INTELLIGENT ACCESS AND MONITORING ARCHITECTURE PRODUCT BROCHURE

Transcription

1 INTELLIGENT ACCESS AND MONITORING ARCHITECTURE PRODUCT BROCHURE

2 Innovation Our engineering team is dedicated to creating innovative products that help our customers achieve Intelligent Access and Monitoring Architecture in new ways, and to continuously develop solutions that exceed our customers expectations. As network challenges evolve, each new product delivers increased efficiency from network analysis and security monitoring tools. Custom design, rapid turnaround, and compatibility with all major networking, management, and security products ensure seamless solutions for a fast, reliable, and secure network. Leadership Net Optics is dedicated to helping customers obtain the highest efficiency from their networks. Our products help Network IT and security professionals gain 4/7, non-intrusive access for 100 percent monitoring visibility. Organizations gain the ability to intelligently monitor and secure their networks without interruption, using any industry-standard monitoring or security tool they choose. Customer First! Net Optics ensures our customers and partners success with industry-leading service and support. Customer Service representatives are dedicated to assisting customers and partners with their product needs. Additionally, our Technical Support team routinely partners with customers on a global basis to review their network monitoring objectives and architecture, and to recommend products that match their needs. We are committed to building a lifetime brand through a guaranteed Customer First! experience.

3 Centralize, Visualize, and Monitor Multiple Devices Achieve a unified, simplified view of any number of Net Optics devices from a single screen, with a rich graphical interface. Easily collect traffic statistics and monitor patterns while sampling traffic at unprecedented speed to help resolve issues before they cause congestion. MANAGEMENT Best-In-Class Data Monitoring Solutions Direct, aggregate, regenerate, switch, and filter high-density networks and volume traffic scaling to 40 Gigabits. Gain exceptional network productivity and value with versatile, scalable solutions that deliver true dynamic load balancing and the highest port density on the market. CONTROL Proven 100 Percent Plug-and-Play Visibility Without Points of Failure Expand your visibility to 100 percent with groundbreaking Tap technology, completely passive and simple to deploy anywhere in the network. Plus, advanced bypass switching solutions support network security with innovative features such as a Heartbeat packet, small footprint, low power consumption, and enterprise-class device management. ACCESS

4 EXPAND YOUR VISIBILITY YOUR GROWING NETWORK CHALLENGES MANAGEMENT Indigo Pro Management Platform Network professionals face growing pressures in today s rapidly changing environment. Foremost are the needs to monitor fastgrowing numbers of links; to achieve 100 percent visibility across the network; and to keep pace with industry-wide migration toward 10G networks. Demanding applications such as lawful interception and cloud computing put added pressure on monitoring capabilities. More than ever before, customers need to increase their connectivity options, streamline management tasks, and improve Router Firewall CONTROL Director Pro device uptime while protecting legacy investments. They seek intelligent, scalable, high-performance monitoring solutions that are simple to deploy and manage; that deliver cost-efficiency and long-term investment value with a practical future path. Analyzer 1 NET OPTICS RESPONDS WITH POWERFUL, INTELLIGENT SOLUTIONS Net Optics is leading the next wave of progress with a Analyzer RMON 1 RMON growing family of best-in-class solutions that help you access and monitor all traffic at all times and maintain a healthy, secure, and efficient network. Net Optics delivers comprehensive visibility of network data and vm 1 vm vm 3 ACCESS Analyzer ESX traffic even in areas you never thought you could access. DCM Our products reflect deep customer insight plus proven technology expertise. The Net Optics solution suite spans Phantom Monitor three categories: management, control, and access. Together, these comprise a total, integrated approach to meeting your monitoring and security needs. Firewall Director Main Network Monitor Router itap Port Aggregator Settings All Machines Policy Groups GLOBAL POLICY Summary Top Protocols Top Sources Top Destinations Top Talkers Connections Show Advanced Time Interval 1 Hour Update 1000 GLOBAL POLICY DEFAULT POLICY 800 Hypervisors User-Defined Groups V Hypervisor Connections Monitoring Groups Monitored VMs Phantom MiniLinux 3 Phantom MiniLinux 4 0 1:15 1:0 1:10 Inbound Outbound Unmonitored Machines Start Time End Time IP Proto 01//11 13:07 TCP 01//11 13:08 01//11 13:10 Protocols 1:5 Internal Source 1:30 1:35 Destination 1:40 Source Port 1:45 Bytes Reply Bytes dns ESXTPAS //11 13:09 01//11 13: //11 13:10 01//11 13:1 vmware //11 13:11 01//11 13: vcenter //11 13:1 TCP vmware Phantom Manager ,191,189,155, Phantom Manager LAN/WAN Analyzer Management

