Enterprise networks are like air. When they\u2019re running smoothly, it\u2019s easy to take them for granted, as business users and customers are able to go about their normal activities. But when customer service reps are suddenly cut off from their ticketing system, or family movie night turns into a game of \u201cIs it my router, or the network?\u201d, everyone notices. This is why network resilience is critical.<\/span><\/p>\n But, what exactly does resilience mean today? Let\u2019s find out by looking at some recent real-world examples, the history of network architectures, and why network resilience doesn\u2019t mean what it did 20 years ago.<\/span><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.17.6″ _module_preset=”default” width=”100%” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.17.6″ _module_preset=”default” global_colors_info=”{}”][et_pb_text admin_label=”Text” _builder_version=”4.24.0″ _module_preset=”default” global_colors_info=”{}”]<\/p>\n There\u2019s no shortage of real-world examples showing why network resilience matters. The takeaway is that network resilience is directly tied to business, which means that it impacts revenue, costs, and risks. Here is a brief list of resilience-related incidents that occurred in 2023 alone:<\/span><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.17.6″ _module_preset=”default” width=”100%” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.17.6″ _module_preset=”default” global_colors_info=”{}”][et_pb_text admin_label=”Text” _builder_version=”4.24.0″ _module_preset=”default” global_colors_info=”{}”]<\/p>\n Based on the examples above, it might seem that network resilience could mean different things. It might mean having backups of golden configs that you could easily restore in case of a mistake. It might mean beefing up your security and\/or replacing outdated systems. It might mean having recovery processes in place.<\/span><\/p>\n So, which is it?<\/span><\/p>\n The answer is, it\u2019s all of these and more.<\/span><\/p>\n Donald Firesmith (Carnegie Mellon) <\/span>defines resilience<\/span><\/a> this way: \u201cA system is resilient if it continues to carry out its mission in the face of adversity (i.e., if it provides required capabilities despite excessive stresses that can cause disruptions).\u201d<\/span><\/p>\n Network resilience means having a network that continues to serve its essential functions despite adversity. Adversity can stem from human error, system outages, cyberattacks, and even natural disasters that threaten to degrade or completely halt normal network operations. Achieving network resilience requires the ability to quickly address issues ranging from device failures and misconfigurations, to full-blown ISP outages and ransomware attacks.<\/span><\/p>\n The problem is, this is now much more difficult than it used to be.<\/span><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.17.6″ _module_preset=”default” width=”100%” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.17.6″ _module_preset=”default” global_colors_info=”{}”][et_pb_text admin_label=”Text” _builder_version=”4.24.0″ _module_preset=”default” global_colors_info=”{}”]<\/p>\n Twenty years ago, IT teams managed a centralized architecture. The data center was able to serve end-users and customers with the minimal services they needed. Being \u201cconstantly connected\u201d wasn\u2019t a concern for most people. For the business, achieving resilience was as simple as going on-site or remoting-in via serial console to fix issues at the data center.<\/span><\/p>\n Then in the mid-2000s, the advent of the cloud changed everything. Infrastructure, data, and computing became decentralized into a distributed mix of on-prem and cloud solutions. Users could connect from anywhere, and on-demand services allowed people to be plugged in around-the-clock. Services for work, school, and entertainment could be delivered anytime, no matter where users were.<\/span><\/p>\n Behind the scenes, this explosion of architecture created three problems for achieving network resilience, which a simple serial could no longer fix:<\/span><\/p>\n Too Much Work<\/b><\/p>\n Infrastructure, data, and computing are widely distributed. Systems inevitably break and require work, but teams don\u2019t have the staff to keep up.<\/span><\/p>\n Too Much Complexity<\/b><\/p>\n Pairing cloud and box-based stacks creates complex networks. Teams leave systems outdated, because they don\u2019t want to break this delicate architecture.<\/span><\/p>\n Too Much Risk<\/b><\/p>\n Unpatched, outdated systems are prime targets for packaged attacks that move at machine speed. Defense requires recovery tools that teams don\u2019t have.<\/span><\/p>\n Enabling businesses to be resilient in the modern age requires an approach that\u2019s different than simply deploying a serial console for remote troubleshooting. Gen 1 and 2 serial consoles, which have dominated the market for 20 years, were designed to solve basic issues by offering limited remote access and some automation. The problem is, these still leave teams lacking the confidence to answer questions like:<\/span><\/p>\n Hyperscalers, Internet Service Providers, Big Tech, and even the military have a resilience model that they\u2019ve proven over the last decade. Their approach involves fully isolating command and control from data and user environments. This allows them to not only gain low-level remote access to maintain and fix systems, but also to \u201cdefend the hill\u201d and maintain control if systems are compromised or destroyed.