Tivoli and Netcool Integration

1. Tivoli and Netcool Integration Tivoli User Group – Montreal March, 2007 All statements of direction or intent are provided for planning purposes only and are subject to change or withdrawal without notice

2. IT CRM & Business Management Service Delivery& Support ServiceDeployment InformationManagement BusinessResilience IT Process Management Products IT Service Management Platform Change and ConfigurationManagement Database IT Operational Management Products Server, Device and Network Management StorageManagement SecurityManagement Business ApplicationManagement Netcool Can Add Significant ITSM Value IBM IT Service Management Best Practices Customers can benefit by adding Netcool’s leading management capabilities: • Ultra-scalable event correlation for consolidated operations management • Service problem avoidance through trending and real-time BSM • Enhanced monitoring and broad integration capabilities • Real-time security information management to enable NOC/SOC convergence • End-to-end service management for emerging converged IP services • World class network management, including deep discovery and mapping to CCMDB • Extends Tivoli IT Process Managers with real-time, end to end network information Tivoli Software

3. Utilizing Netcool to Consolidate End-to-End Operations as a Cornerstone to Service Management IBM and Micromuse together help clients efficiently and effectively manage IT Services in support of business goals. IBM Tivoli Netcool Software can accelerate our customers’ achievement of IT Service Management objectives • Operational Consolidation – scalable foundation with broad integration which can leverage customers existing assets to help improve operational efficiency • Real-time Service Visibility – deep, automated visualization of business services to avoid service downtime and pinpoint service-affecting issues • IP Convergence – the advanced network management to rapidly and confidently deploy and manage next generation IP-based services (e.g., VoIP) • Integrated Security Incident Response – an integrated point for managing security operations in concert with IT operations Tivoli Software

4. Tivoli Event & BSM Solutions Tivoli Monitoring Solutions Netcool Solutions Converged Solutions Enhanced Solution Stack from Combined AssetsNo customer is left behind IBM Tivoli Products CMDB / Process Discovery TADDM CCMDB Dashboards Policy Warehouse TEPfor operations ProcessManagers TBSMBusiness Systems Management TSLAService Level Management Business Systems / SLA TEC Event Dashboard Advanced Correlation Event Structures ITMServers, DBs, Apps, Agentless ITCAMRTT, WAS, J2EE, SOA OMEGAMON zSeries, Collectors and Integration Collectors Tivoli Risk Manager NetViewD TCP/IP NetViewZSysplex TCP/IP Tivoli Software

5. Tivoli Event & BSM Solutions Tivoli Monitoring Solutions Netcool Solutions Converged Solutions Enhanced Solution Stack from Combined AssetsNo customer is left behind IBM Tivoli Products CMDB / Process Discovery TADDM CCMDB Combined Value • Broader Network Layer 1-3 discovery • Portfolio Leverages Integration into TADDM • Enhanced CCMDB with Broad Layer 1-7 Discovery and Dependency Mapping Dashboards Policy Warehouse TEPfor operations ProcessManagers TBSMBusiness Systems Management TSLAService Level Management Business Systems / SLA TEC Event Dashboard Advanced Correlation Event Structures ITMServers, DBs, Apps, Agentless ITCAMRTT, WS, J2EE, SOA OMEGAMONzSeries, Collectors and Integration Collectors Tivoli Risk Manager NetViewD TCP/IP NetViewZSysplex TCP/IP Tivoli Software

6. Tivoli Event & BSM Solutions Tivoli Monitoring Solutions Netcool Solutions Converged Solutions Enhanced Solution Stack from Combined AssetsNo customer is left behind IBM Tivoli Products CMDB / Process Discovery TADDM CCMDB TEP/Webtop Enhanced Dashboards Policy Warehouse ProcessManagers Combined Value • Integration to TEP as Single Interface for Visualization of IT Operations in a Service Context • Enhanced Lightweight Web interface • End to End Data Consolidation, Display and Retention • Integrated Workflow Based Process Management Products TBSMBusiness Systems Management TSLAService Level Management Business Systems / SLA TEC Event Dashboard Advanced Correlation Event Structures ITMServers, DBs, Apps, Agentless ITCAMRTT, WS, J2EE, SOA OMEGAMONzSeries, Collectors and Integration Collectors Tivoli Risk Manager NetViewD TCP/IP NetViewZSysplex TCP/IP Tivoli Software