5 ON OFF INDIGO PRO MANAGEMENT PLATFORM YOUR COMMAND CENTER FOR TOTAL ACCESS, CONTROL AND VISIBILITY WHEN EVERY PACKET COUNTS When you deploy a large number of devices across your network, you need simplified, centralized management for control and visibility. Now, the Indigo Pro Management Platform unifies your view of any number of Net Optics devices across distributed locations. This compact 1U appliance centralizes collection of traffic statistics while performing network, fault, and policy management. Indigo Collector Pro s convenient graphical tools convey the health of your network at a glance as line graphs, pie charts, 3-D bar charts, and more, including a dashboard view. Not only does this innovative solution monitor and visualize it transforms your devices into remote sensors of traffic conditions. Indigo Pro s breakthrough ProPush technology samples traffic at an unprecedented once per second to let you see and resolve issues before they cause congestion. And you can use any popular browser to access Indigo Pro s convenient features. Director 7400 (New York) Director 5400 (Mumbai) 10 GigaBit itap (Madrid) Automatic Device Discovery Indigo Pro Management Platform 10/100/1000 itap (Sydney) GigaBit itap (Kuala Lumpur) Director Pro (London) Rich graphical data visualization Subnet-organized network topology map Views of snapshot and historical data Audit trail Fault and event management Print and export to CSV files Easy configuration and management of hundreds of devices At-a-glance dashboard views Improved network visibility and security threat management Monitors traffic levels and quality across the network without monitoring tools Centralized access to data from large numbers of devices Quick, simple deployment

6 DIRECTOR xstream PRO MORE POWER, LESS ENERGY, MAXIMUM PERFORMANCE, MINIMUM LATENCY 4X10G MONITORING ACCESS 4/7 This robust, high-performance solution helps meet the demands of 10G network deployments with their spiraling growth in link numbers and sophistication. Director xstream Pro delivers Director Pro s key Dynamic Load Balancing and Deep Packet Inspection, plus detailed timestamping and other new features for versatility and ease of use. Director xstream Pro combines the high speed and port count of Director xstream with Director Pro capabilities. Stackable, with hot-swappable, redundant power supplies, it performs aggregation, regeneration, switching, and L-L4 filtering. It offers 4 SFP+ 10G/1G ports in a U form factor and a new chassis. ing flexibility enables traffic from any port to be directed to any port. Traffic from any or all ports can be aggregated into a single stream, with each stream regenerated to any or all ports. Any port can be used as network (Span) inputs or monitor outputs. Analyzer FTP Span DHCP Director xstream Pro Analyzer 1 UDP Tap HTTP 1Gbps Port Aggregator Load Balance Group Management True Timestamping using NTP, PTP, and GPS clock Dynamic load balancing based on traffic flows Deep packet inspection (DPI) Latency measurement with nanosecond accuracy Director-like aggregation, regeneration, switching, and L-L4 filtering Real-time, per-second ProPush network analytics with GUI RADIUS and TACACS+ authentication and authorization More stacking options (by daisy-chain, star, and mesh topology) increase inter-unit bandwidth ProPush analytics enable microburst detection to maintain availability Graphical User Interface (GUI) lowers the learning curve Basic Indigo Pro integration simplifies manageability Cut-through architecture provides low latency Command Line Interface is available to ease system configuration Port-locking to user accounts enhances security

