1. Monitoring, diagnosing and debugging with Azure Networking
6/18/2018 4:41 AM
Monitoring, diagnosing and debugging with Azure Networking
Vijay Tinnanur
Abhishek Pathak
Microsoft
Sesh Sayani
Director - Products
Giagamon
Charles Barry
CTO, Founder
Jolata
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Agenda Network Monitoring in Azure – What ? How ?
6/18/2018 4:41 AM
Agenda
Network Monitoring in Azure – What ? How ?
How can I diagnose common networking problems ?
Gigamon – Visibility Platform for Azure
Jolata - Diagnose Hybrid connectivity
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Network Monitoring in Azure
6/18/2018 4:41 AM
Network Monitoring in Azure
Virtual Networks
NIC
Routes
Network Security Groups
Load Balancer
Application Gateway
WAF
Traffic Manager
DNS
ExpressRoute
VPN Gateway
What ?
Byte Count
Packets
Flows
Endpoints
Circuits
Tunnels
Sessions
Routes
Security Rules
How ?
Monitoring Resources
Metrics
Logs
Diagnostic Tools
Resource Health
Monitoring Scenarios
Network Watcher
3rd Party Integration
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. Azure Network Monitoring
6/18/2018 4:41 AM
Azure Network Monitoring
Express Route
Circuit Bytes IN and OUT
Resource Health Check
Application Gateway
Access logs
Performance logs
Backend health logs
WAF logs
Throughput metric
VPN Gateway
Bytes IN and OUT
Packets IN and OUT
Throughput
Network Security Group
NSG Counters
NSG Flow Logs
Traffic Manager
Query Metrics
Endpoint Status Metrics
Load Balancer
DIP Availability
Byte, Packet Count
SYN Count
SNAT Connection Count
Audit Logs
Available for all resources
Resource Monitoring
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. Azure Network Monitoring
6/18/2018 4:41 AM
Azure Network Monitoring
Network Performance Monitor
Topology
Performance
availability
statistics
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Azure Network Monitoring
6/18/2018 4:41 AM
Azure Network Monitoring
Network Watcher
Topology
diagnostics
monitoring
log analytics
logs
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. Azure Network Watcher 6/18/2018 4:41 AM Network Performance Monitor
DNS Analytics
Network Watcher
NSG Log Analytics
App Gateway Analytics
Network Performance Monitor
DNS Analytics
Network Watcher
NSG Log Analytics
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

8. 3rd Party and Open Source Ecosystem
6/18/2018 4:41 AM
3rd Party and Open Source Ecosystem
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. 6/18/2018 4:41 AM
A simple website...
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

10. Simple Website Public IP Address 6/18/2018 4:41 AM
NIC associated to Public IP
No NIC associated to Public IP
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. Simple Website Public IP Address 6/18/2018 4:41 AM
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. Simple Website Virtual Machine 6/18/2018 4:41 AM
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

13. Simple Website Virtual Machine 6/18/2018 4:41 AM
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. Simple Website Network Interface Card 6/18/2018 4:41 AM
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. Simple Website NSG 6/18/2018 4:41 AM
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. Simple Website NSG 6/18/2018 4:41 AM
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

17. Simple Website NSG 6/18/2018 4:41 AM
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

18. Simple Website NSG 6/18/2018 4:41 AM
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

19. Simple Website Public IP Address Virtual Machine
6/18/2018 4:41 AM
Simple Website
Public IP Address
Virtual Machine
Network Interface Card
NSG
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

20. Website with Load Balancer
6/18/2018 4:41 AM
Website with Load Balancer
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

21. Website with Load Balancer
6/18/2018 4:41 AM
Website with Load Balancer
Load Balancer
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

22. Website with Load Balancer
6/18/2018 4:41 AM
Website with Load Balancer
Load Balancer
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

23. Website with Load Balancer
6/18/2018 4:41 AM
Website with Load Balancer
Load Balancer
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

24. Website with Load Balancer
6/18/2018 4:41 AM
Website with Load Balancer
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