7. Tivoli Event & BSM Solutions Tivoli Monitoring Solutions Netcool Solutions Converged Solutions Enhanced Solution Stack from Combined AssetsNo customer is left behind IBM Tivoli Products CMDB / Process Discovery TADDM CCMDB TEP/Webtop Enhanced Dashboards Policy Warehouse ProcessManagers Converged BSM Enhanced TSLA Business Systems / SLA Combined Value • Scalable, Next Generation BSM architecture • Real-Time and Historical SLA Tracking and Reporting • Enhanced Visualization and KPI’s for Both Business and Operations TEC Event Dashboard Advanced Correlation Event Structures ITMServers, DBs, Apps, Agentless ITCAMRTT, WS, J2EE, SOA OMEGAMON zSeries, Collectors and Integration Collectors Tivoli Risk Manager NetViewD TCP/IP NetViewZSysplex TCP/IP Tivoli Software

8. Tivoli Event & BSM Solutions Tivoli Monitoring Solutions Netcool Solutions Converged Solutions Enhanced Solution Stack from Combined AssetsNo customer is left behind IBM Tivoli Products CMDB / Process Discovery TADDM CCMDB TEP/Webtop Enhanced Dashboards Policy Warehouse ProcessManagers Converged BSM Enhanced TSLA Business Systems / SLA Converged Event Manager Impact Event Structures Combined Value • Ultra-Scalable, Next Generation Event Architecture • Simple & Robust Correlation • Event Enrichment with Broad Integration Capabilities ITMServers, DBs, Apps, Agentless ITCAMRTT, WS, J2EE, SOA OMEGAMONzSeries, Collectors and Integration Collectors Tivoli Risk Manager NetViewD TCP/IP NetViewZSysplex TCP/IP Tivoli Software

9. Tivoli Event & BSM Solutions Tivoli Monitoring Solutions Netcool Solutions Converged Solutions Enhanced Solution Stack from Combined AssetsNo customer is left behind Combined Value • Layer 1-3 network discovery, monitoring, and correlation • Scalable SIM-based Security Operations Management • Broad End to End Monitoring Coverage with Lightweight Entry Options • Carrier Class Solutions for Telco’s and Service Providers • Adapters for Telco Envir. IBM Tivoli Products CMDB / Process Discovery TADDM CCMDB TEP/Webtop Enhanced Dashboards Policy Warehouse ProcessManagers Converged BSM Enhanced TSLA Business Systems / SLA Converged Event Manager Impact Event Structures Enhanced ITM Enhanced and Entry ITCAM OMEGAMONzSeries, Collectors and Integration Service Provider Proviso UQM IPC Collectors Enhanced Security Management Enhanced TCP/IP Management NetViewZSysplex TCP/IP Telco Adapters Tivoli Software

10. Solutions Available Today - Multiplicative ‘Service Management’ Value from Integrated Suite • Single Interface for Operations Comprehensive Interface for Operational Consolidation and Management in a Service-Context. • Ultra-scalable Event Management Scalable MOM for Managing Complex Service Infrastructures • Real-time Business Service Management Real-time Visibility of Service Status, SLAs and Key Performance Indicators. • Robust Layer 1-7 Discovery Broad Discovery of Configuration Items and Dependencies. • Real-time End-to-end Monitoring Holistic Service Monitoring from Composite Applications, Domain Resources and Network Services. • Multi-domain Configuration Broad Provisioning Across Silos, Tools and Technologies The choice for Comprehensive Service Management: IBM Tivoli Software

11. ITM Servers, DBs, Appls, Agentless… ITCAM RTT, WS,J2EE, SOA SSMs, ASMs, ISMs Servers, DBs, Appls, Agents Jim Converged Event Solution Supports TEC Rulesets and other Correlation High ScaleHigh PerformanceHigh Availability Monitoring and Event Structures • Integrate Netcool Displays in Tivoli Enterprise Portal • Anywhere to Anywhere Event Consolidation • Support co-existence and integration of Event System • Broaden Monitoring by Combining Tivoli and Netcool Assets within IBM Tivoli Monitoring • Converged Event Solution: • Leverage OMNIbus scale, performance and High Availability • Preserve TEC’s Rich Correlation • Broad integration to improve operational efficiency • Support co-existence and upgrade scenarios • Unify Monitoring Solutions • Broad, Lightweight Lowest TCO • ISMs, ASMs for Web to ITCAM family TEC Event Dashboard Complex Correlation Lots of customization OMNIbus Event Dashboard Rapid In Memory Event store Lots of Customization ISMs, ASMs, SSMS Servers, DBs, Appls, Agents ISMs, ASMs* Tivoli Software

