Sei sulla pagina 1di 27

OPEN DISCUSSION

SPEED TRAP?

DOWN TO BUSINESS

MySQL gets new features,


and questions about bugs

How to put 802.11n to work


for your organization P. 43

Salesforce and Microsoft


rumble in the cloud P. 48

P. 21

Time for a new approach


to content management

P. 24

Internet Evolution
Network policing
in an age of online
freedom P. 32

informationweek.com

A United Business Media Publication

CAN $5.95, US $4.95

Copyright 2008 United Business Media LLC. Important Note: This PDF is provided solely as a reader service. It is not intended for reproduction or public distribution.
For article reprints, e-prints and permissions please contact: PARS International Corp., 102 West 38th Street, Sixth Floor, New York, NY 10018; (212) 221-9595
www.magreprints.com/quickquote.asp

CONTENTS
>>

DEFINING THE BUSINESS VALUE OF TECHNOLOGY

ISSUE 1,215 DEC. 15, 2008

> NEWS FILTER


16

Better Batteries HPs


touting a longer-life battery in the
latest move in the PC power race

COVER STORY

24 Content Everywhere
A rising tide of unstructured
data is forcing businesses
to make a choice: Manage all
this contentor drown in it

16 Connect The Clouds


Salesforce.com and Google are
connecting their Web development platforms, Force.com and
Google App Engine

18 Sun Behind The Cloud


Sun Microsystems is pulling the
plug on its Network.com service,
but will soon offer services from a
new cloud computing division

20 Femtocells Get A Boost


AT&T expects to offer femtocells,
aimed at boosting mobile phone
reception in offices and homes, in
trial markets next year

20 Defending Cyberspace
A key commission on cybersecurity is urging President-elect
Obama to unite initiatives and
expand regulation of cyberspace

21

Ready (Or Not) Sun


Microsystems has issued the 5.1
release of the MySQL database in
production formbut one of the
leading authorities on the open
source system says it isnt ready

22 Excited Over Oxite

Cover photo by Sek Leung

A new Web content management


and blogging platform from
Microsoft has an unexpected
twist: Its free and open source

20
16

Charged up

informationweek.com

Yes, change
needed

22 Faster Web Apps


Googles NaCl project could close
the performance gap between
desktop and Web applications, if
it moves beyond an experiment
Dec. 15, 2008 3

CONTENTS
> SOURCES
8 Feedback
15 Editorial Contacts
47 Advertiser and Editorial Indexes
47 Sales Contacts

> RESEARCH, REPORTS,


ANALYTICS

6 BPO Strategy Most business technology


pros turn to business process outsourcing
because of the cost savings, but a few see it
as a tool for strategic change

> STARTUP CITY


10 Multiple Clouds RightScale got its start
specializing in the management of virtualized
IT resources in Amazon Web Services; now its
broadening its reach to Eucalyptus, Rackspace,
and other clouds

IN DEPTH
32 The New Traffic Cop Web filtering has
become a lot more than just blocking porn sites and
ESPN, as the threats and tools get more sophisticated

CIO VALUES

41

Ride The Efficiency Wave Big changes are


coming to the data centerfind out how to make the
most of these transformational forces

12 Finances On The
Road Delivery of financial
services via a mobile platform and real-time research
are the next big things for
his industry, says Scottrade
CIO Ian Patterson

45 Agile View For companies that arent getting


what they expected out of their terminal services
environment, VMwares View 3 might help

> COLUMNS

> TECH TRACKER


43 Speedy Net Or Speed Trap?

48 Down To Business By Rob Preston

Even in draft form, the 802.11n standard


is a game-changer, but when theres troubleshooting to do, the advanced features can
slow resolution

Top executives from Salesforce.com and Microsoft


have delivered the same message: Its time for
companies to consider moving some of their IT
resources to the cloud

TECHNOLOGY INDEX
Batteries . . . . . . . . . . . . . . . . . . . . . . . . . .16

Development tools . . . . . . . . . . . . . . .22

MySQL

Blogging platforms

802.11n

Native Client

. . . . . . . . . . . . . .22

. . . . . . . . . . . . . . . . . . . . . . . . . .43

Business process outsourcing . . .6

Enterprise content mgmt.

Cell phone networks

Femtocells

. . . . . . . . . . . .20

. . . . . . .24

. . . . . . . . . . . . . . . . . . . . . . .20

. . . . . . . . . . . . . . . . . . . . . . . . . . .21

Software as a service

. . . . . . . . . . .48

. . . . . . . . . . . . . . . . . . . . .22

Storage . . . . . . . . . . . . . . . . . . . . . . . . . . .18

OpenCL . . . . . . . . . . . . . . . . . . . . . . . . . .18

Virtual desktops . . . . . . . . . . . . . . . . . .45

Open source

Web applications

. . . . . . . . . . . .20,

21, 22

. . . . . . . . . . . . . . . .22

Cloud computing . . . .10, 16, 18, 48

Financial trading platforms . . . . . .12

Packet analysis

. . . . . . . . . . . . . . . . . .43

Web content mgmt. platforms . .22

Cybersecurity . . . . . . . . . . . . . . . .20, 32

Green IT . . . . . . . . . . . . . . . . . . . . . . . . . .41

Records management . . . . . . . . . . .24

Web development platforms . . . .16

Database software

Internet

. . . . . . . . . . . . . . . . . . . . . . . . . . .32

Security

. . . . . . . . . . . . . . . . . . . . . . . . . .32

Web filtering

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20

Servers

. . . . . . . . . . . . . . . . . . . . . . . . . . .18

Data centers

. . . . . . . . . . . . . .21

. . . . . . . . . . . . . . . . . . . . .41

Desktop virtualizers

4 Dec. 15, 2008

. . . . . . . . . . . . .45

Linux

MIMO antennas

. . . . . . . . . . . . . . . . .43

Smartphone processors

. . . . . . . .18

WiMax

. . . . . . . . . . . . . . . . . . . . .32

. . . . . . . . . . . . . . . . . . . . . . . . . . . .20

Wireless . . . . . . . . . . . . . . . . . . . . . . . . . .43

informationweek.com

R A

esearch

eports

Whats Your BPO Strategy?


Although most business technology
. professionals turn to business
process outsourcing primarily for cost savings83% of the 372 we
surveyedothers see BPO as a tool for strategic change.

54%

Are concentrating on
core capabilities by
outsourcing noncore
processes

27%

Use BPO to spur


growth in existing
businesses

26%

Engage in BPO in
order to reduce risk

nalytics

Analytics
InformationWeek Analytics
delivers comprehensive,
real-world assessments
of critical technologies at
informationweekanalytics.com

>>

Managing
Virtual Servers
Even as virtualization succeeds
in limiting the number of physical servers in the data center,
rampant VM growth is threatening to turn back our hardwon gains. The answer is
strong management, but
where to find it?

>> 4G Mobile Networks

Research & Reports


How To Play In The Cloud Were still in the early stages of cloud computing, which means the tools and techniques are still evolving. Heres
what you need to know to make sure your company is on the right path.
informationweek.com/1214/report_cloud.htm
How To Arm Your Road Warriors Low-risk, low-cost technologies help IT
ensure that staffers on the road spend more time on work and less on
workarounds. informationweek.com/1214/report_remote.htm
IT Process Reality Check Avoid these traps (including lack of automation
and an insufficient commitment from management) to keep your process
improvement plans on track. informationweek.com/1214/report_process.htm
Get Ready For 802.11n As more vendors release products based on the
upcoming 802.11n spec, with its increased speed, coverage, and reliability,
wireless is becoming a viable platform for mission-critical network connectivity. informationweek.com/alert/802.11n.htm
All In At HP Hewlett-Packard CIO Randy Mott preaches a capital-intensive approach to transforming IT operations. informationweek.com/1213/report_hp.htm
6 Dec. 15, 2008

Mobile broadband will be critical for companies to connect


employees and reach customers. Heres what you need
to know about next-generation
wireless technology.

>>

Insecurity Of Green
Computing As more organizations establish green computing initiatives and governments enact legislation, the
topic grabs more attention in
the collective consciousness
of CEOs everywhere. But
before you jump into green
tech, there are security risks
to consider.

>> IT Salary Survey Salaries


for business technology professionals are falling. Heres
what you need to know in
order to make good hiring
decisions and personal career choices.

informationweek.com

Jupiterimages

To find out more about BPO, download the full Analytics Report,
free for a limited time: bpo.informationweek.com

FEEDBACK
Now that bailout is the new black
in tony economic circles, is there
any limit to the governments role
in propping up companies and
markets? Rob Preston
informationweek.com/1213/preston.htm
I think the United States uses an economic model other than capitalist or interventionist. If one were to coin a de-

as long as they stay within those rules.


Those rules should promote the nations
general welfare and should take into account that while competition is far better
than regulation, in the absence of true
competition, youd better have regulation. Regulation within the economy
should be temporary, thoughthe true
goal being to restore rather than to replace a competitive environment.
WALLY GARNEAU, EDI Coordinator

I dont see how bailing out bankers is


OK, but building infrastructure is dirty
socialism. Infrastructure will be here for
years to come. The bankers and CEOs
of companies getting bailed outwell, I
think we know how responsibly theyll
spend the money. RELAWSON
If government would get out of the way,
businesses would invent the new technology we need to heat and light our
homes and power our vehicles.
Give capitalism and the free market a
chance. Youll see it works. GUEST

scriptive word, it would probably be


corruptionalist, in which government
uses tax policies and taxpayer dollars
(subsidies, grants, etc.) to create competitive advantages for those that dole
out the largest campaign contributions.
Weve created a system where instead
of having to bribe each individual in
Congress, all you have to do is bribe
the two parties and then they use soft
money to keep the rank-and-file in line.
Its this corruption of the capitalist
model more than the model itself that
has caused the economic turmoil we
now find ourselves embroiled in.
History has shown that the best system is one in which government defines
the rules within which business operates and then leaves businesses alone
8 Dec. 15, 2008

Government can stimulate growth in


startups at new technology incubator
centers by providing grants and loans
that go directly to support startups solution-targeted R&D and market-expansion costs. Let taxpayer dollars build on
entrepreneurial initiatives in competitive
marketplaces. DAVE DITMARS

HP Goes All In With IT


Transformation
Hewlett-Packard CIO Randy Mott
lays out the results of the companys three-year effort to transform
the way it builds, delivers, and
manages the technology that runs
HP. Chris Murphy
informationweek.com/1213/hp.htm
I feel sorry for the HP employee who believes this facelift is working. I wonder
how his career path has changed, the

percentage of pay increases, etc. Id like


to see some hard numbers on this.
He has just entered the Twilight Zone
known as the IT As A Revenue Unit
shell game. Management will always
game the numbers to fit whatever bottom-line goal theyre looking to achieve
and report to the shareholders.
At least HP realized innovation and
development must come from the inside
staff and not be outsourced. JOEPROIT

Amazon Uses The Cloud


For Medical Research
Cloud computing can provide new
possibilities for powerful collaboration and innovation in medical
research and health care, but there
are some dark clouds hanging in the
way. Marianne Kolbasuk McGee
informationweek.com/1213/cloud.htm
The clouds described arent collaborativethe designers and researchers
certainly havent collaborated with
health privacy advocates. The Coalition
for Patient Privacy represents 13 million
Americans who insist on control over
their personal health information in electronic systems. Americans dont support research without informed consent.
Clouds use privacy-destructive blanket advance consents that are illegal
and unethical. No one can meaningfully
consent to allow future researchers to
use their sensitive health data for unknown future studies.
In addition, the media abounds with
stories of hacked electronic health systems. Are clouds any different? How
would we be able to tell theyre more
secure or private than other systems?
Without a trusted consumer-led certification organization to ensure the
public that personal health data is
secure and that they control who sees
it, clouds will never be trusted.
DEBORAH C. PEEL, M.D., Founder and
Chair, Patient Privacy Rights

informationweek.com

Jupiterimages

Googles Schmidt: An
Economic Solution Is
Within Our Grasp

STARTUP CITY
As cloud computing moves from early adopters to the mainstream, its becoming clear that
IT pros need full-featured management tools to get it right. RightScales platform can be
used to deploy and manage virtual servers in Amazons EC2 and other cloud services.
Founded in 2006, RightScale just closed $13 million in second-round funding. John Foley

RIGHTSCALE
HEADQUARTERS Santa Barbara, Calif.
PRODUCT RightScale Platform, a management system and dashboard
for cloud computing services
PRINCIPALS Michael Crandell, co-founder, CEO; Thorsten von Eicken,
co-founder, CTO; Rafael Saavedra, co-founder, VP of engineering
RightScale
is Crandells
third startup

INVESTORS Benchmark Capital, Index Ventures


EARLY CUSTOMERS Animoto, Dada Entertainment, MindTouch

MULTIPLE CLOUDS

THE PLATFORM

RightScale got its start specializing in the management of virtualized IT


resources in Amazon Web Services, giving customers more fine-grained
control than they could get from Amazon. Amazon plans to expand its own
cloud management capabilities in 2009. Meantime, RightScale is broadening its reach to Eucalyptus, FlexiScale, GoGrid, and Rackspace clouds.

