Network Visibility Products Overview

Transcription

1 PORTFOLIO OVERVIEW Network Visibility Products Overview Portfolio Mix n EndaceProbe Intelligent Network Recorders (INRs) n EndaceVision Network Visibility Software n Endace Fusion Ecosystem Program Flexible integration with open source, commercial and bespoke network monitoring and security tools and workflows. n NetPod Application-aware Network Performance Management (AA-NPM) n EndaceODE Open Application Platform n EndaceDAG Data Capture Cards Emulex, an Avago Technologies Company, delivers network visibility products at the cutting edge of network recording and visualization. These solutions help Network Operations (NetOps), Security Operations (SecOps) and data center incident response analysts gain actionable insight from their network history. This allows them to shorten the time that it takes to resolve application and IT service performance, availability and security issues. Emulex network visibility solutions help enterprises and government organizations reduce the time, cost and impact associated with IT issue resolution and security incident management by uncovering the evidence hidden within their network s traffic history. n EndaceAccess Network Visibility Head-Ends n EndaceFlow NetFlow Generator Appliances (NGAs) n EndaceCare Professional Services and backup that ensures you get the best out of your Emulex Network Visibility Solutions For more information please visit EndaceProbe Intelligent Network Recorders (INRs) capture, index and record network traffic with 100 percent accuracy at data rates up to 100 Gb per second (100 Gbps). 1 EndaceProbe INRs are deployed by IT teams to troubleshoot and diagnose network, application and security issues. 10Gb Ethernet (10GbE) networks are used today by default for new data center build outs. External data center 10GbE links are often needed as well, to handle the abundance of data. The network bandwidth, amount of data transported, complexity of the network, cloud computing, virtualization and the sheer number of applications are making it an almost impossible task to find and fix network and application issues when they occur. 1 Data capture on 40 Gbps and 100 Gbps networks requires an EndaceAccess Network Visibility Head-End.

2 Network Visibility Products Overview Next-generation EndaceProbe INRs monitor and record vast amounts of data from multiple 10GbE networks. The breadth of the EndaceProbe INR product line offers a choice of speeds and storage sizes. They may be operated in always-on and on-demand modes that help NetOps teams match their network requirements. Integrated virtual machine (VM) hosting supports third-party applications. EndaceProbe INRs and related software offer significant features: n Record 100% of network traffic on multi-10gbe networks n Provide the data for back-in-time incident investigation and troubleshooting n Analyze network traffic before, during and after a specific period of interest, such as during an outage or traffic microburst n Quickly drill down to packet level analysis on multi-terabyte trace files stored on INRs n Export traffic to desktop or other servers via the EndaceVision Network Visibility Software graphical user interface (GUI) or Application Programming Interface (API) EndaceProbe Write-to- Disk Speed Storage Size Ports Options 304 INR 0.5 Gbps 4 TB 1 RU 4 x 1GbE 3000 INR 1 Gbps 8 TB 1 RU 2 x 1/100/1GbE 4004 INR 3 Gbps 16 TB 1 RU 4 x 1GbE /10GbE 4104 INR 22 Gbps 7.6 TB SSD 1 RU 4 x 1GbE/10GbE 7000 INR 10 Gbps 64 TB 3 RU 10 x 1GbE/10GbE or 20 x 1GbE 8004 INR 20 Gbps 21.6 TB 2 RU 2 x 10GbE + 4 1GbE 9004 INR 20 Gbps 96 TB 4 RU 4 x 1/GbE/10GbE Write-to-disk performance is influenced by the number of flows per second. Actual performance could be as much as 30 percent higher than the stated figure. EndaceVision Network Visibility Software is a webbased application that helps IT teams investigate and resolve a wide-range of network related problems. It enables network engineers and security analysts to search, visualize and interrogate historical network traffic recorded by EndaceProbe INRs deployed inside data centers and across their networks. n Easily integrate with leading network performance management (NPM), Application Performance Management (APM) and security information and event management (SIEM) systems n Find rogue applications with deep packet inspection (DPI) and port identification n Protect existing investments through integration with in-house or third-party network monitoring and security applications Key capabilities: n 100% packet visibility on network links from 10 Mbps to 100GbE n Segment-specific and network-wide analysis of network traffic and behavior EndaceProbe INRs use DPI to distinguish applications from each other. The DPI engine works by analyzing a variety of different traffic characteristics at the flow-level. DPI techniques include surgical pattern matching, deep protocol dissection, semantic and conversational awareness, behavioral analysis and flow registration. The process is compute intensive and thus challenging to perform at 10 Gbps, but is critical for network monitoring that EndaceProbe INRs provide. n Scalable analysis tools for investigating issues ranging from isolating the source of unexpected application traffic down to 10us accurate microburst root cause analysis or packet level decode n Web-based application, accessible from any web browser, avoids the need to deploy proprietary software on the user s desktop

