0% found this document useful (0 votes)
211 views

Network Visibility: Network Packet Broker Comparison Table

Uploaded by

Gokhan
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
211 views

Network Visibility: Network Packet Broker Comparison Table

Uploaded by

Gokhan
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 9

SOLUTION BRIEF

Network Visibility
Network Packet Broker Comparison Table

GTP Session Controller 7433


Vision Edge 10S
Vision Edge 100

Vision Edge OS
Vision Edge 1S
Vision Edge 40

Vision 7300

TradeVision
VEOS 7816

Vision ONE

Vision X

Key Visibility Attributes


Smart, drag-and-Drop, Intuitive GUI • • • •1 • • • • • • •
Zero-Packet Loss Architecture • • • • • • • • • •
Overlapping Filter Rules Automatically
• • • • • • • • •2 •
Handled by Visibility Engine
System Specifications
System Height (RU) 1 1 1 1 2 1 3 7 †* 2 1
AC Redundant Power Supply (Hot Swap) • • • • • • • • • • •
DC Redundant Power Supply (Hot Swap) • • • • • • • • • •
System Capacity
Max Backplane Capacity (Gbps) 720 3200 480 12 6400 640 6400 3840 †* 320 640
Max Number of 1Gb Ports 48 0 48 10 N/A 64 0 288 †* 0 64
Max Number of 10Gb Ports 72 128 48 4 128 64 108 384 †* 64 64
Max Number of 25Gb Ports 0 128 0 0 108 0 108 288 †* 0 0
Max Number of 40Gb Ports 18 32 0 0 64 16 76 96 †* 0 16
Max Number of 50Gb Ports 0 64 0 0 128 0 108 144 †* 0 0
Max Number of 100Gb Ports 0 32 0 0 64 0 60 72 †* 0 0
1
Centralized 2
Yes (2 stage) *** Switch Dependent

Find us at www.keysight.com Page 1


GTP Session Controller 7433
Vision Edge 10S
Vision Edge 100

Vision Edge OS
Vision Edge 1S
Vision Edge 40

Vision 7300

TradeVision
VEOS 7816

Vision ONE

Vision X
Module Type
1Gb Copper Port / Transceiver • • • • †*
1Gb SFP Port • • • †* •
10Gb Copper Transceiver • • • †*
10Gb SFP+ Port • • • • • • †* • •
25Gb SFP28 Port
100Gb QSFP28 port can be converted into • • • • • †*
4x10G, 4x25G, 1x40G, 2x50G and 1x100G
50Gb QSPF28 Port
100Gb QSFP28 port can be converted into • • • • • †*
4x10G, 4x25G, 1x40G, 2x50G and 1x100G

40Gb QSFP+ Port • • • • • • †* •


Cisco BIDI • • • • • • †* •
100Gb CFP • • †*
100Gb QSFP28
100Gb QSFP28 port can be converted into • • • • • †*
4x10G, 4x25G, 1x40G, 2x50G and 1x100G

Inline Security
Supports inline deployment including full
• • • •
feature set for HA
Inline configuration on web console • • • •
Load balancing with spare • • • •
Serial service chaining • • • •
Customizable heart beat • • • •
Link fault detection (LFD) • • • •
Negative heart beat • • • •
Tool mandatory vs. optional
• • • •
(fail-closed vs. fail-open)
Multiple network links tool sharing
• • • •
(VLAN port tag)
Multiple network links tool sharing
(MAC address)
VLAN Translation during filtering
• • • •
(VSET) for inline
Replacement during filtering
• • • • • •
(VSET) for out-of-band
HA active-active • • • •
HA active-standby
Support inline and out-of-band
• • • •
simultaneously
Asymmetric load balancing
• • • •
(client/host affinity)
† Switch Dependent *Vision Edge OS supports Edgecore 5812 & Edgecore 7712 ONLY

Find us at www.keysight.com Page 2


GTP Session Controller 7433
Vision Edge 10S
Vision Edge 100

Vision Edge OS
Vision Edge 1S
Vision Edge 40

Vision 7300

TradeVision
VEOS 7816

Vision ONE

Vision X
Multi-path (multiple criteria for different
data paths)
Load balance based on port speeds
or weight
Support for Active SSL transparent proxy,
including tools that are either actively •
inline or passively out of band
MPLS inner IP filtering for inline • • • • •
Deployment Options
Simplex (Double Your Ports) • • • † •
Fan-In • • †
Fan-Out • • • • • • †* •
Management
Cluster Management through Ixia Fabric
• • • • • • • •
Controller (IFC)
IFC Fabric Direct Connect • • • • • • •
IFC Fabric GRE • •
IFC CM (formerly Indigo Pro) for OAM&P
• • • • • • •
(systems mgmt.)
RESTful API • • • • • • • • • •
Role Based User Accounts • • • • • • • • • • •
TACACS+, RADIUS Authentication • • • • • • • • • •
Syslog • • • • • • • • • •
SNMP Traps • • • • • • • • • •
Strong Password • • • • • • • • • • •
Event monitoring and Alarm Generation • • • • • • • • • •
Link Status Trap • • • • • • • • • •
Packet Counters and Statistics • • • • • • • • • • •
WebUI (HTML5) for System Access • • • • • • • • •
Compliance
FIPS 140-2 validation • • • • • • • • •
Common Criteria • •
DoD UCAPL • •
NEBS Certified • • 7303 •
Netstack
Three Stages of Filtering - Filter rules
may be applied to ingress, dynamic, and/ • • • • • • • • • •
or egress traffic

