• Share
  • Email
  • Embed
  • Like
  • Save
  • Private Content
Gain Visibility into Virtual Networks with Phantom Virtual TAP
 

Gain Visibility into Virtual Networks with Phantom Virtual TAP

on

  • 1,160 views

The Net Optics Phantom Virtualization Tap™ is a network traffic monitoring and access solution for virtualized computing environments developed for converged data centers. It captures data passing ...

The Net Optics Phantom Virtualization Tap™ is a network traffic monitoring and access solution for virtualized computing environments developed for converged data centers. It captures data passing between virtual machines (VMs) and sends traffic of interest to virtual and physical monitoring tools of choice. This innovative software Tap supports all major hypervisors, including VMware vSphere ESXi 4.x/5.x, Microsoft Hyper-V 2012, Redhat KVM, and Parallels. Unprecedented visibility of packet-level data lets you manage virtual network security, compliance, and performance using your choice of instrumentation layer tools—physical or virtual; local or remote. Because the Phantom Virtualization Tap can bridge virtual-to-physical in converged environments, you can maintain current policies while continuing to use your existing physical monitoring tools.

The Phantom suite of software products provides 100% visibility of virtual network traffic, including the unseen inter VM traffic on hypervisor stacks. This milestone solution has now expanded to support the industry’s leading hypervisors. The Phantom Monitor is vSwitch agnostic supporting the virtual standard switch, virtual distributed switch and next generation SDN since it installs at the kernel level ( mirroring the network packets before it arrives at the vSwitch). It is a software implementation of a switching mechanism that manages communications between virtual network devices and works identically to the physical switch. The Phantom Monitor can mirror all traffic within the virtual switch, apply smart TapFlow™ filtering,
and send traffic of interest to any monitoring tools of choice. It can even pass the mirrored traffic to a physical port so physical tools can monitor the data.

Enables visibility and control of network traffic in all best-of-breed hypervisors in the virtual environment: VMware vSphere ESX/ESXi Server 4.X/5.X; Citrix XenServer 5.6.x;
Redhat KVM 2.6.32; Oracle VM 3.0; Microsoft Hyper-V 2012.

Statistics

Views

Total Views
1,160
Views on SlideShare
1,048
Embed Views
112

Actions

Likes
1
Downloads
0
Comments
0

2 Embeds 112

http://networkpacketbroker.wordpress.com 111
https://twitter.com 1

Accessibility

Categories

Upload Details

Uploaded via as Microsoft PowerPoint

Usage Rights

© All Rights Reserved

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Processing…
Post Comment
Edit your comment
  • From the moment you connect, Net Optics solutions give you unprecedented, continuous, 100 percent visibility of your network traffic and applications. Now your IT engineers can drill down quickly from high-level metrics to granular details using true application-specific insights and timely root-cause analysis to detect, diagnose and resolve network problems. Real-time monitoring supports gigabit speeds.

Gain Visibility into Virtual Networks with Phantom Virtual TAP Gain Visibility into Virtual Networks with Phantom Virtual TAP Presentation Transcript