RightScales dashboard interface


lets developers and IT administrators
launch servers using templates (for
Apache, MySQL, Rails, or Mephisto
servers, for example), using scripting
to do so, then monitor and manage
those resources. When used with
Amazons Elastic Compute Cloud,
Simple Storage Service, or Simple
Queue Service, server instances
can be configured with Amazons
optional availability zones and elastic
IP addresses. Other capabilities include multiserver deployments, autoscaling, and batch processing.

OUR TAKE

BACKGROUND

As one of the first vendors to provide a cloud management platform,


RightScale has more experience
than most in this market. Its platform has been used to launch
nearly 250,000 virtual servers. As
Amazon beefs up its own functions,
users will have to decide whether to
use Amazons improved tools for
day-to-day management or those
from a specialist like RightScale.
For IT pros that want the option of
managing resources across clouds
from various service providers,
RightScale should be evaluated.

Von Eicken and Saavedra worked


together at ExpertCity, which developed the GoToMyPC service and
was acquired by Citrix. Von Eicken
was a colleague of Amazon CTO
Werner Vogels at Cornell University.

>

TIMELINE
RightScale is
founded

2007

Partners with
FlexiScale, GoGrid

2008
Receives $4.5
million in funding

$13 million in
new funding

READ INFORMATIONWEEKS STARTUP CITY BLOG AT: informationweek.com/startupcity

10 Dec. 15, 2008

informationweek.com

CIO VALUES
On The Job
Size of IT team: More
than 300

IAN PATTERSON

Career Track

CIO
Scottrade

How long at current


company? Three years

Three top initiatives:

Career accomplishment
Im most proud of: In
2006, Scottrade built a
state-of-the-art data center. I was so proud of my
team for the amount and
quality of work we accomplished in a short period of
time. That project drove
home the value of coming
together and focusing on
the end goal.

>> CRM: Scottrade is


known for customer satisfaction, and CRM is always a focus. This year,
were using customer
feedback from all of our
customer service channels
to establish a single voice
of the customer.

>> Banking: Were implementing core banking systems to enhance our product offerings.

>> Infrastructure expansion: Managing the growth


of our business by building
out the second half of our
data center in St. Louis
and adding additional capacity. Were also opening
a new data center in the
Phoenix area.
How I measure IT
effectiveness: 99.9% of
our business is conducted
on our Web site, so customer satisfaction is our
most important metric.
Also, employee buy-in and
acceptance of new products is critical.
Key tech partners: Cisco,
Dell, IBM, Oracle, Microsoft

>

Vision
The next big thing for my business will be ...
Full delivery of all financial services products via a
mobile platformbeyond account transfers and
streaming quotes. Research will be available in a
fast, real-time capability.
Advice for future CIOs: Learn the business, not
just the technology. An IT professionals key differentiator is understanding the business and converting business needs into technical solutions. If you
dont understand the business, you often try to fit a
round peg into a square hole.

Personal
Colleges/degrees:
University of Arizona,
BS in business administration with a focus on

Most important career


influencer: Beatty
DAlessandro, CFO at
Graybar. Beatty taught me
that listening is as important as speaking. He also
showed me the importance and value of keeping a cool head under
pressure.
Decision I wish I could
do over: Taking a job with
a dot-com startup in the
mid-1990s. I underestimated what it was going
to take to keep that type of
company going.

management information
systems

Best book read recently:


Stephen Kings Duma Key

Favorite leisure activity:


I enjoy anything that I can
do with my kids.

If I werent CIO, Id be ...


the chief operating officer
of a high-tech company.

SEE WHAT OTHER TOP TECH EXECS HAVE TO SAY AT: informationweek.com/topexecs

12 Dec. 15, 2008

informationweek.com

P R I N T

O N L I N E

N E W S L E T T E R S

Bob Evans Senior VP and Global CIO Director bevans@techweb.com 516-562-5189


John Siefert VP and Publisher jsiefert@techweb.com 949-223-3642
Rob Preston VP and Editor In Chief rpreston@techweb.com 516-562-5692

E V E N T S

INFORMATIONWEEK.COM
Mitch Wagner
Executive Editor, Community
mwagner@techweb.com 213-514-5597

John Foley Editor jpfoley@techweb.com 516-562-7189


Chris Murphy Editor cjmurphy@techweb.com 414-906-5331
Art Wittmann Editor awittmann@techweb.com 408-416-3227

Michael Singer
West Coast News Editor
msinger@techweb.com 415-947-6346

Tom Smith VP, Web Analytics tasmith@techweb.com 716-633-0822


Alexander Wolfe Editor In Chief, InformationWeek.com
awolfe@techweb.com 516-562-7821

Cora Nucci
Managing Editor, Features and Reviews
cnucci@techweb.com 508-416-1130

Stacey Peterson Executive Editor, Quality speterso@techweb.com 516-562-5933


Lorna Garey Executive Editor, Analytics lgarey@techweb.com 978-694-1681
Stephanie Stahl Executive Editor sstahl@techweb.com 703-266-6030

Roma Nowak
Director, Online Operations and Production
rnowak@techweb.com 516-562-5274

David Berlind Editor At Large dberlind@techweb.com 978-462-5315

REPORTERS
Charles Babcock
Editor At Large
Open source, middleware, development
tools, databases, virtualization
cbabcock@techweb.com 415-947-6133
Thomas Claburn
Editor At Large
Security, search, Web applications
tclaburn@techweb.com 415-947-6820
Paul McDougall
Editor At Large
Software, IT services, outsourcing
paulmcd@techweb.com 212-600-3187
Mary Hayes Weier
Editor At Large
Enterprise software, business intelligence,
software as a service, RFID
mhayes@techweb.com 734-761-9396
Marianne Kolbasuk McGee
Senior Writer
IT management and careers
mmcgee@techweb.com 508-697-0083
J. Nicholas Hoover
Senior Editor
Desktop software,
Enterprise 2.0 collaboration
nhoover@techweb.com 516-562-5032

Tom LaSusa
Managing Editor, Newsletters
tlasusa@techweb.com

Antone Gonsalves
News Writer
Processors, PCs, servers
antoneg@pacbell.net

Jeanette Hafke
Senior Web Producer
jhafke@techweb.com

Eric Zeman
Mobile and Wireless
eric@zemanmedia.com

Joy Culbertson
Producer jculbertson@techweb.com

EDITORS

INFORMATIONWEEK VIDEO

Mike Fratto
Managing Editor/Labs
Networking and security
mfratto@techweb.com 315-567-9866

informationweek.com/tv
Fritz Nelson
Executive Producer
fnelson@techweb.com

Mary Stevens
Managing Editor/Tech Tracker
mstevens@techweb.com 978-468-2709

Matt Conner
Associate Producer/Editor
mconner@techweb.com
Heather Stanic
Production Assistant
hstanic@techweb.com

CONTRIBUTORS
Michael Biddick mbiddick@nwc.com
Frank Bulk fbulk@nwc.com
Randy George rgeorge@nwc.com
Joe Hernick jhernick@nwc.com

Serdar Yegulalp
Senior Editor
Linux, open source
syegulalp@techweb.com 516-562-5029
Andrew Conry-Murray
New Products and Business Editor
Information and content management
acmurray@techweb.com, 724-266-1310
K.C. Jones
Associate Editor
E-commerce, Web portals, Internet policy
kirconley@techweb.com 212-600-3189
Marin Perez
Associate Editor
Mobile, wireless, smartphones
mperez@techweb.com 415-947-6734
W. David Gardner
News Writer
Networking, telecom
wdavidg@earthlink.net

ADVISORY BOARD
Dave Bent Senior VP and CIO, United
Stationers Inc.
Robert Carter Executive VP and CIO,
FedEx Corp.
Michael Cuddy VP and CIO, Toromont
Industries
Dan Drawbaugh CIO, University of
Pittsburgh Medical Center
Kent Kushar VP and CIO, E.&J. Gallo Winery
Jason Maynard Software Analyst, Credit
Suisse Worldwide
Randall Mott Sr. Executive VP and CIO,
Hewlett-Packard
Jeffrey Neville CIO, Eastern Mountain Sports
Denis OLeary Former Executive VP,
Chase.com
C.K. Prahalad Professor of Business
Administration, University of Michigan
Mykolas Rambus Head of Technology and
Special Projects, Forbes Media
Douglas Rammel Former VP of IS,
Technology, and Integration Operations, the
Sports Licensed Division of the Adidas Group
M.R. Rangaswami Founder, Sand Hill Group
Ralph J. Szygenda Group VP and CIO,
GM Corp.
Craig Watson CEO, Opti-Pay
Technologies LLC
Laurie Zeitlin Senior CIO, Publix Super
Markets Inc.
READER SERVICES
InformationWeek.com The destination
for breaking IT news, career guidance,
interactive tools, and more

COPY DESK

Electronic Newsletters Subscribe to


InformationWeek Daily and other newsletters
at informationweek.com/newsletters/
subscribe.jhtml

Jim Donahue
Chief Copy Editor jdonahue@techweb.com

Events Get the latest on our live events and


Net events at informationweek.com/events

Elizabeth A. Chodak
Deputy Copy Chief
echodak@techweb.com

TECHWEB
Tony L. Uphoff, CEO
Bob Evans, Sr. VP and Content Director

Roger Smith
Senior Editor
SOA, Web services,
application infrastructure
rsmith@techweb.com 415-947-6376

R E S E A R C H

Kay Blough
Copy Editor kblough@techweb.com

ART/DESIGN
Mary Ellen Forte
Senior Art Director mforte@techweb.com
Sek Leung
Senior Designer
sleung@techweb.com
Katherine Lechler
Associate Art Director
klechler@techweb.com

INFORMATIONWEEK
ANALYTICS

Eric Faurot, Sr. VP, Live Events Group


Joseph Braue, Sr. VP, Light Reading
Communications Group
John Siefert, VP and Publisher,
InformationWeek and TechWeb
Network
Scott Vaughan, VP, Marketing Services
John Ecke, VP, Financial Tech. Group
Greg Kerwin, VP, Global Development
John Dennehy, VP, Finance
Beth Rivera, VP, Human Resources
Jill Thiry, Publisher, Microsoft
Technology Group
Fritz Nelson, Executive Producer,
TechWeb TV
Scott Popowitz, Sr. Group Director,
Audience Development

Analytics Our analysis of IT spending,


careers, business priorities, and more at
informationweekanalytics.com
How To Contact Us
informationweek.com/contactus.jhtml
Editorial Calendar
informationweek.com/edcal
Back Issues 800-444-4881
Reprints For article reprints, e-prints, and
permissions, please contact:
PARS International Corp.
102 West 38th St., Sixth Floor
New York, NY 10018
Phone 212-221-9595 x426
Fax 212-221-9195
E-mail: TechWebReprints@parsintl.com
Media Kits and Advertising Contacts
createyournextcustomer.com/contact-us
Letters To The Editor E-mail
iweekletters@techweb.com. Include name,
title, company, city, and daytime phone
number. We may edit for clarity and space.