<\/span><\/p>\n This approach uses something called <\/span>Isolated Management Infrastructure (IMI)<\/b>.<\/span><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.17.6″ _module_preset=”default” width=”100%” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.17.6″ _module_preset=”default” global_colors_info=”{}”][et_pb_text admin_label=”Text” _builder_version=”4.24.0″ _module_preset=”default” global_colors_info=”{}”]<\/p>\n Isolated Management Infrastructure is the practice of creating a management network that is completely separate from the production network. Most IT teams are familiar with out-of-band management as this network; IMI, however, provides many capabilities that can\u2019t be hosted on a traditional serial console or OOB network. And with increasing vulnerabilities, <\/span>CISA issued a binding directive<\/span><\/a> specifically calling for organizations to implement IMI.<\/span><\/p>\n Isolated Management Infrastructure using <\/span>Gen 3 serial consoles<\/span><\/a>, like ZPE Systems’ Nodegrid devices,\u00a0provides more than simple remote access and automation. Similar to a proper out-of-band network, IMI is completely isolated from production assets. This means there are no dependencies on production devices or connections, and management interfaces are not exposed to the internet or production gear. In the event of an outage or attack, teams retain management access, and this is just the beginning of the benefits of having IMI.<\/span><\/p>\n IMI includes more than nine functions that are required for teams to fully service their production assets. These include:<\/span><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.17.6″ _module_preset=”default” width=”100%” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.17.6″ _module_preset=”default” global_colors_info=”{}”][et_pb_text admin_label=”Text” _builder_version=”4.24.0″ _module_preset=”default” global_colors_info=”{}”]<\/p>\n ZPE Systems has worked alongside Big Tech to fulfill their requirements for IMI. In doing so, we created the Network Automation blueprint as a technical guide to help any organization build their own Isolated Management Infrastructure. Download the blueprint now to get started.<\/span><\/p>\n [\/et_pb_text][et_pb_button button_url=”https:\/\/zpesystems.com\/network-automation-blueprint\/” button_text=”Download blueprint” _builder_version=”4.21.0″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_button][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”3_5,2_5″ _builder_version=”4.17.6″ _module_preset=”default” width=”100%” global_colors_info=”{}”][et_pb_column type=”3_5″ _builder_version=”4.17.6″ _module_preset=”default” global_colors_info=”{}”][et_pb_text admin_label=”Text” _builder_version=”4.24.0″ _module_preset=”default” global_colors_info=”{}”]<\/p>\n Get in touch with 30-year cybersecurity and networking veteran James Cabe, CISSP, for more tips on IMI and how to get started.<\/span><\/p>\n [\/et_pb_text][\/et_pb_column][et_pb_column type=”2_5″ _builder_version=”4.17.6″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/11\/James-Cabe-headshot.jpeg” alt=”James Cabe headshot” title_text=”James Cabe headshot” url=”https:\/\/www.linkedin.com\/in\/jamescabe\/” _builder_version=”4.24.0″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":" Network resilience requirements have changed. James Cabe discusses why the new standard is Isolated Management Infrastructure.<\/p>\n","protected":false},"author":5,"featured_media":39206,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","content-type":"","footnotes":""},"categories":[74,32,95,165,103,156,101,161,93,99,81,112,134],"tags":[],"class_list":["post-39201","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-application-hosting","category-datacenter-management","category-devops","category-edge-computing","category-improve-network-security","category-micro-segmentation","category-minimize-impact-of-disruptions","category-netdevops","category-network-automation","category-remote-network-management","category-virtualization","category-zero-touch-provisioning","category-zero-trust-security"],"yoast_head":"\nWhy does network resilience matter?<\/h1>\n
\n
What does network resilience mean?<\/h1>\n
How did network resilience become so complicated?<\/h1>\n
![\"Network](\"https:\/\/zpesystems.com\/wp-content\/uploads\/2021\/09\/Simple-networking-1024x468.png\")
<\/p>\n![\"Network](\"https:\/\/zpesystems.com\/wp-content\/uploads\/2021\/09\/Complex-networking-1024x405.png\")
<\/p>\n\n
Isolated Management Infrastructure is the best practice for network resilience<\/h1>\n
![\"A](\"https:\/\/zpesystems.com\/wp-content\/uploads\/2024\/01\/Isolated-Management-Infrastructure-using-Nodegrid-1024x592.jpg\")
<\/p>\n\n
Get the guide to build IMI<\/h2>\n
Discuss IMI with James Cabe, CISSP<\/h2>\n
\n