net optics overview
DESCRIPTION
Presentation of Net Optics portfolioTRANSCRIPT
Net Optics, Inc.
Corporate Overview
Intelligent Access and Monitoring Architecture Solutions
Net Optics Focus
Architecting Visibility Into Your NetworkEnabling network performance, monitoring & security
N. Amer-ica59%
EMEA18%
APAC16%
BRIC7%
Revenue by Geography
Net Optics Overview
• Financial, Telco, Enterprise, Government, Healthcare• 7,500 Global Deployments• US Offices: New York, Atlanta, Seattle, Chicago,
Texas, D.C.• Global Offices: Germany, Israel, China,
Australia, Netherlands• 85% of the Fortune 100• 52% of the Fortune 500
Global Customers
• Founded in 1996, Private, Self-Funded• 65 Quarters of Growth & Profitability• Strong Management Team• Headquarters & Manufacturing: Silicon Valley, USA• First Acquisition Completed 2011
Highlights
• 67% Worldwide Channel• 15% OEM/Partner Relationships• 18% Direct
Go to Market Strategy
• Four new inventions each year• 20+ patents and patent pending applications
Technology
2010 & 2011
Awards
Media
Capacity & Resources PlanningBusiness ApplicationsPerformanceEnd User ExperienceSLAs
Network must be designed for scalability & agility
Compliance
Internal/External Intrusions
Lawful Interception
Cybercrime
Security must be architected in, not a point solution
Link Saturation
Oversubscription
10G 40G 100G
Tools & instruments can’t keep up
Explosive Growth
CAPEX Improvements
No visibility into thevirtualized network
What Keeps Our Customers Awake at Night
Security & Compliance
VirtualizationNetwork & Application
Performance
NetworkSpeeds
• appTap• Indigo Pro• Intelligent Products
• Phantom• Phantom HD
• Director family • Intelligent Bypass• Taps
• Director family• xBalancer
Select Global Customers
EnterpriseTelcoFinancial Healthcare Government
66
Acc
ess
Ap
plic
atio
n L
ayer
To
ols
Protocol Analyzers IPS Forensics Performance Data Loss Prevention VoIP Analyzer
Net
wo
rk
Access Distribution Core Data Center
Net Optics Position in the Network
Aggregation Regeneration
Director™ Network Taps
Management
77Access Distribution Core Data Center
Aggregation
Net Optics Position in the Network
Regeneration
Director™ Network Taps
Protocol Analyzers IPS Forensics Performance Data Loss Prevention VoIP Analyzer
Acc
ess
Ap
plic
atio
n L
ayer
To
ols
Net
wo
rk
Application Performance Monitoring
Bypass SwitchesVirtual Taps
Management
xBalancer
Total Visibility Across Your Entire Network
Core Network
Intelligent Taps
Director™
Indigo Pro – Device Management
Link Aggregation
Bypass Switches
xBalancer
Remote Network
AppTap
Phantom HD – Tunneling Appliance
Virtual Network
Phantom HD – Tunneling Appliance
Phantom Manager
Acc
ess
Ap
plic
atio
n L
ayer
To
ols
Net
wo
rk
99
VirtualizationControlAccess Monitoring Management
Net Optics Total Visibility Architecture
Bypass Switches
Intelligent Taps
Network TapsPhantom™ Virtualization Tap
Packet Filtering
DPI / Pattern Match
Aggregation
Regeneration
Time Stamping
Load BalancingPacket Ordering
Remote Status
Features
Port Aggregators
xBalancer™
iLink Agg Xstream
iLink Agg
Director™
Phantom™ HD
Director xStream
Director xStream Pro
Spyke™
appTap™ Indigo Pro™
Flex Tap
2009 2010 2011 20120
5
10
15
20
85%
90%
95%
100%
14
3.592.21 1.53
90%
95%
98% 98%
Lead Time (days) and On-time Delivery (%)
Lean Cellular Manufacturing
Productivity has nearly Tripled
20% annual growth with a net decrease in labor
• One piece flow, cafeteria style production process• Cross functional, level loading material replenishment system• Daily management and real-time issue resolution
Net Optics HR Culture of Engagement
*Survey was collected from a 2011 survey conducted by Gallup, Blessing-White and another research organization.