UNITED BUSINESS MEDIA LLC


Kevin Prinz, Chief Information Officer

Subscriptions
Web: informationweek.com/magazine
E-mail: customerservice@informationweek.com
Phone: 888-664-3332 (U.S.)
847-763-9588 (Outside U.S.)

Lorna Garey
Executive Editor, Analytics
lgarey@techweb.com 978-694-1681

Pat Nohilly, Sr. VP, Strategic


Development and Business Admin.

Copyright 2008 United Business Media LLC


All rights reserved.

Heather Vallis
Managing Editor, Research
hvallis@techweb.com 508-416-1101

Marie Myers, Sr. VP, Manufacturing

informationweekanalytics.com
Art Wittmann
Managing Director
awittmann@techweb.com 408-416-3227

Anne Marie Miller, Corp. Sr. VP, Sales


Alexandra Raine, Sr. VP, Communications
North America

Please direct all inquiries to reporters in the relevant beat areas.


informationweek.com

Dec. 15, 2008 15

NEWSFILTER

Microsoft Dabbles In Open


Source With Blog Software

NEW WEB CONTENT MANAGEMENT system


Microsoft has been toying with open source develand blogging platform is coming out of Mi- opment for a year or so. It maintains its Codeplex open
crosofts labs with a surprising twist:The soft- source forge, has supported development of thirdware, called Oxite, is free and open source.
party open source components for Office, released an
Oxite was never meant to be a commercial product. It open source installer, and become a sponsor of the
was built to show developers what they can build with Apache Software Foundation.
Microsofts new ASP .Net Model View Controller frameOxite is interesting because Microsoft doesnt have a
work, on which Oxite is built. So that objective made it a heavy-duty blog platform. Oxite has blog features such
perfect candidate for open
as trackbacks, RSS supsource. Still, for a company
port, pingbacks, and comDIG DEEPER
with a history of antagoments. It supports Open
THE OPEN SOURCE ENTERPRISE If youre not venturing
nism toward open source,
Search, so visitors can
past Linux and Apache, youre missing emerging open
source options. Download this InformationWeek Report at:
the release of Oxitecode
search Oxite sites with a
informationweek.com/alert/opensource.htm
that has some interesting
browsers search box.
potentialunder an open
With support for custom
See all our Reports at informationweekreports.com
source license dropped
HTML, hierarchical Web
some jaws. Its all about providing code to the devel- pages, and more, Oxite could even be a broader Web
opers, says Jeff Sandquist, a senior director for Mi- content management system.
crosofts developer and platform evangelism team.
Microsoft says its not aiming Oxite at the WordPress
The ASP .Net MVC framework breaks a Web appli- or Movable Type blog platforms, or other content mancation into its user interface, interactive components, agement systems. But if a community starts developing
and components that maintain the state of the app, it for consumers, we wont stop it, Microsoft develsuch as business logic and app data. The idea is that oper Erik Porter writes on Oxites site.
these applications should be easier to test, since comWith 40 pages of Twitter comments on Oxite and more
ponents are separate in ASP .MVC apps like Oxite. than 11,000 downloads in less than a week, thats not out
That structure also suits open source development.
of the question. J. NICHOLAS HOOVER (nhoover@techweb.com)

Google Plots Faster Web Apps


GOOGLE HAS RELEASED an experimental set of development tools called Native Client, or NaCl, for running x86 native code in browser-based applications. If
successful, the open source project could close the performance gap between desktop and Web applications.
NaCl provides a sandbox for plug-in code that takes full
advantage of local computing powerlike Microsofts ActiveX, but with stronger security. The sandbox holds untrusted x86 code to limit interaction with the host system.
Today you can make a browser-based version of image-editing software like Photoshop by combining JavaScript and server-side processing, but it requires huge
22 Dec. 15, 2008

amounts of image data to be transferred between browser


and server, leading to a painfully slow user experience,
says Google engineer Brad Chen in a blog post. By running native code on the users machine, you could perform the online image processing on the desktop CPU,
resulting in a more responsive application, Chen says.
But Google Native Client has a long way to go to fulfill that promise. Given the slow adoption of other efforts to make the browser competitive with the desktop, like Google Gears, it could be years before NaCl
represents a viable alternative to technologies like
Adobe AIR or Microsoft Silverlight. THOMAS CLABURN

informationweek.com

Content, Content

L
By

Every

ARRY HAWKINS HAS A PROBLEM. Actually, he has several million. The


company he works for, First Energy, generates 2 million e-mails a week. Then
there are untold Word documents, spreadsheets, CAD files, videos, and other
pieces of content flooding the company.
We are great at creating information, but really bad at deleting low-value information, says Hawkins, First Energys director of records and information compliance.The more stuff laying around out there represents a risk to the company.
It may be cold comfort, but Hawkins isnt alone. At companies everywhere,
e-mail, collaboration tools, and Office applications generate a rising tide of unstructured business content. Its not enough to simply soak it up with additional
storage. Compliance and e-discovery requirements demand more discrimination, identifying which information should be retained and
which can safely be destroyed. At the same time, companies must make sure employees and other users can access
the content they need to conduct daily business.
Andrew Conry-Murray Companies have two choices: manage this business
content, or drown in it.
The choice may require some radical rethinking about
enterprise content management systems. Companies have
been using ECM products to handle official business
recordssuch as contracts, invoices, medical records, and
financial statementsfor years. And the policies, processes, and technologies to manage these types of records are
well understood and widely implemented. Thats not the
case for the larger class of unstructured content, which
tends to live outside the bounds of an ECM platform. ECM
vendors are trying to expand the boundaries of
their products to serve as general-purpose information gov-

where
ernance systems. In addition to being the big bucket for
companies unstructured content, theyre trying to provide a management layer that applies policies to content even if it doesnt sit in the vendors repositories.
Compliance and record retention will move from
something that a few regulated companies do with a subset of documents to something that lots of companies will
do with lots of data, says Mark Lewis, president of EMCs
content management and archiving division.
At the same time, collaboration applicationsfirst and
foremost Microsofts SharePointare getting into the
act. SharePoints organic integration with Office makes it
a strong contender as a content management system.
On top of all this, new initiatives aim to ensure that
ECM platforms balance availability, interoperability,
and management in this sea of information. A push for
interoperability standards is one such initiative (see
story, p. 28).
It makes good sense to have a software layer that
lets companies apply retention and records rules to
business content regardless of where that content resides. Of course, implementing an enterprise-wide
system to manage business content requires significant integration and policy decisions, but the alternativesfailing an e-discovery test, missing a regulatory
requirement, and locking out people and applications
that need to use contentare worse.
The best place to start understanding how to ride
the surge of business content is with collaboration
apps. Theyre responsible for generating a significant
portion of business information, which makes them an
increasingly viable option to control it.

SHAREPOINT IN THE MIDDLE


Microsofts SharePoint is turning the ECM market
upside-down. In a survey of 800 midsize and large
companies, Gartner found 57% have implemented Windows SharePoint Services.
Acknowledging its growing role in
content management,
Gartner includes

Oceans of unmanaged content are swamping


companies. It might take a new approach
to enterprise content management and
collaboration to keep your head above water.

ECM Evolution
Latest products focus on collaboration and
third-party content management
Alfrescos Enterprise 3.0 platform adds Share collaboration
capabilities
EMCs Documentum 6.5 gets new components:

>>>>
>>

CenterStage for collaboration


Federated Records Services to manage content in other
repositories
Retention Policy Services to apply retention to content
enterprise-wide

IBMs FileNet P8 Content Manager 4.5 adds:

>>>>

Document management functions for Microsoft Office


Native support for Lotus Quickr

Microsofts SharePoint Server 2007 uses the Fast enterprise


search platform to search inside SharePoint
Open Texts Storage Services for SharePoint offloads content from SQL to external storage for compliance and retention

SharePoint as a leader in its ECM Magic Quadrant,


alongside traditional powers EMC, IBM, and Open Text.
SharePoint is the nexus for reams of unmanaged information. It makes it easier for people to create growing volumes of documents, blogs, and wikis that may
not be official business records and arent getting
picked up by conventional ECM tools. And its integration with Office positions it to manage that content.
SharePoint provides some useful document and
records management features, including version control, approval workflows, and retention and expiration
policies. Its interface lets users declare a file to be an
official record, or administrators can set policies to automatically make content into a record.
Microsoft claims SharePoint has evolved from a collaboration tool to a full ECM platform. And now its investing in Web content management, document management, and records management capabilities, says
Jeff Teper, VP in the Office Business Platform Group.
Conventional ECM vendors regard SharePoint as a
classic frenemy that can be embraced for gain but is
also a blood rival. Business users often end up using
both SharePoint and traditional management products.
Consider pharmaceutical giant Pfizer. The company
Dec. 15, 2008 25

IN DEPTH / ENTERPRISE CONTENT MANAGEMENT


load it into SharePoint to share with other researchers,
has 6,000 SharePoint sites with 63,000 active users.
Biersach says. The company also has SharePoint sites
Thats almost two-thirds of the companys 98,000 emin its DMZ to collaborate with business partners, such
ployees, and its happened in just over a year, says
as biotech firms or other drug manufacturers that liDave Biersach, associate director at Pfizer. His team
cense a Pfizer drug compound.
runs and manages Pfizers SharePoint farms, which sit
There was a culture of
across four global data
at the company, says
silos
centers.
DIG DEEPER
Biersach.
But the penduPfizer also has about
DELETE SAFELY CIOs rethinking the save everything
lum
is
swinging
to open
2,000 employees using
forever approach must make sure strategies can cut through
regulations. Download this free InformationWeek Report at:
collaboration and sharing
EMCs flagship enterprise
informationweek.com/1190/report_data.htm
across business lines, divicontent management platsions, drug therapies. Emform, Documentum, which
See all our Reports at informationweekreports.com
ployees like the openness:
is the system of record for
42% of sites are open to everyone in the company, and
submitting new drug applications to the FDA.
more than 25% have active members from multiple deWhich is more vital? 63,000 users is impressive, but
partments and locations.
drug development is the heart of Pfizers business, and
Biersach takes the content management part of ECM
it entrusts Documentum to help manage the complex
seriously. Pfizer has about 1.5 Tbytes of SharePoint
application process. But Documentum sits inside wellcontent in its SANs, and he expects to have about 6
defined boundaries at Pfizer with a limited set of uses.
Tbytes in two years. But hes determined not to let
SharePoints role doesnt yet have such limits.
SharePoint become an information landfill. If three
While many Pfizer SharePoint sites revolve around
years from now we see 15 Tbytes, that would indicate a
pedestrian activities such as managing meetings, employloss of governance, he says. This isnt a glorified file
ees are getting creative. The desktop management group
share. Pfizer will archive SharePoint content for the
updates a SharePoint wiki with information from help
long term only where appropriate. We use governance
desk tickets. When problems pop up, people can search
and policies to keep a tight rein on things, he says.
the wiki to see if a fix already has been documented.
Yet SharePoint has its limitations as an ECM platPfizer scientists pull data from lab instruments and

Impact Assessment: Enterprise Content Management


Benefit

Risk

IT
organization

As ECM products evolve to manage unstructured info along with content-centric apps, they
provide more tools to help IT address data retention and compliance. Managed content is
easier to find in a discovery exercise.

ECM platforms are expensive, and usually require


integration with business apps and repositories.
IT must work with business units to scope out requirements to choose the right ECM platform,
and not offer everything on day one.

