RELEASE SUMMARY IXIA BREAKINGPOINT 8.10, 8.13, AND 8.20 FEATURES

Transcription

1 RELEASE SUMMARY IXIA BREAKINGPOINT 8.10, 8.13, AND 8.20 FEATURES FEATURE BRIEF KEEP YOUR APPLICATION PROTOCOLS AND SECURITY CURRENT UPGRADE TO A BETTER, FASTER BREAKINGPOINT Don t miss the new features and functionality as we extend our solutions. The charts that follow show enhancements for the past three major releases. We ve been working hard to deliver BreakingPoint in a variety of form factors to fit the power and budget needs of our diverse user base. In addition to our hardware-based solution, BreakingPoint also comes in a virtualized (software) option. BREAKINGPOINT VE BreakingPoint Virtual Edition (VE) is a scalable real-world application and threat simulator in an elastic deployment model that leverages virtualization and industry-standard hardware platforms. INDUSTRY-LEADING HARDWARE Ixia's CloudStorm and PerfectStorm family of load modules and appliances provide the right mix of power, size, and portability required for a wide range of testing tasks and budgets: CloudStorm: An industry-first 2.4 terabit application and security test solution with 3X-application and 4X-SSL-emulation scale over any other system PerfectStorm: Massive-scale, stateful layers 4-7 application and security testing, delivering nearly a terabit of application traffic PerfectStorm ONE: Compact form factor to better support the enterprise, scaling from 4Gbps to 80Gbps of application traffic simulation APPLICATION AND THREAT INTELLIGENCE (ATI) The ATI program offers a simple way to create test flows of the malicious and user traffic your network must withstand. It provides updates every two weeks to ensure delivery of the industry's most up-to-date application and threat intelligence. With a current ATI subscription, you have the most realistic simulation conditions possible with access to application protocols, security attacks (exploits, malware, DoS, and DDoS), the industry s most comprehensive Microsoft Tuesday coverage, and ever-current Evergreen versions of the most popular Web and network apps. APPLICATIONS APP FLOWS STRIKES MALWARE 29,712 DDOS ,704 37,778 EXPLOITS+ 8,027 With updates every two weeks, an ATI Subscription ensures you validate with the most up-todate applications and strikes (data shown is as of May 10, 2017) 1

2 Application and Threat Intelligence (ATI) Enables customers with an active ATI subscription to have timely access to: o 116 new strikes (41 new malwares and 75 new exploits) o 9 new applications o Monthly updates for Evergreen Applications New Applications o Spotify o Apple-iMessage o RTMP o MGCP o Mpeg-TS o Amazon Video o Pinterest o Apache-ZAB o Echonet 308 new strikes including highly visible ransomwares like Locky, Satana, TorrentLocker, Mamba and Stampede. Vulnerabilities affecting Flash, Microsoft edge, and several exploit kits including the most popular Equation Group's Firewall Exploit Chain. ATI Security also strengthened its DDoS portfolio by adding 12 new DDOS attacks including the highly devastating Mirai IOT DDoS and other popular ones targeting CLDAP, SSL, SNMP, QoTD etc 31 new applications Media (Youtube Music, HBONOW), E- Commerce (SnapDeal, Baidu), SCADA (Profinet), Google Apps (Voice, Safe Browsing, Cloud Storage, Analytics), Productivity (GoToMeeting, Yammer, SalesForce, Dicom) and other popular apps like Pokemon Go, Microsoft Azure etc. In addition, ATI Apps also covered new application trends as published in 2016 Sandvine Global Phenomenon report and new list of BreakingPoint Top Five covers top five applications in different domains BreakingPoint VE Platform Features BreakingPoint VE can now be deployed by OpenStack based orchestrations via Horizon GUI, command line APIs or via sample Heat Orchestration Templates (HOT). This release has been qualified on a vanilla OpenStack Liberty and Mitaka Multi-Node system including with Open vswitch. It is also compatible with other The major NAT improvements introduced on hardware platforms in the BPS release are now available on the BPS Virtual Edition. These improvements seamlessly address NAT scenarios using simple 2-arm configurations. Users will no longer have to follow the complicated workflow of splitting the test in dual 1-arm BreakingPoint VE Performance Acceleration: With PCI Passthrough and SR-IOV support, 2x improvement seen on HTTP and SSL throughput over general vanilla deployment

