Network Associates Sniffer Network Analysis Tools

Transcription

1 Sharon Fisher Product Report 4 December 2003 Network Associates Network Analysis Tools Summary Network Associates, a seminal monitoring product, is also the most popular. The products are maintaining their lead by adding support for new technologies, such as voice and wireless. Table of Contents Overview Analysis Pricing Competitors Strengths Limitations Insight List Of Tables Table 1: Overview: Network Associates Family Table 2: Features and Functions: Network Associates Family Table 3: Features and Functions: Network Associates Family (Continued) Table 4: Price List: Network Associates Family Gartner Reproduction of this publication in any form without prior written permission is forbidden. The information contained herein has been obtained from sources believed to be reliable. Gartner disclaims all warranties as to the accuracy, completeness or adequacy of such information. Gartner shall have no liability for errors, omissions or inadequacies in the information contained herein or for interpretations thereof. The reader assumes sole responsibility for the selection of these materials to achieve its intended results. The opinions expressed herein are subject to change without notice.

2 Network Associates Network Analysis Tools Corporate Headquarters Network Associates Inc Freedom Circle Santa Clara, CA 95054, U.S.A. Tel: Fax: ; Internet: Overview Table 1: Overview: Network Associates Family Product Portable Voice Mobile Network Performance Orchestrator InfiniStream Security Forensics Product Design Date Announced Date of First Delivery Current Version Base Price (US$) LAN, Wireless LAN, WAN and High Speed LAN, WAN and High Speed Voice over IP 2.5G/3G mobile wireless data s Management and trend reports Network traffic capture and storage June 2000 June 2000 June 2000 May 2002 October 2002 February 2003 August 2000 July 2000 August 2000 June 2002 December March 2003 (base (base 2002 technology technology shipping shipping since 1988) since 1988) (npo 1.5 Manager); 2.1 (npo Visualzer) From 11,000 From 8,900 5,250 9,995 32,995 75,000 (perpetual) (perpetual) (perpetual) (perpetual) (perpetual (perpetual appliance) appliance) 4 December

3 Network Associates Network Analysis Tools Table 2: Features and Functions: Network Associates Family Product Voice Portable Applications Problem resolution, improving quality for voice s, isolates problems and causes, finetunes the, enables converged management, helps maintain voice-related quality of service (QOS) and Service- Level Agreement (SLA) requirements. Problem resolution, improving productivity, reducing operating costs, troubleshooting, real-time expert analysis, packet capture, post-capture analysis and decodes, learning configurations, automatic protocol troubleshooting, protocol interpretation, traffic generation, statistics. Problem resolution, improving productivity, reducing operating costs, troubleshooting, Remote Monitoring (RMON) monitoring (full RMON1 and RMON2 compliant), real-time expert analysis, packet capture, post-capture analysis and decodes, tabular and graphical format reporting of traffic matrix, traffic map, protocol distribution, history, alarms and application response time. 4 December

4 Network Associates Network Analysis Tools Table 2: Features and Functions: Network Associates Family Product Voice Portable Protocols and Interfaces Supported Required Applications Operating Environment Operating System Protocols: H.323, including H.225 Call Signaling, H.245 Media Control, remote access services (RAS), rapid transport protocol (RTP) and RTP control protocol (RTCP); serial interface protocol (SIP); Cisco s Skinny Client Control Protocol (SCCP) Interfaces: Same as Portable or base system. Protocols: Comprehensive protocol support for LAN and intering protocols for the following protocol families: TCP/IP,IPv4&v6,Novell, DECnet, Sun NFS, X Windows, IBM, PC LAN, Appletalk, Banyan, open systems interconnection (OSI), Xerox system (XNS), data link control (DLC), Router, WAN (including Frame Relay and point-to-point protocol [PPP]), Arcnet, Database, remote monitoring system (RMS), ZNET, Microsoft, Cisco, asynchronous transfer mode (ATM), Wireless Application Protocols (WAP), Voice/IP and TCP/IP-VPN and other vendor specific protocols. Interfaces: Ethernet, Fast Ethernet, Gigabit Ethernet, Token Ring, fiber distributed data interface (FDDI), Wireless a & b, Frame Relay, highspeed serial interface (HSSI), T1/E1, DS3, ATM: OC-3, OC-12, DS-3,SONET:OC-3c,OC-12c Protocols: Comprehensive protocol support for LAN and inter protocols for the following protocol families: TCP/IP,IPv4&v6,Novell, DECnet, Sun NFS, X Windows, IBM, PC LAN, Appletalk, Banyan, OSI, XNS, DLC, Router, WAN (including Frame Relay and PPP), Arcnet, Database, RMS, ZNET, Microsoft, Cisco, ATM, WAP, Voice/IP and TCP/IP-VPN and other vendor-specific protocols). Interfaces: Ethernet, Fast Ethernet, Gigabit Ethernet, Token Ring, FDDI, Frame Relay, HSSI, T1/E1, DS3, ATM: OC-3, OC-12, DS-3,SONET:OC-3c,OC-12c None None Portable 4.7 or higher or 4.2 or higher None None None Windows 98, Windows 98, Windows 2000, Appliance: Windows NT 4.0 Windows 95 or Windows XP (for LAN and Console: Windows 98, Windows Windows NT Wireless LAN laptop platforms) or 2000, Windows NT 4.0 and 4.0 Windows NT 4.0 Windows XP 4 December

