RELEASE SUMMARY IXIA BREAKINGPOINT 3.5, 8.0.1, AND 8.10 FEATURES

Transcription

1 RELEASE SUMMARY IXIA BREAKINGPOINT 3.5, 8.0.1, AND 8.10 FEATURES FEATURE BRIEF KEEP YOUR APPLICATION PROTOCOLS AND SECURITY CURRENT UPGRADE TO A BETTER, FASTER BREAKINGPOINT BreakingPoint users will want to leverage the new features and functionality as we extend our solutions. The charts that follow show enhancements for the past three major releases. We ve also been working hard on delivering BreakingPoint in a variety of form factors to fit the power and budget needs of our diverse user base. In addition to our PerfectStorm chassis and PerfectStorm ONE appliance, BreakingPoint now comes in a virtualized (software) option. BREAKINGPOINT VE BreakingPoint Virtual Edition (VE) is a scalable real-world application and threat simulator in an elastic deployment model that leverages virtualization and industry-standard hardware platforms. PERFECTSTORM AND PERFECTSTORM ONE The first hardware platform to support both IxLoad and BreakingPoint product lines, Ixia's PerfectStorm family of load modules and appliances provide the right mix of power, size, and portability required for a wide range of testing tasks and budgets: PerfectStorm: massive-scale, stateful layers 4-7 application and security testing, delivering nearly a terabit of application traffic PerfectStorm ONE: compact form factor to better support the enterprise, scaling from 4Gbps to 80Gbps of application traffic simulation APPLICATION AND THREAT INTELLIGENCE (ATI) The ATI program offers a simple way to create test flows of the malicious and user traffic your network must withstand. It provides updates every two weeks to ensure delivery of the industry's most up-to-date application and threat intelligence. With a current ATI subscription, you have the most realistic simulation conditions possible with access to application protocols, security attacks (exploits, malware, DoS, and DDoS), the industry s most comprehensive Microsoft Tuesday coverage, and ever-current Evergreen versions of the most popular Web and network apps. APPLICATIONS APP FLOWS STRIKES MALWARE 29, ,589 37,297 DDOS 26 EXPLOITS+ 7,833 With updates every two weeks, ATI Subscription ensures you validate with the most up-to-date applications and strikes (data shown is as of August 1, 2016) 1

2 Application and Threat Intelligence (ATI) BreakingPoint 3.5 firmware provides access to: o 36,591 strikes (malware and exploits) o 3,403 predefined application Super Flows o 290 applications o First monthly botnet package covering May 2015 containing 50 botnet strikes o 300 new malware strikes (live malware strikepacks) o Added 'All One-Way Strikes' StrikeList containing all strikes that only send traffic from client to server, for use in one-arm testing mode New Applications o Geneve o MongoDB o Bitcoin o BACnet/IP o Snapchat May15 o DNP3 o Airbnb o Alibaba New Predefined Super Flows o Geneve - TCP Data Transfer o Geneve - TCP Handshake o Geneve - TCP Termination o MongoDB Demo Super Flow o MongoDB Insert Document o MongoDB Query Document o MongoDB Shell Connect/Disconnect o MongoDB Update Document o GTPv2-C Downlink Data Notification o GTPv2-C Release Access Bearers o Bitcoin Heartbeat o Bitcoin Synchronization o Bitcoin Transaction Information o BACnet/IP Read File o BACnet/IP Time Synchronization o BACnet/IP Who-Has/I-Have Object Query Enables customers with an active ATI subscription to have timely access to: o 13 new applications o 550 new strikes (223 new exploits and 165 botnets) o 162 addition live malware strikes o Monthly updates for Evergreen Applications BreakingPoint firmware release provides access to: o 36,996 strikes (malware and exploits) o 3,523 predefined application Super Flows o 325 applications New Applications o Twitch.tv o SaavnMusic Feb16 o StandardMedia Mar16 o NORM o STOMP o GSM MAP o Everquest o Minecraft o S7comm) o JIRA o TDS - MS SQL Server 2012 o FileSharePro Mar16 o NTPv2 Enables customers with an active ATI subscription to have timely access to: o 116 new strikes (41 new malwares and 75 new exploits) o 9 new applications o Monthly updates for Evergreen Applications New Applications o Spotify o Apple-iMessage o RTMP o MGCP o Mpeg-TS o Amazon Video o Pinterest o Apache-ZAB o Echonet

