2
TECHNICAL PARTNER SOLUTION BRIEF Page 1 915-6936-01 Rev. A, August 2014 www.ixiacom.com Highlights HP TippingPoint Next Generation Intrusion Prevention System (NGIPS) provides in-line, real-time intrusion prevention and proactive network security to protect against cyber threats that target applications, networks, and critical data. Ixia's network visibility solutions complements TippingPoint by enabling the NGIPS to be deployed at the highest capacity possible, while supporting fault tolerant and high availability inline deployments. Solution Ixia's network visibility solution works in concert with HP TippingPoint Next Generation Intrusion Prevention System (NGIPS) to protect your network. The HP TippingPoint NGIPS platform uniquely leverages advanced threat research with powerful correlation of security events and vulnerabilities, combined with application and context awareness and intelligent blocking, to provide proactive protection against security threats including zero day events. When deployed in-line, the NGIPS provides real-time threat prevention. HP and Ixia have partnered to provide a scalable and fault-tolerant in- line threat prevention solution. The joint solution consists of TippingPoint NGIPS appliances, deployed in concert with Ixia NetOptics in- line Bypass Switches and xBalancers. This solution lets customers maintain their security and performance while allowing the NGIPS to scale to protect the highest speed network links, and aggregate traffic to protect multiple links. Ixia’s advanced heartbeat and link fault detect features allow monitoring of security infrastructure state information. A configurable heartbeat packet sent from the Bypass Switch to the xBalancer helps identify link anomalies or power failures. The Bypass Switch will immediately detect the change and will re-route traffic using Fast Path™ switching technology. Once brought back on-line, traffic automatically resumes. The Ixia xBalancer is built specifically to prevent tool overburdening by distributing the traffic to multiple in-line security Ixia Network Visibility Solutions enables highly scalable and robust HP TippingPoint deployments tools. Thus xBalancer allows customers to scale their TippingPoint NGIPS deployments as their needs grow while maintaining security. Tool health is monitored using Heartbeat packets and can proactively redirect traffic to available or spare tools in case of failure. The Ixia NVS – HP TippingPoint architecture has been deployed & proven at joint customers. In addition, Ixia's network visiblity solution can easily be configured to share traffic with other inline or out of band monitoring tools to protect legacy tool investment and accommodate a variety of analysis requirements. Ixia can also filter and de-duplicate traffic so that each tool only get the traffic it needs to monitor, thus maximizing capacity and return on investment. 40 Gbps NetOptics xBalancer™ TippingPoint NGIPS TippingPoint NGIPS TippingPoint NGIPS NetOptics iBypass™ Switch Router Switch

Ixia Network Visibility Solutions enables highly scalable ... TippingPoint Next Generation Intrusion Prevention ... prevention and proactive network security to protect ... advanced

Embed Size (px)

Citation preview

TECHNICAL PARTNER SOLUTION BRIEF

Page 1 915-6936-01 Rev. A, August 2014www.ixiacom.com

Highlights

HP TippingPoint Next Generation Intrusion Prevention System (NGIPS) provides in-line, real-time intrusion prevention and proactive network security to protect against cyber threats that target applications, networks, and critical data. Ixia's network visibility solutions complements TippingPoint by enabling the NGIPS to be deployed at the highest capacity possible, while supporting fault tolerant and high availability inline deployments.

Solution

Ixia's network visibility solution works in concert with HP TippingPoint Next Generation Intrusion Prevention System (NGIPS) to protect your network.

The HP TippingPoint NGIPS platform uniquely leverages advanced threat research with powerful correlation of security events and vulnerabilities, combined with application and context awareness and intelligent blocking, to provide proactive protection against security threats including zero day events. When deployed in-line, the NGIPS provides real-time threat prevention. HP and Ixia have partnered to provide a scalable and fault-tolerant in-line threat prevention solution.

The joint solution consists of TippingPoint NGIPS appliances, deployed in concert with Ixia NetOptics in-line Bypass Switches and xBalancers. This solution lets customers maintain their security and performance while allowing the NGIPS to scale to protect the highest speed network links, and aggregate traffic to protect multiple links. Ixia’s advanced heartbeat and link fault detect features allow monitoring of security infrastructure state information. A configurable heartbeat packet sent from the Bypass Switch to the xBalancer helps identify link anomalies or power failures. The Bypass Switch will immediately detect the change and will re-route traffic using Fast Path™ switching technology. Once brought back on-line, traffic automatically resumes. The Ixia xBalancer is built specifically to prevent tool overburdening by distributing the traffic to multiple in-line security

Ixia Network Visibility Solutions enables highly scalable and robust HP TippingPoint deployments

tools. Thus xBalancer allows customers to scale their TippingPoint NGIPS deployments as their needs grow while maintaining security. Tool health is monitored using Heartbeat packets and can proactively redirect traffic to available or spare tools in case of failure. The Ixia NVS – HP TippingPoint architecture has been deployed & proven at joint customers.