Business
organization

The line between collaboration and content


management is blurring, which makes it easier
for employees to break down information silos
and get access to the content and people that
will help get work done and drive business.

A collaboration strategy must balance the need to


share content with governance requirements. Also,
without attention to retention and disposition, collaboration systems can turn into content landfills
that waste IT resources.

Interoperability in the form of the Content ManBusiness


competitiveness agement Interoperability Services specification
will drive new content-specific applications and
help enterprises wring more value from information stored in third-party repositories.

CMIS still has a ways to go before its an official


standard. While its unlikely the spec will fall apart,
it wouldnt be the first time a well-intentioned proposal didnt make it. Dont count on CMIS-related
applications until theyre real.

Bottom Line
As the volume of unstructured business content continues to grow, companies must get it under control.
While meeting compliance and e-discovery requirements are necessary, the evolving ECM market also has
the potential to help companies get more value out of content, not just manage the risk it represents.

26 Dec. 15, 2008

informationweek.com

IN DEPTH / ENTERPRISE CONTENT MANAGEMENT


form. It lacks the full capabilities of mature ECM products that are used for document-centric applications
such as loan processing. It also must be linked with
third-party apps for standard ECM components such
as ingesting scanned images into a repository.

ECM GETS COLLABORATIVE


Conventional ECM vendors, recognizing the business potential of tying collaboration to content management systems, are investing in their own collaboration platforms.
EMCs July upgrade to Documentum 6.5 includes
CenterStage Essentials, which lets people create workspaces where they can invite others, inside and outside
the company, to share documents and create workflows. Content saved to CenterStage Essentials ties into

Standard Interface
Will Open New Options

HILE ENTERPRISE CONTENT MANagement vendors battle for sales, theyve


come together around the Content Management Interoperability Services specification.
The goal of the spec, which has been submitted to the Oasis consortium to become an industry standard, is to use
Web services to create a standard interface to different content repositories.
Content-centric applications, such as loan origination and
invoice-processing apps, were often built on a single content management platform. Connecting to content from
competing repositories meant costly integration. Applications built on a standard interface should be able to communicate out of the box with any enterprise content management repository that supports CMIS.
That would cut costs, and also should let them take advantage of content in new ways, like an application combining an auto insurance claim with Google Maps to show
where the accident took place. Other possibilities include improving workflow and business process management-based
applications, archiving apps, search, and e-discovery. The
spec has big-league support: originally IBM, EMC, and
Microsoft, now joined by Alfresco, Open Text, Oracle, and
SAP. The standards expected to be official by end of 2009.
Vendors are moving forward already. Alfresco has a draft implementation available. EMC says its Documentum APIs will
support a beta version of the standard by the end of this year.
IBM has code on its AlphaWork site that provides a CMIS layer
on top of FileNet P8. And Open Text says it has a prototype integration between its LiveLink content repository and SAP, though
its not publicly available yet.
ANDREW CONRY-MURRAY
28 Dec. 15, 2008

Documentums back-end infrastructure with its compliance and retention capabilities. CenterStage Essentials, now in beta, should be available early next year.
CenterStage, EMC insists, isnt a SharePoint competitor. SharePoint is better positioned as a content services
tool for the masses, says Whitney Tidmarsh, EMCs VP of
worldwide marketing for content management and
archiving. CenterStage is aimed at content-driven applications that pull in users from several companies, she
says.A car manufacturer with a new product design might
want its own design team as well as suppliers using the
app.Employees get full access, and suppliers only get the
portion of the car theyre working on,Tidmarsh says.
But other ECM vendors, particularly IBM and Alfresco,
are going head to head with SharePoint. IBM in October
revealed plans to integrate Lotus Quickr, its collaboration and social networking platform, with its ECM products, including FileNet P8 and IBM Content Manager 8.
Lotus Quickr provides portals and team workspaces for
employees and business partners to share documents
and create blogs and wikis. IBM says the integration will
be available in December with Lotus Quickr 8.1.1.
IBM recently said it would put key content management functions from FileNet Content Manager 4.5 directly into Office 2007s user interface. This would include the ability to search for content across multiple
FileNet repositories, check documents in and out of
FileNet, tap into business process workflows, and integrate with FileNet Records Manager 4.5 to declare Office documents as official records. Both integration efforts are intended to blunt SharePoints advantage
from its close tie with Office.

OPEN SOURCE OPTION


Alfresco, the open source ECM vendor, positions itself as a SharePoint alternative, right down to the notso-subtle name for its collaboration platform: Share.
Launched in October as part of the newest version of
Alfrescos Enterprise ECM platform, Share provides
document collaboration capabilities as well as blogs,
wikis, and calendaring.
Share lets people collaborate on Word, Excel, PowerPoint, and other Office files without using SharePoint.
Thats because it uses Microsofts Office network protocolsthe same ones Office uses to connect to SharePoint. The European Commission last year ordered
Microsoft to make the protocols available as part of its
effort to increase competition. Alfrescos betting companies want an alternative to buying the complete Microsoft software stackincluding Windows, .Net, Internet Explorer, and SQL Serverto run SharePoint.
To apply the right management and retention policies to business content being created in collabora-

informationweek.com

tive environments, Share connects to a central Alfresco repository.

WHO WILL MANAGE IT ALL?


Other ECM vendors see an advantage to staying focused on content management, envisioning a symbiotic relationship with SharePoint and, in some cases, a
larger role as the manager of various third-party
repositories in the enterprise.
Open Text says that by embracing SharePoint, its software can be used to enforce retention policies on content created in SharePoint.The company in October announced Open Text Storage Services for SharePoint.
Using Microsoft APIs, Open Text can store Microsoft Office SharePoint Server (MOSS) content on third-party
storage systems, rather than on a SLQ Server database,
letting customers age out content onto cheaper storage
devices as it gets used less frequently, says Bill Forquer,
Open Texts executive VP of marketing.
Open Text also offers Content Management Lifecy-

cle Services for MOSS, which lets companies capture


SharePoint content and assign retention policies according to business and regulatory requirements. Different departments might collaborate on a set of technical documents for a new product, and the final
version gets moved from SharePoint to an OpenText
repository, where the retention policies are applied.
IBM FileNet and EMC Documentum also have connectors that can reach into SharePoint and move content
into IBM and EMC repositories to manage and archive it.
Some ECM vendors aim to be the central policy
control point for repositories throughout the enterprise. Case in point is EMCs Documentum Federated
Records Services and Retention Policy Services.
These modules, introduced in Documentum 6.5, use
APIs to let administrators connect to repositories
from IBM, Microsoft, Open Text, Symantec, and others, and apply records or retention policies and take
actions such as applying a legal hold. They make Documentum the retention management layer without

Open Source And SaaS Shake Up ECM

OLLABORATION AND
interoperability are shaking
up enterprise content management from the outside,
but forces are also emerging from within
that have the potential to reshape the
market. Two companies in particular, Alfresco and SpringCM, challenge the
dominant deployment model of proprietary, premises-based software.
Alfresco and SpringCM attack the two
major weaknesses of ECM vendors:
cost and time. Its not unusual for a company to drop $1 million on ECM software and services, and Gartner says it
can take six to 18 months to deploy.
With its open source ECM platform,
Alfresco offers key ECM functions, including document management, Web
content management, and collaboration.
It borrows from the Red Hat model by
distributing its software free under a GPL
license and selling a subscription for support, service-level agreements, and access to a community knowledge base.
That usually means a much lower cost
assuming the company has sufficient inhouse knowledge, so the savings arent

eaten up hiring consultants to implement


and integrate with applications.
But Alfresco touts advantages beyond the bottom line. First is the community, which Alfresco and its customers can draw on for innovation and
continued development of the software.
Alfresco says it has about 74,000 registered community members, though the
number of active members is about
3,500. Another advantage is that companies can run Alfresco on the software
and hardware platforms of their choice.

FLEXIBILITY IN THE CLOUD


SpringCM taps into a different trend
reshaping the IT landscape: software as
a service. SpringCM sells document
and records management, paper and
electronic documents capture, and application workflows as online services.
Look at what companies are doing
with proprietary ECM deployments, and
it suggests a lot of companies dont want
an enterprise-wide system, contends
SpringCM CEO Dan Carmel. Theyre
often process-specific, departmental deployments, he says. SaaS makes sense

for departments that have a handful of


applications that require ECM workflows
and capabilities, Carmel says. Rather
than deploy an on-premises platform and
force it to fit different needs, departments
can turn to the cloud and configure the
application to their needs. One customer,
Cox Communications, runs 13 different
applications using SpringCM.
More important, SaaS gets a tool into
end users hands faster than with an onpremises deployment. The demo is the
product, says Carmel, meaning what
you see online is what you get when you
sign up. Carmel says the average consulting contract to configure the application and get it on peoples desktops
takes from eight to 40 hours. SaaS also
means less up-front capital cost, though
the trade-off is a monthly per-user fee.
These upstarts are both run by industry insiders. Alfresco co-founder
and CTO John Newton was a Documentum founder. SpringCM CEO
Carmel was a VP at Interwoven. Phil
Beckman, SpringCMs VP of research
and development, was a director at
Open Text. ANDREW CONRY-MURRAY
Dec. 15, 2008 29

IN DEPTH / ENTERPRISE CONTENT MANAGEMENT


the need to move content into a Documentum repository and let Documentum expand its reach beyond official records.
The rules can be applied to any piece of information, says EMCs Tidmarsh. It doesnt have to be an
official record. You might have an executives blog to
keep around. It might be kept for intellectual property
reasons or good governance.

MOVING FORWARD
ECM products like Documentum have come a long
way from their origins moving certain content
through specific business processes, such as loan
origination or check processing. This is still their primary role, but ECM vendors are broadening their

scope to help companies manage new content types


and encourage collaboration.
Where does that leave your choices? Companies will
always have a mishmash of content repositories to
deal with, so it makes sense to build a software layer
that can reach into all them to apply uniform policies.
But before picking the technology to manage content,
focus on the rules. Companies need sensible retention
and disposition policies that account for the changing
business value of content, compliance and legal requirements, and user expectations about how long information should be retained. This last point is vital
since employees would happily save every e-mail and
Office file for 100 years, just in case. Companies must
balance this compunction with reasonable disposition.

Wikis That Work In The Real World

ITH BUSINESS TECHnology and compliance


teams struggling to
keep from drowning in
the content employees create, it might
be tempting to turn off some of the
spigots. Here are four companies doing the opposite: letting wikis loose
and reaping benefits.

WIKIS SPREAD AT ANGEL.COM


Angel.com, a 70-employee subsidiary of Micro Strategies that provides
interactive voice response software,
has more than 10,000 internal- and external-facing SocialText wiki pages.
Thats from about 100 employees,
customers, and partners with access.
One customer-facing wiki acts as a
knowledge base for Angel products,
while others for employees include
video tutorials, training quizzes, and
space for collaboration efforts, from
developing marketing ideas to planning
company picnics.
New employees get an hour of wiki
training and set up a personal space
thats like a social networking profile.
Theres no approval process for
posting content, but managers receive
an e-mail when pages are changed,
and they can edit content. So far, no
problems. People just dont have the
30 Dec. 15, 2008

time to go in and screw around, says


Sameer Padha, an Angel product manager and until recently the tech support leader for the wiki.
The deployment has its problems,
though. For example, customers have the
power to edit wikis but not the inclination.
They say heres an error, and we have
to say by the way, you can edit that yourself, Padha says. And the biggest problem: wiki sprawl. SocialText has a search
function, but its so easy to create a new
wiki page, people do that rather than look
for one that exists to build on.

