Tap Solutions VSS Monitoring - Network Packet Brokers | NETSCOUT

Network Packet Brokers and TAPs

The World's Only System-based Network Packet Broker Solution

VSS Monitoring provides the physical devices and innovative software and hardware technologies that give you complete control over visibility into your network, and allow your tools to operate from anywhere.

Whether your network operates at speeds of 10/100Mb, 1/10/40/100Gb (or all of these), VSS offers the widest range of devices to suit your network: from a single network TAP, to a 600-port chassis, to a 4000+ ports interconnected system.

Many of the features you need for a robust visibility solution, such as flow aware load balancing, packet filtering, and policy triggers, come standard in most of our products. While other features, such as deep packet inspection, interval measurements, packet slicing, and more, can be added to suit the needs of your monitoring and security infrastructure.

All VSS network packet brokers and TAPs are interoperable; all designed and produced “in-house” based on a unifying platform to ensure compatibility and scalability.

Network Packet Brokers for Dummies
 

Overview

vBroker Series

The vBroker Series of Network Packet Brokers provides you with flexible yet advanced network visibility by accessing, optimizing, and delivering traffic from multiple networks to multiple network monitoring and security tools – both passive and active (inline).
For more details: http://www.vssmonitoring.com/vbroker-series/

VB6000

The VB6000 Network Packet Broker redefines the economics of the data center with density, scale, and cost-effective performance.
For more details: http://www.vssmonitoring.com/vb6000/

Optimizer

The Optimizer 2400 Network Packet Broker redefines the economics of monitoring infrastructure without requiring administrators to reinvent network operations.
For more details: http://www.vssmonitoring.com/optimizer/

vProtector Series

The vProtector accesses, optimizes, and delivers traffic from one or more full-duplex networks to multiple active and passive network security and monitoring tools. vProtector is available as hardware modules with Active Protection for the VSS vBroker chassis.
For more details: http://www.vssmonitoring.com/vprotector/

Distributed TAPs

VSS Monitoring Distributed TAPs are entry-level network packet brokers.
For more details: http://www.vssmonitoring.com/distributed-taps/

TAPs

VSS Monitoring TAPs provide persistent, 100% failsafe access for passive network monitoring, security, and forensics tools.
For more details: http://www.vssmonitoring.com/taps/

Management Center

The VSS Monitoring Management Center (vMC) is a client–server based management software application that enables the visualization and management of both multiple interconnected and standalone VSS network packet brokers (NPBs) through a central server.
For more details: http://www.vssmonitoring.com/management-center/

 

Features

vBroker Series

http://www.vssmonitoring.com/vbroker-series/

The vBroker Series provides you with flexible yet advanced network visibility by accessing, optimizing, and delivering traffic from multiple networks to multiple network monitoring and security tools – both passive and active (inline).

Featuring both fixed and modular configurations, vBrokers allow you to choose the technologies and hardware you need to get the right network visibility to all of your tools. Modular vBrokers enable you to deploy, swap, and scale ports and capabilities to keep pace with the network and all of your tools.

Policy-based triggers, health checks, and fail-open/fail-closed options for inline tools combine with filtering, traffic optimization, and other special features to provide redundancy and high availability for inline and out-of-band visibility.

Combined with the VSS-patented vMesh architecture, you get a flexible and scalable Unified Visibility Plane that gets your network monitoring and security infrastructure the data it needs to operate at its best.

VB6000

http://www.vssmonitoring.com/vb6000/

REDEFINING THE ECONOMICS OF THE DATA CENTER WITH DENSITY, SCALE, AND COST-EFFECTIVE PERFORMANCE

Service providers, private clouds, and large enterprises must contend with the collection, processing, and aggregation of traffic from a high number of network segments, while addressing space and power constraints in the data center and managing the migration to 40 and 100Gbps network infrastructure.

According to Gartner Research, network professionals today are challenged by increasing network speeds (beyond 10Gbps) and the pressure to optimize the cost of security and operational tools1—challenges especially acute in large-scale environments.

High-density, flexible visibility solutions that reliably support high speed links are critical to enabling cost-effective, large-scale network monitoring, regardless of throughput or tool processing capacity.