Job Satisfaction
88% of Net Optics employees are satisfied with their jobs
44% of employees in North America are satisfied with their jobs
Vs.
Company Leadership
82% of Net Optics employees believe leadership at Net Optics has improved in the past year
Vs.
38% of employees in North America believe in their company leadership
Training & Development
85% of Net Optics employees believe that they have the opportunity to grow & develop
Vs.
38% of employees in North America believe that they have growth & development opportunities
Rewards & Recognition
81% of Net Optics employees feel rewarded & recognized for superior performance
Vs.
51% of employees in North America feel rewarded & recognized when they perform well
Net Optics Keys to Future Growth
Expand Product Features
Global Expansion
Sustain Leadership
Position
CAGR 30%
Customer First
Acc
ess
Ap
plic
atio
n L
ayer
To
ols
Net
wo
rk
Continually Enhancing SolutionsIntelligence
Higher Density40G & 100G Products
Intelligent Access Solutions
1414
Passive Network Access
The term “passive” means having no effect on traffic—no latency, IP address, no packets added, dropped or manipulated, and no link failure. Traffic may be collected from wired networks via hubs, SPAN ports, in-line devices or Taps. Net Optics’ innovative family of access products enables companies to access and monitor their network using the latest Intrusion Detection and Prevention Systems, Protocol Analyzers, and Network Probes, with 24/7 passive network access and 100% visibility.
Flagship Product Key Benefits
High-density 10G traffic access
FlexTap
• High Density Design saves rack space, All-optical design, All split ratios available, 24 Taps in 1U
Traffic access
Gig Zero Delay Tap
• One access point• Zero Delay ensures no traffic loss
Bypass Switching
iBypass HD
• Failsafe/failover for up to eight inline tools
• High availability network
Regeneration
10 GigaBit Regeneration Tap
• Replicates traffic for up to eight monitoring tools
iTap and Port Aggregation
iTap Dual Port Aggregator
• Enables transparent sharing of link information between IT groups
Intelligent Access Solutions
Flex Tap
Analyzer
Switch SwitchFirewall
Benefits
• Compact design allows deployment of 24 Taps in 1U
• Mix-and-match—deploy any speed/ratio your network requires
• 100 percent visibility to link traffic for security and network monitoring tools
• Permanent access port that avoids breaking a line when a tool is connected
Gig Zero Delay Tap and Network Taps
Gig Zero Delay Tap is the industry’s only 10/100/1000BaseT Tap with true
zero-delay operation to prevent network disruptions. Breakthrough
engineering ensures that any loss of power to the Tap is transparent to the
network, and does not affect flow of traffic through the Tap, eliminating packet
delay and loss.
The Net Optics family of Taps provides 100% visibility into customers’
networks, with permanent, passive access points into the network. When a
monitoring tool is needed, simply connect the device to the Tap instead of
taking down the link and interrupting traffic. Taps pass all network traffic—
including Layers 1 and 2 errors—without introducing bottlenecks or points of
failure.
Features• Inline link failover protection
• Access-ready connectivity
• Passive access at 10Mbps to 40Gbps without data stream interference
• Zero Delay failover on power loss of 10/100 and 10/100/1000 models
• Redundant power supplies
• Multiple split ratios available for fiber models
A Comprehensive Family of Taps—Including Gig Zero Delay Taps™ When Delays Are Not an Option
1717
Switch
Gig Zero Delay Tap Deployment
Benefits• Full-duplex monitoring with zero
impact on network traffic around the clock
• 100 percent visibility to link traffic for security and network monitoring tools
• Plug-and-play—no configuration required
• Permanent access port that avoids breaking a line when a tool is connected
• Passive technology enabling maximum network uptime
Firewall
Analyzer
Switch
iBypass HD
iBypass HD™ supports 2 to 8 segments, with each segment
operating independently to ensure link protection. Connect,
maintain, and remove single-segment and multi-segment IPS
appliances without affecting traffic through the links or the
operation of the other segments. High-availability configurations
let you link pairs of bypass switches to support both tool and link
redundancy.
