Alcatel-Lucent OmniVista 3600 Air Manager

The Alcatel-Lucent OmniVista™ 3600 Air Manager is a wireless LAN-management software suite that provides

centralized visibility and control over today’s wireless networks. The OmniVista 3600 reduces the cost of

operating the wireless infrastructure, improves network performance, improves reliability for wireless end

users and makes the network more secure.

The OmniVista 3600 is a true operations-management product that delivers capabilities ranging from real-time user and device monitoring, through centralized configuration, to compliance management. This management system is designed for the entire IT staff, providing each team member with customized monitoring views and the detailed information needed for each job. Most importantly, it provides complete visibility and transparency, so IT can see exactly where users are and how the network is performing at all times.

Working in conjunction with the Alcatel Lucent OmniAccess™ Wireless LAN (WLAN) Switch RFProtect™ spec-trum analysis and wireless intrusion-protection software, the OmniVista 3600 Air Manager Rogue AP Detection Module detects rogue APs and wireless-intrusion events and correlates this data with wired-network data to highlight the most relevant threats, greatly reducing false positives and vastly improving network security.

Features

• User,sessionanddevicemonitoring,including bandwidth usage, radio frequency (RF) signal strength, Quality of Service (QoS) data and roaming history

• Storageofnearlytwoyearsofhistorical data, user-roaming patterns and detailed capacity reports

• VisualRFandtheofflineVisualRFPlan tool allow quick planning of RF and wired coverage for new sites

• Real-timelocationinformation

• Managementofmultiplevendors’wireless solutions

• Complianceauditsandconfigurationpolicy enforcement

• Rogueaccesspoint(AP)detectionand classification

• Automaticdistribution,schedulingand verification of firmware updates

Alcatel-Lucent OmniVista 3600 Air Manager | Data Sheet2

Benefits

• Offerslevel-oneandlevel-twohelpdesk with all relevant user information for troubleshooting and repairing WLAN problems quickly

• Enhancessecuritythroughavailabilityof forensic information pertaining to user activity over the wireless network

• Accuratelyassessesperformanceandnetwork capacity over time; proactive network-upgrade planning when increasing capacity

• Improvesnetworkplanning and provisioning

• CorrelatesRFheatmap,interferencemap and user location for rapid RF troubleshooting

• Providesflexibledeploymentstrategywith the ability to gradually migrate legacy equipment while using OmniVista 3600 Air Manager as the common centralized management platform

• Preventsmanysecurityincidentsarising from improper wireless-equipment configuration

• Detectsoneofthemostdangerousand common threats from wireless LANs

• Simplifiesfirmwaredistributiontaskfor large organizations

The Alcatel-Lucent OmniVista 3600 Air Manager software suite includes multiple platforms and modules:

• OmniVista3600AirManagerCorePlatform– This core OmniVista 3600 Air Manager application provides efficient centralized management of the wireless infrastructure.

• OmniVista3600AirManagerVisualRFModule– This optional software module is an add-on to the OmniVista 3600AirManagerCorePlatform.VisualRF uses sophisticated RF finger-printing algorithms to accurately display RF coverage patterns and calculate the location of wireless devices.

• OmniVista3600AirManagerRogueAPDetectionModule– This optional software module is an add-on to the OmniVista3600AirManagerCorePlatform. It uses a unique combination of discovery techniques across both wireless and wired network infra-structure to find rogue APs regardless of location.

• OmniVista3600AirManagerMasterConsole– This application runs on a separate server and provides IT with one console for managing and monitor ing the entire wireless infrastructure when multiple OmniVista 3600 Air Manager platforms are deployed.

