WEBVTT 00:00:00.940 --> 00:00:11.640 Hello, everybody, and welcome to this webinar around Microsoft Teams and NHSmail. My name is Clive Star, and I'm the lead technical architect covering both NHSmail and HSCN. 00:00:12.260 --> 00:00:24.020 After we made the announcement on the Microsoft Teams enablement on NHSmail, we had feedback from a number of organisations primarily concerned around network overheads and how this is going to affect the network traffic 00:00:24.640 --> 00:00:37.400 within their organisation. So I've put together a couple of slides where we're just going to go through that in a little bit more detail. You'll see we're going to cover what's been actually enabled, the kind of use cases that Teams is designed to support, 00:00:37.780 --> 00:00:49.660 Network Considerations, Device Considerations, and where to find out more about the service. So in terms of what's been enabled, we've enabled Microsoft Teams, 00:00:50.000 --> 00:01:02.240 OneDrive, SharePoint and the Office apps online. So Word, Excel, PowerPoint, Delve as well. And to get into the service, you log into portal.office365.com 00:01:02.260 --> 00:01:13.660 with your NHSmail credentials. Please note this does not include the desktop versions of Office. So if you need to use the desktop versions of Office, that remains a local licence for you to use. 00:01:15.920 --> 00:01:26.400 So a little bit about Teams. So what is Teams? So Teams is designed as a collaboration tool from Microsoft with Office 365. It supports chats, so you're able to chat with colleagues 00:01:26.400 --> 00:01:36.220 not only within your organisation, but across other organisations in real time. At a touch of a button, you can instantly go, from group chat to video conferencing. 00:01:36.400 --> 00:01:47.580 And you can seamlessly use Teams to hold meetings with other NHSmail colleagues, regardless of the organisation they're in. You can access, share, edit documents in real time. 00:01:47.660 --> 00:01:57.240 So multiple users can access one Word document and make changes at the same time and catch up on all your unread messages and using some of the app mention features within. 00:01:59.480 --> 00:02:07.180 In terms of video conferencing, we've looked at these main use cases with our clinical safety team and also with Microsoft. 00:02:07.460 --> 00:02:18.660 So remote working, we feel this is probably going to be one of the most widely used services within Teams, where people can work across different organisations and different locations seamlessly. 00:02:20.280 --> 00:02:33.240 Virtual consultations, Microsoft are looking at releasing some virtual consultation templates for Teams, and this is expected to be available within a couple of weeks. We're then going to do some more work with our clinical safety team to make sure we've got this right supported 00:02:33.400 --> 00:02:43.740 and we've got the right use cases for you within that area. The dry clean ward support area. This is particularly where you've got isolation between people and need to carry on communication. 00:02:44.380 --> 00:02:51.240 And finally, the patient visitor support use case, where patients are in isolation and their relatives need to talk with them. 00:02:53.830 --> 00:03:05.510 So in terms of network bandwidth and network capabilities, first of all, I want to talk about what we've done within the central service and the central capability. So overall, you're seeing here a high level diagram. 00:03:05.670 --> 00:03:16.790 Of the former transition network, HSCN, and how we get onto the internet. You'll see on the left hand side of the diagram, we've got the transition network provided by BT. 00:03:17.070 --> 00:03:23.870 And we work with BT to make sure there's sufficient capacity to make sure the service can carry on working with additional load. 00:03:24.330 --> 00:03:35.650 Then on the HSCN service within HSCN, HSCN is a disaggregated network with a multiple range of network service providers. So over 20 different consumer network services. 00:03:35.650 --> 00:03:46.110 And HSCN then is joined together by something called the peering exchange. And this joins all of the different CNSPs together. And then you've got your internet service. 00:03:46.330 --> 00:03:53.110 So on HSCN, you can buy your HSCN connectivity and your internet connectivity from the same provider. 00:03:53.250 --> 00:04:05.630 And then that will break out to the internet through the advanced network monitoring service and the secure boundary service. Whereas the former transition network has its own internet gateway. In terms of the HSCN service. 