IXVISION: VISIBILITY ARCHITECTURE Eliminating Blind spots

Transcription

1 IXVISION: VISIBILITY ARCHITECTURE Eliminating Blind spots Ernst Hillerkus, Regional Sales Manager Germany 2016 IXIA AN D /OR IT S AF FILIATES. ALL R IGH TS R ESERVED. 1

2 IXIA SOLUTIONS ARCHITECTURE IxTEST IxSECURE IxVISION 2

3 OUR HISTORY AND COMPETENCE Anue Systems: > Network Visibility: > Packet Brokers (NTO) > Network Testing: > Impairment Generator 2002 June Oct NetOptics: > Network Visibility: > Packet Brokers (xstream) > Inline Security (BypassTap) > Network Taps Ixia: > Founded in 1997 > Active testing of > IP networks, > Wifi > 3G/LTE 2005 July 2012 BreakingPoint: > Security testing > Attack analytics 3

4 TYPICAL MONITORING SITUATION Lots of Organizations Involved Vast Array of Tools in Use Network Ops Application Ops Security Admin NPMD APM Customer Experience Server Admin Forensics Privacy & Audit Forensics IDS, SIEM Firewall, IPS Increasingly Complex Environment to Manage Endpoints Network Data Center Cloud Applications 4

5 IXVISION VISIBILITY ARCHITECTURE Eliminates Visibility and Security Blind Spots Expanded views for out-of-band network, application & security tools NPMD, APM, SIEM, IDS, etc. Fail-safe deployments for in-line security tools firewall, IPS, etc. Proactive SLA and customer experience monitoring voice, video, web service, etc. Intelligent Visibility Framework Resilient Security Framework Proactive Monitoring Framework 5

6 INTELLIGENT VISIBILITY NETWORK PACKET BROKER Intelligent Visibility Advanced Visibility Basic Features App & Geo Brokering NetFlow / Contextual Metadata Deduplication, Trimming, Burst Protection, etc. L2-4 Filters, Load Balancing All iphone voice traffic from California U.K. users viewing Premier League on Fox on ipads on BT network Much more intelligent tools Blocking traffic to and from bad IP s Dedup ed /8 traffic Much greater tool efficiency Only the first 128 bytes of TCP Port 25 traffic More Only /8 efficient traffictool usage More scalable Only TCP Port 25 traffic TAP Network Tap Mirrored, Raw Data Quickly overwhelms tools All raw data packets Limited tool ingress ports 6

7 IXIA SOLUTION PORTFOLIO VISIBILITY SECURITY TEST Across the Infrastructure Mobile Network Endpoint Data Center Cloud Across ALL Platforms IxNetwork/VE Multis SDN PerfectStorm BPS vepc IxLoad/VE ac, MU-MIMO 2016 IXIA AN D /OR IT S AF FILIATES. ALL R IGH TS R ESERVED. 7 Flex Taps, ibypass, Virtual Taps NT O, Vision ONE, Hawkeye, xstream40, Control T ower Threat ARMOR, ATI

8 NTO 7300 NTO FAMILY Vision ONE 48x1/10G & 4x40G Advanced Features ATI Processor > Application layer filtering > SSL Encryption > Netflow Generation 1/10/40/100G Interfaces Advanced Features Load Balancing ATI Processor > Application layer filtering > SSL Encryption > Netflow Generation GUI Packet Capture Inline Support Load Balancing GUI 2016 IXIA AN D /OR IT S AF FILIATES. ALL R IGH TS R ESERVED. 8

9 INTELLIGENT VISIBILITY Making I.T. Easy to Use The Hard Way The Ixia Way 9 Trying is believing! How about a PoC?

10 APPLICATION & THREAT INTELLIGENCE RESEARCH CENTER 300+ application signature families Rich contextual behavioral metadata APPLICATION AND THREAT INTELLIGENCE RESEARCH CENTER Real time application identification Isolate all unknown applications IXIA INTELLIGENCE Ixia engineers Security vendors Packet Broker Flows NEM Interactions SECURITY RESEARCH LABS Periodic updates 2016 IXIA AN D /OR IT S AF FILIATES. ALL R IGH TS R ESERVED. 10 Emulate 100 s of apps for monitoring Known bad IP address Rap Sheet GLOBAL NETWORK OF HONEYPOTS AND WEB CRAWLERS NEW applications NEW bad IP addresses BIG DATA SOURCES Billions of IPs and URLs Millions of SPAM Open source data sets Network intrusions

11 INTRODUCING THREATARMOR FROM IXIA ThreatARMOR is the new front line of defense. Blocking unwanted inbound traffic and preventing outbound malicious communications. SECURITY INFRASTRUCTURE THREAT INTELLIGENCE DLP IPS/IDS DDoS SIEM FIREWALL ANTIVIRUS FORENSICS THREAT ANALYSIS SANDBOXING 11

12 THANK YOU 12

13 WE MAKE APPLICATIONS STRONGER 2016 IXIA AN D /OR IT S AF FILIATES. ALL R IGH TS R ESERVED. 13