12. TCP/IP Network Management Discovery, Topology, and Root Cause Correlation in TCP/IP and Telco Networks.Tivoli and Netcool Solutions Integrate More Slowly. • Precision IP: • Continue Development as Premier Enterprise and Service Provider Network Management Solution • NetView Distributed: • Continue Development as Lightweight TCP/IP Layer 3 Monitoring Solution • Switch Analyzer: • Focus on Co-existence and Upgrade to Precision IP Discovery Engine (disco) • Precision Provides: • SNMP v1, v2, v3 • Layer 1 to Layer 7 management • Comprehensive out of the box protocol support • Field Extensible Discovery and Topology for unlimited granularity IP Routing Cisco Switch Vendor specific CIDR IP Route MPLS LSP / VRF Helpers for:SNMP,DNS,telnet, ARP Finders: discoverIP devices usingmultiple techniques Discovery Agents Tivoli Software

13. Options for Existing NetView Customers • Upgrade to Precision IP now • Integrate with NetView • Coexistence Option to Start with Precision Layer 2, and Expand Gradually • Upgrade to NetView V7.1.5 < 6 months • Improved Capabilities (SNMP v2, duplicate IP handling, etc.) • Same Familiar Product • Consider Future Entry Version of Precision • Combines NetView and Precision Features • Ease of Installation and Configuration • Functionality for Small to Medium Enterprises Tivoli Software

14. Integrated Value NeuSecure Event Integration TAM, TIM, FTIM Integration Converged Solution Seamless Integration between Network, Data Center and Security Operational Management Risk Manager Enhancements added to NeuSecure Integrated Portal Architecture allowing Advanced Security Correlation to drive Remediation through Process Management and CMDB Deliver Integrated Compliance Solutions for Privacy and Regulatory Requirements Security Management tightly integrated into ITSM NeuSecure: Security Event Information Management Tivoli Software

15. Access and Identity ManagementCA eTrust Access CA eTrust Secure Proxy Server CA eTrust Siteminder (Netegrity) RSA SecureID RADIUS Oracle Identity Management (Oblix) Sun Java System Directory Server Microsoft Active Directory Cisco ACS Wireless Security • AirMagnet • AirDefense • Management Systems • neuSECURE escalates to: • Micromuse Netcool • IBM/Tivoli • Remedy ARS • HP OpenView • CA Unicenter • Management Systems • Source of events into neuSECURE: • Check Point Provider-1 • ISS RealSecure SiteProtector • Juniper Global Pro (Netscreen) • Juniper NSM (Netscreen) • Tripwire Manager • Intrusion, Inc. SecureNet Manager • McAfee ePO • Nortel Defense Center • Sourcefire Defense Center • Q1 QRadar Mgmt Server • Symantec ESM • VPN • Juniper SSL VPN, Juniper VPN • Nortel VPN Router (Contivity) • Check Point • Cisco IOS VPN • Nortel VPN Gateway Breadth of Netcool/NeuSecure Supported Devices • Firewalls • Check Point Firewall-1 • Cisco PIX • CyberGuard • Fortinet FortiGate • GNATBox • Juniper (Netscreen) • Linux IP Tables • Lucent Brick • Microsoft ISA Server • Nortel Switched Firewall • Stonesoft's StoneGate • Secure Computing's Sidewinder • Symantec's Enterprise Firewall • SonicWALL • Sun SunScreen • Vulnerability Assessment • Nessus • Vigilante • ISS Internet Scanner • QualysGuard • Foundstone • eEye Retina • SPI Dynamics WebInspect • nCircle IP360 • Harris STAT • Routers/Switches • Cisco Routers • Cisco Catalyst Switches • Foundry Switches • F5 Big IP, 3-DNS • Juniper JunOS • TACACS / TACACS+ Nortel Ethernet Routing Switch 5500, 8300, 8600, 400 seriesNortel Routing Switch 3510 • Discovery Tools • Lumeta IPSonar • NMAP • Web Servers • Apache • Microsoft IIS • IBM WebSphere • Operating Systems Logs, Logging Platforms • Solaris (Sun) • AIX (IBM) • RedHat Linux • SuSE Linux • HP/UX • Microsoft Windows Event Log • (W2K3 DHCP, W2K DHCP, IIS) • Microsoft SNMP Trap Sender • Nokia IPSO • Novell NetWare • OpenBSD • Tru64 • Tripplight UPS • Monitorware SYSLOG • KiwiSyslog • Tivoli Agent SYSLOG Messages • Antivirus • CipherTrust IronMail • McAfee Virus Scan • Norton AntiVirus (Symantec) • McAfee ePO • Trend Micro InterScan • Application Security • Blue Coat Proxy • Nortel ITM (Intelligent Traffic Mgmt) • Teros APS • Sentryware Hive • Nortel Application Switch (Alteon) Policy Compliance Vericept Network Intrusion Detect/Prevention McAfee Intrushield Sourcefire Network Sensor Sourcefire RNA Juniper IDP ISS RealSecure ISS Proventia ISS BlackICE Sentry Cisco Secure IDS SNORT IDS Enterasys Dragon Nortel Threat Protection System (TPS) Intrusion's SecureNetPro Mirage Networks NFR NID Symantec ManHunt ForeScout ActiveScout QRadar Top Layer Attack Mitigator Labrea TarPit IP Angel Lancope StealthWatch Tipping Point UnityOne NDS Arbor Networks PeakflowX Host-based Intrusion Detect/Prevention Cisco CSA (Okena) NFR HID Sana Snare Symantec Intruder Alert (ITA) Sygate Secure Enterprise Tripwire ISS RealSecure McAfee Entercept PowerTech PowerLock/Interact (iSeries) Tivoli Software