When a fault condition is detected, traffic is automatically routed
through the iBypass HD switch rather than through the inline
appliance, keeping the network traffic flowing.
Features• Eight segments protected in a 1U
appliance
• Modular design for deployment flexibility
• Customizable behavior through Command Line Interface (CLI)
• RMON traffic statistics on all ports
• High availability configurations
• Enterprise-ready management features (TACACS+, RADIUS)
Modular, Flexible, Fail-over Bypass Switchwith High Availability Capabilities
1919
iBypass HD Deployment
Benefits• Passive, secure technology
• Easy installation and operation with front-mounted connectors
• Fail-safe monitoring with any Gigabit inline appliance
• Increased reliability for important network links
• Compatible with all major manufacturers, IPSs, and firewalls
• Easy remote management through secure SSH connection
Switch
Switch
IPS
SwitchSwitch
IPS
Switch
IPS
Router Router IPS
iBypass and Bypass Switches
The Net Optics family of iBypass™ Switches support your inline
network security and monitoring devices by maintaining link
connectivity if and when your device is taken off line. A
“Heartbeat” packet ensures that a connected monitoring
appliance is actually passing traffic: If this packet doesn’t return
to the bypass switch, that appliance may be down and the
Bypass Switch instantly goes into bypass mode and takes that
appliance out of the traffic path. The Bypass Switch is a passive
appliance, link traffic continues to flow even if the switch itself
loses power.
Features• Trouble-free access port for inline
network security and WAN optimization tools
• Bypass Switch with Heartbeat adds automated link fail-open protection
• Remote access through 10/100/1000 management port
• Support for 10Mbps to 10Gbps connectivity and managed models
• Redundant power
• User-configurable Heartbeat packets
Fail-Safe Access Ports For Zero Downtime In Monitoring Vital Network Traffic
2121
iBypass Deployment
Benefits• Protects the network from IPS link,
application, and power outages
• Provides greater compatibility with all network devices
• Enables maximum network uptime
• Maintains monitoring appliances without downtime because the bypass switch enables network traffic to flow when appliances are offline
• Ensures alerts if monitoring devices are offline or slow to respond
• Enhances monitoring security with no IP address needed on network and monitor ports
SwitchFirewall
Analyzer
Switch
Management
Regeneration Taps
Regeneration Taps™ provide visibility into one network link for up
to eight attached security or monitoring tools. All traffic between
network devices is transparently forwarded at 100 percent full-
duplex rates without introducing a point of failure—even in the
event of a loss of power. Multiple monitoring tools such as traffic
analysis monitors, RMON probes, and intrusion detection systems
connected to the Regeneration Tap allow for deep levels of
analysis from a single 1U-high device.
Inline and Span Port versions provide the ability to deploy
monitoring tools in two scenarios.
Features• Passive access at 10Mbps to
10Gbps without data stream interference
• Optimized for each specific topology
• Span models monitor two separate Span sessions independently
• Replicates link traffic to multiple tools
• 100 percent passive traffic access
• All speeds and media types supported
Passive, Real-Time Regeneration Tap Technology For Simultaneous Traffic Monitoring On Important Links
2323
Regeneration Tap Deployment
Benefits• View 100 percent of traffic—
including VoIP, HTML, application, and Layer 1 and 2 errors
• 2, 4, or 8 monitor ports enable comprehensive troubleshooting
• Enables sharing traffic access among groups without conflicts
• Use multiple monitoring tools simultaneously
• Simplified plug n’ play deployment with no device management needed
• Media conversion—‘single device’ network-to-monitor-tool interfaces
• Cost-effective—increases monitoring tool ROI because they are always deployed
Switch
RMON
Switch
Firewall
Analyzer Forensic IDS
iTap and Port Aggregation
Innovative iTap™ technology transforms Taps into passive network
status sensors that forward vital information from throughout the
network. iTap products gather and display utilization peaks,
bandwidth levels, and error counts, even when a monitoring tool is
not attached. In addition to a standard CLI, SNMP manageability
delivers information to Web browsers and SNMP management
utilities. SNMP control enhances security because it adds the
ability to enable or disable ports from remote locations.
iTap technology is available for Bypass Switches, Port Aggregator
Taps, and other managed devices.