OmniVista 3600 Air Manager Core Platform

The OmniVista 3600 Air Manager CorePlatformisfundamentaltotheOmniVista 3600 Air Manager software suite, providing efficient centralized management of the wireless infra-structure. The OmniVista 3600 Air ManagerCorePlatforminstallsonstandardPCserverhardwareoron an optional hardware appliance in theNetworkOperationsCenter(NOC).The OmniVista 3600 Air Manager software communicates with, and controls, the wireless infrastructure by standard protocols, such as Simple Network Management Protocol (SNMP) and HTTP, across a LAN or WAN. Multiple

IT staff members can access the soft-ware’seasy-to-use,web-basedinterfacesimultaneously; each using a unique login and administrative privileges tailored to their specific job responsi-bilities (see Figure 1).

figure 1. OmniVista 3600 air manager core Platform

Key features of the OmniVista 3600 Air ManagerCorePlatforminclude:

• Real-timemonitoringofeverywirelessuser and device connected to the network, with rapid drill-down from network-wide to device-level monitoring views

• Centralizeddiscoveryandconfigura-tion management of WLAN switches and wireless APs to ensure that network policies are applied uniformly across the entire network

• Archiveddeviceconfigurationsforintelligent management, auditing and version control

• Efficientremote-softwaredistributionto eliminate time-consuming and error-prone manual software updates

• Automatedcomplianceauditsthatverify the actual configuration of the APs and WLAN switches against network policies and automatically repair misconfigured devices

Alcatel-Lucent OmniVista 3600 Air Manager | Data Sheet 3

• Multiarchitecturesupportforautono-mous (thick), lightweight (thin) and mesh APs, as well as point-to-point and WiMAX devices

• Intelligentlifecyclemanagementthroughthesoftwaresuite’sunparal-leled ability to support both legacy and the latest infrastructure simultaneously

• Multivendorsupportforwirelessinfrastructure from Alcatel-Lucent, Aruba,Avaya,Cisco,Enterasys,Foundry, Meru, Motorola/Symbol, ProCurve,Proxim,Trapeze,Troposand others

• Historical-trendreportingwithup to two years of data. All reports can be exported and customized, and can be distributed automatically by e-mail

• Alertsanddiagnosticsnotifyadminis-trators when potential problems are detected; can be sent by e-mail or SNMP traps to another fault- management system

OmniVista 3600 Air Manager VisualRF Module

To understand what is happening on the wireless network, a network administrator needs to know where the users and devices are located, and to actively monitor the RF environment in those areas. The OmniVista 3600 Air Manager VisualRF Module puts this informationattheadministrator’sfingertips, displaying fully integrated maps and location information. This module uses sophisticated RF finger-printing algorithms to accurately display coverage patterns and calculate the location of every wireless device in range. Best of all, the OmniVista 3600 Air Manager VisualRF does not require dedicated RF sensors or adding a costly location appliance (see Figure 2).

figure 2. OmniVista 3600 air manager Visual rf module

Key features of the OmniVista 3600 Air Manager VisualRF Module include:

• Accuratelocationcalculationforeach wireless user and device, using RF data from existing APs and WLAN switches. Location accuracy increases with higher density, providing more data points to triangulate the location of each device

• IntegratedQuickViewmapspresentlocation information wherever needed, allowing quick zooms from a building view to an individual user’slocation

• GoogleEarthintegrationfordepiction of outdoor coverage and device location

• RFheatmapsandchannelmapsgeneration on a near real-time basis

• Directcomputer-aideddesign(CAD)andbulkfloorplanimport,savingsignificant planning hours for organizations with large networks and hundreds of locations

• Visualdisplayofalertsanderrorconditions customizable on a per-user basis, that is, an AP icon will display in red when a critical alert is active or when usage conditions exceed pre-defined thresholds

• FlexibleXMLlocationapplicationprogramming interface (API), integrating with other location-based services

• Radio-frequencyidentification(RFID) tag tracking, enhancing asset management

• Flash-basedinterface,improvingresponsiveness and support across leading browsers

OmniVista 3600 Air Manager Rogue AP Detection Module

UnauthorizedrogueAPsareoneofthe most widespread and serious wireless-security threats for enter-prises. With the OmniVista 3600 Air Manager Rogue AP Detection Module, existing APs are used as sensors to listen for unknown APs in range. Unfortunately,wirelesstechniquesalone often cannot detect all rogue APs unless wall-to-wall coverage is provided in every facility worldwide. The OmniVista 3600 Air Manager Rogue AP Detection Module uses a unique combination of discovery techniques across both the wireless and wired network infrastructure to find rogue APs no matter where they are located (see Figure 3).