7 DIRECTOR xstream EXTREMELY FLEXIBLE PERFORMANCE WITH ACCELERATED 10G ARCHITECTURE Purpose-built for high-performance networks, Director xstream is a versatile 10 Gigabit monitoring access solution that provides regeneration, aggregation, and smart filtering in a single device. Master your monitoring tasks from a central location with an all-in-one powerhouse that delivers regeneration, aggregation, and smart filtering in a single unit, so you can monitor more network links than ever before as well as lower costs of space, Director xstream electricity, and cabling. Director xstream relieves overburdened equipment by filtering packets and shuttling traffic swiftly to the optimal device. Even at 100 percent utilization, Director xstream passes all traffic and leverages monitoring tools. (You can split the cable and double your ports, and any port can be input, output or both.) Plus, Director xstream shrinks 10G multi-functional security- and performance-monitoring access into a 1U form factor. Analyzer Analyzer 1 Port Aggregator Indigo Management FTP DHCP UDP HTTP 10G speed, with 1G flexibility and automatic data rate conversion Many-to-many port mapping Connects to Span ports and external Taps (no integrated Taps) Spreads the load to multiple tools with filter-based load balancing 10 Gigabit aggregation, regeneration, matrix switching, and smart filtering Twenty-four 10 Gigabit SFP+ ports in 1U Improves network visibility and threat management Centralizes monitoring to lower operating costs Leverages 1G and 10G monitoring tool investments Improves 10G network visibility and security threat management Relieves oversubscribed tools by filtering Compatible with monitoring tools, firewalls, and intrusion detection systems from all major manufacturers

8 DIRECTOR PRO AND DIRECTOR ADVANCED MANAGEMENT, CONTROL AND ACCESS TO CRITICAL DATA Director Pro advances the Director family by adding Deep Packet Inspection (DPI) and failover-protected Dynamic Load Balancing for mission-critical services. Plus, Director Pro carries forward Director s aggregation, regeneration, and switching capabilities. Highly compatible with tools from all major manufacturers, two Director Pros can be stacked to Firewall Director Pro Router provide unmatched centralized monitoring and dynamic load balancing. Net Optics Director offers the industry s premier solution to optimize your network s data monitoring capabilities. Director helps you hold down operating expenses and simplify tasks; cost-efficient switching, comprehensive filtering, and centralized management features handle such challenges as threat protection and high-speed inline analysis. Analyzer 1 Tool-sharing leverages your investments across groups. Plus, even non-expert users can easily monitor and configure filters and port maps using the convenient GUI. Analyzer RMON 1 RMON FTP DHCP UDP HTTP Dynamic load balancing, tapping, link aggregation, stream regeneration, matrix switching, and smart filtering in a single device Deep Packet Inspection with pattern matching Layer 4 through Layer 7 Industry s highest port density High-speed 10 and 1 Gigabit ports Stack two Director Pro chassis for increased capacity TapFlow multi-layer filtering engine Leverages existing monitoring tool investments Improves network visibility and security threat management Achieves zero packet loss Relieves oversubscribed tools Centralizes monitoring Greatly simplifies daisy-chaining ProPush traffic statistics for microburst detection