Features• Complements RMON probes and
analyzers; helps pinpoint where needed
• Increases network visibility—view statistics at a glance
• Improves accessibility—remote access and configuration control
• Enables transparent sharing of link information between IT groups
• Easy-to-read utilization and statistics reports
• Reduces network outages through proactive monitoring
Aggregation and Information Provides Greater Monitoring and Access Flexibility
2525
IDS
iTap Deployment
Features• Complements RMON probes and
analyzers; helps pinpoint where needed
• Increases network visibility—view statistics at a glance
• Improves accessibility—remote access and configuration control
• Enables transparent sharing of link information between IT groups
• Easy-to-read utilization and statistics reports
• Reduces network outages through proactive monitoring
SwitchFirewall
Analyzer
Switch
Management
Control Solutions
2727
Control As the pace of global economic activity accelerates, a comprehensive, intelligent monitoring architecture is the key to a company’s agility, productivity and competitive success. Now, the need for management control is universal.
Flagship Product Key Benefits
Load BalancingxBalancer
• Distribute traffic to multiple tools for parallel processing
Timestamping
Director xStream Pro
• Aggregates multiple traffic streams for monitoring by a single tool
10G Monitoring Switch
Director xStream
• Combined feature set: Tap, Aggregation, Regeneration, Static Load Balancer
1G Monitoring Switch
Director and Director Pro
• Aggregation, Regeneration• Deep Packet Inspection• L2-7 Filtering
10G Aggregation
iLink Agg xStream
• Aggregates multiple traffic streams for monitoring by a single tool
1G Aggregation
iLink Agg
• Aggregates multiple traffic streams for monitoring by a single tool
Control Solutions
xBalancer
xBalancer™ is the first monitoring load balancer
designed specifically for distributing network traffic
among inline monitoring appliances. This innovative
device solves oversubscribed IPSs, firewalls, Web
accelerators, and other inline appliances by enabling
two or more appliances to be deployed in parallel with
traffic balanced between them.
Features• (24) SFP+ 10G ports in 1U high, 19-
inch rack space
• Distributes traffic dynamically across inline appliances
• Flow-coherent traffic distribution
• Supports inline and out-of-band tool sharing
• Independent network links can share the same pool of IPSs
• Heartbeat packets monitor IPS health
Automated Balancing Act at 240Gbps
2929
xBalancer Deployment
Benefits• (24) SFP+ 10G ports in 1U high, 19-
inch rack space
• Distributes traffic dynamically across inline appliances
• Flow-coherent traffic distribution
• Supports inline and out-of-band tool sharing
• Independent network links can share the same pool of IPSs
• Heartbeat packets monitor IPS health
Network Switch Cluster Network Switch Cluster
Director xStream Pro
Director xStream Pro™ delivers Director Pro’s key
Dynamic Load Balancing and Deep Packet Inspection,
plus detailed timestamping and other new features for
versatility and ease of use.
Director xStream Pro performs aggregation,
regeneration, switching and L2-L4 filtering. Director
xStream Pro offers (24) SFP+ 10G/1G
Features• True Timestamping™ using NTP,
PTP, and GPS clock
• Dynamic load balancing based on traffic flows
• Deep Packet Inspection (DPI)
• Latency Measurement with nanosecond accuracy
• Director-like aggregation, regeneration, switching and L2-L4 filtering
• Real-time, per-second ProPush™ network analytics with GUI
• RADIUS and TACACS+ authentication and authorization
Maximum Performance, Minimum Latency—24x10G Monitoring Access
3131
Director xStream Pro Deployment
Benefits• More stacking options (by daisy-
chain, star, and mesh topology) increase inter-unit bandwidth
• ProPush analytics enable microburst detection to maintain availability
• Graphical User Interface (GUI) lowers the learning curve
• Basic Indigo Pro integration simplifies manageability
• Cut-through architecture provides low latency
• Command Line Interface is available to ease system configuration
• Port-locking to user accounts enhances security
Sniffer
VoIP Analyzer
IPS
Network Monitor
Forensic
Forensic
Forensic
Forensic
Management
1 Gbps 10 Gbps 10 Gbps 10 Gbps 10 GbpsPort
Aggregator
Load Balance Group
Director xStream
Purpose-built for high-performance networks, Director
xStream™ is a versatile 10 Gigabit monitoring access
solution that provides regeneration, aggregation, and
smart filtering in a single device.