† Switch Dependent *Vision Edge OS supports Edgecore 5812 & Edgecore 7712 ONLY

Find us at www.keysight.com Page 3


GTP Session Controller 7433
Vision Edge 10S
Vision Edge 100

Vision Edge OS
Vision Edge 1S
Vision Edge 40

Vision 7300

TradeVision
VEOS 7816

Vision ONE

Vision X
Filtering layer 2, layer 3 and layer 4
fields plus custom and pre-defined • • • •1 • • • • • •2 •
offset filters for GTP, MPLS, and VxLAN
Counter Comparison - Ingress,
• • • • • • • • •
Dynamic, Egress
MPLS/GTP Dynamic Filtering • • • • • • • • •
VxLAN VNI/Tunnel IP Dynamic Filtering • • • • • • • •
Max # of General & Custom Rules 16k 4k 16k NA 4k 4k 4k 4k 3
† NA 4k
Max # of Source IP Rules (unicast) 8k 8k 8k NA 8k 8k 8k 1k 3
† NA 8k
Max # of Destination IP Rules (unicast) 8k 8k 8k NA 8k 8k 8k 1k 3
† NA 8k
Max # of Multicast IP Rules (No
3k 3k 3k NA 3k 3k 3k 3k † 3k 3k
wildcard / masking capability)
Dynamic Filter Compiler / Intersection
mode provides patented technology that
• • • • • • • • •4 •
automatically resolves filter rules to
provide self-maintaining visibility
Priority Based Filtering (PBF) provides
ACL-like logic when filtering traffic. •5 •6 •5 • • •5
Usually used for Inline
VLAN Tagging - Track packets easily by
adding VLAN IDs to packets based on the
source (ingress) port and remove them • • • • • • • • • •
as they leave a packet broker via exit
(egress) ports.
VLAN Tagging per Port • • • • • • • • • •
VLAN Tagging per Dynamic Filter • • • • • • • •
VLAN Un-tagging - per Port • • • • • • • •
VLAN Un-tagging - Conditional • • • • • • • •
Aggregation - Consolidate incoming
traffic to optimize port usage and • • • • • • • • • •
simplify filtering
1:1 • • • • • • • • • •
1 : Many • • • • • • • • • •
Many : 1 • • • • • • • • • •
Many : Many • • • • • • • • • •

† Switch Dependent
1
No custom
2
Deny By on output
3
per blade
4
Yes (2 stage)
5
IPv4 Only or IPv6 Only
6
IPv4 Only

Find us at www.keysight.com Page 4


GTP Session Controller 7433
Vision Edge 10S
Vision Edge 100

Vision Edge OS
Vision Edge 1S
Vision Edge 40

Vision 7300

TradeVision
VEOS 7816

Vision ONE

Vision X
Replication - Replicate traffic to multiple
dynamic filters (ingress) or to multiple • • • • • • • • • •
tools (egress)
Load Balancing - Distributes traffic
• • • • • • • • •
across tool ports
Load balancing Standard (3 Tuple & 5
• • • • • • • •
Tuple)
Load Balance Tunneled IP (MPLS Based) • • • • • • • •
Maximum Ports per Load Balancing
72 128 48 128 64 108 641 † 32 64
Group
LLDP Auto Discovery – Automatically
discover neighbors on network and tools • • • • • •
ports and interconnect
RBAC – Role based Access Control
RBAC Inline • • • • •
RBAC Out-of-Band / Passive • • • • • • • • • • •
Command Line Interface Management
– CLI access to NetStack and Inline • • • • •
features
Packetstack
Deduplication - Remove repeat data to
deliver a unique stream to your tools so • • • • • •
they can operate at their peak.
Header Stripping - Detect and remove
headers so data can be easily analyzed
by security and monitoring (IPS, IDS, • • • • •
NGFW, etc.) tools that do not support
such protocols
Generic Header Stripping (GHS) • • • •2
VLAN • • • • •
VxLAN - Standard UDP Port # • • • •
VxLAN - Cisco ACI UDP Port # • • • •
MPLS (L2VPN/VPLS with or without
• • • • •
control word)
Cisco Fabric Path • • • • •
RSPAN / ERSPAN • • • • •
GTP (GTP-U) • • • •
L2GRE/NVGRE • • • •
802.1 BR • • • •
VNTag • • • •