3 TM Network Visibility Products Overview The Endace Fusion Ecosystem Program is a collection of technology integrations and alliance partnerships, driven by customers who use EndaceProbe INR appliances to solve real-world operational problems. By bringing together companies and technologies that amplify and complement each other, Endace Fusion allows customers to streamline their workflows, lower their deployment costs and improve the performance of their applications. We currently provide integration with solutions from: Arista Networks sells high performance network traffic access solutions for dense highspeed data center environments. The EndaceVision powerful suite of tools and capabilities are made possible by the 100 percent packet capture, high resolution metadata generation and DPI backed application detection capabilities of EndaceProbe INRs. Endace Application Dock Emulex provides a means for supporting network monitoring requirements deployed in conjunction with third-party monitoring and security products that can expedite fault domain identification and root cause analysis. The Endace Application Dock offers a closer integration between EndaceProbe INRs and third party applications with its unique and highly optimized virtualized application hosting environment. The Endace Application Dock enables up to four applications to run as VMs on each EndaceProbe INR. Monitoring applications hosted on these integrated VMs directly receive captured data, eliminating the need to forward large amounts of data across a network. Load balancing across multiple instances of the same application is also supported. The Cisco application-centric infrastructure (ACI), delivered by the Cisco next-generation Nexus switches, takes the core concepts of softwaredefined networking technologies and evolves them a step further to deliver application-aware network visibility. Dynatrace offers a robust APM solution included as an integral part NetPod product. SevOne provides fast, scalable IT performance monitoring, delivered as an all-in-one NPM solution for complex enterprise and service provider networks. Sourcefire offers products that provide continuous and pervasive advanced threat protection across the entire attack continuum before, during and after an attack and from any device to any cloud. Splunk is an industry-leading software platform for collecting and correlating machine data generated from a variety of different IT systems and infrastructure. The Velocimetrics trade latency monitoring application helps traders and exchanges monitor latency at the application layer. Other open source and bespoke solutions may be integrated into EndaceProbe INRs through our published RESTful Application Programming Interfaces (APIs) and libraries.