3 o BACnet/IP Who-Is/I-Am Device Discovery o BACnet/IP Write File o Snapchat May 2015 o Snapchat May 2015 Send Image o Snapchat May 2015 Send Movie o DNP3 Link Status o DNP3 Read Class 0 Data o DNP3 Read Device Attributes o DNP3 Time Sync o DNP3 Unsolicited Response o Airbnb BreakingPoint VE Platform Features 50% reduction in OVA size over 3.4 release (From approx. 8GB to 4GB) 40% improvement for key performance metrics over 3.4 release Support for KVM hypervisor over CentOS 6.5 and 7.0 (added in 3.4.2) Support for KVM hypervisor over Ubuntu LTS (added in 3.4.2) Licensing made easy, with no need for license check during upgrades on BPS VE Added support for the following functionality: o DHCPv4 o Routing Robot o RFC 2544 o Multicast o Lawful Intercept o Recreate To better support various cloud/vm environment, we have enhanced BreakingPoint VE to support more flexible deployment models by: o Decoupling of vcontroller & vblade into separate OVA or QCOW2 images o Adding the ability to attach and detach vblade to vcontroller via web GUI or REST API o Supporting configurable Static IP or DHCP based communication for vcontroller and vblade In addition, we have reduced CPU and memory resource footprint of BreakingPoint VE deployment in lowperformance use cases and also increased performance of CPU-bound metrics (TPUT / CPS) by 50% Added support for the following functionality: o IPv4/IPv6 DNS o Bit Blaster o SCTP o DDoS Lab BreakingPoint VE can now be deployed by OpenStack based orchestrations via Horizon GUI, command line APIs or via sample Heat Orchestration Templates (HOT). This release has been qualified on a vanilla OpenStack Liberty and Mitaka Multi-Node system including with Open vswitch. It is also compatible with other orchestration systems that are built on top of vanilla OpenStack. In the quest to improve performance we are introducing support for Intel DPDK via VMXNET3 driver on ESXi. This has resulted in 2x improvement in HTTP throughput when Throughput as Performance Emphasis mode is enabled. Support for new 10G Subscription license as well as for a new 10G Perpetual license. This license serves as an indestructible 10G unit can t be broken up or shared in smaller increments. It benefits the customer in that it is a more cost effective way to buy units of 10G compared to lots of 1G.

4 LTE support has been enabled through addition of GTP v1/v2 for IPv4 in Network Neighborhood. Hardware and Performance Optimization Complete PerfectStorm 100G support (except for Resiliency Score lab) GTP Performance for AppSim component has been improved by 100%. o 30G throughput on FireStorm cards o 80G throughput on PerfectStorm 10GE and PerfectStorm 40GE cards o 160G throughput on a pair of PerfectStorm 100GE cards XGS2 Chassis Support for the new 2-slot chassis XGS2-HS with high performance controller ( ). The 2-slot chassis can support any two PerfectStorm cards for applications and security testing with BreakingPoint. ECC Cipher Performance Optimization ECC (Elliptic Curve Cryptography) cipher performance has been optimized by 3x for CPS and 20Gbps of throughput per card, using hardware capabilities of the Cavium processors on our PerfectStorm platform Use of SSL to secure Internet communication is increasing at a rapid pace. ECC is being pushed as alternative to RSA keys as ECC can offer the same level of cryptographic strength at much smaller key sizes - offering improved security with reduced computational resources FlixOS Enhancements Together with the FlixOS and IxOS EA Patch1 releases, PerfectStorm (XGS12/2-HS chassis) and PerfectStorm ONE customers can benefit from the following platform enhancements: o Ability to change the Admin account default password

5 o Option to disable direct RDP using the WebIP to IxOSVM o New FTP-based FlixOS upgrade method in addition to the existing local USB Flash drive method User Interface General HTML 5 User Interface o This release continues the transition to HTML 5 for user interface screens by migrating the Open Test screen to HTML5 Other user interface enhancements o Improved granularity of percentage setting on Shared Component Settings screen Report Enhancements Combined multiple Test Component sections for aggregate stats into one single section DDoS Lab Dedicated user interface that unifies different infrastructure elements for a consistent and intuitive workflow to build DDoS test scenarios. The DDoS lab enables you to easily blend application and DDoS traffic and also gives quick access to ATI predefined attack patterns with geo-location support to define the realworld source and destination of the traffic. HTML5 Transition Continues transition to HTML 5 for user interface screens including: o Real-time Statistics o Resiliency Score o Lawful Intercept Lab Routing Robot UI Scalability Generate stateless traffic with just a single Routing Robot component and network neighborhood per 100G & 40G interfaces. This dramatically reduces configuration time. A typical 100G configuration time now is 5 mins down 80% from 25 mins; similarly, the typical config time on 40G is reduced from 10 mins to 4 mins. General New buttons to quickly edit Application Profiles, Superflows and Strike lists within Test Components settings. Component settings reordering for faster parameter referencing and a consistent look and feel across test components Persistent menu buttons while navigating to Device Status page. HTML 5 User Interface o New screens converted to HTML5: Test Workspace and Multicast Lab