figure 3. OmniVista 3600 air manager rogue aP detection module

Alcatel-Lucent OmniVista 3600 Air Manager | Data Sheet4

Key features of the OmniVista 3600 Air Manager Rogue AP Detection Module include:

• Flexible,rules-baseddeterminationofthe potential impact a rogue AP may have on the existing environment

• Correlationofwired-infrastructuredata with WLAN-infrastructure data, reducing false positives

• Central-managementconsoleforOmniAccess WLAN Switch RFProtect software module monitors intrusion-detection and -prevention activities, while identifying and neutralizing rogue APs

• LocationdatafromVisualRF

• Compliancereporting,including thepaymentcardindustry(PCI)data-security standard

• Wirelessroguescanningusingexistingthick or thin APs to detect and locate rogue devices within range

• Wirelineroguediscoverybypollingrouters and switches, with discovered devices being compared to the OmniVista 3600 Air Manager database that contains more than 9000 move, addandchange(MAC)addresses,selecting most probable rogue APs

• Enhancedcorrelationofwiredandwireless scans to provide all known information about a potential rogue in a single message

• Rogue-locationdisplayontheOmniVista 3600 Air Manager VisualRF site map for quick location and removal of unauthorized devices

• Enhancedandexpandedroguescoring system, assigning a score to each potential rogue device based on multiple factors, eliminating false-positive results and focusing on the most significant threats

• Automatedhigh-priorityalertscontaining all known information about the rogue, including SSID, security settings and switch port

• KnownandneighborAPsignored

• Optiontovieworignoreadhocdevices, depending on each particular threat environment

• IDStrapsandalertsfromleadinginfrastructureproviders’logs

OmniVista 3600 Air Manager Master Console

The need for real-time information and centralized control increases as wireless networks expand to encompass tens of thousands of wireless APs and WLAN switches. Large organizations need a management architecture that scales without sacrificing visibility and control, often requiring the distribution of the OmniVista 3600 Air Manager platforms on multiple servers for optimal perfor-mance. These servers may be collocated ordistributedinNOCsaroundtheworld,depending on the network architecture.

While the OmniVista 3600 Air Manager platforms may be distributed, the OmniVista 3600 Air Manager Master ConsoleprovidesITwithoneconsoleformanaging and monitoring the entire wireless infrastructure. The OmniVista 3600AirManagerMasterConsolecommunicates with each server running the OmniVista 3600 Air Manager software, aggregating and presenting critical information to provide a single view across the network (see Figure 4).

figure 4. OmniVista 3600 master console

Key features of the OmniVista 3600 Air ManagerMasterConsoleinclude:

• Centralized,network-widereporting– Any report generated by an individual instance of the OmniVista 3600 Air Manager platform can be generated network-wide from the OmniVista 3600 Air Manager MasterConsole

• Scalable,centralizedconfiguration– With increasingly strict network- security requirements, even the most distributed global enterprises must centralize control over configuration policies and security settings. The OmniVista 3600 Air Manager Master Consoleallowstheadministratortodefine model group policies that are then pushed out system-wide

• Executive-levelreporting–Generateshigh-level executive reports depict-ing the performance of the entire network as well as more detailed reports for groups, locations or individual devices

• Efficientschedulingforlocaltimezones–Configurationchangesandsoftware updates are scheduled in local time, rather than simultane-ously on a system-wide basis

• Many-to-onefailover– Provides cost-effective, high-availability manage-ment when the OmniVista 3600 Air Manager platforms are distributed on multiple servers

• Smartphone-viewableportalthatdelivers access to mobile web-enabled devices, provides metrics on up time, network usage, user load and other read-only monitoring information and can populate intranet applica-tions to generate customized views for executives, customers or the general user population