Director xStream’s cut-through architecture provides an
ultra-low 600 nanoseconds of latency. Director xStream’s
ultra-low jitter of 50 nanoseconds for all packet sizes is
orders of magnitude less than that of switches that use a
traditional store-and-forward architecture.
Features• 10G speed, with 1G flexibility and
automatic data rate conversion
• Many-to-many port mapping
• Connects to Span ports and external Taps
• Spreads the load to multiple tools with filter-based load balancing
• 10 Gigabit aggregation, regeneration, matrix switching, and smart filtering
• (24) 10 Gigabit SFP+ ports in 1U
Flexible Performance and Control with Accelerated 10G Architecture
3333
Director xStream Deployment
Features• 10G speed, with 1G flexibility and
automatic data rate conversion
• Many-to-many port mapping
• Connects to Span ports and external Taps
• Spreads the load to multiple tools with filter-based load balancing
• 10 Gigabit aggregation, regeneration, matrix switching, and smart filtering
• (24) 10 Gigabit SFP+ ports in 1U
IPS
IDS
Firewall SwitchRouter
SwitchSwitch
SwitchSwitch
Switch
Switch
Network Monitor
Sniffer
ProtocolAnalyzer
VoIP Analyzer
Director Pro and Director
Purpose-built for high-performance networks, Director
xStream™ is a versatile 10 Gigabit monitoring access
solution that provides regeneration, aggregation, and
smart filtering in a single device.
Director xStream’s cut-through architecture provides an
ultra-low 600 nanoseconds of latency. Director xStream’s
ultra-low jitter of 50 nanoseconds for all packet sizes is
orders of magnitude less than that of switches that use a
traditional store-and-forward architecture.
Features• 10G speed, with 1G flexibility and
automatic data rate conversion
• Many-to-many port mapping
• Connects to Span ports and external Taps
• Spreads the load to multiple tools with filter-based load balancing
• 10 Gigabit aggregation, regeneration, matrix switching, and smart filtering
• (24) 10 Gigabit SFP+ ports in 1U
Advanced Management, Control and Access of Critical Data
3535
IPS
IDS
Director and Director Pro Deployment
Firewall SwitchRouter
SwitchSwitch
Switch Switch
Switch
Switch
Switch
Benefits• Leverages existing monitoring tool
investments
• Improves network visibility and security threat management
• Achieves zero packet loss
• Relieves oversubscribed tools
• Centralizes monitoring
• Greatly simplifies daisy-chaining
Network Monitor
Sniffer
ProtocolAnalyzer
VoIP Analyzer
iLinkAgg xStream
iLink Agg xStream™ provides aggregation, regeneration and
matrix switching for efficient, line-speed, passive monitoring
access to 10 Gigabit network links. The device scans incoming
traffic and ensures that no packets are dropped, supporting
external inline network Taps and Span ports for 10 Gigabit and
1 Gigabit monitoring tools.
iLink Agg xStream provides higher port density than any other
1U form factor link aggregator, combining traffic from up to 20
network links or Span ports and sending it to four monitoring
appliances.
Features• (24) 10G SFP+ ports in 1U
• Managed solution for aggregation, regeneration, and matrix switching at 10G
• Aggregates 20 links to 4 tools
• Fully configurable port mapping
• Monitor and network ports can be used interchangeably
• Connects to Span ports and external Taps (no integrated Taps)
Flexible 10G Aggregation For High Density Network Visibility
3737
iLink Agg xStream
Features• (24) 10G SFP+ ports in 1U
• Managed solution for aggregation, regeneration, and matrix switching at 10G
• Aggregates 20 links to 4 tools
• Fully configurable port mapping
• Monitor and network ports can be used interchangeably
• Connects to Span ports and external Taps (no integrated Taps)
1 Gbps 10 Gbps 10 Gbps 10 Gbps 10 GbpsPort
Aggregator
1 Gbps 1 GbpsNetwork
Tap
RMON1 RMON2 Forensic IDSAnalyzer 1 Analyzer 2
iLinkAgg
iLink Agg™ provides fully configurable port mapping and enables
aggregation, regeneration, and matrix switching in a single device.