00:04:05.630 --> 00:04:12.570 In terms of capacity of the service, all of these central components are operating at around about 25% of their full capacity. 00:04:12.810 --> 00:04:19.450 So there is sufficient headroom in there to allow a significant increase in network traffic across these devices. 00:04:19.790 --> 00:04:27.290 We've also worked with our providers to look at what we would need to do should we need spin up additional network capacity or capability. 00:04:30.150 --> 00:04:42.490 In terms of how teams work, teams flows its traffic typically on a peer to peer basis. So if there's only one to one conversations going on, the traffic would go between one network point and another. 00:04:42.690 --> 00:04:52.530 So if, for example, in your hospital, you've got two people having a video conference, it will just go between the two points within the local network and not actually leave the network. 00:04:52.990 --> 00:05:04.590 It's only when you do what we call multipoint conversations where you've got more than two people talking on teams, be it an audio conference or a video conference. And you can see here on this diagram. 00:05:05.190 --> 00:05:07.570 I've showed the different networks. So we've got a network traffic flow. 00:05:07.690 --> 00:05:21.870 So if, for example, we have a someone on the transition network and wants to go and have a multipoint video conference with someone, their traffic will go through the transition network through the transition networks internet gateway and into Office 365. 00:05:22.990 --> 00:05:34.250 Equally, if someone was on a HSCN provided service, they would go through their consumer network service provider through their internet provision, and then into Office 365. 00:05:35.830 --> 00:05:45.050 Where in the world. So if an organization has its own internet connectivity that will go through your own internet breakout and into Office 365, as shown on this diagram. 00:05:49.780 --> 00:06:01.300 In terms of network planning. In addition to usual web traffic, you need to make sure that you've got the following ports and IP addresses open to support the video conferencing in teams. 00:06:01.700 --> 00:06:10.840 There's also a range of network optimization tasks that you can undertake. So, for example, ensuring all computers. Running the team's desktop cloud. 00:06:10.840 --> 00:06:14.860 And then the client can resolve external DNS queries to route traffic appropriately. 00:06:15.900 --> 00:06:31.880 One thing that you're likely to see a need to do is to increase your not your network address translation and your port address translation pools to make sure they've got enough addresses in there to stop port exhaustion, as you're going to suddenly find lots more people going out to use this service. 00:06:32.340 --> 00:06:42.080 And if you're using an intrusion detection service. You should whitelist the office 365 URLs. So that they don't hinder the traffic passing through there. 00:06:42.500 --> 00:06:50.820 And another area you can make performance increases is to configure split tunnel VPNs. And this is to route Office 365 directly. 00:06:51.540 --> 00:06:57.600 Because the traffic is encrypted and your gateway components aren't going to be able to do anything with that traffic. 00:06:58.460 --> 00:07:10.590 I said the slides will be shared at the end of this webinar, and you'll see in there some URLs which go into this in far much more detail than I've got time to do on this webinar today. In terms of data. 00:07:10.590 --> 00:07:19.630 So in terms of your Internet connectivity. Typically an organization is going to have their Internet provided either by HSCN or your own Internet connection. 00:07:19.950 --> 00:07:27.110 If you've got your Internet provided by Hscn that runs over the same physical bearer as your HSCN traffic. 00:07:27.270 --> 00:07:36.770 And we designed HSCN to take this into account as we expected over time traffic on HSCN to decrease and traffic on the Internet to increase. 00:07:36.770 --> 00:07:50.650 So you're able to get in touch with your consumer network service provider and get them ready to perhaps increase the amount of Internet traffic you're going to have over this coming period and decrease the bandwidth allocated for HSCN traffic. 00:07:51.450 --> 00:08:03.250 If you've got your own Internet connection, you should look at talking to your Isp around what capacity you have there. What monitoring is in place and what options you've got for potentially increasing that traffic. 