25. Complex website Traffic Manager Region 1 Region 2 6/18/2018 4:41 AM
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

26. Complex website Traffic Manager Region 1 Region 2 6/18/2018 4:41 AM
No backend response
Backend healthy
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

27. Complex website Application Gateway Region 1 Region 2
6/18/2018 4:41 AM
Complex website
Application Gateway
Region 1
Region 2
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

28. Complex website Application Gateway Region 1 Region 2
6/18/2018 4:41 AM
Complex website
Application Gateway
Region 1
Region 2
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

29. Complex website Virtual network gateway Region 1 Region 2
6/18/2018 4:41 AM
Complex website
Virtual network gateway
Region 1
Region 2
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

30. Complex website Virtual network gateway Region 1 Region 2
6/18/2018 4:41 AM
Complex website
Virtual network gateway
Region 1
Region 2
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

31. Let’s add OnPremise to the mix
6/18/2018 4:41 AM
Let’s add OnPremise to the mix
Express Route
Circuit Bytes IN and OUT
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

32. Let’s add OnPremise to the mix
6/18/2018 4:41 AM
Let’s add OnPremise to the mix
Express Route
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

33. Let’s add OnPremise to the mix
6/18/2018 4:41 AM
Let’s add OnPremise to the mix
Express Route
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

34. Let’s add OnPremise to the mix
6/18/2018 4:41 AM
Let’s add OnPremise to the mix
Express Route
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

35. Let’s add OnPremise to the mix
6/18/2018 4:41 AM
Let’s add OnPremise to the mix
Express Route
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

36. Connectivity Destination unreachable. Platform or configuration issue?
6/18/2018 4:41 AM
Connectivity
Destination unreachable.
Platform or configuration issue?
Source config OK / Destination config OK
Why is connectivity broken
Connection Sluggish.
Which hop is causing latency?
VM unable to reach OnPremise machine?
VM unable to reach an Azure service endpoint
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

37. Connectivity Destination unreachable. Platform or configuration issue?
6/18/2018 4:41 AM
Connectivity
Destination unreachable.
Platform or configuration issue?
Source config OK / Destination config OK
Why is connectivity broken
Connection Sluggish.
Which hop is causing latency?
VM unable to reach OnPremise machine?
VM unable to reach an Azure service endpoint
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

38. Connectivity Destination unreachable. Platform or configuration issue?
6/18/2018 4:41 AM
Connectivity
Destination unreachable.
Platform or configuration issue?
Source config OK / Destination config OK
Why is connectivity broken
Connection Sluggish.
Which hop is causing latency?
VM unable to reach OnPremise machine?
VM unable to reach an Azure service endpoint
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

39. Network Visibility in Azure
6/18/2018 4:41 AM
Network Visibility in Azure
Sesh Sayani
Director - Products, Gigamon
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

40. About Gigamon See what matters.™ BACKGROUND: HIGHLIGHTS:
Gigamon Visibility Platform provides pervasive visibility into data in motion across your entire network, enabling stronger security and network performance.
BACKGROUND:
Founded in 2004
Pioneer in network visibility
IPO in 2013, NYSE: GIMO
Headquarters: Santa Clara, CA, U.S.
Global Offices: 20 countries
799 employees
HIGHLIGHTS:
Over 2,500 customers incl. 83 of Fortune 100
Named #1 Network Monitoring Equipment Vendor Worldwide by Market Share*
Key Verticals: Federal, Financial Services, Healthcare, Retail, Technology, Service Providers
Rich ecosystem of 100+ technology partners
$311M Revenue in FY16, +40% Year-over-Year
*Source: IHS Markit Report, Network Monitoring Equipment, May 19, 2017
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

41. Shared Responsibility Model Your Responsibilities as an Azure Customer
6/18/2018 4:41 AM
Shared Responsibility Model Your Responsibilities as an Azure Customer
Security of data and applications
Configure and protect data that is stored and transmitted
Data classification
Network controls
Host infrastructure services
*Source: Shared Responsibilities for Cloud Computing, Microsoft
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