9 xbalancer AUTOMATED BALANCING ACT AT 40 GBPS xbalancer is the first monitoring load balancer designed specifically for distributing network traffic among inline monitoring appliances. This innovative device solves oversubscribed IPSs, firewalls, Web accelerators, and other inline appliances by enabling two or more appliances to be deployed in parallel with traffic balanced between them. A pool of inline appliances can be shared across multiple independent network links. With 4 SFP+ 10G ports in a 1U form-factor, xbalancer supports four inline appliances balanced across eight independent links or other configurations, such as two independent modules, with each module balancing four appliances across two links; or as six modules, with each balancing two tools across one link. Heartbeat packets monitor attached appliances and reallocate traffic in the event of unavailability. The solution supports xbalancer shares a pool of IPSs across multiple independent links. xbalancer fiber and 1Gbps fiber and copper. IPS IPS IPS IPS Twenty-four SFP+ 10G ports in 1U high 19-inch rack space Distributes traffic dynamically across inline appliances Flow-coherent traffic distribution Supports inline and out-of-band tool sharing Independent network links can share the same pool of IPSs Load balance 10/40/100 traffic to 1G and 10G tools Multiplies inline processing capacity for 10G networks Increases tool ROI through higher utilization Improves network uptime by bypassing IPS failures Flexible deployment for both 10G and 1G Heartbeat packets monitor IPS health

10 ilink AGG xstream FLEXIBLE 10G AGGREGATION FOR HIGH DENSITY NETWORK VISIBILITY ilink Agg xstream is an intelligent solution for aggregation, regeneration and matrix switching that provides efficient, line-speed, passive monitoring access to 10 Gigabit network links. The device scans incoming traffic and ensures that no packets are dropped, supporting external inline network Taps and Span ports for 10 Gigabit and 1 Gigabit monitoring tools. ilink Agg xstream ilink Agg xstream provides higher port density than any other 1U form factor link aggregator, combining traffic from up to 0 network links or Span ports and sending it to four monitoring appliances. Now you can apply your existing arsenal of 1G monitoring appliances to your new 10G traffic links. And it populates up to 4 SFP+ ports with Analyzer 1 Tap 10 Gigabit SFP+ and 1 Gigabit SFP modules so you pay for only what you need. Analyzer RMON 1 RMON Traffic Port Aggregator Indigo Management Twenty-four 10G SFP+ ports in 1U Managed solution for aggregation, regeneration, and matrix switching at 10G Aggregates 0 links to 4 tools Fully configurable port mapping Monitor and network ports can be used interchangeably Connects to Span ports and external Taps (no integrated Taps) Monitors more 10G links efficiently and securely Increases 10G tool capacity utilization Introduces no point of failure Non-filtering and fully configurable unique in the market! Eliminates resource contention Front mounted connectors ease installation

11 ilink AGG STREAMLINED, VERSATILE TRAFFIC CONSOLIDATION FOR SUPERIOR MONITORING PERFORMANCE ilink Agg supports fully configurable port mapping and enables aggregation, regeneration, and matrix switching in a single device which makes ilink Agg a key component in a comprehensive, consolidated infrastructure to manage the performance and security of your network. Any-to-any and many-to-many port mappings are supported, and any port can be used as an input, an output, or both at the same time. ilink Agg As the Industry s highest port density 1G link aggregator, ilink Agg lets you monitor as many as 16 links or switches at one time with eight monitoring appliances. Remarkably easy to configure, secure, and manage, ilink Agg lets you populate only ports you need RMON Workgroup to control capital expenses or provision extra ports for uptime and port availability. Because ilink Agg has no IP address, it is immune to viruses or other attacks. The scan Analyzer rate is optimized to avoid dropped packets, as long as the sum of network port data rates stays under 1 Gbps. Workgroup Fully configurable port mapping Supports different media types for flexible deployment with 8 SFP monitor ports 16 network ports in Span and inline configurations Delivers dual power for redundancy, hot-swappable, AC and DC models 19-inch rack mount, 1U height Regenerates aggregated traffic to multiple monitoring tools Lowers non-filtering aggregation costs Provides 100 percent traffic visibility at one Gbps even of malformed packets without introducing a point of failure Aggregates and switches monitor traffic to see more links Prevents conflicts among groups needing data access Replaces Port and Link Aggregators, and Regeneration Taps, with a managed solution Increases monitoring efficiency and flexibility