16. Integrated Value: Business Service Management • Tivoli and Netcool solutions both leverage TADDM for Application Discovery and Service Modeling • Event and Monitoring Strategy allows either BSM product to provide fully integrated solution • Ability to Integrate 3rd Party Tools into the Service Model to Help Enhance Business Knowledge Tivoli BSM Tivoli Application Dependency Discover Manager Netcool RAD DLA feeds TBSM Collation OEM feeds RAD Tivoli Software

17. Converged Tivoli Business Service Management Tivoli BSM in TEP Tivoli BSM • Deliver Converged BSM Solution with Enhanced Function • Integrate Tightly with CMDB Solutions • Provide Upgrade and Coexistence for all Customers • Retain all feeds: networking, systems, and zSeries for total end to end solution • Enhanced Real-Time and Historical Service Level Tracking & Reporting • Enhanced Service Impact Analysis to Help Facilitate Event Automation and Trigger Action Based on Business Activity • Tivoli and Netcool solutions both leverage TADDM for Application Discovery • Event and Monitoring Strategy allows either BSM product to provide fully integrated solution • Ability to Integrate 3rd Party Tools into the Service Model to Help Enhance Business Knowledge Tivoli Application Dependency Discover Manager CMDB Netcool RAD Collation DLA feeds TBSM Collation OEM feeds RAD Tivoli Software

18. TEC Console enabling Netcool Agents to now send events natively to TEC via ITM V6 for a Tivoli-centric installation Integration of Netcool into TEP Integrated Micromuse OS agent as another data provider to TEP Events between OMNIbus and TEC can be synchronized for any configuration desired Integrated OMNIbus Active Event List can now accept data directly from ITM V6, OMEGAMON and ITCAM. Net: All data in the TEP can now go to OMNIbus for a Netcool installation “NEW” Performance Views on Netcool Data in TEP. This Netcool heritage active data can be warehoused, used in event policies, fed to BSM or the CMDB from TEP Tivoli Software

19. What the Analysts are Saying… “ This was a very strategic move, not just opportunistic - compared to HP acquiring Peregrine, which was a tactical fill-in-the-gap, this has potential to be huge. You needed to fill the network gap, but went far beyond it. - Rick Sturm, EMA, 21-December IBM Tivoli Redefines Network Management IBM is poised to play a big role in an expanded service provider market. Combining the leading position of Netcool in the service provider market with some of the existing Tivoli products, IBM now has a very strong position to answer the extended needs of network service providers, outsourcers, and hosting providers. - Thomas Mendel, Frank Gillett and JP Garbani, 21-December IT Service Management is the future of IT management. Tivoli and Netcool are well placed to develop the capabilities needed to turn this vision into a reality. - Tony Lock, Chief Analyst Bloor Research, 3-January IBM gets instant credibility and presence in the carrier and service provider market. This is a great acquisition for IBM - George Hamilton, Yankee Group, 21-December ” “ ” “ ” “ ” Tivoli Software

20. Tivoli Software