Operational Control for Service Providers

Adam Cady

Operational Control for Service Providers

Delivering resilient infrastructure services to customers

It's 2:14 a.m. and a monitoring alert fires: a retail customer's regional hub has dropped off the network. Forty stores behind it can't process cards. The SLA promises restoration within four hours. The nearest field technician is ninety minutes away, and asleep.

What happens next depends on a decision the service provider made months earlier: whether it built an independent way to reach that site.

Scenario A: No out-of-band path. The NOC pings the hub. Nothing. The management platform rides the same circuit, so the device simply shows as unreachable. The customer has no remote hands on site, so a technician is dispatched. He arrives at 4:05 a.m., finds a router stuck after a failed overnight update, power cycles it and reloads the previous configuration. Service is restored at 4:40 a.m. The SLA is met by twenty minutes. The margin on that month's contract is gone.

Scenario B: CDI out-of-band in place. The NOC engineer opens the CDI management console and connects to the router's serial console over a private LTE path. The boot log shows the failed update. She power cycles the router through a CDI Power Control Module, interrupts the boot, loads the last known-good configuration and confirms traffic. Service is restored at 2:31 a.m. Nobody gets in a truck. The customer reads about it in the morning report.

Same failure. Same customer. Two very different outcomes, and two very different businesses.

Side-by-Side Comparison

Five Questions Your Customers Will Ask

"How fast can you fix my network if it's down?" Fast, because you aren't depending on the network to fix the network. CDI appliances connect directly to device serial consoles over LTE, not through LOM, iDRAC or iLO, and deploy as network and modem, modem only, or network only to fit each site.

"Can your other customers' engineers see my infrastructure?" No. CDI's OBM management software was built with MSPs in mind. Each customer network is provisioned individually, and access is granted per engineer, per network. Customers with stricter requirements can have dedicated client devices instead of shared ones.  All keystrokes are logged for forensic purposes.

"Isn't remote access a security risk?" It is when it's built on the public internet. CDI's out-of-band paths run over a private APN, every session requires two-factor authentication, and the PA200 Series offers optional encryption to support PCI compliance.

"Can you prove it meets our compliance requirements?" Yes, with paperwork. CDI was the first organization awarded FIPS 140-3 validation (Certificate #5465), and it covers CDI's own equipment rather than a borrowed module. With FIPS 140-2 certificates now Historical, that distinction shows up in federal and regulated procurement. PA100 Series units are approved for FISMA High, and CDI products are made in the USA and TAA compliant.

"Will this platform be around as long as our contract?" Yes. CDI designs long-life hardware in consistent product families, so the same runbooks, spares and training carry across your customer base for years.

From Cost Center to Revenue Line

Providers that answer those five questions well don't just keep customers; they upsell them. Guaranteed out-of-band recovery, documented validated security and per-engineer access controls make a natural premium service tier, and they shift renewal conversations from price to value.

CDI has built secure Out-of-Band Management for more than 25 years. To see how CDI fits your service delivery model, schedule a demo or call 1-800-359-8561.