00:08:03.330 --> 00:08:14.350 And both on Hscn on the Internet. Within your local area network, you've got options of doing traffic prioritization and traffic routing to make sure the traffic is going as efficiently as possible. 00:08:17.280 --> 00:08:28.660 An area of concern that we've had from a number of organizations since we made the announcement on teams is around bandwidth and concerns around the amount of video traffic that's going to start going over the network. 00:08:29.200 --> 00:08:36.980 So Microsoft design teams from the outset to give the best audio and video experience as possible. Regardless of your network condition. 00:08:38.840 --> 00:08:45.360 But teams has been designed by default to be conservative on bandwidth. Yes, it will try and use all the bandwidth available. 00:08:45.740 --> 00:08:55.660 But when it starts experiencing congestion and it starts seeing decreased performance, it will start prioritizing the audio traffic over the video traffic. 00:08:55.780 --> 00:09:08.580 So it will start dropping the video framework rate down and the video resolution down as you start getting into a bandwidth constrained network where it isn't limited to just the video. And there is unlimited bandwidth. 00:09:08.960 --> 00:09:20.620 Then teams will obviously try and go for the highest video resolution and the highest frame rate per second. But as I said earlier, the service will start decreasing that when it starts seeing congested network. 00:09:22.240 --> 00:09:27.580 One of the other things that we've been asked for many organizations is what is the bandwidth requirements for teams? 00:09:28.000 --> 00:09:36.140 So I've put up a table there showing you what the typical bandwidth requirement is for audio calls and for the different levels of video calls. 00:09:36.140 --> 00:09:42.800 But it's not as simple as just calculating that out, because there's a whole range of other factors you need to take into consideration. 00:09:43.220 --> 00:09:55.180 So you may, for example, have something full screen or minimized, and teams will also adaptively adjust itself to deliver the best experience over the available bandwidth you've got there. 00:09:55.980 --> 00:10:06.120 Equally, when you're trying to plan this out, it's very difficult to know how many people at what time are going to set up a video conference or schedule a video conference. And again, I've included this. 00:10:06.140 --> 00:10:10.420 I've included a link there where there's much more information on the detail you can look at for this. 00:10:12.770 --> 00:10:19.290 In terms of what support is available, we've published a whole range of articles in the NHSmail support pages. 00:10:19.390 --> 00:10:28.410 So that URL there, https://support.nhs.net, you'll see when you first go on to that page, there's an introduction to teams. 00:10:28.530 --> 00:10:40.170 We've put a landing page there, and we've also put a video just walking users through what teams is about, what teams looks like, the different kind of interviews. We've also put a link to the different interfaces that are available to you. 00:10:40.730 --> 00:10:49.170 We've also included some advice for local administrators. So information I've talked about earlier about network configuration and best practice there. 00:10:49.330 --> 00:10:58.850 We've also included information around the different client types, how to get them, how to install them. So hopefully everyone will find that information really useful. 00:10:59.050 --> 00:11:11.850 We've also got a frequently asked questions section, and we're updating that regularly on a daily basis. The questions keep coming into the feedback mailbox or go into the support area. We start building up and enriching that area. 00:11:15.920 --> 00:11:24.300 We've also broken down the help pages into different categories. So you can see there there's categories about introduction to teams, how to set up meetings. 00:11:24.500 --> 00:11:36.780 So information for users, the frequently asked questions I talked about, and then how the system works for local administrators. So how do local administrators set up teams, add teams, remove teams, add users to it. 00:11:36.780 --> 00:11:45.800 All the guidance you'll find there. So those were the main things that I was going to talk about today. Now, some additional questions we've had into the mailbox. 00:11:46.080 --> 00:11:57.290 So I'm just going to work through some of the questions that different people have fed back to us today. And hopefully you'll find these of use. So we've been asked, when will teams be enabled? 