5 Network Associates Network Analysis Tools Table 2: Features and Functions: Network Associates Family Product Voice Portable Hardware Platform Units Supported Random Access Memory (RAM) Requirements Disk Space Requirements Media Same as required for Portable or Pentium 400MHz minimum; 800x600VGA monitor; PCMCIA, Cardbus, ISA or PCI card slot Appliance: not applicable, appliance included Console: Pentium III 600MHz minimum, Network adapter with IP address, 800x600 VGA monitor 1 segment 1 segment 1-, 2- or 4-segments, depending on model Same as 128MB; 256MB recommended Appliance: not applicable, preconfigured required for appliance included Console: 256MB Portable or Same as 125MB Appliance: not applicable, preconfigured required for appliance included Console: 270MB Portable or CD-ROM/Web CD-ROM/Web download CD-ROM/Web download download 4 December

6 Network Associates Network Analysis Tools Table 3: Features and Functions: Network Associates Family (Continued) Product Mobile Network Performance Orchestrator InfiniStream Security Forensics Applications Problem resolution, improving productivity, reducing operating costs, troubleshootin g, packet capture, postcapture analysis and decodes, analysis of dynamic port assignment, graphical reporting of protocol distribution, top conversations and application response time. Optimize performance, identify costs, protect against intrusions, rapidly detect and resolve faults, track service levels, assess bandwidth capacity, determine application performance and usage. Network forensics analysis and investigation, documentation of usage patterns, reconstruction of application-layer traffic. 4 December

7 Network Associates Network Analysis Tools Table 3: Features and Functions: Network Associates Family (Continued) Product Mobile Network Performance Orchestrator Protocols and Protocols: Protocols: not applicable Interfaces Tunneling and Interfaces: 10/100 Ethernet Supported Routing Encapsulation protocols, Mobile IP and Mobility protocols, IPv6, global system for mobile communicatio ns (GSM)/general packet radio service (GPRS) protocols, code division multiple access (CDMA) 2000 protocols, universal mobile telecommunic ations system (UMTS) (wideband code division multiple access [W- CDMA]) protocols, Wireless Application Protocols (WAP) Interfaces: Same interfaces as base system InfiniStream Security Forensics Protocols: not applicable Interfaces: Gigabit Ethernet 4 December

8 Network Associates Network Analysis Tools Table 3: Features and Functions: Network Associates Family (Continued) Product Mobile Network Performance Orchestrator InfiniStream Security Forensics Required Applications Operating Environment Operating System Hardware Platform Units Supported RAM Requirements Disk Space Requirements Media 4.2 or higher Appliance: None Console: MS Internet Explorer v5.0 or higher (npo Manager); MS Internet Explorer 5.0 or higher or Netscape 7.0 or higher (npo Visualizer) Appliance: None Console: MS Internet Explorer v5.0 or higher None None None Windows NT Windows NT 4.0 Appliance: Linux 4.0 Console: Windows 98, Windows NT 4.0, Windows 2000 or Windows XP Same as Appliance: not applicable, Appliance: not applicable, required for appliance included appliance included Console: Pentium 600MHz Console: Pentium III 700MHz minimum, Network adapter with minimum, Network adapter with IP address, 800x600 VGA IP address, VGA monitor monitor 1segment 1segment 1segment Same as Appliance: not applicable, preconfigured Appliance: not applicable, pre- required for appliance included configured appliance included Console: none Console: 256MB (512MB to 1GB recommended) Same as Appliance: not applicable, preconfigured Appliance: not applicable, pre- required for appliance included configured appliance included Console: none Console: 500MB CD-ROM/Web CD-ROM/Web download Pre-installed on appliance download Analysis Network Associates line of -monitoring products was the market leader and one of the seminal products in the area to the extent that is often used to refer to monitoring products in general. The products have been organized into five offerings: Portable for stand-alone analysis and troubleshooting for management and monitoring Network Performance Orchestrator for centralized management and reporting of the data gathered by appliances 4 December