Optimizer

http://www.vssmonitoring.com/optimizer/

The Optimizer 2400 redefines the economics of monitoring infrastructure without requiring administrators to reinvent network operations. The Optimizer 2400 supports line-rate performance and network packet broker features at the price point of dedicated SPAN port aggregator switches. This price-performance combination allows you to build out your monitoring network cost effectively and without compromising the feature set you've come to expect from a VSS Monitoring network packet broker. The Optimizer 2400 provides dynamic, high-performance packet visibility, at line rate. The Optimizer 2400 is fully programmable, and provides the highly available operations needed to meet the demands of today's monitoring infrastructure. The Optimizer 2400 supports management via a web-based interface, a command line interface, and vMC, providing a unified, single pane of glass into your management infrastructure. The Optimizer 2400 delivers cost-effective, comprehensive network visibility, meeting your performance management requirements and enabling improved network security.

Bridging the gap between Gigabit and 10 Gigabit ethernet networks, each model of the Optimizer 2400 has four fixed 10G Fiber LC ports, and 20 SFP+ ports. The fixed media ports are factory configured for either inline or SPAN access. The fiber SPAN version is fully I/O configurable, while the fiber inline version is fixed, where the built-in network ports are inputs only and are completely passive. Mixed fiber variations are also available.

vProtector Series

http://www.vssmonitoring.com/vprotector/

The vProtector accesses, optimizes, and delivers traffic from one or more full-duplex networks to multiple active and passive network security and monitoring tools. Policy-based triggers, health checks, and fail-open / fail-closed configurability combine with filtering and load balancing to provide redundancy and high availability for inline and out-of-band tools.

For one or more inline tools, the vProtector offers failsafe access to active network traffic – with zero impact to the network and without the need for a change window to test or reconfigure tools. Changing the order the inline tools receive traffic can be done in software, with no need to re-cable or manually intervene. Policies can be implemented to ensure full redundancy of the security tools in the event of failure – even at the tool application layer, using custom, vendor-specific Layer 7 health checks.

vProtector is available as a dedicated appliance, or as hardware modules with Active Protection for the VSS vBroker chassis.

The vProtector and vBroker Series can be globally scaled to up to 256 NPBs and up to 4000 network ports with the VSS-patented vMesh architecture.

Distributed TAPs

http://www.vssmonitoring.com/distributed-taps/

VSS Monitoring Distributed TAPs are entry-level network packet brokers. Distributed TAPs provide targeted traffic access and tool redundancy and back-up, increasing network visibility and improving the performance and resilience of passive monitoring and security infrastructure. For more advanced functionality or for inline security applications, Distributed TAPs fully integrate into a VSS vMesh architecture that includes vBrokers and vProtectors. Distributed Tap management options include a web-based GUI, CLI, XML API, as well as our server-based VSS Management Controller (vMC).

TAPs

http://www.vssmonitoring.com/taps/

VSS Monitoring TAPs provide persistent, 100% failsafe access for passive network monitoring, security, and forensics tools. When combined with VSS network packet brokers, TAPs become a non-intrusive bridge between the physical network and a visibility fabric. This TAP bridge enables scalable network visibility and performance, as well as management infrastructure upgrades, without network downtime and lost revenue.

Management Center

http://www.vssmonitoring.com/management-center/

The VSS Monitoring Management Center (vMC) is a client–server based management software application that enables the visualization and management of both multiple interconnected and standalone VSS network packet brokers (NPBs) through a central server.

Each NPB within vMC can be administered remotely for updates and configurations, while providing reports at both system and granular per-port levels.

vMC provides all of the configuration options available when managing NPBs individually including model specific settings and filters. Additionally, vMC offers several features that support the management of a system of VSS network packet brokers, also known as a vMesh architecture.

Using VSS network packet brokers together with vMC, you can make better use of your monitoring and security tools, simplify operational complexity and realize a higher return on investment (ROI) from additional cost savings and service quality improvements.

The emergence of programmable interfaces in virtual switches from Cisco and VMware has enabled a new approach to capturing and delivering traffic from virtual systems. An application within the VSS Management Center (vMC), vNetConnect, uses such interfaces to program virtual switches so that traffic from virtual machines can be seamlessly combined with traffic generated on bare metal systems within the physical infrastructure. vNetConnect combines virtual-machine traffic and traffic from physical networks into one system and enables network managers and security administrators to capture all the traffic in the data-center networks within a single system, providing total network visibility.

vNetConnect is an application within vMC. With vMC and vNetConnect, network managers and security administrators experience:

  • Centralized management of a distributed traffic capture and delivery system.
  • Drag and drop simplicity when defining network capture, grooming, and delivery policies.
  • Agent-free integration that unifies physical and virtual traffic capture within one system, a single "visibility pane" into the entire network.