PUBLICIS GLOBAL PROJECT


Three years ago, the Publicis Group
decided to rebuild its communications
consulting teams global presence, and
the group spiked from 450 employees to
1,200, adding specialties and new regional offices. With growth, the company
needed better ways to share information.
A company wiki looked like the answer.
To introduce the wiki, Publicis had
the wiki slowly take over roles from the
companys intranet: distributing the
newsletter, file sharing, access to the
time-off system. The company directorys next. That led to whats now the
wikis main usesproject management, such as for developing client
pitches, and knowledge management,

such as hosting case studies.


The next phase will open pieces of
the wiki to customers, and let people accept resums. Another project for this
coming year will create sections of the
wiki for each field of expertise, such as
editing or digital communications, where
people can share best practices, trends
in their field, and relevant case studies.
Yet Publicis is finding something
similar to what Angel did: people are
doing a lot of reading and file sharing
but are reluctant to edit. There are only
75 to 100 changes daily on the wiki,
and it takes information manager Martin Meru only 10 to 15 minutes a day to
manage the content.
Meru expected top execs and young
people to evangelize wiki use, but the
leaders didnt have time and young
employees often left the company before they could make an impact. It took
a sustained push by the IT team to increase the wikis use.

SEAGATE FOLLOWS CIOS LEAD


Seagate also tapped IT to spark wiki
use. The first six months the storage tech
manufacturer had its Atlassian Confluence wiki platform up, usage started
slow. After designating advocates in its
IT R&D group to spread the word, use
has doubled in the last six months.

informationweek.com

Next comes workflow. The application of content


management policies must have a workflow that reconciles robust classification with user productivity.
Force employees to click through a 15-step file plan
just to post a suggestion to the holiday party planning
wiki, and theyll be outside your office with torches
and pitchforks.
First Energys Hawkins found reasonable middle
ground between workflow extremes with his companys IBM FileNet ECM platform. He requires every
employee to classify e-mail messages before theyre
sent, but he made the process as easy as possible. We
put a menu toolbar in the UI, Hawkins says. We give
them four buckets to put mail in. If they classify it for
retention, it gets picked up by our content manage-

Seagate CIO Mark Brewer has become a true believer in the possibilities.
He started blogging on the wiki system
this spring, and hes evangelizing among
other executivesfor example, suggesting to one manager to file status reports
on the wiki rather than sending a PDF file
around. My eyes have really been
opened to the possibilities, Brewer says.
Seagates wiki is predominately used
by the IT group. It includes a data
warehouse FAQ application, a green IT
site of best practices, and an IT scorecard where people can enter the latest
benchmarks instead of editing a PowerPoint presentation. Some of the content on Seagates Clarity project management software also links from wikis.
A small group collaborates on wiki policies, and another IT group manages
the software, though nobody has it as a
full-time job. Do I have an overhead of
editors? Absolutely not, Brewer says.
Content largely stays on topic because because theres no anonymous
posting, Brewer says. Some parts of
the wiki are built on templates to keep
them from getting confusing.
Among the next steps for Seagate is
setting up a sort of Wikipedia for IT
help where, for example, BlackBerry
users with problems could go for troubleshooting rather than calling IT. Engi-

ment system and managed for its retention period.


Hawkins isnt stopping at e-mail. He has plans to get
all the companys content under stricter management,
from Office documents to CAD files to audio and video.
We can do a better job of grouping our information
for the most efficient access and use, he says.
Finally, demand that vendors provide more and better
integration among third-party content repositories.
Companies should support new initiatives such as the
Content Management Interoperability Services specification, to ensure that ECM platforms provide the balance of availability, interoperability, and management
required to ride the information wave instead of drown.
Write to Andrew Conry-Murray at acmurray@techweb.com.

neering is beginning to use wikis in a


limited way, and operations wants to
do reporting and record metrics in
wikis. That would require expanding
beyond the 2,200 employees who
have access to them today. Access is
tied to the companys directory access
protocol system, so theres no added
passwords once someones signed
onto the company network.

RED MOUNTAIN GOES EXTREME


Red Mountain Retail Group owns
and operates more than 100 shopping
centers in the U.S. Southwest, and its
information structure was a mess. It
used cluttered shared drives to store
everything: contracts, regulatory and
legal documents, plansyou name it.
Financial information for each shopping center was stored in separate Excel spreadsheets, compounding the
problem. So when Troy Saxton-Getty
was hired as interim CIO, he knew job
one was to get information in order.
He decided to make shared drives
read-only and make MindTouch wikis
the primary place to share information.
The intranet is now a MindTouch site
called Workspace. Its the default home
page for employees, and the policy automatically changes it back if an employee
switches it to something such as Google.

On the Workspace, each property


has its own wiki page with a picture
and detailed information on the property, important contacts, property
events, comments from employees on
the latest happenings at the property,
and links to subfolders of documents
for departments including legal and
property management.
To make documents more searchable, employees tag and categorize
any new ones they upload. Since wikis
have version control, employees can
look at older versions of the documents, for example, browsing through
previous leases on a property.
Red Mountain takes wikis further than
most, generating reports that automatically post to the wiki thanks to a series
of mashups. Employees can do things
like create a summary of total revenue
by property or a list of all vacancies in
the company by length of vacancy.
MindTouch can pull in business information from Microsoft Dynamics ERP.
Among the most important lessons
Saxton-Getty has learned is to think
seriously about information architecture before setting up the wiki and use
templates so employees can copy information structures that work for one
property or function to another.
J. NICHOLAS HOOVER

Dec. 15, 2008 31

The
Webs New

Employees get a lot


of freedom online,
and productivity still
often rises. But so do
the threats. Better
have the right tools
to fend them off.

By Richard Martin

IN THE EARLY YEARS OF THE INTERNET, protecting your company from unsuitable or unseemly Internet content was simple: Block network access to the
sites people shouldnt visit on company time or equipment. Now, with the number of URLs on the Web hitting 1 trillion, according to Google, thats obviously
not feasible, even as the potential downsides of workers spending time in cyberspaces less-respectable neighborhoods have increased dramatically. Plus,
the dangers arent just limited to those shady sites.
Bottom line: Web filtering has gotten a lot more complicated for companies
than just blocking porn sites and ESPN.
The good news is that an array of companies, from Internet service providers
to third-party applications providers to major security outfits, now supply a
range of tools to monitor and regulate how employees use the company network. At the same time, HR and IT departments have become more sophisticated about how they limit employees Web activities.
Its a rare company that doesnt include some form of acceptable Internet
use policy in its employee handbooks. Theres been an attitudinal shift where
many businesses now view a certain level of personal Web surfing as a natural

Part of an ongoing series assessing the future of the Internet. For more, check out internetevolution.com. Contributors to its ThinkerNet blog
include Jart Armin, editor of RBNexploit.com (about the infamous Russian Business Network) and HostExploit.com, and Michael Mascioni, a
market research consultant in digital media. Internet Evolution also features industry-specific content in its IT Clan and Security Clan sections.

32 Dec. 15, 2008

informationweek.com

traffic of all kinds occurs during the workday.


The Safe Act, which was signed into law in December 2006, makes it a felony for ISPs to fail to report
child porn if they discover it on their networks, with
penalties up to $300,000 for each instance. Many ISPs,
however, fearful of First Amendment issues and freedom-of-speech lawsuits, are reluctant to get into the
business of being Web traffic cops.
The FBI itself three years ago discontinued the use
of its Carnivore packet-sniffing technology, which was
installed at ISPs to monitor the online traffic of suspected criminals. It made that decision after a deluge
of criticism from civil libertarians. The bureau now
uses off-the-shelf commercial software that doesnt
rely on ISP-based equipment.
LIMITED TRUST
Some ISPs will still do some monitoring for business
The concern today is less with how much time emcustomers; however, it remains a sensitive topic.
ployees might be wasting on sports, gambling, or adult
AT&Ts business Internet services unit, for instance,
sites, and more with how many doors into critical sysdeclined multiple requests for interviews for this story.
tems theyre unwittingly opening while goofing off.
Others arent as reticent, particularly as ISPs conThe result is a delicate dance of trust but verify besumer
business becomes more commoditized, and
tween companies and their employees. Most companies
theyre
looking to offer higher-value, higher-priced
trust their workers to do the right thing online; at the
business services. Insame time, few are willing
evitably, those include varto leave those choices toMORE AT INTERNETEVOLUTION.COM
ious forms of security and
tally in workers hands.
Cybersecurity is one of the most important issues facing
risk management services,
Thats created a boom
the free world, says Jart Armin.
sometimes including Web
market for former Web filinformationweek.com/1214/ie_security.htm
activity monitoring.
ter providers, which once
Business incubators and social networking belong together,
Verizon Business has
focused on assembling lists
and Michael Mascioni explains why.
informationweek.com/1214/ie_web2.htm
added
a lucrative sideline
of categories and URLs of
in
advising
and consulting
taboo sites, to market
on
Web
security
risksincluding
those
from illicit or
broader information risk management tools to help
ill-advised
employee
surfing.
Achieving
a
high level of
companies wrestle with the more sophisticated online
security
in
the
Facebook/YouTube/Web
2.0
network
Its
also
led
to
new
acquisitions
and
product
threats.
age is a chancy effort for both companies and ISPs,
lines from the major security vendors, who have moved
says Jonathan Nguyen-Duy, director of risk managefrom the perimeter defense of firewalls and intrusion
ment for Verizon Business.
detection to what security expert Richard Stiennon, auAs a practical reality, to enforce acceptable-use
thor of the ThreatChaos blog, calls holistic security.
standards in a uniform fashion across the enterprise,
Meanwhile, many ISPs that provide the physical
particularly large organizations with campuses across
connection to the Web wilderness have largely taken a
the world, is a very difficult prospect, says Nguyenhands-off approach when it comes to monitoring and
Duy. Thats a challenge to service providers.
regulating what workers do there. After a series of
Verizon Business meets this challenge by getting busicontroversial legal disputes, many of them have
ness customers to adopt a systematic approach to risk
backed off from enforcing acceptable-use policies.
management, Nguyen-Duy says. The company wont
The increased emphasis on limiting risk from employplay the role of Web traffic cop itself, but it will help its
ees Web activity comes at a time when ISPs also are uncustomers enforce their acceptable-use policies, he says.
der more pressure to ferret out and report illicit practices
We can provide customers with tools that provide granby their customersparticularly the trafficking of child
ular administrative rights and detailed reports, he adds.
pornography. New York Attorney General Andrew
Verizon Business also provides consulting services
Cuomo has made this a personal crusade, calling on ISPs
that include pointing to and bundling appliances and
to be more vigilant about how their networks are used to
services from third-party providers, such as Websense
exploit children. Statistics from child-protection groups
indicate that as much as 70% of Internet pornography
for Web activity monitoring, MessageLabs for e-mail hyoutgrowth of Web access and a form of personal freedom, like going to the dentist on company time.
Theyre willing to trade off some cyber-goofing-off for
the productivity benefits of ubiquitous high-speed
Web access.
Unfortunately, as companies tolerance has grown,
so have the online threats, which range from malicious
or accidental distribution of proprietary information
to malware that doesnt require a visit to XXX Hot Coeds to find its way onto corporate networks. Web risk
management company Websense estimates that as
much as 75% of malware now originates from reputable, high-traffic name-brand sites.

>

Dec. 15, 2008 33

giene, and Ciscos IronPort unit for intrusion prevention


and the like. Nguyen-Duy says he recommends customers sign on for a 90-day consulting engagement, during which they undergo a state-of-the-network assessment that lets them see what kind of traffic is coursing
through the network, the types of applications people
are using, what sites theyre going to, what type of corporate information needs to be secured, and so on.
Its startling when the client goes through that data
identification and classification processwhat databases and applications are on company networks that
no one had recognized, he says.
Once that report is complete, Verizon Business consultants will recommend a set of toolswhich might
include deep packet inspection, or DPI, a form of realtime network filtering that examines the data plus the
header of each IP packet as it passes through the system. Combining the functionality of intrusion detection
and prevention systems with traditional stateful firewalls, DPI can flag obviously malicious code and also
examine Web site traffic at the packet level to see if it
conforms to stated company acceptable-use policies.
Youre facing a multilayer threat, so the solution has to
offer a combination of features, Nguyen-Duy says.
That combination would typically comprise some
level of antivirus and software- or appliance-driven
malware protection with some level of content inspection and filtering down to the deep packet level.
Similarly, Sprints enterprise division a few years
ago began offering managed services to its enterprise
Web-access customers, combining the pure-pipes
role of a traditional ISP with higher-level network
optimization and security tools, some based on inhouse technology and some using third-party appli-

Why do you monitor employees?