Alcatel-Lucent OmniVista 3600 Air Manager | Data Sheet 5

Technical specifications

OmniVista 3600 air manager core Platform functionalityDevice discovery

• SNMP,HTTP,CDPandotherdiscovery protocols to locate all Wi-Fi® devices

•Operationinanynetworkenvironment

Policy enforcement and audit

•Group-basedtemplatesforefficient central management of any number of APs

•RoutineauditsforeachWi-Fidevice’s configuration, comparing it to policy

• Sendsalertsformisconfigureddevices, and automatically performs repairs

• Password-basedloginandadministrative user permissions for multiple user classes

•User-logfilestorageforupto two years

Provisioning and configuration

•VisualRFandtheofflineVisualRFPlan tool: Rapid planning of RF and wired coverage for new sites

•AutomaticAP,controllerandswitch configurations

•Configuration-policydefinitionsusing web-based user interface or by importing a known-good configuration from existing devices

•Group-basedpolicydefinitionforefficient central management of thousands of APs

•Hierarchicalpolicydefinition:Quick, easy general-configuration updates across entire network without overwriting settings that may vary by location

•Automaticconfirmationofapproved, up-to-date versions of vendor firmware on all devices

• Efficientremote-softwaredistribution eliminates time-consuming and error-prone manual updates

•MultipleWLANarchitecturesupport, including hybrid networks with intelligent APs, WLAN switches and mesh devices

•AutomaticRF-channelassignmentand management

•AutomaticIP-addressassignmentto newly installed APs

• Intelligentscheduling:ITautomatesconfigurations or firmware updates with minimal disruption; recurring tasks creation

•Archived-deviceconfigurationsupport for auditing and version control

•Detailedauditlogsofchangesmade by all OmniVista 3600 Air Manager operators

Monitoring and diagnostics

•Real-timemonitoringofeverydevice and user on wireless network

•Usersidentifiedandsearched by username

•Graphicalviews:Currentusersand throughputs of individual devices

•Userviews:Signalstrengthandroaming history

• Intelligentdiagnosticsandautomated alerts when problems detected

•Upstream-relationshipmappingbetween APs, controllers and switches, helping identify root cause of down time and performance problems

• Integrationwithnetwork- management systems, such as HP OpenView Network Node Manager, for seamless manage-ment of wired and wireless networks

•Optimizationforminimalnetworkoverhead in SNMP monitoring

•Networkswithhigh-latencyorintermittent connections support

•RadioandRemoteAccessDial-InUserServer(RADIUS)errorlog:Displays frequent cause of connectivity problems

Reporting and visualization

•Reportingpackageincludesuse,inventory, client session, device up time reports and more

•AllreportsexportableusingXHTML

•Automatede-maildistributionlists

• Fullycustomizablereportsbygroup and time, among others

• IntegrationwithVisualRFtoprovidereal-time RF monitoring data

•Datastorageforuptotwoyears

Platform data

•CentralizedinNOC,nolocalagents required

• StandardPChardwareinstallation

• SecureLinuxoperatingsystem(OS)

• Easytousewebinterfacewithrole-based access; viewing rights and administrative privileges tailored to job responsibilities

•Customizableviewsofkeyinformation

•Web-baseduserinterfacebyApache web server

• SecureShell(SSH),Telnet,SNMPv1, SNMPv2, and SNMPv3 for device communication

• StructuredQueryLanguage(SQL)-based databases, RRD data repositories

• StandardXMLAPIforthird-partyapplications

•Unlimitedunique,role-basedadministrative logins

• Scalablearchitecturetomorethan 10,000 wireless APs

• Singlemanagementinterfaceformultiple generations of devices

• Supportforautonomous,controller-managed and mesh APs

• Edge-devicemonitoringusingstandard management informa-tion base (MIB) data

• Integrationwithleadingwirelessauthentication solutions, including Cisco 3030, Cisco ACS, Bluesocket and HP 700 series

•XMLAPIenablescost-effectiveintegration of valuable location data with other applications; any data visible in OmniVista 3600 Air ManageraccessiblebyXMLAPI

Hardware vendor support

•Alcatel-Lucent

•Aruba

•Avaya

•Cisco(AironetandAirespace)