12 Main Network Monitor Settings Time Interval VM Name: PhantomMiniLimux3 Description: GLOBAL POLICY Now, Phantom Virtual Tap brings total visibility and control of Inter-VM traffic to VMware Monitor Settings Policy Groups Name in vcenter: PhantomMiniLimux3 ESX Server Hosting VM: Hypervisors Phantom MiniLinux 4 Unmonitored Machines Machine PhantomMiniLinux3 Time Interval 1 Hour Hypervisors User-Defined Groups 800 Monitored VMs Monitoring Groups Protocols Total (Bytes) In (Kbps) Out (Kbps) Internal (Kbps) Hypervisors Avg (Kbps) dns,, s 1.03G,191,93 User-Defined Groups Monitored VMs PhantomMiniLinux1 600 Phantom MiniLinux 4 Unmonitored Machines 00 Phantom MiniLinux 4 0 1:15 1:0 1:10 Inbound Outbound Unmonitored Machines Start Time to send traffic to both physical and virtual tools saving the cost of deploying separate virtual tools. Enabling 100 percent visibility of Inter-VM traffic passing between virtual PhantomMiniLinux PhantomMiniLinux3 PhantomMiniLinux4 vcenter0 Phantom MiniLinux Phantom MiniLinux 3 ESX and ESXi environments. This hypervisor-specific Tap is the first solution with the ability Update Update Monitoring Groups 1000 DEFAULT POLICY PhantomMiniLinux3 Phantom MiniLinux 3 1 Hour Time Interval DEFAULT POLICY Summary Top Protocols Top Sources Top Destinations Top Talkers Connections Show Advanced GLOBAL POLICY User-Defined Groups Monitored VMs Summary Top Protocols Top Sources Top Destinations Top Talkers Connections Show Advanced GLOBAL POLICY All Machines IP Addresses: PhantomMiniLimux3 Mac Addresss: 00:50:56:b1:00:30 Settings Policy Groups Network Main DEFAULT POLICY Monitoring Groups TOTAL VISIBILITY FOR INTER-VM TRAFFIC Update 1 Hour CPU Usage: 3MHz Host Memory Usage: 37MB Guest Memory Usage: 7MB Monitor All Machines Summary Top Protocols Top Sources Top Destinations Top Talkers Connections Show Advanced Policy Groups Network Main All Machines Connections PHANTOM VIRTUAL TAP End Time IP Proto Protocols 1:5 Internal Source 1:30 1:35 Destination 1:40 Source Port 1:45 Bytes Total (Bytes) In (Kbps) Out (Kbps) Internal (Kbps) Avg (Kbps) 1.03G,191,93 dns,, s 1.03G 98,189,89 PhantomMiniLinux3 dns,, s, snmp 1.0G 98,155,56 PhantomMiniLinux4 dns,, s 1.01G,149,51 vcenter0 Phantom Manager Machine dns,, vmware-cim, vmware-hb 3.0M net-agent, dns,, s, ntp 19.1M ESXTAP1 net-agent, ntp 1.81M ESXTAP net-agent, ntp 1.57M Reply Bytes 01//11 13:07 TCP dns ESXTPAS,191 01//11 13:08 01//11 13: ,189 01//11 13:09 01//11 13: ,155 01//11 13:10 01//11 13:1 vmware ,149 01//11 13:11 01//11 13: vcenter //11 13:1 TCP vmware Phantom Manager Protocols dns,, s PhantomMiniLinux PhantomMiniLinux1 servers, the Tap reveals previously invisible traffic for superior security, regulatory compliance, and manageability. With support for best-of-breed hypervisors and virtual switches, Phantom Virtual Tap lets you find and resolve security breaches before they vm vm 3 ESX vm 1 Tunnel Phantom Virtual Tap meets today s critical, growing need for robust monitoring and auditing Director a physical server. The Tap integrates with the Net Optics Director family of switches to Main Network Monitor Settings All Machines Policy Groups GLOBAL POLICY Summary Top Protocols Top Sources Top Destinations Top Talkers Connections Show Advanced Time Interval 1 Hour Update 1000 GLOBAL POLICY DEFAULT POLICY 800 Monitoring Groups Hypervisors User-Defined Groups Phantom Monitor aggregate traffic from multiple VMs and perform smart filtering and integrates smoothly with the versatile Indigo Pro platform to streamline management with an intuitive and easy- Analyzer DCM capabilities in the converged data center, delivering the ability to Tap traffic of VMs on Monitored VMs Connections can affect the data center Phantom MiniLinux 3 LAN/WAN Phantom MiniLinux 4 0 1:15 1:0 1:10 Inbound Outbound Unmonitored Machines Start Time End Time IP Proto 01//11 13:07 TCP 01//11 13:08 01//11 13:10 Protocols 1:5 Internal Source 1:30 1:35 Destination 1:40 Source Port 1:45 Bytes Reply Bytes dns ESXTPAS //11 13:09 01//11 13: //11 13:10 01//11 13:1 vmware //11 13:11 01//11 13: vcenter //11 13:1 TCP vmware Phantom Manager ,191,189,155, V Hypervisor to-use GUI. Phantom Manager B E NE F IT S Allows total traffic visibility between VMs with no interference Defends the virtual and cloud environments from invasion and disruption Pushes traffic of interest to both physical and virtual monitoring tools Lowers investment in virtual tools by bridging existing physical tools to the virtual network Integrates kernel-level monitoring into the hypervisor switching system Enables transparency of the virtual infrastructure for greater control and availability Incorporates encapsulated tunneling Leverages proven Net Optics Director functions to the virtual environment Installs in hypervisor for full traffic access Simplifies regulatory compliance through enhanced checks and auditing capabilities Follows VMs as they move (vmotion) among physical servers Centralizes and simplifies management for better accuracy and efficiency

