Lancope StealthWatch FlowSensor VE
Appliance Type
Partner
Description
StealthWatch FlowSensor™ VE monitors all communications across the virtual network backplane, translating Ethernet frames into "flow records" (NetFlow v9) which are exported out of the Virtual Server across the physical network to any dedicated NetFlow collector.
Connecting to the StealthWatch Xe collector assures anomaly detection and network performance monitoring for virtual environments by resolving configuration problems, inefficiencies in resource allocation, security and policy violations before failure or performance degradation occurs.
The FlowSensor VE exporter enables:
•Deep Virtual Monitoring — performance, capacity & availability management of all virtual technologies, down to performance metrics of individual VM instances and applications residing within
•Unified Visibility — complete visibility into security, network, user & application activity across virtual networks
•Single Dashboard — central management and monitoring of global infrastructure across virtual & physical environments through seamless integration with physical network visibility solution
•Lightweight, Scalable, Fast Deployment — extreme efficiency with low impact on I/O and CPU to ensure maximum performance of virtual environment
Deployed on a VMware ESX host, it captures vital traffic statistics to address multiple virtualization challenges, including gaining virtual network topological and location awareness, securing virtual networks, demonstrating compliance, controlling VM sprawl and tracking virtual machines moved via VMware VMotion, to help maximize the benefits associated with server virtualization. This innovative approach to monitoring virtualized servers differs wildly from comparative technologies, which conduct processing on the virtualized servers themselves and utilize significant virtual resources. Lancope’s centralized analysis eliminates the overhead associated with disparate virtual security tools, enabling scalable, centrally managed enterprise protectio
Features & Benefits
The StealthWatch FlowSensor™ VE is a lightweight virtual appliance designed to provide visibility into the virtual network using NetFlow traffic accounting technology. It monitors all communications across the virtual network backplane, translating Ethernet frames into "flow records" which are sent out of the Virtual Server across the physical network to a dedicated Flow Collector.
The FlowSensor VE uses NetFlow traffic accounting technology previously available only in network equipment, such as routers, switches and WAN optimization devices. Once installed on the VMware ESX server, it connects to the Service Console API to retrieve information about how the virtual network is configured. Then, the FlowSensor VE captures raw Ethernet frames from the virtual switch, combines the traffic data with information found in the API and sends an account of the traffic across the network to a Flow Collector.
The FlowSensor VE is designed to unobtrusively monitor virtual traffic with minimal impact to the production environment, streaming traffic accounting information out of the virtual server to a Flow Collector. It requires just 512MB of physical memory, (1) CPU @ 2000MHz and only 1.2GB of disk, yet monitors virtual network traffic rates up to 1Gbps. Lancope achieves this unparalleled speed to resource ratio because the FlowSensor VE does not analyze and only creates flows. Processing, storage, and reporting of flows occur at Lancope's Flow Collector appliance, where dedicated CPU, memory, and disk are available.
The FlowSensor VE requires a NetFlow v9 capable Flow Collector to provide basic functionality. Implementing the FlowSensor along with Lancope's Flow Collector provides advanced functionality and enables full utilization of all NetFlow v9 options templates available within the FlowSensor VE. Lancope’s Flow Collector receives, stores, and processes flows generating over 180 unique reports designed to detail every aspect of the virtual network.
Pricing
Free
Tags & Keywords
security, virtsec, visibility, network monitoring
Solution Categories
Performance Management, Secure Content and Threat Management