Any-to-any and many-to-many port mappings are supported, and
any port can be used as an input, an output, or both at the same
time.
As the Industry’s highest port density 1G link aggregator, iLink Agg
lets you monitor as many as 16 links or switches at one time with
eight monitoring appliances. Remarkably easy to configure, secure,
and manage, iLink Agg lets you populate only ports you need to
control capital expenses—or provision extra ports for uptime and
port availability.
Features• Fully configurable port mapping
• Supports different media types for flexible deployment with 8 SFP monitor ports
• 16 network ports in Span and inline configurations
• Delivers dual power for redundancy, hot-swappable, AC and DC models
• 19-inch rack mount, 1U height
• Regenerates aggregated traffic to multiple monitoring tools
Streamlined, Versatile Traffic Consolidation For Superior Monitoring Performance
3939
Benefits• Lowers non-filtering aggregation
costs
• Provides 100 percent traffic visibility at one Gbps—even of malformed packets—without introducing a point of failure
• Aggregates and switches monitor traffic to see more links
• Prevents conflicts among groups needing data access
• Replaces Port and Link Aggregators, and Regeneration Taps, with a managed solution
• Increases monitoring efficiency and flexibility
SwitchSwitch
Switch Switch
Workgroup
Workgroup
RMON1 Analyzer Forensic IDS
Virtualization Solutions
4141
Virtualization
Net Optics Phantom Solution for monitoring in a virtualized computing environment consists of four key components: The Phantom™ Virtualization Tap provides visibility to all server traffic including inter-VM traffic. The Phantom HD™ for network traffic filtering and pre-processing of packets captured in virtual environments. The Director™ Data Monitoring Switch family is an optional component that can manage the Phantom HDPhysical monitoring tools are the final component of the Phantom Solution for performance, security, and compliance monitoring in the virtualized environment.
Flagship Product Key Benefits
Visibility to all server traffic
including inter-VM traffic.
Phantom™ Virtualization Tap
• Preserves performance, capacity, throughput and utilization for a true cutting-edge technology solution
• Lowers investment in virtual tools by bridging existing physical tools to the virtual network
Network traffic filtering and
pre-processing of packets captured in
virtual environments
Phantom HD™
• Enables routing of data from data centers to central monitoring facilities
• Enables monitoring of virtual network traffic in a virtualized computing infrastructure that is unable to process VN-Tags
Virtualization Solution
Phantom Virtualization Tap
The Phantom™ Virtualization Tap delivers unprecedented visibility of
inter-VM traffic across your data center, including a transparent view
of previously unseen (invisible) traffic passing between VMs—the
“blind spot.” This Tap supports all leading hypervisors at the kernel
level.
Sophisticated monitoring policies allow traffic of interest to be
captured, encapsulated and sent out to your instrumentation layer’s
tool of choice, anywhere. The Tap allows you to troubleshoot issues
and identify conflicts in your virtual environment, reducing mean-
time-to-resolution and increasing the efficiency and productivity of IT
administrators.
Features• Integrates at the kernel switching
layer and is non-disruptive to production environments
• Requires no maintenance mode, reboot of hypervisor, or other disruptive changes
• Taps each VM instance (by VM ID)
• Aggregates traffic from multiple VMs and performs smart filtering
• Delivers high capacity to match port density and traffic volumes
• Leverages a customer’s existing, trusted monitoring infrastructure and tools
• Incorporates encapsulated tunneling
• Installs in hypervisor for full traffic access
• Follows VMs as they move (vMotion) among physical servers
Total Visibility for Inter-VM Traffic
Phantom HD
The Phantom™ Virtualization Tap delivers unprecedented visibility of
inter-VM traffic across your data center, including a transparent view
of previously unseen (invisible) traffic passing between VMs—the
“blind spot.” This Tap supports all leading hypervisors at the kernel
level.