13 ibypass HD MODULAR, FLEXIBLE, FAIL-OVER BYPASS SWITCHES WITH HIGH AVAILABILITY CAPABILITIES Ideal for inline network security applications such as intrusion prevention, Web optimization, and firewalls, Net Optics ibypass HD supports two to eight segments, with each segment operating independently to ensure link protection. Connect, maintain, and remove singlesegment and multi-segment IPS appliances without affecting traffic through the links or the operation of the other segments. High-availability configurations let you link pairs of bypass IPS IPS IPS switches to support both tool and link redundancy. Rely on the exclusive Link Fault Detect, Bypass Detect, and Heartbeat features to support your network availability. Configurable Heartbeat packets are sent from the ibypass HD switch through the IPS in both directions to monitor the health of the IPS. When a fault condition is detected, the IPS loses power or is redeployed, or IPS software malfunctions, traffic is automatically routed using FastPath switching technology directly through the ibypass HD switch rather than through the inline appliance, keeping the network traffic flowing. Router Router ibypass HD High availability configurations enable the ibypass HD to support environments that use tool redundancy and link redundancy. Tool redundant (top left), non-redundant (top right) and link redundant (bottom) IPS deployments are shown. Eight segments protected in a 1U appliance Passive, secure technology Modular design for deployment flexibility Customizable behavior through Command Line Interface (CLI) RMON traffic statistics on all ports High availability configurations Enterprise-ready management features (TACACS+, RADIUS) Easy installation and operation with front-mounted connectors Fail-safe monitoring with any Gigabit inline appliance Increased reliability for important network links Compatible with all major manufacturers, IPSs, and firewalls Easy remote management through secure SSH connection