In addition, Ixia's network visiblity solution can easily be configured to share traffic with other inline or out of band monitoring tools to protect legacy tool investment and accommodate a variety of analysis requirements. Ixia can also filter and de-duplicate traffic so that each tool only get the traffic it needs to monitor, thus maximizing capacity and return on investment.

40 Gbps

NetOptics xBalancer™

TippingPoint NGIPS TippingPoint NGIPS

TippingPoint NGIPS

NetOpticsiBypass™ Switch

Router Switch

Ixia Worldwide Headquarters26601 Agoura Rd.Calabasas, CA 91302

(Toll Free North America)1.877.367.4942

(Outside North America)+1.818.871.1800(Fax) 818.871.1805www.ixiacom.com

Ixia European HeadquartersIxia Technologies Europe LtdClarion House, Norreys DriveMaidenhead SL6 4FLUnited Kingdom

Sales +44 1628 408750(Fax) +44 1628 639916

Ixia Asia Pacifi c Headquarters21 Serangoon North Avenue 5#04-01Singapore 554864

Sales +65.6332.0125Fax +65.6332.0127

TECHNICAL PARTNER SOLUTION BRIEF

Ixia Worldwide Headquarters26601 Agoura Rd. Calabasas, CA 91302

(Toll Free North America)1.877.367.4942

(Outside North America)+1.818.871.1800 (Fax) 818.871.1805 www.ixiacom.com

Ixia European HeadquartersIxia Technologies Europe Ltd Clarion House, Norreys Drive Maidenhead SL6 4FL United Kingdom

Sales +44 1628 408750 (Fax) +44 1628 639916

Ixia Asia Pacific Headquarters21 Serangoon North Avenue 5#04-01Singapore 554864

Sales +65.6332.0125 Fax +65.6332.0127

Hewlett-Packard Company3000 Hanover Street Palo Alto, CA 94304-1185 USA

Tel. 650.857.1501

www.hp.com

Ixia's network visibility solutions efficiently direct traffic to security and application monitoring tools

Ixia provides security and monitoring tools access to all necessary network traffic. Ixia's network visibility solutions sit between the access points in the network that requires protecting and security appliances. Simultaneously, Ixia aggregates traffic from multiple SPANs/taps, and bypass switches in the network and directs it to any security or monitoring appliance. Ixia supports both in-line and out of band security solutions of the highest capacity, without sacrificing reliability and availability.

Ixia can also filter out traffic, which does not need analysis, prior to consuming resources on monitoring appliances. Ixia's network visibility solutions share traffic from a network access point with multiple security tools. This capability eliminates the common SPAN/tap shortages that occur when another tool is attached to a needed access point. Additionally, by removing duplicate packets, Ixia can enhance the throughput and storage capacity of the any security appliance or forensic recorder. Ixia’s intuitive control panel makes the solution easy to set up and use.

Next generation intrusion prevention

The HP TippingPoint Next Generation Intrusion Prevention System (NGIPS) achieves a new level of in-line, real-time protection, providing proactive network security that is ideal for data center, core and perimeter deployments for today’s and tomorrow’s real-world network traffic and data centers. The next-generation architecture provides modular software design that enables the addition of valuable network protection services as NGIPS continues to evolve from first generation IPS technology. The HP TippingPoint NX Platform represents the highest performing NGIPS in a minimal footprint. This new improved NGIPS platform redefines the next generation of intrusion prevention as a foundation for comprehensive network security across all critical areas in the enterprise.

About HP

HP creates new possibilities for technology to have a meaningful impact on people, businesses, governments and society. With the broadest technology portfolio spanning printing, personal systems, software, services and IT infrastructure, HP delivers solutions for customers’ most complex challenges in every region of the world. More information about HP (NYSE: HPQ) is available at http://www.hp.com (http://www.hp.com/)

• Application and content awareness with deep packet inspection for protection of critical assets

• Intelligent blocking via context, and correlation of security events and vulnerabilities

• Proactive protection against zero-day events and security threats

• Proven inline NGIPS solution for real-time threat prevention

• Aggregation enables full network visibility to prevent threats across the entire data center

• Inline load balancing supports NGIPS at very high throughput without compromising reliability

• External bypass for maximum resiliency and to enable zero downtime NGIPS maintenance

• Share data as needed with other legacy tools (e.g. APM, NPM, Protocol Analyzers)

JOINT SOLUTION BENEFITS