The Aviatrix AVX Software-Defined Cloud Router establishes an abstraction layer between the public cloud provider’s networking primitives and the application to simplify the creation of logical cloud networks and services for hybrid connectivity, data security, multicloud connectivity, monitoring and troubleshooting. The solution consists of two components: Aviatrix Controller; and the Aviatrix Gateways, all of which are deployed in your VPCs or the on-premises environment.

1. Getting the Most Value from Your Aviatrix
Controller & Gateways
Gaurav Thakur
Technical Customer Success Lead
Customer Webinar: February 20, 2019

2.  Aviatrix User VPN
 Logging for User Metrics
 Multi VPC Design
 Multi Region and Multi Cloud Design
 What else can we do with Aviatrix Controller and Gateways
 Use Case: Policy based Egress
 Use Case: Transit
 Live Q & A
Agenda
LOOK FOR THIS BUTTON

3. © 2017 AVIATRIX SYSTEMS, INC . | 3
• Why is Logging important?
- Who accessed what at
what time?
- Compliance Reports: like
PCI or HIPPA requirements
- Audit Trail
- Operational control
- Troubleshooting
- SIEM Integration
User VPN – Supported Logging Platforms
AWS VPC
Contractor profile
{accept to X, Z
deny all}
Employee profile
{accept to all}
Partner profile
{accept to Z
deny all}
Profile
Logging/Audit
• Logstash
• Splunk
• SumoLogic
• Remote Syslog
• Datadog
• NetFlow
• CloudWatch

4.  Login / Logout time
 VPN Sessions Details
 Source and Destination details
 Packet sizes
 VPN User Connection History
 Bandwidth Usage
 Profile information
 What IPs were accessed during the session
Logging | What information is available?
This is included with your
existing license

5. © 2017 AVIATRIX SYSTEMS, INC . | 5
Additional consideration of
this architecture:
• Internet Access required
• Might need policy based
control so you can limit the
access to certain sites/URLs
(FQDN)
• Ongoing enforcement
• In case of SIEM integration
or archival data dump, need
policy control over ftp sites
too
Logging – setup and configuration
AWS VPC
Splunk
Access to Internet
Sumo Logic
Logging Server 1
Logging Server 2

6. © 2017 AVIATRIX SYSTEMS, INC . | 6
• Why does it matter:
- Control on what URLs are accessed by
the workloads in the VPC
- URL based filtering
- Compliance requires policy based
egress
• Native Options
- Security Groups
- Network ACLs
• What value does Aviatrix bring to the
table
- FQDN based Egress Control
- Ability to enforce policies
- Provides NATing capability
Policy based Egress Control
Internet
Centralized Management
AVX gateway
….
VPC 1 VPC 2 VPC 3 VPC 4 VPC 100
ubuntu.com
office365.com
Mysftpserver.co
myandrex.ru
fakenews.ro
Contractor profile
{accept to X, Z
deny all}
Employee profile
{accept to all}
Partner profile
{accept to Z
deny all}

7.  Aviatrix User VPN
 Logging for User Metric
 Multi VPC Design
 Multi Region and Multi Cloud Design
 What else can we do with Aviatrix Controller and Gateway
 Use Case: Policy based Egress
 Use Case: Transit
 Live Q & A
Agenda
LOOK FOR THIS BUTTON

8. © 2017 AVIATRIX SYSTEMS, INC . | 8
VPC 2VPC 1 VPC 3 VPC 4
Contractor profile
{accept to X, Z
deny all}
Employee profile
{accept to all}
Partner profile
{accept to Z
deny all}
Profile
Having a VPN gateway in each VPC
is not desirable, because:
a) Users will have to deal with
and switch between multiple
VPN certificates
b) Will have to provision users
separately for each VPN
gateway
c) Not a scalable option
Multi VPC/Multi Region/Multi Cloud
Design

9. © 2017 AVIATRIX SYSTEMS, INC . | 9
Solution #1: Peering
VPC 1
VPC 3 VPC 4
VPC 2
Peering
Contractor profile
{accept to X, Z
deny all}
Employee profile
{accept to all}
Partner profile
{accept to Z
deny all}
Profile
• Why does it matter:
- Looking to connect multiple
VPCs/VNETs together
- Want to have a single VPN landing
zone for all the remote users
• Native Option
- Peering
• Problems/Disadvantages
- Not a scalable option
- Hard to manage network segregation:
Dev vs Prod
- May get expensive once the network
starts growing: adding more VPCs

10. © 2017 AVIATRIX SYSTEMS, INC . | 10
• Why does it matter:
- Looking for a scalable network design
for your VPN needs
- Multiple VPCs/Multiple Regions/Multi-
cloud
• Native Option
- AWS Transit Gateway
- Azure Transit VNET
• What value does Aviatrix bring to the
table
- NativePlusTM Architecture (Native
Options + Aviatrix Value Add)
• AWS Transit Gateway + Aviatrix
TGW Orchestrator
• Aviatrix Azure Transit Solution
- Enables cross/multi cloud connectivity
- Consolidates edge connectivity
- Encryption
Solution #2: Next Gen Transit Network
AVX Controller
Spoke Spoke Spoke Spoke
TGW
Shared Service
VPC
Contractor profile
{accept to X, Z
deny all}
Employee profile
{accept to all}
Partner profile
{accept to Z
deny all}
Profile

11.  You’ll receive email with link to a replay
and slides
 Reach out to us on:
Email: customersuccess@aviatrix.com
 Use the chat widget on our website to talk
live with a Solution Architect
Next Steps with Aviatrix
Use the Chat widget to talk
live with a Solution Architect

12. Thank you.

13. © 2017 AVIATRIX SYSTEMS, INC . | 13
AVX
Edge
VPC
Direct Connect / Internet
Spoke Spoke Spoke Spoke
Shared Service VPC
Spoke
VGW
Spoke
AVX
gateway
Spoke
AVX Controller
Security domain: Dev
Security domain: Prod
Security domain: Shared Service
Security domain: Edge
On Prem 1
Next-Gen Transit Solution
All the Native TGW benefits plus:
Full Automation
TGW orchestration
Routing orchestration
Define and implement security
domains
Monitoring and visualization
Consolidated Edge
Consolidate all your edges to
one Transit VPC
Support DX
Support Multicloud
Support Transit DMZ
Overcome 100 route limit
On Prem 2
Aviatrix solution built using AWS TGW
AWS TGW
Contractor profile
{accept to X, Z
deny all}
Employee profile
{accept to all}
Partner profile
{accept to Z
deny all}
Profile