Proprietary & Confidential Virtual Monitoring Solution Unified Virtual and Physical Network Monitoring Product Marketing August 2015 apcon.com Proprietary & Confidential
Virtual Network Monitoring Challenges The Enterprise VM Challenge Intra-VM network traffic is a blind spot Elasticity of virtual environment complicates monitoring Complexity to monitor any traffic, across an evolving network, and ensure diagnostic tool compatibility Lack of unified virtual and physical monitoring Tool manufacturers provide proprietary, vendor specific solution Lack visibility of traffic between virtual machines Need to ensure VM security compliance Need to ensure VM operational efficiency Need ability to diagnose VM traffic issues Desirable to use existing security & performance tool farm Desirable to use existing monitoring staff Desirable to have unified physical and virtual monitor architecture Problems with over subscription and dropped packets VM specific tool solutions too expensive Solutions that require monitoring VM app expensive to dedicates resources Support for cross platform hypervisors Proprietary & Confidential
APCON Virtual Monitoring Overview Unified virtual and physical monitoring Increase visibility with existing tool farm East/West or Inter-VM traffic visibility Direct Kernel or API integration No VM probe or agent required No updates or maintenance of VMs or virtual probes Low resource utilization Multi-hypervisor support: Linux KVM, Hyper-V, more Virtual switch port mirror visibility of any VM traffic Ability to ensure VM security compliance Ability to ensure VM operational efficiency Ability to diagnose VM traffic issues Use existing security & performance tool farm Use existing monitoring staff Unified physical and virtual monitor architecture Out of band monitoring does not effect production traffic Leverages existing virtual switch port mirror (SPAN), no agents or VMs to install Supports all modern data center architectures Mirrored traffic is RSPAN (GRE tunnel) across current network to APCON monitoring systems Filtering based on VM Identification (VMID) in addition to IP, VXLAN, VLAN ID and more Easy to use VM Monitoring control
IntellaStore Unified Virtual & Physical Monitoring This phase relies on virtual switch port mirroring / SPAN – it will support ONLY environments with virtual switch (usually distributed) with SPAN/Mirror functionality. Green line: Encapsulated traffic, Blue line raw packets (from wired networks and post decapsulation on IntellaStore II) Proprietary & Confidential
IntellaStore II Decapsulation This phase relies on virtual switch port mirroring / SPAN Green line: Encapsulated traffic, Blue line raw packets (from wired networks and post decapsulation on IntellaStore II) Proprietary & Confidential
Virtual Monitoring with TitanXR This phase relies on virtual switch port mirroring / SPAN Green line: Encapsulated traffic, Blue line raw packets (from wired networks and post decapsulation on IntellaStore II) Proprietary & Confidential
TitanXR Unified Monitoring Management Big Data Center(s) Virtual Network(s) TitanXR Data Center(s) Remote Location(s) IntellaStore II Mobile App Proprietary & Confidential
Virtual Taps and Filters
Virtual Tap Filters
Virtual Tap View Summary
APCON Virtual Network Monitoring Summary Complete VM Traffic Visibility Unified virtual and physical monitoring Complete VM visibility, integrated solution Integrates with existing hypervisor plus nonintrusive traffic control filter Central VM virtual monitoring of Linux KVM, Hyper-V and more Use existing tool farm. Lower overall costs. Virtual switch port mirror visibility of any VM traffic Ability to ensure VM security compliance Ability to ensure VM operational efficiency Ability to diagnose VM traffic issues Use existing security & performance tool farm Use existing monitoring staff Unified physical and virtual monitor architecture Out of band monitoring does not effect production traffic Leverages existing virtual switch port mirror (SPAN), no agents or VMs to install Supports all modern data center architectures Mirrored traffic is RSPAN (GRE tunnel) across current network to APCON monitoring systems Filtering based on VM Identification (VMID) in addition to IP, VXLAN, VLAN ID and more Easy to use VM Monitoring control Proprietary & Confidential
Proprietary & Confidential Thank You Proprietary & Confidential