4 Network Visibility Products Overview NetPod Application-aware Network Performance Management (AA-NPM) is a fully integrated system based on Dynatrace APM technology and Emulex NPM capture technology. This combination provides network teams with high-fidelity network and application transaction-level visibility. n Best-in-class application transaction analysis n Instant access to deep network history provides deterministic evidence enabling cross-silo collaboration between IT teams n 100% analysis and recording of network traffic at 10GbE, 40GbE or 100GbE n Highest density AA-NPM solution for maximum data center benefits n Proactive transaction monitoring that generates alerts before end users experience degradation NetPod is a network-based, real-user monitoring solution designed for high speed networks, providing complete visibility across multiple tiers, infrastructure components, and web and non-web applications. IT organizations can perform rapid fault domain isolation for resolution of end user experience problems, and proactively spot and resolve application performance issues as they occur. NetPod supports the most complex, multi-tier application platforms such as SAP, Citrix, Oracle Forms, VoIP, Exchange, MS SQL, XML/SOAP, and more. It intelligently monitors and records real-time application performance across complex delivery infrastructures including leading load balancers, firewalls, servers, WAN optimizers, and middleware and web/non-web clients. As network speeds and loads increase, maintaining packet-level historical data represents a challenge for organizations. The 100 percent accurate packet capture with NetPod ensures all data is available for analysis when needed. With seamless access to these packets using network analysis modules, NetPod sets the bar as the most comprehensive AA-NPM solution on the market. NetPod collects, analyzes, and visualizes live traffic from networks and applications. It empowers network and infrastructure operators to immediately isolate faults that impact application performance and end user experience across web, middleware, database and network tiers. This application-aware network visibility solution can increase the availability and effectiveness of your mission-critical applications and ensure business uptime. Internet/Intranet Load balancer Web server Application servers Application servers Database and back-end servers Today s IT teams need end-to-end tools capable of doing more than assisting in monitoring and identifying performance issues. NetPod gives these teams real-time monitoring, coupled with fully integrated back-in-time analysis to provide unique packet-level forensics that pinpoint these issues down to the user and the application. This unique set of capabilities, which results from the combination of the Emulex real-time packet capture, storage, and back-in-time playback capabilities, and the Dynatrace user experience monitoring and protocol decodes, simplifies the delivery of mission-critical, network-centric applications and increases the business value of these applications by ensuring their availability to end users. EndaceODE Open Application Platforms host packet-processing applications in managed data center environments. These flexible and scalable systems are used extensively by organizations that demand the very highest levels of packet capture accuracy and processing performance from their hosting platforms. EndaceODE systems are built using industry-standard server hardware components, tightly integrated with proprietary EndaceDAG Card technology. Unlike EndaceProbe INRs, which come installed with the hardened Endace OSm software operating system, EndaceODE platforms are configured with a very simple Linux OS. Operating without any processing overhead for packet capture or system management, every available compute cycle is available for packet processing. EndaceODE systems can be used for a variety of applications: n EndaceDAG-based server platform for hosting a wide range of packet processing applications n Support for SONET and Ethernet interfaces from 10 Mbps to 10 Gbps n Sophisticated hardware-based packet processing features n 100% accurate packet capture to memory, ideal for data acquisition n Multi-core Intel x86 processor n High throughput capability n Low space, weight and power consumption EndaceODE Processor Cores Local Storage Size Ports Options TB 1 RU 4x10GbE OC TB 1 RU 4x10GbE TB 1 RU 8 x 1GbE/10GbE AMD NetPod NetPod support for popular applications

5 TM TM Network Visibility Products Overview EndaceDAG Data Capture Cards ensure 100 percent packet capture on any network, regardless of packet size, interface type or network load. They are perfect for organizations that want to build their own systems from scratch, but still want to have the confidence that they re catching every packet off the wire. EndaceDAG Cards use a tested blend of FPGA silicon and DMA technology to ensure that 100 percent of the available network traffic is captured from the wire, timestamped and transferred to host memory without loss. CPU offload ensures that all of the available compute resources can be used for packet processing rather than packet capture, helping accelerate applications and optimize resources. They have been proven over a decade to be the best possible foundation for any home-grown network monitoring, network security or packet capture-based network appliance. The latest generation EndaceDAG Cards bring high performance data capture technology to markets, which previously had to settle for less capable, off-the-shelf devices. EndaceDAG Card models are specifically designed to offer users the resources to maximize their functional needs based on their application in their market space. EndaceDAG Card solutions are available for government, high frequency trading (HFT), telco and service providers, NPM and APM, and SEIM solution providers. A range of packet-processing features have been baked into EndaceDAG Card firmware to enhance the performance of the card and to reduce the work that would otherwise have to be done in software. Key features include: n Load balancing of 10 Gbps of network traffic to a maximum of 32 memory buffers, while maintaining flow and session continuity. Each application can access its own receive stream in a separate memory buffer n Packet filtering and classification using hardware-based classification and filtering interrogates packet protocol headers, comparing them against hardware-based preset rules n Traffic replication that clones multiple memory buffer locations n Highly accurate packet timestamping and clock synchronization from external time references EndaceDAG Interface Ports Encapsulation PCI 10X4 10X2 9.2X2 8.1SX 7.5G2 7.5G4 7.4S 10GbE LAN 10GbE WAN 1GbE 10GbE LAN 10GbE WAN 1GbE 10GbE LAN 10GbE WAN 1GbE 10GbE SONET OC-192c (SDH STM-64) 10/100/1000BASE-T 1GbE Optical 10/100/1000BASE-T 1GbE Optical SONET (OC-3c/12c, OC-48c) (STM-1c/4c/16c) 4 SFP+ 2 SFP+ IEEE 802.3ae IEEE 802.3ab IEEE 802.3ae IEEE 802.3ab 8 Lane PCI-X Lane PCI-X SFP+ IEEE 802.3ae 8 Lane PCI-X XFP IEEE 802.3ae POS Raw SONET 8 Lane PCI-X SFP IEEE Lane PCI-X SFP IEEE Lane PCI-X FP POS ATM 8 Lane PCI-X 1.1 EndaceAccess Network Visibility Head-End systems give operations teams access to network traffic on 100GbE network segments. For organizations on the leading edge of networking, the ability to monitor, protect and record network traffic on 100GbE segments is critical, but they have been unable to entirely monitor their traffic because 100GbE-capable tools simply don t exist. n EndaceAccess system for 40GbE and 100GbE network segments n Accurately multiplexes 40GbE and 100GbE traffic into 12 x 10 Gbps slices for capture by EndaceProbe INRs n Compatible with any 10 Gbps-capable monitoring or security tool n Flow-safe intelligent load balancing helps manage oversubscription TOOL A TOOL B TOOL C

