elite insurance IT Audit June 2015
Siming Lee 6/2/2015
mysmartgroup.co.uk
introduction... THIS REPORT WILL PROVIDE key observations and illustrate the need for a fresh outlook on the way the IT is being handled day to day. The report will outline the issues that require quick resolution and go into some further detail on longer term changes that are required. The report will also propose recommended improvements that we consider to be achievable tasks for the size of your business and the types of budget available.
2
smart technologies
ELITE INSURANCE IT AUDIT JUNE 2015
existing IT infrastucture... ELITE INSURANCE consists of 80 user environments with 3 branches in UK. They have a datacentre in Manchester with a fully managed service for Exchange and Lync.UK branches all have Juniper firewalls.
GRANTHAM = 25 users and 100Mb leased line LONDON = 30 users and 100Mb leased line WARRINGTON = requested to be removed from report GIBRALTAR = 8 users and 20Mb/2Mb broadband
> GRANTHAM SITE SERVER ROOM:
DESKTOP ENVIRONMENT:
1 x Dell Poweredge R710 (3 yrs old)Running ESXi 5 and the following VMs:
Dell PCs running Windows 7 and 4Gb RAM Office 2013 with 45 PCS on Office 365 licensing
■ Citrix running server 2003
4 x surface pro 3 with dock and 19” screen
■ HR & Payroll
Printers on each desk
■ Backup Domain Controller ■ Web server
SOFTWARE: Microsoft Dynamics CRM
1 x Dell Poweredge 2900 (7 years old). Running as fileserver.
Asigra online backup (backs up fileserver, 1.6Tb > 800Gb compressed)
1 x Juniper firewall
Veeam Backup & Replicate 6.1
1 x 24-port gigabit switch
AVG Business Edition
100mbps leased line
25 x citrix licences
30mbps radio link – antenna and Draytek 2930
Backup server:
Netgear 54mb WAP
2 x HDD (OS + data). 1TB with 500GB free.
APC Smart UPS 3000 – 60% load
Running 2008 server.
APC Smart UPS 750
Stores the following backups:
2 x Iomega StorCentre ix2
- Full image backup (Grantham file server)
Avaya phone system, release 9
ELITE INSURANCE IT AUDIT JUNE 2015
smart technologies
3
existing IT infrastucture... > LONDON SITE 1 x Juniper Firewall 0 x server 3 x citrix users Users use CRM for file storage. Gibraltar Site 1 x Juniper Firewall 1 x server (DC, DNS and DHCP) 8 x citrix users Data backed up via following: - asigra cloud - FTP to Backup Server via FTP, manual process using Filezilla.
4
smart technologies
ELITE INSURANCE IT AUDIT JUNE 2015
issues... Our expertise can provide you with the knowledge and advice to make the right decisions for your IT infrastructure in the Cloud environment.
1.
Grantham data switch has only a few ports free.
2.
Grantham One UPS 3000VA for delivering power to the servers, If UPS has fault then servers will remain offline till UPS fault is fixed.
3.
Grantham ACP Smart UPS 3000 lights for the battery charge is flashing in unison.
4..
Laptops and surface pro 3 hard drives not encrypted.
5.
PCs are capable of dual monitoring but some PCs don’t have dual monitoring. This is not necessarily a problem but having additional monitors to improve staff productivity.
6.
ESX host server not configured for graceful shutdown during power cut.
7.
File server and ESX host server has 1 NIC in use and contain multiple NICs. No NIC failure over for the servers.
8.
Dell servers have DRAC ports for remote KVM but not plugged in
9.
Backups and disaster recovery plan needs improving. Ian was keen to move as much to the cloud as possible.
ELITE INSURANCE IT AUDIT JUNE 2015
smart technologies
5
resolutions and future development... AFTER REVIEWING THE CURRENT BACKUP infrastructure and discussing this with our Technical Director, we recommend the servers be replaced because of their age, space issues and limited scalability for improving the resiliency of your IT infrastructure. We have provided 3 options to consider based on price and ability to recover from a server failure to full disaster recovery.
6
smart technologies
ELITE INSURANCE IT AUDIT JUNE 2015
> OPTION 1
1.
Replace 24-port gigabit switch with 48-port.
2.
Install an additional UPS 3000VA and load balance the servers.
£30K SOLUTION – REPLACE BOTH THE OLD SERVERS WITH TWO NEW SERVERS, CROSS REPLICATED HP VIRTUALISED SOLUTION.
3.
Runtime remaining is not 2 minutes more than the low battery signal warning time. If the UPS calculates the runtime remaining is less than 2 minutes more than the low battery signal time, the battery graph LEDs will flash. Reset the low battery signal time to a lesser value or reduce the load on the UPS or replace the UPS battery if it is older than 4 years.
■ P DL380 server,
■ Dual CPU providing 16 cores
■ 64GB ram
■ Extra HDD cage
■ 2 x 300gb hdd + 10x900GB hdd
■ Second power supply to offer redundancy
■ ilo license
■ HP carepack
■ Rail kit
4.
Enable bitlocker if running Windows 7 Enterprise or Windows 8.1 Pro.
5.
Install dual monitors on PCs to improve staff productivity.
6.
Install management card and install network shutdown agent onto ESX5 server and configure graceful shutdown.
7.
Recommend moving file server to Cloud
8.
Recommend moving file server to Cloud
9.
Recommend moving file server to Cloud.
7-10 DAYS LABOUR FOR INSTALLATION ADVANTAGES – replaces the server hardware with very reliable modern server, offers cross virtualisation platform to allow for growth and major performance increases. Backups carried out to offsite location as at present with Veeam except for fileserver data which will utilise Asigra fully including onsite cache. DISADVANTAGES – does not protect against a site failure instead offers single site redundancy. Slow to restore file data if the main site experiences a total failure.
ELITE INSURANCE IT AUDIT JUNE 2015
smart technologies
7
> OPTION 2
> OPTION 3
£35K SOLUTION WITH MONTHLY £5K HOSTING COST – REPLACE THE ON PREMISE SERVERS WITH A FULL CLOUD SOLUTION. ■ Similar to option 1, but on a cloud infrastructure. All onpremise servers would be migrated to the cloud. The local backup would be located in the datacentre and also replicated to a second location offsite from the datacentre. All users would utilise a new Citrix architecture to access the cloud resources. ADVANTAGES – replaces the old server hardware with a very reliable cloud solution, offers UK datacentre protection and reliability, virtualisation platform to allow for growth, performance increases. Cuts out power usage on site due to no servers. DISADVANTAGES – relies on the internet connection being reliable, monthly recurring costs for the cloud hosting.
8
smart technologies
ELITE INSURANCE IT AUDIT JUNE 2015
£50K SOLUTION WITH MONTHLY £5K HOSTING COST – REPLACE BOTH THE OLD SERVERS WITH A CLOUD SOLUTION AND A NEW SINGLE ON-SITE SERVER FOR REPLICATION FROM THE CLOUD.. ■ Composes a mixture of both solution 1 and 2. ADVANTAGES – offers the maximum flexibility and resiliency. All data is stored in a very reliable cloud infrastructure, data is also replicated to the main site to offer a fully resilient disaster recovery solution in the event of a major datacentre disaster. DISADVANTAGES – the most costly solution, requires the most management and monitoring, requires the most IT skillset to maintain to a high standard.