73%
Reduce the use of inappropriate
Web sites and content
52%
Reduce unauthorized attempts
to access sensitive data
48%
Optimize traffic on networks and servers
45%
Detect potential leakage of sensitive data
44%
Improve employee productivity
Data: InformationWeek Analytics 2008 Strategic Security Study
of 723 business technology professionals who monitor employees

36 Dec. 15, 2008

cations and gear. Even Sprint, however, chooses not


to be the traffic cop itself: It provides access to tools
bundled from other providers without doing any
monitoring itself.
The move to converged, all-IP networks for voice,
video, audio, and data makes this a critical role for a
major business ISP such as Sprint, says Steve Parrott,
senior manager of product development for the carriers enterprise division. The design and delivery of
those services, Parrott says, traditionally has been
done by system integrators, but when youre moving
to one single platform you cant answer those needs
with multiple providers.
Thus, in October, Sprint announced its SprintSecure
managed security and optimization product, which
will be available in both an on-premises and a hosted
cloud version. Comprising Web filtering, antivirus
scanning, control over Web-based applications including peer-to-peer systems, and even monitoring of employees instant messaging, the premises-based product uses Blue Coat Systems ProxySG appliances and
WebFilter software. The cloud-based version comes
from ScanSafe, whose Web security systems customers
include large software-as-a-service companies.
One benefit to companies using services assembled by
their ISP is theyre integral to the network and not laid on
top of it, says John Eisenbarger, Sprints product manager
for managed security, letting Sprint add features such as
WAN acceleration on the same platform. This approach
lets Sprints Web protection system scan for objectionable content and malware threats before the Web content is optimized and accelerated for delivery to the user;
in a multiprovider environment, they accelerate all the
traffic before filtering, Eisenbarger says, making it more
difficult to optimize the delivery of content.

GET GRANULAR
Companies are glad to take advice from their carriers on best-in-class providers, but that doesnt mean
business technology leaders are better off just relying
on a carrier-certified security suite, rather than going
directly to the experts.
The problem with such Internet service providers
playing that Web security role is they arent set up to
provide very granular policy to customers, says Dean
Coza, director of product management for Web security solutions at Websense. The ISPs struggle with the
fact that not everyone is the same, he says.
Founded in 1994, Websense has gone from providing
companies with lists of off-limits URLs and filters that
block them to helping companies protect their essential information and manage information risk, says
Coza. Released in September, the 7.0 version of Web-

informationweek.com

Computing, which sells companies Web filtering, esenses flagship product is at root a Web security gatemail security, intrusion prevention, and firewall softway that goes beyond DPI to dynamic, real-time inspecware. Standalone Web-security companies arent dotion and approval (or blocking) of every Web page and
ing badly, either: Websense, which acquired competitor
every morsel of data traversing a corporate network.
SurfControl a year ago, has reported record revenue
The result: a complete decompile and reassembly
the last few quarters.
of the content, Coza says. Less-specialized DPI sysUnfortunately, theres an arms race at work here:
tems dont do 10% of the content inspection we do,
Even as the tools for protecting corporate networks
he contends. The tool runs scripts in a browser in orgrow more sophisticated and powerful, the threats
der to detect malware that might be hashed or enfrom employees careless or malicious Web surfing
coded within them. The scripts gets executed against
have grown more multifarious. Despite the string of
Websenses heuristics and signatures to determine if
high-profile malware infestations, data leaks, and nonthey carry hidden threats. Then theyre recompiled
compliance disasters, many companies still dont get
and, if they pass muster, delivered to the employee.
it. Every supplier and ISP
Websense calls the process
interviewed for this story
de-obfuscation.
What employee activities
agreed that the level of enSimilarly, Blue Coat,
do you monitor?
terprise IT understanding
which began life as an Inof Web security risks is far
ternet accelerator speeding
49%
behind the reality. Many
delivery of content over
Web browsing behavior
security-industry execubalky networks and then
40%
tives estimate the portion
moved into URL filtering,
Inbound e-mail
of companies using the
has broadened its business
37%
most up-to-date Web proto include a tool that runs
Outbound e-mail
tection and filtering tools at
executable scripts from the
less than 20%.
Web through 10 different
33%
The responsibility is up
scanning engines. Blue
Use of networks, servers, applications
to the user or the company,
Coats ProxySG appliances
31%
not the ISP, says Terrence
let operators like BT and
Attempts to access sensitive
Brewton, research analyst
Sprint monitor Web surfing
applications or data
at consulting firm Frost &
activity and issue alerts and
12%
Sullivan. Ultimately, the
block content based on preEmployee activity in blogs,
ISPs say, We provide backdefined company policies
social networking sites
bone, we can offer you
as well as monitoring for
some tools, but thats all we
viruses and other mali33%
can do, Brewton says.
cious code. Running traffic
We dont monitor our employees
At this point, IT executhrough scanning engines
Data: InformationWeek Analytics 2008 Strategic Security Study
tives
have four options:They
and antivirus software from
of 1,097 business technology professionals
can choose among the secumultiple vendors, including
rity and Web-monitoring
major security companies
tools and assemble a multivendor solution that works for
like Symantec and rivals such as Websense, the comtheir company. They can work through their ISP, assumpany claims record revenue for the last two years.
ing it offers consulting and services for such tools. They
We sell a lot of infrastructure to service providers,
can rely on built-in software from their network equipsays Carrie Oakes, VP of product marketing. They in
ment vendor, such as Cisco or Nortel, or network security
turn offer on-premises services to large companies and
provider, like Symantec. Or they can do nothing.
managed services to small and midsize businesses
Option four isnt the way to go, no matter what comlooking for the same type of filtering capability.
pany it is. Fortunately, the range of choices that the other
Major network vendors and security companies,
options provide is broad enough to offer help to just
meanwhile, have been on an acquisition spree to add
about every company trying to strike a balance between
similar technologies for deep-packet inspection and
giving employees the online freedom they need to be
secure Web gateways. In early 2007, Cisco spent $830
productive and keeping the network healthy and safe.
million to buy IronPort, a provider of mail-filtering appliances and data-loss prevention systems. Just last
month, McAfee paid $465 million to acquire Secure
Write to us at iweekletters@techweb.com.

informationweek.com

Dec. 15, 2008 37

INFORMATIONWEEK ANALYTICS

GET READY TO RIDE

THE EFFICIENCY WAVE


Big changes are coming to the data center,
driven by green awareness. Heres how to make
the most of transformational forces. By Kenneth Miller

HILE DATA CENTER ARCHITECTS have weathered much change over the past decades,
theres a transformation on the way bigger than anything weve yet seen as data centers decisively move from business necessity to strategic advantage. Meanwhile, IT is working to
understand how trendsincluding virtualization, cloud computing, escalating power densi-

ties and equipment weight, and new environmental


awarenesswill mesh with explosive growth in demand, even as the cost of traditional models escalates
out of control, consolidation projects notwithstanding.
The primary way for most of us to meet growing demand will be to incrementally increase the efficiency
of older facilities that werent built to handle modern
loads. For that to happen, IT must first bridge a divide
with facilities groups thats reminiscent of the old days
of IT vs. telecom. This partnership could yield surprising economic advantages, as can new technologies and
techniques that well discuss in depth in our latest InformationWeek Analytics data center report, available
at datacenter.informationweek.com.
There can be resistance to this dtente, but those responsible for operating their organizations data centers are feeling the heat, and not just from the airflow in
overloaded facilities. While more than half of the 279
business technology pros we surveyed for this InformationWeek Analytics Report expect demands on their
data centers to increase in 2009, only 25% will see their
facilities budgets grow. Meanwhile, thanks in large part
to the green movement and the hype surrounding cloud
computing, your line-of-business leaders are being inundated with stats, drawn from across the industry, on
how data centers are operating. Theyre taking notice.
While benchmarking performance against peers has
value, its also fraught with pitfalls. Single-number metrics fail to account for differences in data center operational realities, and thus are often as useful as comparing the miles-per-gallon rating of a Prius with that of an

>

18-wheeler. Meanwhile, IT is driving growth in energy


use. According to the Environmental Protection Agency,
the energy consumed by U.S. commercial and industrial
buildings is responsible for nearly 50% of our national
emissions of greenhouse gases, and within those buildings, the power used by data centers has doubled over
the past five years. Meanwhile, the national average rate
for electricity has jumped 44% since 2004.
As if all that werent enough to worry about, weve

How will your data center facilities budget


for 2009 compare with your 2008 budget?
4%
Dont know/not
my budget

35%
Less than
last year

25%
More than
last year
36%
Same as
last year
Data: InformationWeek survey of 279 business
technology professionals

recently seen several anticipated upgrades stopped in


midstride because of unanticipated structural, power,
and cooling system constraints outside of the data center. In one case, the local utility refused to deliver more
power unless the company paid for an entire substation upgrade. In another project we consulted on, the

Get the full Analytics Report, free for a limited time: datacenter.informationweek.com

informationweek.com

Dec. 15, 2008 41

INFORMATIONWEEK ANALYTICS
data center expansion was stopped cold because the
building couldnt structurally support the new infrastructure and projected data center weight loads.
For some, the answer has been to outsource. In our
recent InformationWeek Analytics report on cloud computing, we found that virtualization has enabled service
providers to offer shared platforms at a fraction of the
cost of physical facilities, significant because 68% in that
poll indicated that cost was the most important factor
in moving toward this model. This is driving the apparently supercharged growth of behemoth data centers,
with Google, IBM, Microsoft and co-location providers
spending billions on new sites. All have placed great
emphasis on energy-efficient construction methods.

SQUEEZE THAT DOLLAR


Those with more modest resources essentially have
only two options: Add floor space, power, and cooling,
or increase efficiency to make existing resources go
further. With so few respondents indicating that their
budgets will increase next year, we dont expect many
greenfield builds. That means the primary way for

What will your data center facilities


resource demands be for 2009?
51%
More than
last year

3%
Not sure
10%
Less than
last year

36%
Same as
last year
Data: InformationWeek survey of 279 business
technology professionals

most of us to meet growing demand will be to incrementally increase the efficiency of older facilities that
likely werent built to handle modern loads.
Efficiency is not just about energy. In the data center, its also about squeezing the last dollar out of what
has been invested and extending a resources life for
as long as possible. Much of the disproportionate
growth in data center investment is
being driven by inefficient mechanical and electrical infrastructure design, and thats where a facilities
partnership comes in.
Efficient designs also mean giving
up entrenched data center stereotypes. Who wants to design a mission-critical facility that breaks with
the tradition of a raised floor, or runs
at 80 degrees? Yet, as we discuss in
our full report, thats just what leaders like Google are doing, at great
economic advantage. Their lessons
can be used in our legacy data centers. In addition, in our practice
weve found that its considered cutting edge for a facility to monitor itself as a total system and dynamically respond based on sensing
resource demands, rather than on
preprogrammed schedules. This, too,
is changing as centralized monitoring, control, and intelligent software
become more affordable.
Kenneth Miller has more than 15 years of
experience implementing complex IT systems and is currently a data center architect with Midwest ISO. Contact him at
kmiller@nwc.com.

42 Dec. 15, 2008

informationweek.com

TECH

TRACKER
For IT By IT

Speedy Net Or Speed Trap?


