Lancope StealthWatch FlowSensor VE

VMware

Average Customer Rating

(0 reviews)

Lightweight virtual appliance provides NetFlow +application metrics for anomaly detection and network performance monitoring

Submitted by: Lancope, Inc.

Tools

Appliance Type

Partner

Description

Lancope's StealthWatch FlowSensor VE is a virtual appliance that exports NetFlow v9 and key application metrics to provide anomaly detection and network performance monitoring for virtual environments. This virtual appliance extends Lancope’s physical network visibility to virtual environments by analyzing virtual network traffic to detect and address configuration problems, inefficiencies in resource allocation, security violations and policy violations before any failure or degraded performance occurs.

StealthWatch FlowSensor VE enables:

Deep Virtual Monitoring — performance, capacity and availability management of all virtual technologies, down to the performance metrics of individual virtual machine (VM) instances and the applications that reside within

Unified Visibility — complete visibility into security, network, user and application activity across virtual networks

Single Dashboard — central management and monitoring of global infrastructure across virtual and physical environments through seamless integration with the physical network visibility solution

Lightweight, Scalable, Fast Deployment — extreme efficiency with low impact on I/O and CPU to ensure maximum performance of the virtual environment

Features & Benefits

The StealthWatch FlowSensor™ VE is a lightweight virtual appliance designed to provide visibility into the virtual network using NetFlow traffic accounting technology. It monitors all communications across the virtual network backplane, translating Ethernet frames into "flow records" which are sent out of the Virtual Server across the physical network to a dedicated Flow Collector.
The FlowSensor VE uses NetFlow traffic accounting technology previously available only in network equipment, such as routers, switches and WAN optimization devices. Once installed on the VMware ESX server, it connects to the Service Console API to retrieve information about how the virtual network is configured. Then, the FlowSensor VE captures raw Ethernet frames from the virtual switch, combines the traffic data with information found in the API and sends an account of the traffic across the network to a Flow Collector.
The FlowSensor VE is designed to unobtrusively monitor virtual traffic with minimal impact to the production environment, streaming traffic accounting information out of the virtual server to a Flow Collector. It requires just 512MB of physical memory, (1) CPU @ 2000MHz and only 1.2GB of disk, yet monitors virtual network traffic rates up to 1Gbps. Lancope achieves this unparalleled speed to resource ratio because the FlowSensor VE does not analyze and only creates flows. Processing, storage, and reporting of flows occur at Lancope's Flow Collector appliance, where dedicated CPU, memory, and disk are available.
The FlowSensor VE requires a NetFlow v9 capable Flow Collector to provide basic functionality. Implementing the FlowSensor along with Lancope's Flow Collector provides advanced functionality and enables full utilization of all NetFlow v9 options templates available within the FlowSensor VE. Lancope’s Flow Collector receives, stores, and processes flows generating over 180 unique reports designed to detail every aspect of the virtual network.

Pricing

StealthWatch FlowSensor virtual appliance for VMware environments; rated to monitor 1 (one) ESXi/vSphere server; flows generated are not counted towards the StealthWatch collection license. Price is per unit. .