What is a Virtual Tap? Intelligent Access and Monitoring Architecture Solutions

2 Presenter David Pham Senior Solutions Engineer Net Optics, Inc. David’s background covers 8 years experience in a Systems Administrator role for local and remote environments for diverse client industries (private, government, enterprise and small business). Roles included managing data centers leveraging VMware, EMC/Xiotech SAN, NetApp NAS, and data recovery/backup technology in Microsoft environments. David holds certifications for: Xiotech Certified Storage Engineer, Microsoft Certified Technology Specialist and Microsoft Certified Information Technology Professional

3 Agenda Why leveraging virtual solutions makes sense in your environment? 1 Identifying network ‘blind spots’ created by virtualization 2 Solution for alleviating blind spots 3 Increase ROI of your existing network monitoring tools 4 Decrease the TCO of your virtualized environment 5

4 Where Blind Spots are Created App OS VM 2 App OS VM 3 Production LAN Virtual Ethernet Adapters ESX vSphere 4.1 vSwitches Physical Ethernet Adapters Production LAN Managem ent LAN App OS VM 0 App OS VM 1 Service Console Analyzer ?

5 Hypervisor Monitoring Challenge vm1vm2vm3 Physical Host Server ESX Virtual Stack Virtual Switch ( ie, Cisco 1000V ) Analyzer IDS Physical Network Security & Monitoring Virtualization Creates Security, Monitoring and Compliance Risks No visibility into inter-VM traffic, vulnerabilities or threats Lacks auditing of data passing between virtual servers Inability to pinpoint resource utilization issues

6 Phantom Virtual Tap Solution vm1vm2vm3 Analyzer IDS Physical Network Security & Monitoring Physical Host Server ESX Virtual Stack with Phantom Installed Phantom Controller (VM) Enables Security, Performance Monitoring and Compliance 100% visibility of inter-VM traffic Kernel implementation—no need for SPAN Ports / Promiscuous Mode on Cisco v1000 Bridges virtual traffic to physical monitoring tools Phantom Virtual Tap Virtual Switch ( ie, Cisco 1000V )

7 Net Optics Converged Network Solution Physical Server Director™ ESX vm 1 vm 2 vm 3 Hypervisor Phantom Monitor™ Virtual Switch ( ie, Cisco 1000V ) Encapsulated Tunnel Analyzer IDS Phantom Manager™ LAN/W AN Hypervisor-specific Tap Purpose-built for virtualization TAP for each VM instance (by VM ID) Integration with Cisco 1000v Fault-Tolerant and Non disruptive Architecture Indigo Pro™ Physical and Virtual Monitoring Convergence

88 Phantom Manager™ LAN/WAN Support for vMotion Migration ESX 1 vm1vm2vm3 Hypervisor Phantom Monitor™ ESX 2 vm5vm6 Hypervisor Phantom Monitor™

99 Phantom Manager™ LAN/WAN Support for vMotion Migration ESX 1 vm1vm2vm3 Hypervisor Phantom Monitor™ ESX 2 vm5vm6 Hypervisor Phantom Monitor™

10 Phantom Manager™ LAN/WAN Support for vMotion Migration ESX 1 vm1vm2vm3 Hypervisor Phantom Monitor™ ESX 2 vm5vm6 Hypervisor Phantom Monitor™

11 Key Takeaways Key FeatureAdvantageBenefit End-to-End Inter-VM Traffic Visibility Provides Auditing and Performance Data Achieve Compliance Standards for PCI-DSS, HIPAA, etc Kernel Level Implementation Low CPU and Memory Requirements Low Impact on Virtual Server Performance Does Not Run in Promiscuous/SPAN Mode Delivers Visibility of Inter- VM Traffic to Existing Physical Tools No Need to Purchase New Virtual Monitoring Tools Lower CAPEX, Higher ROI of Existing Tools Converged Physical and Virtual Monitoring Optimize Tool Utilization

12 Conclusion Achieve security, compliance and performance monitoring standards Gain end-to-end traffic visibility in the virtual environment Realize the full potential of your virtual data center Get your 30-day evaluation copy today! Visit to download

13 Net Optics, Inc Q&A Question & Answer To sign up for our newsletter: Thank you