6 TM Network Visibility Products Overview The EndaceAccess family of systems solves the problem of ultra-high speed network access by ingesting 40GbE or 100GbE traffic and load balancing traffic out over multiple 10 Gbps ports, which means that a 10 Gbps capable monitoring or security tool can now be used in 40GbE and 100GbE environments. EndaceFlow 3040 NGAs can generate NetFlow from 30 Gbps (or 16 million flows per second) before saturating. Using a Network Packet Broker (NPB), multiple network links can be aggregated and fed into the 4x 10 Gbps monitoring ports. n Dedicated NetFlow generation n Low space, weight and power consumption n Sampled or un-sampled outputs n High throughput capability n Support for V5, V9 and IPFIX n Central management EndaceAccess Size Ingress Ports Egress Ports 40 1 RU 2 x 40GbE (LAN &WAN) 4x10GbE RU 2 x 10GbE 12 x 10GbE EndaceFlow NetFlow Generator Appliance (NGA) generates NetFlow messages from routers and switches. It can take a significant performance toll on critical network elements, particularly at high line rates. In situations where element performance and network visibility are equally important, it makes good sense to deploy a dedicated, vendor-independent EndaceFlow NGA to carry the load. EndaceFlow is the primary input into a wide range of network performance monitoring tools, security detection and network planning tools. EndaceFlow NGAs are able to deliver 100 percent accurate NetFlow on a sampled or un-sampled basis in V5, V9 or IPFIX formats. EndaceFlow NGA Max Throughput Local Storage Size Ports GB 160 GB 1 RU 4x10GbE EndaceCare Professional Services are available to partners and customers, offering accelerated and cost-efficient installations options for the best return on investment combined with a reduced total cost of ownership. The EndaceCare installation service lets you get the most out of Emulex Network Visibility equipment quickly and efficiently. See all the data on your network, identify and focus on problem areas, and use less time deploying, configuring, and optimizing your equipment. Rest easy as you benefit from the extensive product knowledge of our experienced professionals who bring vast industry experience combined with proven deployment methods and best practices. Once your Emulex Network Visibility solution is deployed you can then rely on our EndaceCare 24/7 worldwide technical support services to ensure that we re always there when you need us for your questions, software maintenance tasks or in the rare occurrence of a hardware unit requiring replacement. For product information on the Endace portfolio of Emulex products and a complete list of distributors, please visit our website at : For inquiries, inquiries@emulex.com Avago, Avago Technologies, Emulex, Endace, EndaceProbe, EndaceVision, Endace Fusion, NetPod, EndaceDAG, EndaceAccess, EndaceFlow, EndaceODE, EndaceCare, Endace OSm and the Emulex logo are trademarks of Avago Technologies in the United States and other countries. All other brand and product names are the trademarks of their respective owners. Copyright Avago Technologies. All rights reserved. END /15