Phantom vTap

A cost-effective answer to securing Virtualized Environments

Problem: The high cost of network blind spots

Virtualized environments can create dangerous blind spots for organizations that need to properly secure and protect their networks. One solution is to purchase a separate set of tools to monitor security and compliance in virtualized environments. Unfortunately, this approach can be costly, may still not offer 100% visibility of the virtual traffic, and fails to make use of your existing monitoring technology. No wonder, then, that many enterprises, government agencies, and service providers are seeking a solution that can bridge the divide between today’s physical and virtual environmentsIxia Phantom VTap

Solution: Extending network visibility with your existing tools

Ixia’s Phantom vTap™ helps you achieve breakthrough visibility and control of traffic flowing between virtual machines for greater security, compliance, and performance. In addition to providing integrated management and filtering capabilities for virtualized monitoring layers, these software devices send monitored traffic in encapsulated tunnels to physical or virtual monitoring tools. This allows you to use existing security and monitoring tools and infrastructure to monitor virtual environments—delivering significant cost savings without increasing your management burden.

Supported Hypervisors

VMware

ESXi 5.0 & 5.1

ESXi 5.5

ESXi 6.0

ESXi - vSwitch (Kernel Module)

Yes

Yes[i]

No

ESXi - vDS

Yes

Yes[ii]

Yesii

ESXi - vSS

No

Yesii

Yesii

Microsoft Hyper-V

Windows 2012 and 2012 R2[iii]

KVM

v.2.01 and above with Open vSwitch (OVS) 2.0 and above

OpenStack KVM

Liberty with KVM OVS (see above)

OpenStack Tap-as-a-Service (TaaS) Liberty, Mitaka with v2 authentication (Keystone)

 

Specifications

Network Connectivity

Phantom Management Server VM must be accessible via HTTP to access Web UI

TCP port 22, 80, 443, and 5989 must be open between Phantom Management Server VM and VMware vCenter server

Disk Storage

Phantom Manager: 4 GB - vTap Service (SVM): 2-4GB – TaaS SVM: 5GB

CPU

Phantom Manager: 2 vCPU - vTap Service (SVM): 1-2 vCPU

Memory

Phantom Manager: 8GB (recommended) – vTap Service (SVM): 512MB to 3GB (Hyper-V), 3GB (ESXi) – Taas: 1GB - KVM (integrated with OVS, no additional resource)

Web Browser

Google Chrome, Internet Explorer, and Firefox

 

[i] For upgrading existing customer or special cases

[ii] vCenter required (No standalone ESXi)

[iii] Standalone Hyper-V Hosts (No SCVMM)

Key features

Extends monitoring access into the inter-VM networking layer
Enables monitoring for security and compliance in virtualized environments
Applies existing physical monitoring tools, processes, and procedures to the virtual network
Eliminates need to install any agents in VMs with partner-only API access
Optimizes system resources without sacrificing performance