• ColubrisNetworks

• Enterasys

• Foundry

•Meru

•HPProCurve

• JuniperNetworks

• LANCOMSystems

•Nomadix

• Proxim

•Motorola/Symbol

• Trapeze

• Tropos

OmniVista 3600 air manager Visual rf module functionalityLocation data

•Client-devices’(users)locationsdisplay connection to WLAN for rapid location identification and troubleshooting

•Differenticonsusedforeachdevice type, such as laptop, PDA or wireless Voice over IP (VoIP) phone; icons accompanied by username for easy identification

• Iconcolorreflectscurrentbandwidth use for each client device, such as red for high usage

•OmniVista3600AirManagerCore Platform integration for quick clicking and toggling to detailed client view of any device on map, accessing all relevant client information (see Figure 5)

figure 5. OmniVista 3600 Visual rf client location View

Alcatel-Lucent OmniVista 3600 Air Manager | Data Sheet6

RF coverage maps

•Real-time,updatedcoveragemaps: Shows physical location and coverage areas of wireless APs, using RF data gathered from APs

• 2.4GHzand5GHzspectrumsupport

•Recalculationandredisplayofcoverage areas by data rate and office environment for normal, high-density or open environments

•Considerationforantennasettings, receive sensitivity, transmission power and other manufacturer settings

•Color-codedRFchannelsfor easy identification of overlap- ping channels

• Panandzoomfeatureusesscalablevectorgraphics(SVG)tozoomondetailed RF-map subsection

•Directional-antennasettingssupport

•AdobePDFoftheRFmapcreation,providing permanent record of RF environment at any time (see Figure 6)

Rogue view

• IntegrationwithOmniVista3600Air Manager Rogue AP Detection Module to place rogue APs on map for fast location and removal

•RFdatausedfrommultipleAPstotriangulate probable rogue location; accuracy increases as number of discovering devices increases

•Allknownrogue-deviceinformation displays, including name, SSID, BSSID, channel, security settings, operational mode and more

•Anyrogue-deviceinformationbywired network scans

Optimization views

• Simple,easy-to-understandbeforeand after views with results of OmniVista 3600 Air Manager Core Platform automated RF channeloptimizationfeature

• Reviewandapprovalofchangesrequired to achieve optimal RF configuration before implement-ing them

Location tracking and real-time RF visualization

•Quicklocationofusersandwire- less devices for troubleshooting, planning and asset tracking

• Playbacklocationhistoryofindividual users over the past day aids troubleshooting and recovery of lost devices

• Lastknownlocationforeachtracked device stored indefinitely, helping find lost or stolen devices

•Voiceoverlaydisplayscoveragefor voice handsets, including a radio-count heatmap

•Comprehensiveviewof network edge

• Failure-featuresimulationenablesanalysis of what-if scenarios for proactive RF-coverage planning

Site planning and deployment

•Determinationofrightquantityand placement of APs, controllers, Alcatel Lucent OmniSwitches and other edge devices based on RF coverage goals

• Switchincorporationandotherwiring-closet devices into the network design

•Automaticgenerationforbill-of-material reports

Standalone VisualRF Plan Tool

•Windows-basedlaptopsandworkstations

• SameRFplanningandvisualiza-tion algorithms as integrated VisualRF Module

•Offline-plansexportationintointegrated VisualRF Module; also allows plans from the integrated VisualRF Module to be exported into standalone VisualRF tool

OmniVista 3600 air manager rogue aP detection module functionalitySecurity, threat classification and containment

•Wireless-attackaggregation,correlation, alerts and logs, providing a comprehensive infrastructure-security picture

•Rogue-APlocationviewforfasterinvestigation and threat removal

• Preciselocationplanfordeployingdedicated Wi-Fi sensors, such as air monitors, ensuring complete coverage

•Wiredandwirelessscanning-results comparison eliminates duplicates and refines threat assessment

• Potential-threatclassificationbasedoncustomizedrulesthatdefinerogue-device characteristics

• False-positivesreduction,allowingnetwork-security staff to focus on most significant threats

•Customized,operator-defined,rules-based classification determines when to automati-cally contain devices