14 ibypass AND BYPASS SWITCHES FAIL-SAFE ACCESS PORTS FOR ZERO DOWNTIME IN MONITORING VITAL NETWORK TRAFFIC The Net Optics family of ibypass es offers you trouble-free access ports to support your inline network security and monitoring devices. Because the switch is a passive appliance, link traffic continues to flow even if the switch itself loses power. A Heartbeat packet ensures that a monitoring appliance is actually passing traffic: If this packet doesn t return to the bypass switch, that appliance may be down. The switch instantly goes into bypass mode and takes that appliance out of the traffic path. Firewall When Intrusion Prevention Systems (IPSs), firewalls, and other vital security equipment lose ON OFF power or need maintenance, Net Optics Bypass es ensure that traffic continues to flow uninterrupted on the affected network link. A Bypass can automatically switch ibypass network traffic around an unresponsive IPS appliance even if the IPS is still powered on. Once the IPS re-establishes a connection, traffic is re-routed to the device for Management IPS continued operation. Trouble-free access port for inline network security and WAN optimization tools Bypass with Heartbeat adds automated link fail-open protection Remote access through 10/100/1000 management port Support for 10Mbps to connectivity and managed models Redundant power User-configurable Heartbeat packets Protects the network from IPS link, application, and power outages Provides greater compatibility with all network devices Enables maximum network uptime Maintains monitoring appliances without downtime because the bypass switch enables network traffic to flow when appliances are offline Ensures alerts if monitoring devices are offline or slow to respond Enhances monitoring security with no IP address needed on network and monitor ports

15 GIG ZERO DELAY TAP AND NETWORK TAPS A COMPREHENSIVE FAMILY OF TAPS INCLUDING GIG ZERO DELAY TAPS WHEN DELAYS ARE NOT AN OPTION Gig Zero Delay Tap is the industry s only 10/100/1000BaseT Tap with true zero-delay operation to prevent network disruptions. Breakthrough engineering ensures that any loss of power to the Tap is transparent to the network, and does not affect flow of traffic through the Tap, eliminating packet delay and loss. Regardless of interface or location in the network, Net Optics offers a Tap solution, with copper, multimode and singlemode fiber supported at speeds up to 40 Gbps with media conversion models available. The Net Optics family of Taps provides 100 percent visibility into customers networks. Installed between any two network devices, Taps provide permanent, passive access points into the network. When a monitoring tool is needed, simply connect the device to the Tap instead of taking down the link and interrupting traffic. Even if Taps lose power, they are completely passive, with fail-open technology that ensures traffic continuity. Taps pass all network traffic including Layers 1 and errors without introducing bottlenecks or points of failure. Firewall Zero Delay Analyzer Zero Delay Inline link failover protection Access-ready connectivity Passive access at 10Mbps to 40Gbps without data stream interference Zero Delay failover on power loss of 10/100 and 10/100/1000 models Redundant power supplies Multiple split ratios available for fiber models Full-duplex monitoring with zero impact on network traffic around the clock 100 percent visibility to link traffic for security and network monitoring tools Plug-and-play no configuration required Media conversion single device solutions such as TX to SX Permanent access port that avoids breaking a line when a tool is connected Passive technology enabling maximum network uptime

16 TM itap TECHNOLOGY AND PORT AGGREGATION AGGREGATION AND INFORMATION PROVIDES GREATER MONITORING AND ACCESS FLEXIBILITY Innovative itap technology transforms Taps into passive network status sensors that forward vital information from throughout the network. itap products gather and display utilization peaks, bandwidth levels, and error counts, even when a monitoring tool is not attached. In addition to a standard CLI, SNMP manageability delivers information to Web browsers and SNMP management utilities. SNMP control enhances security because it Firewall Router adds the ability to enable or disable ports from remote locations. In addition to standard network and monitor ports, each itap-enabled product contains a itap Port Aggregator 100 Mbps network management port and a DB9 serial port for management access. itap technology is available for Bypass es, Port Aggregator Taps, and other managed devices. Management Analyzer Complements RMON probes and analyzers; helps pinpoint where needed Increases network visibility view statistics at a glance Improves accessibility remote access and configuration control Enables transparent sharing of link information between IT groups Easy-to-read utilization and statistics reports Reduces network outages through proactive monitoring Easy-to-read front panel display for simplified troubleshooting Threshold LED alarms SNMP trap reporting Management Information Base (MIB) available Secure login access Utilization statistics