6 Other Enhancements IPv6 Transitioning Protocols DHCPv6 PD client and server DHCPv6 stateless client only Per Host Bandwidth Control New setting in network neighborhood o Controls the maximum throughput per IP. o Exposed per Host Range for IPv4 and IPv6 hosts. When enabled, the maximum total (transmit and receive) throughput will be capped for each IP in the host range. o IPsec VLAN Support All IPsec features and functionalities are now supported over VLAN Network Neighborhood elements as well Other Option to automatically skip DNS transactions in SuperFlows Continued support for ICS/SCADA applications with addition of DNP3 and BACnet/IP Updated TCP over DNS superflows by splitting the action into two different actions and allowing larger payload size, ability to set the RD, RC and TC bits in the DNS flags Updated HTTP2 superflow with addition of 6 SETTINGS, Client Browser Version and Server Hostname parameters New Simplified NAT Implementation Complete re-architecting to seamlessly address NAT scenarios using simple 2-arm configurations. Users will no longer have to follow the complicated workflow of splitting the test in dual 1-arm configurations and synchronizing the client and server superflow actions with conditional requests. In this release over predefined Superflows (80%) and ~80 predefined App profiles have been qualified and tagged for NAT testing and we will continue the validation in subsequent releases. Please note AppSim and SessionSender are the only components that benefit from this redesign, in addition we have added this enhancement on all PerfectStorm, Firestorm, and Storm platforms. User-Based Policing LDAP User identity based policing, as opposed to an IP address, is becoming prevalent in enterprises to combat BYOD. In order to validate the performance and scale of user-based application enablement policies of NGFWs we have enabled emulated clients to be authenticated with an external LDAP server prior to allowing those clients to generate application traffic. TACACS+ Based Login As we start to see the trend of PerfectStorm ONE units being deployed in live General Sequential IP generation algorithm in Network Neighborhood allows BreakingPoint to model the behavior of various attacks and applications with a predictable IP addresses usage patterns. This functionality is available for selected components (i.e. AppSim, ClientSim, Recreate, SecurityNP, StackScrambler) and on a per range basis giving customers complete flexibility. Recreate Component Enhancements: o Replay capture while preserving the server IP addresses to realistically model their services and servers (i.e. the real server IPs for Google, Facebook, etc). o Relative flow direction is maintained meaning the flow is either client or server initiated, as specified in the packet capture, unlike the current behavior both server/client initiated flows started from the client side. o Interdependent Flows in Single Mode - now you can have a different source and destination IP address pair for each packet capture flow within one superflow iteration

7 networks, secure access to the test system becomes a key requirement. To accommodate this trend we have added Terminal Access Controller Access-Control System Plus (TACACS+) support, which controls remote authentication/ login into PerfectStorm, Firestorm, and BreakingPoint VE platforms via an external TACACS sever. Currently two privilege modes are supported - Administrator & User Infrastructure Enhancements The following improvements are designed to simplify and deliver more flexibility in your testing: o Increased match conditions (3 to 63) - Address complex use cases involving a distribution of response size and related extension file types o New Multi-Match Response 200(OK) HTTP Server action - Defines the HTTP 200 OK response that occurs for defined match criteria (similar to a Conditional Request that has multiple matches) o Conditional DNS for transparent proxy scenarios - Provides a mechanism to transparently redirect traffic flows using userconfigurable DNS resolution parameters REST API RESTful API support for automation and orchestration of BreakingPoint systems

8 The phase I implementation supports the following scenarios o Upload/Import previously defined configurations o Run, Cancel, and Stop the test o Poll real-time stats and download reports o Limited configuration changes timelines, network neighborhood association More Information BreakingPoint Web Portal: BreakingPoint VE Web Portal: PerfectStorm Web Portal: IXIA WORLDWIDE HEADQUARTERS AGOURA RD. CALABASAS, CA (TOLL FREE NORTH AMERICA) (OUTSIDE NORTH AMERICA) (FAX) IXIA EUROPEAN HEADQUARTERS IXIA TECHNOLOGIES EUROPE LTD CLARION HOUSE, NORREYS DRIVE MAIDENHEAD SL6 4FL UNITED KINGDOM SALES (FAX) IXIA ASIA PACIFIC HEADQUARTERS 101 THOMSON ROAD, #29-04/05 UNITED SQUARE, SINGAPORE SALES (FAX)