Sophisticated monitoring policies allow traffic of interest to be
captured, encapsulated and sent out to your instrumentation layer’s
tool of choice, anywhere. The Tap allows you to troubleshoot issues
and identify conflicts in your virtual environment, reducing mean-
time-to-resolution and increasing the efficiency and productivity of IT
administrators.
Features• Supports high-throughput
monitoring of all virtualized data center traffic with
• Net Optics Phantom Virtualization Tap
• Delivers overall capacity of 40 Gbps in 1U rack-mount appliance
• Encapsulates or de-capsulates tunneled traffic at 10 Gbps per port
• Initiates and terminates encapsulation tunnels
High-Throughput Tunneling and Advanced Routing Appliance
Virtualization Solution Deployment
ES
X
App
OS
VM1
Hypervisor
App
OS
VM2
App
OS
VM2
V Switch
Phantom™Manager
KV
M
App
OS
VM1
Hypervisor
App
OS
VM2
App
OS
VM2
V Switch
Phantom™Manager
XE
N
App
OS
VM1
Hypervisor
App
OS
VM2
App
OS
VM2
V Switch
Phantom™Manager
Tunnel
IDS 01
Analyzer 01 Analyzer 02
IDS 02
Net Optics Director™
Net Optics Phantom™ HD
Physical Server
Physical Server
LAN/WAN
Manager
Application Aware Monitoring Solutions
4646
Monitoring From the moment you connect, Net Optics solutions give you unprecedented, continuous, 100 percent visibility of your network traffic and applications. Now your IT engineers can drill down quickly from high-level metrics to granular details using true application-specific insights and timely root-cause analysis to detect, diagnose and resolve network problems. Real-time monitoring supports gigabit speeds.
Flagship Product Key Benefits
A single solution to capture network
traffic, application activity and VoIP calls in 10/100
Mbps Environments
appTap
• Plug-and-Play network monitoring• Affordably monitor remote sites with
Internet broadband connections up to 100Mbps
A single solution to capture network
traffic, application activity and VoIP
calls in 1000 Mbps Environments
Spyke
• Plug-and-Play network monitoring• Affordably monitor remote sites with
Internet broadband connections up to 100Mbps
Application Aware Monitoring Solutions
4747
Application Aware Monitoring Solutions
Router with Firewall
Switch
Remote Branch 01
appTap™
Router with Firewall
Switch
Remote Branch 02
appTap™
Router with Firewall
Switch
Remote Branch 03
appTap™
LAN/WAN
Spyke™
Remote Access via Web Based Interface
Workstations IP Phones
iTap iTap
Servers
SwitchSwitch
Workstations
appTap
Features• Automatic identification of common
applications using Deep Packet Inspection
• Reveals network usage, latency and bandwidth consumption
• VoIP SIP/RTP correlation and individual VoIP call detail, jitter level, and MOS score
• Continuous and ad-hoc packet capture with filter support for selective data capture
• Built-in reports on Top talkers, Application Distribution, Conversations, Network Volume, Bandwidth Use, Latency, VoIP Use, and many more
• Threshold based alerts
• Real-time and historical data view
appTap is the industry’s first integrated solution to
combine network tapping capabilities with network and
application monitoring. Now you can affordably monitor
remote sites without investing in costly on-site
engineers. appTap lets you analyze network traffic and
application activity—plus monitor VoIP calls, and
perform capacity planning and trend analysis.
Spyke
Spyke delivers powerful application intelligence for
smaller and medium-size businesses, uniting
Performance Management with Intelligent Access to
forge a total network monitoring and access
architecture. Spyke’s visibility enables quick problem
detection, isolation, diagnosis and resolution.
