The Exinda WAN Optimization
ApplianceJason Whitaker, Transylvania U.
&VistaOne Corporation
Packeteer Packet Shaper 6500 at end of life - we have always liked the Packeteer, but…
Generating a “watch” was not easy – when we receive a DMCA request, we want to see what the user is actually doing. Had to run a command line script to create and set up a traffic class to observe an IP address
New peer to peer apps were discovered but had to be manually added to the P2P policy folder
No out of band management, couldn’t browse to the device if things got hairy
Where We Came From…
The price of the Exinda caught our eye in comparison to the Packeteer 7500
We sized up the 4760 model, had a demo unit sent to us
Generates very pretty PDF reports Has a plug-in to integrate with Active Directory, so we
see a login ID associated with an IP, which is nice Can quickly set up a “watch” right in the web
interface (they call it a network object) Automatically adds new peer to peer apps to a group,
so your policy on the group immediately applies Out of band management actually helped us in one
instance…
Enter the Exinda
Can restrict/grant access or bandwidth for a specific user regardless of the computer they are on
Can restrict/grant access or bandwidth for a specific AD Group of users regardless of the computers they are on
Example: If a department is slammed and needs priority bandwidth, you can give it to the entire department quickly and easily.
WE ARE NOT COMPARING APPLES TO APPLES – the Packeteer 7500 may do some of this stuff
Enter the Exinda
PDF Reports
Exinda Details
Active Directory Integration
Exinda Details
Click on a user’sID to see applicationdetail of their traffic
Active Directory Integration:
Exinda Details
View a user’susage databy application
Active Directory Integration:
Exinda Details
…by conversation
Active Directory Integration:
Exinda Details
…by URL
Active Directory Integration:
Exinda Details
…by hosts
Application Grouping
Exinda Details
Real-time Host/User Rates
Exinda Details
Real-time Application Rates
Exinda Details
WAN Interface
Exinda Details
Exinda vs. Packeteer 6500◦ Exinda has Active Directory integration that
allows shaping an individual or group of individuals regardless of the PC they are using
◦ The out of band management allows identification and isolation of a threat when the Packeteer would not even respond to a telnet or web session
◦ Reporting is much more responsive, informative, and elegant than the Packeteer 6500. Simple to set up yet feature rich, such as the ability to email a PDF report on a schedule
So What’s Not To Like?
Exinda vs. Packeteer 6500 (continued)◦ Exinda updates include new classifications of
applications such as P2P and will automatically add them to the P2P Application Group. With the Packeteer, have to periodically drill down the tree, identify new P2P apps and manually add them to the P2P restriction class
So What’s Not To Like?
Exinda vs. Packeteer 6500 (continued)◦ Current Exinda reports are “pre-filter”, meaning
they show what the user “might be using”. For DMCA purposes, may want to see “post filter” data
◦ Dynamic sub-partitioning is very new for Exinda; we are doing it “their way”… prioritizing classes of applications and not putting a max limit on any connection – have to be careful when you set percentage thresholds on different traffic types
◦ Not sure if there is a CLI for Exinda, though most of the things we used the Packeteer CLI for are available in the Exinda web interface
So What’s Not To Like?
We really like the Exinda, it cost several thousand dollars less than an equivalent Packeteer 7500 and so far, we’ve had zero DMCA requests since acquiring it… of course, our Shaper was end of life and not getting updates
Exinda says they are addressing the “pre-filter” reports
Summary
The Exinda WAN Optimization
ApplianceJason Whitaker, Transylvania U.
&VistaOne Corporation