3 orchestration systems that are built on top of vanilla OpenStack. In the quest to improve performance we are introducing support for Intel DPDK via VMXNET3 driver on ESXi. This has resulted in 2x improvement in HTTP throughput when Throughput as Performance Emphasis mode is enabled. configurations and synchronizing the client and server Superflow actions with conditional requests. Predefined Superflows and App profiles that have been qualified for NAT testing are tagged accordingly. Please note AppSim and SessionSender are the only components that benefit from this redesign. Support for new 10G Subscription license as well as for a new 10G Perpetual license. This license serves as an indestructible 10G unit can t be broken up or shared in smaller increments. It benefits the customer in that it is a more cost effective way to buy units of 10G compared to lots of 1G. o LTE support has been enabled through addition of GTP v1/v2 for IPv4 in Network Neighborhood. Hardware and Performance Optimization IxOS now runs natively on the PerfectStorm ONE appliances shipped from the factory. No more Windows OS. There is also a software option to fieldconvert existing PerfectStorm ONE (Windows) appliances to the PerfectStorm ONE (Linux) appliances. IxOS now runs natively on the HSL chassis. No more Windows OS. There is also a software option to field-convert existing XGS2-HS and XGS12- HS (Windows) chassis to the XGS2-HSL and XGS12-HSL (Linux) chassis. CloudStorm: New 2-port QSFP28 100GE load module with an innovative architecture that allows concurrent emulation of complex applications and a large volume of stateless DDoS traffic at 200Gbps line-rate without any mode switch to validate your network infrastructure is high performing and secure. HTTP & SSL Proxy: Seamless proxy support enables web proxy and SSL inspection scenarios using simple 2-arm configs predefined Superflows have been verified and tagged for proxy use cases

4 User Interface New buttons to quickly edit Application Profiles, Superflows and Strike lists within Test Components settings. Component settings reordering for faster parameter referencing and a consistent look and feel across test components Persistent menu buttons while navigating to Device Status page. HTML 5 User Interface o New screens converted to HTML5: Test Workspace and Multicast Lab A new Command Line Interface (CLI) is also being introduced with the new Native IxOS chassis for detailed configuration and troubleshooting. It is replacing the previous FlixOS admin screen and functionalities. Additionally, it also adds new options and functionalities for IxOS-related operations. The CLI is consistent with Ixia's IxNetwork VE, IxLoad VE, and Ixia Developer. The Device Under Test(DUT) UI has been converted to HTLM5 and in the process, we have improved the functionality and usability. This dialogue is used to automate DUT interaction with the device like changing configs or polling for status during the test run Other Enhancements Sequential IP generation algorithm in Network Neighborhood allows BreakingPoint to model the behavior of various attacks and applications with a predictable IP addresses usage patterns. This functionality is available for selected components (i.e. AppSim, ClientSim, Recreate, SecurityNP, StackScrambler) and on a per range basis giving customers complete flexibility. Recreate Component Enhancements: o Replay capture while preserving the server IP addresses to realistically model their services and servers (i.e. the real server IPs for Google, Facebook, etc). o Relative flow direction is maintained meaning the flow is either client or server initiated, as specified in the packet capture, unlike the current behavior both server/client The Native IxOS chassis introduces a new highly optimized Backup and Restore mechanism. Using the new procedure, customers can now export and import user data in a more reliable, faster and flexible manner. The new exported file contains custom data like BPS custom test configs and elements, BPS results database and Ixia Web UI User accounts. The file can be downloaded to either on the Local computer, NFS Share or USB Drive. PerfectStorm One appliances and XGS12-HSL/XGS2-HSL chassis shipped with native IxOS have an option to restore the system to factory defaults. This functionality allows customers to revert the system back to the factory configuration it was shipped with. This option is not available for systems that have been upgraded to Native IxOS in the field. Multi-version support: Easily install multiple BreakingPoint software versions and switch between them on new Native Liunx IxOS enabled chassis and appliances Live AppSim support: Leverage TrafficREWIND capabilities to bring the production network insights to pre-deployment testing now included in main stream BPS release In the network neighborhood, we have added support static MPLS labels. Now you can generate application traffic with MPLS tags similar to VLAN tag. Up to 16 tags can be supported. In this release, we continued to enhance the IPsec functionality on BPS: o Sequence generator support for IKEv1 extended authentication (Xauth) Username and Password fields in Network Neighborhood

5 initiated flows started from the client side. Interdependent Flows in Single Mode - now you can have a different source and destination IP address pair for each packet capture flow within one superflow iteration o IKEv1 Dead Peer Detection We continue to enhance and improve the REST API coverage and in this release, we added: Ability to delete all test results or one at a time Retrive all real time statistics, not just separate statistics for different sections On the Native IxOS enabled chassis, in addition to supporting multiple IxOS versions, now users can also install multiple BreakingPoint versions on the system and switch between them. This functionality is available through both Web UI as well as CLI. MORE INFORMATION BreakingPoint Web Portal: BreakingPoint VE Web Portal: PerfectStorm Web Portal: IXIA WORLDWIDE AGOURA RD. CALABASAS, CA (TOLL FREE NORTH AMERICA) (OUTSIDE NORTH AMERICA) (FAX) IXIA EUROPEAN IXIA TECHNOLOGIES EUROPE LTD CLARION HOUSE, NORREYS DRIVE MAIDENHEAD SL6 4FL UNITED KINGDOM SALES (FAX) IXIA ASIA PACIFIC 101 THOMSON ROAD, #29-04/05 UNITED SQUARE, SINGAPORE SALES (FAX)