Features• Automatic identification of common
applications using Deep Packet Inspection
• Reveals network usage, latency and bandwidth consumption
• VoIP SIP/RTP correlation and individual VoIP call detail, jitter level, and MOS score
• Continuous and ad-hoc packet capture with filter support for selective data capture
• Flow monitoring with flow bounce diagrams
• Expandable storage capacity
• Generate and export NetFlow data to multiple destinations, integrating with third-party solutions
Broad Application Support
Category Application Classify Extract AppStatsEmail SMTP Yes Yes mail from, mail to, subject, attachment name
POP3 Yes Yes mail from, mail to, subject, attachment nameMS Exchange (MAPI) Yes Yes login/server email address, client nameGmail Yes Yes mail from, mail to, subject, attachment nameLive Hotmail Yes Yes mail from, mail to, subject, attachment nameYahoo Mail Yes Yes mail from, mail to, subject, attachment name
ERP SAP Yes No
DatabaseOracle Database (TNS) Yes No login, database name, queryPostgresql Yes Yes login, query, errorMS SQL Server (TDS) Yes Yes login, database name, query
File Service FTP Yes Yes login, filenameSMB Yes Yes login, filename
Instant Messaging MSN Yes Yes sender, receiver, filenameJabber Yes Yes sender, receiver, filenameSkype Yes No
Middleware SOAP Yes NoPeer-to-peer Bittorrent Yes Yes peer_id, filename, filesizeThin Client Citrix (ICA) Yes Yes login, application, serviceVoIP SIP Yes Yes Callee ID, Caller ID, call duration
RTP/RTCP Yes Yes Jitter, MOSDirectory Services LDAP Yes Yes message type, value string
DHCP Yes Yes client ip, client mac, subnet maskWeb Services Browsing Yes Yes URL, page download time
Google Yes Yes Search stringSocial Networking Facebook Yes Yes name, email address, sex
Youtube Yes Yes video title, query
Complete Visibility
Dashboard
Raw packets
VoIP calls
Applications
Application Intelligence – Actual User Identification
TYPE APPLICATION ID DATE
EMAIL Yahoo Mail [email protected] Mar 2, 2012
USER Yahoo IM jd Mar 2, 2012
HOST NAME NETBIOS PC-24883 Mar 2, 2012
HOST NAME DHCP PC-24883 Mar 1, 2012
USER Intranet [email protected] Feb 2, 2012
History for IP address:125.56.205.57
5353
ManagementWhen you deploy a large number of devices across your network, you need simplified, centralized management for control and visibility. Now, the Indigo Pro™ Management Platform unifies your view of any number of Net Optics devices across distributed locations. This compact 1U appliance centralizes collection of traffic statistics while performing network, fault, and policy management.
Flagship Product Key Benefits
Large Scale Net Optics
Device Deployment Management
Indigo Pro™
• Auto discover and configure Net Optics devices (Director, Director Pro, iTap)
• Collect statistics using ProPush™ technology and SNMP
• Scheduler for device and policy management
Management Solutions
5454
Indigo Pro Management Platform
When you deploy a large number of devices across your network,
you need simplified, centralized management for control and visibility.
Now, the Indigo Pro™ Management Platform unifies your view of any
number of Net Optics devices across distributed locations. This
compact 1U appliance centralizes collection of traffic statistics while
performing network, fault, and policy management.
Indigo Collector Pro’s convenient graphical tools convey the health of
your network at a glance as line graphs, pie charts, 3-D bar charts,
and more, including a dashboard view. Indigo Pro’s breakthrough
ProPush™ technology samples traffic at an unprecedented rate to let
you see and resolve issues before they cause congestion.
Features• Rich graphical data visualization
• Subnet-organized network topology map
• Views of snapshot and historical data
• Device management
• Centralized policy management for multiple devices
• Fault and event management
• Print and export to CSV files
Your Command Center For Total Access, Control And Visibility—When Every Packet Counts
5555
Indigo Pro Management Platform
Internet
IndigoPro™Remote Access via Web Based Interface
Centralized configuration and monitoring of Taps, virtual Taps, data monitoring switches, and network controller switches from a single location and interface.
North American Data Center
Director™ Daisy Chain
European Data Center
xBalancer™
vm1
vm2
vm3
Hypervisor V Switch
Phantom™ Virtual Tap
Cloud Provider
iTap™
IDS
South African Branch Office
IDS IDS
5656
Summary
Net Optics
Access ControlMonitoring & Management
Key Takeaways
Complete Visibility into Network Infrastructure
Maximize Performance and Value of Analysis and Security Tools
Scalable, Next Generation Monitoring Architecture
Net Optics, Inc.www.netoptics.com408.737.7777
Thank You