•Wiredswitch-portsdisablementifattached rogue APs are detected

Wired network scans and AP identification

• SNMP,HTTP,CDPandotherdiscovery protocols help identify all devices on wired network

•Deviceinterrogationwithmanufacturer default and configurable passwords to fingerprint a wireless AP

•MACaddressexaminationofeachnetwork device with comparison to OmniVista 3600 Air Manager Rogue AP Detection Module data-base of more than 9000 known MAC address ranges, identifying devices with MAC addresses commonly used by wireless hardware manufacturers

•OmniVista3600AirManagerRogue AP Detection Module data-base of more than 1700 OS types to identify device OS, helping eliminate false-positive results, that is, a device with an embedded OS is far more likely to be a rogue AP than a device with Windows OS

Wireless network scans

•AuthorizedAPsinstructedtoscanairwaves for other wireless APs

•RF-scan-resultcomparisontolistof known APs, creating rogue list

Rogue scoring and elimination of false positives

•Rogue-detectiondatacorrelationfrom both wireless and wired network scans

• Scoreassignmentforeachnetworkdevice, reflecting likelihood of device being rogue AP

• Filtersestablishlistsofdevicesmost likely to be rogues

Alerts and reports

•Variousalertprioritiesforeachdiscovered AP: Critical, major or warning, depending on rogue score

•Automatede-mailalertscontaining all known rogue-device information, including:

¬ Radio MAC address

¬ LAN MAC address

¬ Discovery method

¬ SSID

¬ Channel

¬ Security settings

¬ Switch port

¬ IP address

•Roguesummaryscreensdisplayreal-time, up-to-date information on all suspected rogues

Visualization

• IntegrationwithOmniVista3600Air Manager VisualRF Module to display likely location of each rogue device on office map

• Locationtriangulationusingsignal-level data collection from APs

• Locationaccuracyincreaseswhenrogue device discovered by more RF scanning agents

• Predefined,customizablereportsaddress common security and compliance information needs, such as rogue-device tracking and PCI) compliance

figure 6. OmniVista 3600 Visual rf coverage map

www.alcatel-lucent.com Alcatel, Lucent, Alcatel-Lucent and the Alcatel-Lucent logo are trademarks of Alcatel-Lucent. All other trademarks are the property of their respective owners. The information presented is subject to change without notice. Alcatel-Lucent assumes no responsibility for inaccuracies contained herein. Copyright © 2011 Alcatel-Lucent. All rights reserved. EMG3105110320 (06)

Ordering information

OmniVista 3600 air manager sOftware-

OmniVista 3600 Air Manager software suite managing devices such as WLAN switches, wireless APs and LAN switches*. Includes OmniVista 3600 Air Manager Core Platform, Visual RF module and Rogue AP Detection Module.

Part number maximum number Of deVices managed by serVer

OV3600-AM25 25

OV3600-AM50 50

OV3600-AM100 100

OV3600-AM200 200

OV3600-AM500 500

OV3600-AMPRO 1000

OV3600-AMENT 2500

*OmniVista 3600 Air Manager does not manage LAN switches; however, the OmniVista 3600 Air Manager Rogue AP Detection Module queries LAN switches to gather information that contributes to the detection, identification and classification of rogue APs.

OmniVista 3600 air manager redundancy licenses

Failover licenses are many-to-one hot standby/failover server software.

Part number mwaximum number Of deVices managed by serVer

OV3600-AM25-FR 25

OV3600-AM50-FR 50

OV3600-AM100-FR 100

OV3600-AM200-FR 200

OV3600-AM500-FR 500

OV3600-AMPRO-FR 1000

OV3600-AMENT-FR 2500

OmniVista 3600 air manager master cOnsOle

Part number descriPtiOn

OV3600-MASTER Single-server software licensed to manage multiple OmniVista 3600 servers from a single console

OmniVista 3600 air manager hardware aPPliances

Part number descriPtiOn

OV3600-HWPRO Hardware appliance for OmniVista 3600 Air Manager Professional Edition and smaller software licenses

OV3600-HWENT Hardware appliance for OmniVista 3600 Air Manager Enterprise Edition and smaller software licenses