagram of the centralized/primary authentication scenario just described.

Note that the top third of this diagram shows the first scenario discussed—where there was the Identity provider and the in-the-flow gateway. This scenario shows how the modular architecture can be separated, and generalized, so that the Identity provider also services many other systems.

In this example, iChain is one of those policy enforcement point services. The next version of iChain will be able to act this way—to consume the policies and authentication services of the Odyssey. There is also an application that has used another vendor’s Liberty functionality (in this case, Sun’s). Because of the Liberty standard, this will also work—where a primary/centralized authentication service can provide those services to many vendors’ systems. Finally, this can work with web resources protected with Netegrity SiteMinder—because Netegrity has made a substantial investment in SAML. Odyssey is equally capable with Liberty or SAML.

The user is on the left. The applications or resources the user wants to access are on the right. Most of these (the yellow ones) are existing applications. One (the green) is an application that has had the engineering work done to convert it into a native Liberty or SAML application.

The middle section shows the various parts of our Odyssey. There are two distinct parts of the Odyssey: the Identity Provider (the red) and the “in-the-flow” gateway (the gray). Both of these modules are included in the product. The user decides which to install on a particular server at install time. The way it is shown here is how we believe most customers will deploy it, on two or more servers, with the in-the-flow gateway in the DMZ and the Identity Provider protected within the firewall.

As the user tries to access the existing web servers (yellow), the in-the-flow gateway intercepts that traffic, and asks the Identity Provider to authenticate the user. Once this happens, the Identity provider gives the OK to the in-the-flow gateway, along with access rules to be enforced. Now that the user is authenticated at the in-the-flow gateway level, the user enjoys SSO to all the yellow servers and applications protected by the in-the-flow gateway.

Note that in the case of the green application (already Liberty or SAML enabled), the gateway is not needed—the user authentication to the Identity provider enables access to this resource.

The answer to the Security Struggle? Astaro Security Linux.

This product includes six critical network security applications:

A firewall

A VPN gateway

Spam protection

Intrusion protection

Gateway virus protection

And Surf Protection, which is also known as URL filtering

This chart shows the main selling points of Nsure Audit compared to competition.

The top 3 bullets make Nsure Audit unique from major competition.

The last 3 bullets show parity with major competition.

Customers each have their own unique set of needs, driven by their business model, their industry, and their IT environment. Novell has the ability to respond to those needs, regardless of where they may start in relation to our product and service offerings. The customers immediate priorities and “pain points” can be addressed with our SIM offerings whether they start with Portals, Access and Security, or Identity Management. From any one, or any combination of these entry points Novell has the ability to take the customer forward towards a complete SIM solution.

The advantage to the customer, is that we respond according to their immediate pain, their unique environment, their business model. Novell’s approach allows them to avoid a rip and replace process, building on their current IT environment. Once the initial solution is in place, they continue to build, further leveraging not only their legacy investment, but also their investment in Novell products and services. We can enable our customers to leverage their entry point with a quick ROI. We can then increase their VOI by expanding our SIM solution into their environment via phased engagements. The further down the road map they travel, the more valued derived.

For Novell, this removes constraints to up sell the customer towards other solutions and addresses integration issues.

In summary, multiple entry points based upon a building block approach provides the customer with a roadmap to a long-range solution with increasing value while removing issues of integration.

This slide will talk about the evolution of IT strategies and how Novell’s Linux strategy and one Net vision enables organization to manage the evolution of IT business and the trend to turn enterprise focused IT operations into a services model.

Reduce costs

Improve operational excellence

Increase revenue & market share

Increase value of infrastructure investment

Satisfy end-user customers & stakeholders

2003-12-08T12:43:39