17 REGENERATION TAPS PASSIVE, REAL-TIME REGENERATION TAP TECHNOLOGY FOR SIMULTANEOUS TRAFFIC MONITORING ON IMPORTANT LINKS Regeneration Taps provide visibility into one network link with up to eight attached security or monitoring tools. All traffic between network devices is transparently forwarded at 100 percent full-duplex rates without introducing a point of failure even in the event of a loss of power. Multiple monitoring tools such as traffic analysis monitors, RMON probes, and intrusion detection systems connected to the Regeneration Tap allow for deep levels of analysis from a single 1U-high device. Inline and Span Port versions provide the ability to deploy monitoring tools in two scenarios. Depending on your needs, the inline or Span models make it possible to collect traffic from multiple network switches or routers that are utilizing Span ports, or they can be deployed inline between two network devices for deeper traffic capture and analysis. All leading security and monitoring tools and a wide variety of media and speeds from 10/100Mbps to fiber are supported. Firewall Regeneration Tap RMON Analyzer Passive access at 10Mbps to without data stream interference Optimized for each specific topology Span models monitor two separate Span sessions independently Replicates link traffic to multiple tools 100 percent passive traffic access All speeds and media types supported View 100 percent of traffic including VoIP, HTML, application, and Layer 1 and errors, 4, or 8 monitor ports enable comprehensive troubleshooting Enables sharing traffic access among groups without conflicts Use multiple monitoring tools simultaneously Simplified plug n play deployment with no device management needed Media conversion single device network-to-monitor-tool interfaces Cost-effective increases monitoring tool ROI because they are always deployed

18 NET OPTICS MONITORING ACCESS PLATFORM (MAP) Net Optics provides a full network monitoring access platform. With five families of products, including taps, bypass switches, port and link aggregators, regeneration taps, and data monitoring and network controller switches, we are a one-stop-solution able to fully meet the network access monitoring needs of customers. Gig Zero Delay Zero Delay VoIP Director Pro GeoMap Dashboard Meet the challenge of managing large monitoring deployments with network management solutions tailored for centralized management of Net Optics devices. ESX vm 1 vm vm 3 Phantom Monitor ESX vm 1 vm vm 3 Phantom Monitor

19 Indigo Pro Director xstream Pro Summary Top Protocols Top Sources Top Destinations Top Talkers Connections Show Advanced Time Interval 1 Hour Update Connections Phantom Manager GLOBAL POLICY :10 1:15 Inbound Start Time End Time IP Proto 1:0 Outbound Protocols 1:5 Internal Source 1:30 1:35 Destination 1:40 Source Port 1:45 Bytes Reply Bytes 01//11 13:07 TCP dns ESXTPAS 01//11 13:08 01//11 13: //11 13:09 01//11 13: //11 13:10 01//11 13:1 vmware //11 13:11 01//11 13: vcenter //11 13:1 TCP vmware Phantom Manager ,191,189,155, Internet Analyzer RMON Analyzer itap Regeneration Tap Analyzer RMON ibypass ON OFF xbalancer ilink Agg xstream Cloud RMON Analyzer IPS IPS IPS IPS

20 NET OPTICS, INC Betsy Ross Drive Santa Clara, CA (408) twitter.com/netoptics Net Optics is a registered trademark, and Director xstream Pro, Director xstream, Smart Filtering, Director, Director Pro, ibypass, ibypass HD, ilink Agg, ilink Agg xstream, Indigo Pro, ProPush, Phantom Virtual Tap, itap, Regeneration Tap, xbalancer, Zero Delay and x are trademarks of Net Optics, Inc. Additional company and product names may be trademarks or registered trademarks of the individual companies and are respectfully acknowledged. Copyright Net Optics, Inc. All rights reserved.