9 Network Associates Network Analysis Tools Add-on options, such as Voice and Mobile, for enhanced functionality for key technologies InfiniStream Security Forensics for high-performance, high-capacity data capture, storage, retrieval and analysis Portable, also known as the Portable Analysis Suite, is intended for real-time analysis and is used for reactive troubleshooting, for baselining and to deliver value-added services by outsourcing and consulting firms. It now incorporates technology such as high-speed optical LANs, WANs and carrier backbones, including gigabit, asynchronous transfer mode and Packet over SONET. In comparison, the product line combines analysis with monitoring and application management capabilities. addresses availability, baseline and trend reporting and application management extensions. It is intended to be deployed as dedicated instrumentation on critical segments to support the availability and security requirements of large enterprises. Network Performance Orchestrator consists of two components: npo Manager provides centralized management, administration and secure access to instrumentation. npo Visualizer offers information about performance and security in Web-based trend reports. The add-on options are available separately for enterprises that need specific technology enhancements. Voice runs on Portable and. Mobile runs on. InfiniStream Security Forensics provides packet-level data capture and storage at the core of the, providing the ability to investigate and analyze security breaches that occur from inside and outside the. Pricing Table 4: Price List: Network Associates Family Model Description Price ($) Portable Basic Software Only Portable LAN Software Only Portable Analysis Suite Software Only Software (s/w) suites Portable s/w for Ethernet, Fast Ethernet and Token Ring Portable s/w for Ethernet, Fast Ethernet, Full Duplex Ethernet, Token Ring and FDDI Portable s/w for all supported topologies 2,495 11,000 29,995 ET05 4-port 10/100 Ethernet 21,995 EFD1 1-port Full Duplex Ethernet 21,995 ET2W 2-port WAN + EN 14,995 ET2T 2-port WAN T1 + EN 21,495 WDS3 1-port WAN DS3 26,995 64G1/64G4 1-port to 4-port Gigabit 47,495/99,995 EG2S/EG2L 1-port Gigabit Ethernet SX/LX + EN 32,995/34,995 4 December

10 Network Associates Network Analysis Tools Table 4: Price List: Network Associates Family Model Description Price ($) ATMR + ADS3 Pod ATM RMON + DS-3 Pod 21,995 ATMR + OC3 MMF Pod ATM RMON + OC-3 MMF 21,995 Pod ATMR + OC3 SMF Pod RMON+ ATM RMON + OC-3 SMF Pod H/W-S/W appliances 28,995 RT02 1-port 10/100 Ethernet 8,900 RT03 2-port 10/100 Ethernet 10,395 RT05 4-port 10/100 Ethernet 17,495 RFD1 1-port Full Duplex Ethernet 18,995 RT2W 2-port WAN + EN 11,995 RT2T 2-port WAN T1 + EN 17,995 RDS3 1-port WAN DS3 23,995 RG3S/RG3L 1-port Gigabit Ethernet SX/LX + EN RTMR + ADS3 Pod ATM RMON + DS-3 Pod 18,995 RTMR + OC3 MMF Pod RTMR + OC3 SMF Pod Voice Mobile ATM RMON + OC-3 MMF Pod ATM RMON + OC-3 SMF Pod Voice over IP analysis software Mobile Wireless analysis software 19,995/24,995 18,995 25,995 5,250 9,995 npo Manager Appliance 32,995 npo Visualizer Appliance 39,995 InfiniStream Security Forensics Appliance 74,995 InfiniStream Replay Option S/W-only option 15,000 Pricing as of October GSA Pricing There is no direct GSA pricing. GSA purchasing is done through resellers such as ECS and McBride Associates. Competitors Acterna Agilent (formerly Hewlett-Packard Test & Measurement Organization) Finisar (formerly Shomiti Systems) NetScout Systems Strengths Strong Product Features 4 December

11 Network Associates Network Analysis Tools Robust expert analysis, including remote functionality, using automatic problem identification; the ability to present recommendations within a few keystrokes; and the ability to automatically learn and update a s logical configuration in real time. Wide Range of Protocols Supported The product line supports more than 400 protocols, arguably the largest in the industry. Provides Analysis, Not Just Data The products monitor and analyze activity in multivendor ing environments and display server-processed information at the central console, which provides more intelligence than sending raw RMON data to a central location and reduces the amount of management traffic. Limitations Expensive Network Associates products are thought by users to be more expensive than those of comparable products from other vendors. Insight It s hard to argue with success. While certain competing products offer superior functionality in particular areas, the product line is by and large the most popular. Products addressing new technologies, such as voice and wireless, also tend to be among the first in their category. 4 December