Heres what you need to know to stay on the 802.11n wireless fast track
AKE NO MISTAKE: EVEN
in draft form, 802.11n
i s a g a m e - c h a n g e r.
The fledgling standard
promises better-quality cells that
benefit from multiple in, multiple
out (MIMO) antenna arrays and
throughputs that are, at a minimum, on par with 11a and 11g at
54 Mbps but more stable. And at
best, theyre amazing, with tripledigit data rates.
But when analysis and troubleshooting are needed, 802.11ns
advanced features can greatly

slow problem resolution.


Whether you plan on squeezing
as much bandwidth as possible out
of 802.11n networks or you need to
provide connectivity to as many
users as possible in an 11n setting,
youll need to thoroughly plan and
evaluate your new wireless environments. And without the right
monitoring tools, youre sunk.

START WITH THE BASICS


To succeed in an 802.11n world,
wireless administrators need to do
some homework. 802.11n brings a

THE LOWDOWN
THE PROMISE 802.11n, with theoretical data rates to 600 Mbps, can
deliver faster cells with better signal quality and has the potential to decrease
overall infrastructure costs and enable new applications.

>>

THE PLAYERS Many spectrum analysis tools developed for 802.11a/g will
work with 802.11n. Bigger vendors, including AirMagnet, Berkeley Varitronics,
Cisco, and Fluke Networksalong with smaller players like AirSleuth and
MetaGeekprovide tools that characterize the spectrum in which 11n operates. However, packet analysis will require a new breed of tools. AirMagnet,
WildPackets, and Cace Technologies (AirPcap) are players in the 802.11n
packet analysis market.

>>

THE PROSPECT Those blistering data rates dont come easy. And 802.11n
shares spectrum with legacy protocols. To squeeze the most out of 802.11n
wireless environments, a well-thought-out game plan and a decent toolkit are
required. Understanding 802.11ns nuances will be half the support battle, and
knowing what tool to use for a specific problem will be the other half.

>>

whole new vocabulary and new


concepts to be mastered.
First, admins need to learn what
makes 802.11n tick, then answer
these questions: Should the organization maximize its network efficiency, with throughput speeds
that are dizzying but with certain
clients blocked? Or is compatibility
mode more appropriate, accommodating more legacy users but at
lower overall cell speeds? What
about the special options, like
frame aggregation and short guard
intervals? And how many spatial
streams (the number of receivers
and transmitters) can you actually
use, given the makeup of your
wireless clients and switching
infrastructure?
After determining which configuration option will best serve their
environments, 802.11n wireless
network admins need to assess the
analysis tools they have on hand
and figure out which ones will play
well with this unique wireless technology and what emerging support
tools theyll need to purchase.
Successful rollouts will no doubt
take budget dollars away from
other IT projects, although some
environments will find their infrastructure is 802.11n-ready when it
comes to switches, wireless controllers, and power. In these cases,
Dec. 15, 2008 43

TECHTRACKER
TECHTRACKER
urations can drastically
802.11n will come much
DIG DEEPER
alter a given cell shape
cheaper than for organizaTHE FAST CROWD 802.11n is becoming a viable platform
and size. Again, survey
tions that need an infrafor mission-critical networks. Really. Find out whos offering
what. Download this free InformationWeek Report at:
and modeling tools must
structure upgrade to get
informationweek.com/alert/802.11n.htm
address all 802.11n variready for it. But even if
ables to be as effective as
companies face substantial
See all our Reports at informationweekreports.com
possible.
up-front costs to revamp
In addition, because one goal of
Survey to virtually plan WLANs,
their infrastructure, the advanthe survey process is to predict
followed by feet-on-the-ground
tages of high-speed wireless
and ensure (as much as possible)
verification.
greater mobility and portability
minimum data rates, 11n-oriented
Post-installation support means
among themwill make its adopsurvey products must deliver
monitoring the airspace to find
tion an imperative.
graphical what-if reporting abilcompeting or offending signals
Along with an overall better raities that reflect hundreds of poand packet analysis with commerdio environment, 802.11n is good
tential scenarios for each access
cial or open source tools to reveal
news for the applications that run
point thats being considered.
connectivity or application issues.
o n i t . Fo r ex a m p l e, w i r e l e s s
Wireless packet analysis is alThese basic premises dont
streaming video and voice over a
ready complex in 11a/g networks,
change with 802.11n, but the unwireless LAN should perform
and it gets even more so with 11n.
derlying mechanics can take on a
more reliably and predictably with
Because of MIMO, the location of
whole new feel, depending on
802.11n. And although ratification
the client becomes critical in atwhich of the many options and opof the final standard is still possitempting to get an accurate read
erational modes are invoked.
bly a year away, vendors such as
on the traffic. Ideally, the capture
happens at one or both endpoints.
Evolution Of 802.11n
Although the wireless payload
will remain the same in 11a/g and
2007
2009/2010
2004
2008
802.11n networks, traffic headers
Draft 2 of 802.11n
Additional options
Work begins
Finalization
and
how traffic is fragmented may
completed; Wi-Fi
for 802.11n to be
on 802.11n
of Draft 7 of
Alliance starts
finalized next year;
standard
802.11n base
differ, which may be a concern to
interoperability
ratification expected
standard and
those who like to go deep on
testing
in early 2010
some features
packet analysis.
802.11ns channel bonding, different guard intervals that ma802.11a/g spectrum analyzer
AirMagnet, Berkeley Varitronics
tools from AirMagnet, Cisco, Fluke
nipulate interframe spacing, frame
Systems, and Ekahau already are
Networks, MetaGeek, and others
aggregation options, and the numoffering 802.11n-capable support
will still find noise and interferber of antennas, will redefine what
tools to ease implementation as
ence. Its logical to expect that anwireless traffic looks like. Analysis
well as transition.
alyzers will eventually detect
tools must support the full suite of
802.11n
devices
along
with
everyoptions in the draft standard in orSURVEY SAYS
thing
they
can
classify
today.
der to be effective when the final
Before 11n networks can be inFor
survey
products,
802.11n
reversion is approved.
stalled (or current 11a/g networks
ally
raises
the
bar.
Cells
tend
to
For WLAN administrators whove
can be upgraded to 11n), organhave
increased
data
rates
at
farbeen
in the game for a while,
izations will need to survey the
ther
distances,
so
youll
need
to
re802.11n
brings a whole new bag of
spaces to be covered or resurvey
learn
the
fundamentals
of
survey
intricacies
to be reconciled, both
areas where current WLANs live.
procedures.
The
new
standard
can
before
and
after
installation. Some
This is because 802.11n works in
use multiple channel bonding that
existing toolsmainly spectrum
the same frequency slices (2.4 and
doubles spectrum width to achieve
analyzersare still relevant in their
5 GHz) as 802.11a/g networks.
higher data rates, so survey tool
current incarnations. But for packet
For most of us, the site survey
providers need to accommodate
analysis and survey work, make
has become an exercise in mergthe new options in their various alsure your tools are tuned to
ing the virtual with the physical,
lowed combinations for 11n cells.
802.11n, or youll be missing a lot.
using a modeling tool like AirMIMO antennas in various configMagnet Surveyor or Ekahau Site
LEE BADMAN (lbadman@nwc.com)

>

>

44 Dec. 15, 2008

>

>

informationweek.com

Rolling Review

Agility Is Part Of The View


Server virtualization stalwart VMware shows it has desktop chops, too

F YOURE NOT QUITE GETting what you expected out of


your terminal services environment, VMwares View 3
might cure what ails you.
We tested the enterprise edition
to get our virtual desktop infrastructure Rolling Review started,
and found a VDI package thats a
good fit for companies of any size.
In View 3, the follow-up to VDI
2.1, VMWare has addressed several of the shortcomings of the
earlier version, such as storage
optimization and improved offline
virtual desktop access.
Terminal services is still the best
way to serve up individual apps in
a WAN-friendly way, but a virtual
desktop infrastructure is quickly
becoming the best alternative for IT shops unhappy with the limitations of a full Citrix or
Microsoft Terminal Services desktop session.
VMware View, like other
desktop virtualizers, is
well-positioned to solve
the application compati bility and user customization problems
that typically plague terminal services solutions.
In our test scenario,
fictional startup Bits &
Bytes Legal Services
wants to build a VDI
from scratch, to ensure
flexibility and minimize
damage if a thin client
or laptop is stolen. B&B
also wants to be able to
store virtual desktop
templates as images.
That way, the VDI environment can act like a
master desktop image

repository, where fat-client images


can be deployed as needed.
VMwares View 3 includes a
back-end ESX 3.5 Server to store
virtual desktops, a front-end server
running the Virtual Desktop Manager connection broker software,
and a Virtual Infrastructure environment for managing VMs and
back-end ESX servers. The VDM
connection broker requires Windows 2003 Server, and VMwares
VirtualCenter enterprise virtualization management tool cant be
installed on the same box.
That may sound daunting, but
View 3 is very simple to deploy.
ESX Server installation is fully automated, and the connection broker software also installed within

minutes on our front-end Windows 2003 Servercustomers will


be ready to build VMs within VirtualCenter without much trouble.
The Web-enabled Virtual Desktop
Manager management GUI makes
it easy to add those virtual desktops to serve out to clients.
The VDM manager lets administrators allot virtual desktops to
specific users through their Active
Directory user account credentials. Pools of virtual desktops can
be provisioned to groups of employees, in persistent or nonpersistent mode. Clients can access
their virtual desktops via single
sign-on through the VDM client
software, or via a browser-based
Web client.
Real-world companies regularly encounter latency issues, and
View 3 showed its
more than capable of
handling low remote
office bandwidth and
varying levels of packet
loss and latency.
With three years of
platinum support, a 100virtual-desktop View 3
bundle is priced at
$24,562. Given that you
can save big on hardware by using thin clients, you may find that
virtualizing desktops
provides a much faster
ROI than virtualizing
servers does.
A more in-depth version of this Rolling Review installment is at
informationweek.com/
1215/vmware.htm.
RANDY GEORGE
(rgeorge@nwc.com)

Dec. 15, 2008 45

BUSINESS CONTACTS
INDEXES
FOR ADVERTISING AND SALES CONTACTS
go to createyournextcustomer.com/contact-us
or call John Siefert (949) 223-3642.