42. Priorities for Cloud Ops and Security Ops Teams
Run more mission-critical apps on Azure
Apply compliance controls
Detect and respond to anomalies
Security: more than identity and access management
Impact:
Network security stack essential
Requires visibility into network traffic
Using a traffic mirroring agent per VM for each tool impractical
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

43. 6/18/2018 4:41 AM
Sounds Familiar?
“I am spending more time, money, and resources deploying and managing security tools on-premises and in the public cloud”
“My organization is running many, independently-managed VNets in the public cloud and I am spending more time and money deploying security tools for each VNet”
91% of customers want to approach cloud network security
similar to on-prem sec ops
– Vanson Bourne Survey, July 2017
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

44. Visibility Hot Spots in a Sample Web Application
Availability Set
Web Tier Subnet
Business Tier Subnet
Azure Load Balancer
Internet
Virtual Network
Data Tier Subnet
North-South Hot Spots
East-West Hot Spots
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

45. Other Load Balancers (e.g. NGINX)
6/18/2018 4:41 AM
Introducing Network Visibility in Azure Gigamon Visibility Platform for Azure
Availability Set
Web Tier Subnet
Azure Load Balancer
Virtual Network
App Tier Subnet
Other Load Balancers (e.g. NGINX)
SQL Database
Visibility
Tier
Azure Monitor
Azure APIs
Connect tools to Visibility Tier
Minimize agent overload
Aggregate, select, optimize, distribute traffic
GigaSMART® intelligence reduces tool overload
Automatic Traffic Selection: Extract traffic anywhere in Virtual Network based on policy
Elastic visibility as workloads scale-out
Centralized orchestration & visualization
Azure API and Azure Monitor integration: real-time detection of VNet / VM changes
GigaVUE-FM
Tool
Tier
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

46. Centralized Security Monitoring Across Enterprise
6/18/2018 4:41 AM
Centralized Security Monitoring Across Enterprise
Applications
SecOps
Business Units
Web Tier Subnet
Visibility Subnet
Tool Subnet
Visibility Subnet
Web Tier Subnet
App Tier Subnet
App Tier Subnet
Visibility Subnet
GigaVUE-FM
Azure APIs
ExpressRoute
On-premise
Data Center
Security, Performance Management, and Analytics Tools
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

47. Benefits Identical visibility in Azure, on-prem
6/18/2018 4:41 AM
Benefits
Identical visibility in Azure, on-prem
Complete network visibility into VM traffic on Azure
Centralized security monitoring across enterprise
Run mission-critical workloads with security controls
Flexibility to perform analysis anywhere
Azure, Centralized security monitoring, On-premises
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

48. More Info? Currently in Technology Preview Beta: Dec 2017
6/18/2018 4:41 AM
More Info?
Currently in Technology Preview
Beta: Dec 2017
Interested in Tech Preview or Beta?
or visit
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

49. Jolata Charles Barry, PhD CTO, Founder

50. TruFlow Value Predictive Maintenance Security Performance Monitoring
Network Optimization
Visualize/find/fix infrastructure issues across hybrid cloud environments
Sees what other tools miss, or can’t see at all
“Bing search for your network”
-F200 Customer deployed globally

51. Hybrid Cloud Challenges
Multiple locations/VMs
Multiple OS/Platforms
Time synchronization
TruFlow AI & ML technology
automatically resolves
topology, timing, TCP reassembly

52. TruFlow + Network Watcher workflow
pcaps
pcap
TruFlow initiates
Network Watcher packet captures
Enterprise
TruFlow VM merges captures saved in storage
User analyzes capture data in TruFlow UI

53. 6/18/2018 4:41 AM
Takeaway
Breadth and depth in solutions to monitor and diagnose network conditions
Network Watcher – Converged Network Monitoring Service for Azure
Continued investment in expanding our Partner and Opensource ecosystem
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

54. 6/18/2018 4:41 AM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.