00:11:57.850 --> 00:12:08.710 We started enabling the service to all users at the start of the week. We've now got over 500,000 users enabled. And we hope to complete the license enablement by the end of this weekend. 00:12:10.090 --> 00:12:17.050 How long has Teams been enabled for? So the license that we've been provided with has been enabled for three months. 00:12:17.310 --> 00:12:26.550 There's a lot of wider activity going on to license the platform for an indefinite period and move the service onto Office 365. 00:12:28.310 --> 00:12:40.670 What organizations have been enabled? Has my organization been enabled? We are sequentially enabling organizations. And as I said earlier, expect this to finish by the end of the week. 00:12:42.010 --> 00:12:54.850 What are the prerequisites and the minimum requirements for MS Teams? Teams has been designed to enable it to work within a browser and not all browsers support video. So Chrome, for example, supports video. 00:12:55.410 --> 00:13:03.790 So you need to look within that guidance pages about which browsers support video and which browsers do not. There's a there's a set of desktop clients. 00:13:04.050 --> 00:13:12.690 Desktop clients include those designed to work on Windows, Mac and Linux. And we also know from Microsoft that the service works on VDI. 00:13:13.990 --> 00:13:25.880 There's also mobile clients available and most mobile clients work on Android and iOS. Within our organization, we've already got Microsoft Teams enabled. 00:13:26.160 --> 00:13:30.900 Do we need to do anything differently to use the NHSmail version of Microsoft Teams? 00:13:31.720 --> 00:13:39.900 Now, that's going to be an organization decision of whether you want to use the NHSmail version of Teams or carry on using your own service. 00:13:42.240 --> 00:13:54.980 We've had feedback from some people saying they're getting error messages, but they don't have the Office 365 license enabled. And this is because the license is still being rolled out, as I said earlier. And we hope that's going to complete by the end of the weekend. 00:13:57.520 --> 00:14:09.280 In terms of functionality, we've had a number of questions about how do we administer teams and how do we get portal access for the administrators? In the support pages, we've included a guide to setting up teams. 00:14:09.420 --> 00:14:22.200 In essence, LA's initially through the NHSmail portal, set up the teams and make a number of people owners. And then those owners can from within teams then start adding in additional members. 00:14:23.620 --> 00:14:31.040 So how do I do that? How do I add in those additional members? In the team, you simply click on the three dots and click add member. 00:14:33.370 --> 00:14:45.150 Will this address the problem of silo tenancies where team memberships can only be from one organization's active directory? And will it permit guests? Within the design that we've put together for NHSmail, 00:14:45.170 --> 00:14:51.110 we've worked on carrying on the principle of NHSmail supports cross-organizational working. 00:14:51.390 --> 00:14:59.910 So when you set up a team, it's as easy to invite members from a different organization into your team as it is to people within your organization. 00:15:00.190 --> 00:15:11.210 For those that are on NHSmail, we've also built in a capability to support guest access. And also that service regularly requires you to check that the person still requires access. 00:15:11.410 --> 00:15:22.750 So a kind of attestation process to make sure you don't keep people out. Giving guests access for an unlimited period of time. We've had a number of questions around information governance. 00:15:23.050 --> 00:15:35.990 So in putting this service together, NHS Digital has undertaken a data protection impact assessment for the service. We've ensured that as we've set the service up, that all data is hosted within the UK. 00:15:36.470 --> 00:15:45.390 And any data that's put into the service will be put into the service based on your own local organization's usage of the service. And as you would expect, 00:15:45.390 --> 00:15:54.650 similar to NHSmail, the service has full auditing capabilities in place. So we're able to discover usage that may need further investigation. 00:15:56.090 --> 00:16:08.230 Those are all the questions that we've received in for now, and I'm sure we'll keep receiving more questions in. It's our intention to actually run a live webinar very shortly where people will be able to ask their own live questions. 00:16:08.610 --> 00:16:14.190 For now, I hope everyone has found that of much use and can't wait to do the live webinar for you all.