Daten-Management & Sicherheit in virtualisierten Umgebungen und der Cloud. Martin Heinzelmann SR CHANNEL SE

Transcription

1 Daten-Management & Sicherheit in virtualisierten Umgebungen und der Cloud Martin Heinzelmann SR CHANNEL SE 1

2 IXIA IS NOW A PART OF KEYSIGHT TECHNOLOGIES Ixia Network Visibility Leader Turnkey Platform for Private Cloud Visibility (2016) Acquired April 2017 CloudLens for Public Cloud May 2017 NPB (2016) Founded (1997) as L2-7 network test company Acquire ANUE Systems (2012) & NetOptics (2013) "Ixia is thrilled to merge our culture of innovation with Keysight s. Keysight is a company that does not like being #2 in any market. Our combined, entirely complementary resources will continue our #1 position in test and help propel us to #1 in the visibility market." BETHANY MAYER PRESIDENT AND CHIEF EXECUTIVE OFFICER, IXIA 2

3 IXIA SOLUTION PORTFOLIO TEST SECURITY VISIBILITY Across the Infrastructure Mobile Endpoint Network Data Center Cloud Across ALL Platforms IxNetwork/VE Multis SDN PerfectStorm BPS vepc IxLoad/VE ac, MU-MIMO 3 Flex Taps, ibypass, Virtual Taps NTO, Vision ONE, Hawkeye, xstream40, Control Tower Threat ARMOR, ATI

4 CLASSIC DATA CENTER ARCHITECTURE 4

5 VIRTUAL DATA CENTER THE CHALLENGE Most Virtual traffic is not seen by security and analytics tools Host Security and Performance Monitoring Tools Harder to enforce security policies with dynamic environment Web APP App DB DB IDS IDS End-to-end monitoring involves multiple locations Production Network Forensics Tool Forensics Tool East-west traffic between VMs is Hidden from tools East-West Traffic NOT Seen by Network Monitoring Tools DLP Virtual Workloads move can t track by IP address, protocol and port 5

6 CLOUDLENS Visibility across all your cloud environments - public, private, and hybrid clouds 6

7 CLOUDLENS PRIVATE 7

8 HOW CLOUDLENS WORKS IXIA CloudLens Public Management Layer Monitoring Tools Security Tools Performance Tools Secure Visibility Path Filtering at source Filtered Traffic securely sent from Instance to Tool 8

9 ARCHITECTURE DESIGN HYBRID CLOUD 9

10 IXIA SOLUTIONS FOR THE ARCHITECTURE DESIGN Ixia FlexTap Ixia Taps are available for all media types: Copper: 10M, 100M & 1G Optical: Single Mode & Multi Mode 1G till 100G Cisco Bidi 10

11 IXIA SOLUTIONS FOR THE ARCHITECTURE DESIGN Ixia CloudLens Inter-VM Traffic Monitoring Multiple Hypervisor Support (ESXi, KVM, VM, OpenStack) vswitch/router Agnostic (VSS, vds, Cisco Nexus) GRE-VLAN-ERSPAN Protocols 11

12 IXIA SOLUTIONS FOR THE ARCHITECTURE DESIGN Ixia CloudLens AWS Support SaaS Web-Interface where Cloud Visibility is managed Docker based component that sits within Source and Tool Instances in a customers environment Filtered traffic securely sent from Instance to Tool 12

13 IXIA SOLUTIONS FOR THE ARCHITECTURE DESIGN Ixia Packet Broker Aggregation & Filtering till Application Level Packet Processing (Trimming, Stripping, De-Duplication SSL-Decryption, Netflow Generation Web Based User Interface 13

14 IXIA SOLUTIONS FOR THE ARCHITECTURE DESIGN Ixia Fabric Controller Single Pane of Glass Management Solution Supporting multiple Ixia Products (Ixia Packet Broker, CloudLens, Ixia Bypass) Integration into ACI/APIC & NSX Controller via RestAPI 14

15 ARE YOU USING THE ONE OR OTHER APP YET? 15

16 HIGH PERFORMANCE ACTIVE SSL INSPECTION New high-performance Application Module for Vision ONE and Vision 7300 Dedicated cryptographic processor Integrated with Inline support on NTO Both inline and passive tool support Policy-based SSL inspection URL categorization 16

17 THANK YOU 17