EDITORIAL INDEX
AirMagnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
AirSleuth. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Alfresco . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24, 28, 29
Angel.com . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Appirio . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
AT&T . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Berkeley Varitronics Systems. . . . . . . . . . . . . . . . . . . . . . . . . . 43
Blue Coat Systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Boston Power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
BT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Cisco. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32, 43
Commission on Cyber Security for the 44th Presidency . . . . . 20
Cox Communications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Dell . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Ekahau . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
EMC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24. 28

VP and Publisher, John Siefert


(949) 223-3642, jsiefert@techweb.com
Publishers Assistant, Esther Rodriguez
(949) 223-3656, erodrigu@techweb.com
VP of Marketing, Scott Vaughan
(949) 223-3662, svaughan@techweb.com
VP of Sales, Brandon Friesen
(415) 947-6213, bfriesen@techweb.com
VP of Integrated Media, Chris Harding
(831) 426-2344, charding@techweb.com
VP of Integrated Media, Martha Schwartz
(212) 600-3015, mschwartz@techweb.com
SALES CONTACTSWEST
California, Arizona, Colorado, Montana,
Nevada, New Mexico, Texas, Wyoming
Western Regional Director, Matt Stovall
(415) 947-6245, mstovall@techweb.com
District Sales Manager, Lisa Otero
(415) 947-6183, lotero@techweb.com
Account Manager, Kevin Flint
(415) 947-6349, kflint@techweb.com
Account Executive, Jenny Casey
(415) 947-6105, jcasey@techweb.com
Sales Assistant, Jennifer Burstedt
(415) 947-6104, jburstedt@techweb.com

First Energy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Fluke Networks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Google . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16, 22, 41
Harrahs Entertainment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Hewlett-Packard. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
IBM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24, 28, 41
IT Mill . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
LG Electronics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
MessageLabs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
MetaGeek . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Microsoft. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22, 24, 41, 48
MindTouch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
OpenText . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24, 28
Pfizer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Publicis Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
RightScale . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Red Mountain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Salesforce.com . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16, 48
ScanSafe . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Scottrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Seagate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
SpringCM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Sprint . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20, 32
Sun Microsystems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18, 21
Symantec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Twitter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Verizon . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20, 33

Idaho, Oregon, Utah, Washington,


Alaska, Hawaii, Western Canada
Regional Online Manager, Jeffrey Veit
(415) 947-6114, jveit@techweb.com
Account Executive, John Wilkinson
(415) 947-6248, jwilkinson@techweb.com
Account Executive, Krystle Liew
(415) 947-6121, kliew@techweb.com
Sales Assistant, Nicole Francois
(415) 947-6154, nfrancois@techweb.com
Sales Assistant, Justin Kischinevzky
(415) 947-6214, jkischinevzky@techweb.com
SALES CONTACTSEAST
New York, New Jersey, Northeast, Pennsylvania,
Michigan, Southeast, Canada
Eastern Regional Director, Linda Hooper
(212) 600-3153, lhooper@techweb.com
Online Manager, Amy Neidlinger
(212) 600-3163, aneidlinger@techweb.com
Online Manager, Cori Gordon
(516) 562-5181, cgordon@techweb.com
Senior Account Manager, Bethany Baller
(585) 342-2484, bballer@techweb.com
Account Manager, Trecia Humphrey
(516) 562-5685, thumphrey@techweb.com
Account Executive, Michael Greenhut
(516) 562-5044, mgreenhut@techweb.com
Sales Assistant, Fantasia Brown
(212) 600-3029, fbrown@techweb.com
Sales Assistant, Stephanie Diaz
(212) 600-3157, sdiaz@techweb.com

Verizon Business . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Verizon Wireless . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
VMware. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Websense . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

ADVERTISER INDEX
American Power Conversion www.apc.com . . . . . . . . . . . . . . . 13
Autonomy www.autonomy.com. . . . . . . . . . . . . . . . . . . . . . . C2, 1
dtSearch Corp. www.dtsearch.com . . . . . . . . . . . . . . . . . . . . . 46
Eaton www.powerware.com . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Hewlett-Packard www.hp.com. . . . . . . . . . . . . . . . . . . . . . . . . C4
Hypoint www.hypoint.com . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
IBM www.ibm.com. . . . . . . . . . . . . . . . . . . . 21, 23, 34, 35, 38, 39

Midwest and Mid-Atlantic


District Manager, Jenny Hanna
(516) 562-5116, jhanna@techweb.com
District Manager, Mary Hyland
(516) 562-5120, mhyland@techweb.com
Account Executive, Jennifer Gambino
(516) 562-5651, jgambino@techweb.com
Sales Assistant, Alicia Greco
(516) 562-5987, agreco@techweb.com

SALES CONTACTSEVENTS
District Manager, Maryanne Russo
(516) 562-5096, mrusso@techweb.com
Director, Event Operations, Jennifer Russo
(516) 562-5094, jrusso@techweb.com
MARKETING AND RESEARCH
Associate Publisher, Marketing, Winnie Ng-Schuchman
(516) 562-5982, wng@techweb.com
Director of Marketing, Sherbrooke Balser
(949) 223-3605, sbalser@techweb.com
Research Director, Amy Doherty
(508) 416-1168, adoherty@techweb.com
Director of Online Research, Donna Fabyonic
(516) 562-5016, dfabyonic@techweb.com
Senior Marketing Manager, Ellen Asuncion
(949) 223-3622, easuncion@techweb.com
Field Marketing/Sales Ops Manager,
Monique Luttrell (415) 947-6304, mluttrell@techweb.com
AUDIENCE DEVELOPMENT
Sr. Group Director, Scott Popowitz
(516) 562-7919, spopowitz@techweb.com
Director, Karen McAleer
(516) 562-7833, kmcaleer@techweb.com
Subscriptions (800) 453-7221
ADVERTISING AND PRODUCTION
Publishing Services Manager, Lynn Choisez
(516) 562-5581 Fax: (516) 562-7307
Publishing Manager, Ruth Duggan (516) 562-5111
MAILING LISTS
MeritDirect LLC (914) 368-1024
REPRINTS AND RIGHTS
For article reprints, e-prints, and permissions, please contact:
PARS International Corp.
Phone: (212-221-9595 x426
Fax: (212) 221-9195
E-mail: TechWebReprints@parsintl.com
Back Issues, Chandra Wallis (800) 444-4881
BUSINESS OFFICE
Senior Business Manager, Marian Dujmovits
EDITORIAL OFFICE
(Fax) 516-562-5036
United Business Media LLC, 600 Community Drive,
Manhasset, N.Y. 11030 (516) 562-5000
Copyright 2008. All rights reserved.
TECHWEB
Tony L. Uphoff, CEO
Bob Evans, Sr. VP and Content Director
Eric Faurot, Sr. VP, Live Events Group
Joseph Braue, Sr. VP, Light Reading Comm. Group
John Siefert, VP and Publisher, InformationWeek Business
Technology Network
Scott Vaughan, VP, Marketing Services
John Ecke, VP, Financial Technology Group
Greg Kerwin, VP, Global Development
John Dennehy, VP, Finance
Beth Rivera, VP, Human Resources
Jill Thiry, Publisher, Microsoft Technology Group
Fritz Nelson, Executive Producer, TechWeb TV
Scott Popowitz, Sr. Group Dir., Audience Development

UNITED BUSINESS MEDIA LLC

Anne Marie Miller, Corporate


Senior VP, Sales

Kevin Prinz, Chief Information Officer

Marie Myers, Senior VP, Manufacturing

Pat Nohilly, Senior VP, Strategic


Alexandra Raine, Senior VP,
Development and Business Administration Communications North America

Lumension Security www.lumension.com . . . . . . . . . . . . . . . . . 27


Microsoft www.microsoft.com . . . . . . . . . . . . . . . . . . . . . . . . . 5, 7
Rackspace www.rackspace.com . . . . . . . . . . . . . . . . . . . . . . . C3
Samsung www.samsungusa.com . . . . . . . . . . . . . . . . . . . . . . . 17
SAS Institute www.sas.com . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Sprint www.sprint.com . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Tibco www.tibco.com . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
Trend Micro Inc. www.trendmicro.com . . . . . . . . . . . . . . . . . . . 19
Verizon Wireless www.verizonwireless.com . . . . . . . . . . . . . . . 11

informationweek.com

INFORMATIONWEEK (ISSN 8750-6874) is published weekly, with a combined issue in December, by United Business Media LLC,
600 Community Drive, Manhasset, NY 11030. INFORMATIONWEEK is free to qualified management and professional personnel involved
in the management of information systems. One-year subscription rate for U.S. is $199.00; for Canada is $219.00. Registered for GST as
United Business Media LLC. GST No. R13288078, Customer No. 2116057, Agreement No. 40011901. Return undeliverable Canadian
addresses to Bleuchip International, P.O. Box 25542, London, ON, N6C 6B2. Overseas air mail rates are: Africa, Central/South America,
Europe, and Mexico, $459.00 for one year. Asia, Australia, and the Pacific, $489.00 for one year. Mail subscriptions with check or money
order in U.S. dollars payable to INFORMATIONWEEK. For subscription renewals or change of address, please include the mailing label
and direct to Circulation Dept., INFORMATIONWEEK, P.O. Box 1093, Skokie, IL 60076-8093. Periodicals postage paid at Manhasset,
NY, and additional mailing offices. POSTMASTER: Send address changes to INFORMATIONWEEK, United Business Media LLC, P.O.
Box 1093, Skokie, IL 60076-8093. Address all inquiries, editorial copy, and advertising to INFORMATIONWEEK, 600 Community Drive,
Manhasset, NY 11030. PRINTED IN THE USA

Dec. 15, 2008 47

DOWNTOBUSINESS
ROB PRESTON

The Rumble In The Cloud:


Salesforce Vs. Microsoft

N THE FACE OF IT, SALESFORCE.COM


and Microsoft couldnt be much more different, culturally and commercially. Yet
top execs from both companies were in
New York last week delivering a similar
message: Amid the economic downturn, the time is
now for business technology organizations
to consider moving some of their IT resources into the cloud.
As a pure-play software-as-a-service vendor, Salesforce is more aggressive about the
models potential benefits. CEO Marc Benioff
argues that applications such as Salesforces
CRM, delivered and updated over the Internet as subscription services, are 80% to 90%
cheaper than comparable premises-based
apps, factoring in hardware, maintenance, support, and
related costs. And when Salesforce data is integrated
with third-party Web apps, the revenue potential can
be explosive. For example, Salesforce last week demonstrated a proof-of-concept mashup that integrates
an online slot machine game from Harrahs Entertainment, built on Google App Engine, with a Harrahs VIP
guest site hosted on Salesforces Force.com platform
and using Salesforce customer data. (See story, p. 16.)
Stephen Elop, president of Microsofts Business Division, hasnt gulped down so much of the SaaS KoolAid, as Microsoft cant be undercutting its core premises software just yet. Still, Elop, whose $18.9 billion
unit oversees the Office, Exchange, SharePoint, and
Dynamics CRM lines, sees software services delivering
total cost of ownership savings of 10% to 40% compared with premises versions. The degree of interest
in online services is greater than I expected, he says,
and its the economy thats causing that. Customers,
Elop says, are anxious to discuss projects that cut costs
over the next 12 months, with no capital outlays.
Holding to its software plus services mantra, Microsoft forecasts that half of the revenue from its substantial Exchange, SharePoint, and CRM businesses
will come from online versions within five years. Compare that forecast to what Oracle, SAP, and other en48 Dec. 15, 2008

trenched app vendors are saying about SaaS: Its a


quaint little model, but not really viable short term.
Yet Benioff singles out Oracle and Larry Ellison as
Salesforces biggest threat. When you see him coming out so strongly against cloud computing, you know
hes worried, Benioff says, noting that Ellison is a student of Sun Tzus The Art of Warwhen
weak, feign strength. Its also worth noting
that Ellison, Benioffs former boss at Oracle,
owns a chunk of Salesforce, so Benioff isnt
so quick to slag off the master as he is to go
after Microsoft.
Benioff, always the agitator, says hes less
than impressed with Microsofts SaaS maneuvers, including its rollout a month ago of
Exchange Online and SharePoint Online.
(Microsofts Dynamics CRM Online service has been
available for several months, and Office Communications Online goes into testing early next year.) When
Microsoft rewrites its Office and Exchange apps from
scratch for a Web environment, Benioff says, then hell
take notice. When Microsoft offers a version of Hotmail for enterprises, then theyll be there, he says.
When it comes to taking on Microsoft and other
software companies, Benioff may be betting on another Sun Tzuism: Whoever is first in the field and
awaits the coming of the enemy will be fresh for the
fight; whoever is second in the field and has to hasten
to battle will arrive exhausted.
While Microsoft is indeed late to the cloud fightit
talked about a Windows Azure cloud operating system
and related Azure Services Platform in October, but it
refuses to give a delivery timetableits clearly on the
march. Microsoft has sold more than a half-million
seats of Exchange Online, SharePoint Online, and Office Communications Online, Elop says, and more than
10,000 customers have signed up for trial versions of
the Exchange and SharePoint offerings. Microsoft
should have a $1 billion cloud computing business
within 24 months. Microsoft may arrive in the cloud
exhausted, but it will arrive in force very soon.
ROB PRESTON, VP AND EDITOR IN CHIEF (rpreston@techweb.com)

informationweek.com

Potrebbero piacerti anche