  • Phantom Virtual TAP Mihajlo Prerad, Network Performance Channel
  • About Net Optics • Founded in 1996. • HQ: Silicon Valley, USA • Offices: Germany, Netherlands, Australia, China • Manufacured industry 1st TAP ever! • 7.500+ global deployments • 20+ patents • 85% of fortune 100 Awards Media
  • Select Global Deployments Financial Telco Enterprise Healthcare Government 7,500+ Customers
  • Positioning MONITORING TOOLS NETWORK ORGANIZATIONAL GROUPS Total Application and Network Visibility™ IT and Network Operations Application Aware Network Performance Monitoring (AA-NPM) Private Cloud Service Assurance Troubleshooting Application Control Performance Management Network Packet Brokers Data Center Aggregation and Regeneration Security Load Balancing Filtering Virtual and Cloud Intra-VM Monitoring Virtualization Hypervisor and xSwitch Agnostic Network Taps and Bypass Switches Fail-Safe Network Access Branch Office Filtering and Tunneling IT / Server Administration Audit and Privacy Aggregation and Regeneration Visibility Management System (VMS) Forensics
  • Big Data | LTE Connectivity | Virtual Machine Traffic | An Application Explosion - All create dramatic new pain points for network operators in managing security, availability and performance Net Optics Solution Virtual Traffic Monitoring Network Traffic Optimization Application Aware NPM Advanced Tap Technology Total Solution Management Confidential and Proprietary IT and Network Operations IT / Server Administration Performance Management Audit and Privacy Security & Compliance Forensics / Lawful Intercept 5
  • Virtualization Solutions Visibility for Virtualized Environments MONITORING TOOLS NETWORK Virtualization Solutions Private Cloud Monitor Inter-VM (East-West) Traffic Preserve Capacity and Performance of VM Host Data Center Filtering Virtualization Phantom™ Virtualization Tap Branch Office Forward relevant virtualized traffic to physical monitoring tools for centralized monitoring and analysis Utilize Existing Physical Monitoring Tools
  • Virtualization Net Optics Phantom Solution for monitoring in a virtualized computing environment consists of four key components: The Phantom™ Virtualization Tap provides visibility to all server traffic including inter-VM traffic. The Phantom HD™ for network traffic filtering and pre-processing of packets captured in virtual environments. The Director™ Data Monitoring Switch family is an optional component that can manage the Phantom HD Physical monitoring tools are the final component of the Phantom Solution for performance, security, and compliance monitoring in the virtualized environment. Flagship Product Visibility to all server traffic including inter-VM traffic. Phantom™ Virtualization Tap Network traffic filtering and pre-processing of packets captured in virtual environments Phantom HD™ Key Benefits • Preserves performance, capacity, throughput and utilization for a true cutting-edge technology solution • Lowers investment in virtual tools by bridging existing physical tools to the virtual network • Enables routing of data from data centers to central monitoring facilities • Enables monitoring of virtual network traffic in a virtualized computing infrastructure that is unable to process VN-Tags
  • Where Blind Spots are created VM 0 App VM 2 App VM 3 App OS Virtual Ethernet Adapters VM 1 App OS OS OS Service Console ESX vSphere 4.1 vSwitches Physical Ethernet Adapters ? Production LAN Analyzer Productio n LAN Managem ent LAN
  • Challenge Server VM Server VM Server VM Virtualization Creates Security, Monitoring and Compliance Risks • No visibility into inter-VM traffic, vulnerabilities or threats vSwitch • Lacks auditing of data passing between virtual servers • Inability to pinpoint resource utilization issues pNIC pNIC
  •  ESX Virtual Stack with Phantom Installed Phantom Controller vm1 (VM) vm2 vm3 Enables Security, Performance Monitoring and Compliance Phantom Virtual Tap • 100% visibility of inter-VM traffic • Kernel implementation—no need for SPAN Ports / Promiscuous Mode on Cisco v1000 • Bridges virtual traffic to physical monitoring tools Virtual Switch ( ie, Cisco 1000V ) Physical Host Server Physical Network Security & Monitoring
  • Phantom TAP captures Inter-VM traffic Encapsulated traffic sent through GRE tunnel to RSA Netwitness Netwitness can now inspect virtual traffic for complete security
  • Phantom TAP captures Inter-VM traffic Phantom TAP filters for specific IP address and protocol on each VM Encapsulated traffic sent through GRE tunnel to PhantomHD for decapsulating SourceFire NGIPS can now inspect both physicall and virtual traffic!
  • Virtual and Physical convergence ES X KV M XE N VM2 VM1 VM2 VM2 VM1 VM2 VM2 VM1 VM2 App App App App App App App App App OS OS OS OS OS OS OS OS OS Phantom™ Phantom™ Phantom™ Manager Manager Manager Net Optics Phantom™ HD V Switch Hypervisor V Switch Hypervisor V Switch Hypervisor Tunnel Physical Server Physical Server LAN/WAN Net Optics Director™ IDS NGFW DLP Protocol Analyzer Manager
  • Support for vMotion migration Phantom Monitor™ Phantom Monitor™ Hypervisor Hypervisor LAN/WAN Phantom Manager™
  • Support for vMotion migration ESX 1 vm1 ESX 2 vm2 vm3 vm5 vm6 Phantom Monitor™ Phantom Monitor™ Hypervisor Hypervisor LAN/WAN Phantom Manager™
  • Support for vMotion migration ESX 1 vm1 ESX 2 vm2 vm5 vm6 vm3 Phantom Monitor™ Phantom Monitor™ Hypervisor Hypervisor LAN/WAN Phantom Manager™
  • Net Optics Solution: Virtualization vSwitch VM 4 Blade Backbone Net Optics SW VM 3 VM 6 Preserves hypervisors’ performance, capacity, throughput and utilization  VM 5  Developed in close cooperation with Vmware, Microsoft, Xen and Parallels Lowers investment in virtual tools by bridging existing physical tools to the virtual network Enables routing of data from remote data centers to central monitoring facilities  VM 2 Hypervisor Kernel implementation – no need for SPAN Ports / Promiscuous Mode  VM 1 Enables Security, Perfor mance Monitoring and Compliance   Hypervisor 100% visibility of inter-Virtual Machine traffic Net Optics SW vSwitch Production LAN Network Monitoring Tools Strengths Highest Performance Cross Platform Certified Kernel Level Software Market’s Only Software Certified by VMware, Cisco, Microsoft, IBM, V Block, Oracle, Citrix and Red Hat Confidential and Proprietary 18
  • Phantom benefits • Multilayer L2-L4 filtering inside of Virtual environment: source & destination IP, MAC, protocol, port, VLAN... • Enables regeneration and aggregation of traffic without impacting the performance (low CPU and memory usage) • Provides inter-VM traffic visibility • Supported by all major hypervisors: o o VMWare 4.x and 5.x Citrix Xen 5.x, Microsoft Hyper-V, Oracle VM 3.0, .... • vMotion migration support • Generates important L2 & L3 statistics: network activity summary (packet count, utilization, etc.), top protocols, top talkers, sources, destinations and connections
  • 30 days demo available!
  • Differentiation Comes from Continuous Innovation and Thought Leadership Net Optics Solution Framework 1 Portfolio of products built as a cohesive solution 2 Performance, cross platform solution, VMware certified, vCenter compliant, value added tags 3 Total Application and Network Visibility™ Next generation load balancer, low latency, double density, flexible deployment options 4 Simplicity, ease of use, application meta data, designed for cost-effective deployment 5 Reputation, density, breadth of solution, sophisticated bypass technology 6 Single pane of glass, central visibility and control, automation Virtualization and Cloud Platforms Intra-VM Monitoring Hypervisor and xSwitch Agnostic Filtering and Tunneling Network Packet Brokers Aggregation and Regeneration Load Balancing Filtering Application Aware Network Performance Monitoring (AA-NPM) Service Assurance Troubleshooting Application Control Network Taps and Bypass Switches Fail-Safe Network Access Aggregation and Regeneration Centralized Visibility and Control Confidential and Proprietary 21
  • Thank You! www.netoptics.com www.np-cannel.com www.network-taps.eu Mihajlo Prerad Regional Sales Manager Network Performance Channel mihajlo.prerad@np-channel.com +43 664 831 6674