1. Proprietary & Confidential
Virtual Monitoring Solution
Unified Virtual and Physical Network Monitoring
Product Marketing
August 2015
apcon.com
Proprietary & Confidential

2. Virtual Network Monitoring Challenges
The Enterprise VM Challenge
Intra-VM network traffic is a blind spot
Elasticity of virtual environment complicates monitoring
Complexity to monitor any traffic, across an evolving network, and ensure diagnostic tool compatibility
Lack of unified virtual and physical monitoring
Tool manufacturers provide proprietary, vendor specific solution
Lack visibility of traffic between virtual machines
Need to ensure VM security compliance
Need to ensure VM operational efficiency
Need ability to diagnose VM traffic issues
Desirable to use existing security & performance tool farm
Desirable to use existing monitoring staff
Desirable to have unified physical and virtual monitor architecture
Problems with over subscription and dropped packets
VM specific tool solutions too expensive
Solutions that require monitoring VM app expensive to dedicates resources
Support for cross platform hypervisors
Proprietary & Confidential

3. APCON Virtual Monitoring Overview
Unified virtual and physical monitoring
Increase visibility with existing tool farm
East/West or Inter-VM traffic visibility
Direct Kernel or API integration
No VM probe or agent required
No updates or maintenance of VMs or virtual probes
Low resource utilization
Multi-hypervisor support: Linux KVM, Hyper-V, more
Virtual switch port mirror visibility of any VM traffic
Ability to ensure VM security compliance
Ability to ensure VM operational efficiency
Ability to diagnose VM traffic issues
Use existing security & performance tool farm
Use existing monitoring staff
Unified physical and virtual monitor architecture
Out of band monitoring does not effect production traffic
Leverages existing virtual switch port mirror (SPAN), no agents or VMs to install
Supports all modern data center architectures
Mirrored traffic is RSPAN (GRE tunnel) across current network to APCON monitoring systems
Filtering based on VM Identification (VMID) in addition to IP, VXLAN, VLAN ID and more
Easy to use VM Monitoring control

4. IntellaStore Unified Virtual & Physical Monitoring
This phase relies on virtual switch port mirroring / SPAN – it will support ONLY environments with virtual switch (usually distributed) with SPAN/Mirror functionality.
Green line: Encapsulated traffic, Blue line raw packets (from wired networks and post decapsulation on IntellaStore II)
Proprietary & Confidential

5. IntellaStore II Decapsulation
This phase relies on virtual switch port mirroring / SPAN
Green line: Encapsulated traffic, Blue line raw packets (from wired networks and post decapsulation on IntellaStore II)
Proprietary & Confidential

6. Virtual Monitoring with TitanXR
This phase relies on virtual switch port mirroring / SPAN
Green line: Encapsulated traffic, Blue line raw packets (from wired networks and post decapsulation on IntellaStore II)
Proprietary & Confidential

7. TitanXR Unified Monitoring Management
Big Data Center(s)
Virtual Network(s)
TitanXR
Data Center(s)
Remote
Location(s)
IntellaStore II
Mobile App
Proprietary & Confidential

8. Virtual Taps and Filters

9. Virtual Tap Filters

10. Virtual Tap View Summary

11. APCON Virtual Network Monitoring Summary
Complete VM Traffic Visibility
Unified virtual and physical monitoring
Complete VM visibility, integrated solution
Integrates with existing hypervisor plus nonintrusive traffic control filter
Central VM virtual monitoring of Linux KVM, Hyper-V and more
Use existing tool farm. Lower overall costs.
Virtual switch port mirror visibility of any VM traffic
Ability to ensure VM security compliance
Ability to ensure VM operational efficiency
Ability to diagnose VM traffic issues
Use existing security & performance tool farm
Use existing monitoring staff
Unified physical and virtual monitor architecture
Out of band monitoring does not effect production traffic
Leverages existing virtual switch port mirror (SPAN), no agents or VMs to install
Supports all modern data center architectures
Mirrored traffic is RSPAN (GRE tunnel) across current network to APCON monitoring systems
Filtering based on VM Identification (VMID) in addition to IP, VXLAN, VLAN ID and more
Easy to use VM Monitoring control
Proprietary & Confidential

12. Proprietary & Confidential
Thank You
Proprietary & Confidential