† Switch Dependent
1
Per card
2
Via multi-speed card

Find us at www.keysight.com Page 5


GTP Session Controller 7433
Vision Edge 10S
Vision Edge 100

Vision Edge OS
Vision Edge 1S
Vision Edge 40

Vision 7300

TradeVision
VEOS 7816

Vision ONE

Vision X
Mac-in-Mac/PBB •1 •1 •1 •1
L3GRE •1 •1 •1 •1
L2TP •1 •1 •1 •1
JMirror •1 •1 •1 •1
GENEVE • 1
• 1
• 1
•1
PPPOE •1 •1 •1 •
LISP • 1
• 1
• •
Cisco VSL (Virtual Switch Link) •1 •1 •1 •1
Cisco OTV (MPLS over GRE) •1 •1 •1 •1
Packet Trimming - Send only what
security and monitoring tools need by
• • • • • •
cutting out the unnecessary information
and reducing packet size
HTTPs/GQUIC Slicing • • • •2
Timestamping - Insert high-accuracy
• • • • • •3
timestamps into every packet at ingress
NTP • • • • • •
PTP • • • •
GPS
Data Masking - Hide or overwrite
sensitive or personally identifiable
• • • •
information (PII) before providing the
data to analysis tools
GRE Tunneling - Encapsulate and
de-encapsulate data. Origination and
termination features.
Tunnel Origination: L2GRE • • • •4 •
Tunnel Origination: ERSPAN
Load Balancing on L2GRE Tunnel Group •
Tunnel Termination: L2GRE • • • • •
Tunnel Termination: ERSPAN • • • •
NetFlow - generate NetFlow for tools
•5 •6 •7 •7
without burdening network devices
Burst Protection - allows monitoring 10G
tools to see everything without dropped 25G
1G 1G 1G
packets when traffic exceeds tool 40G
bandwidth 50G
Source Port Labeling •
1
Via GHS
2
Via multi-speed card
3
Included with base license
4
AFM16 Only
5
Hardware
6
AppStack
7
Network Processor

Find us at www.keysight.com Page 6


GTP Session Controller 7433
Vision Edge 10S
Vision Edge 100

Vision Edge OS
Vision Edge 1S
Vision Edge 40

Vision 7300

TradeVision
VEOS 7816

Vision ONE

Vision X
Packetstack
SSL Decryption (Passive) - Get greater
visibility by decrypting traffic to detect
• • •
such malware, prevent data loss, monitor
applications and more
Active SSL - Decrypt and encrypt traffic
as an inline transparent proxy, including
the use of ephemeral keys and support •
for TLS 1.3. Includes host categorization
as an optional feature.
Data Masking Plus - Mask sensitive data
such as a credit cards, SSN's and email • • •
addresses using pre-defined patterns
Threat Insight – Recognize malware,
botnet, exploits, hijacked IPs and • •
phishing activity
Appstack
Application Identification - Define traffic
filters to view or forward specific traffic
patterns that you want to monitor, based • • • •
on application type, operating system,
transport protocol, and other criteria.
Geolocation & tagging - Separate traffic
• • • •
by client or server location
Optional Regex • • •
IxFlow Generation - In addition to
packet forwarding NetFlow information,
optionally enhanced with application • • • •
layer data (IxFlow), can be forwarded for
matching traffic
Packet Capture - Save traffic matching
any filter as a pcap-format capture file • • • •
with a user defined size
AppStack Dashboard - Displays
comprehensive network traffic
• • • •
information that provide real-time
network traffic information.
Free AppStack Dashboard – discover the
benefits of AppStack with access to the
• •
AppStack Dashboard without the need
of a license.
ATI Subscription - Provides updates to
application signature database, vital for
• • •
AppStack to stay updated with emerging
applications.
Mobilestack
SIP / RTP Correlation – Correlate data
and control planes of your users VoIP

traffic so probes don’t have too, making
them more efficient and effective

Find us at www.keysight.com Page 7


GTP Session Controller 7433
Vision Edge 10S
Vision Edge 100

Vision Edge OS
Vision Edge 1S
Vision Edge 40

Vision 7300

TradeVision
VEOS 7816

Vision ONE

Vision X
SIP / RTP Load-Balancing – Scale
monitoring infrastructure by load-

balancing VoIP traffic across multiple
probes
GTP Correlation - Improve performance
of QoS and QoE monitoring probes by •
offloading GTP session correlation
3GPP Support •
4G LTE, 3G and 2G support •
54
Max Number of GTP Sessions
million
GTP Load-balancing - Scale monitoring
infrastructure by load-balancing GTP • •
data across multiple probes
Subscriber filtering - Selectively send
mobile network traffic for subscribers of •1 •
interest
Subscriber sampling - Reduce costs by
sending only a certain percentage of
•1 •
the subscriber traffic to the monitoring
infrastructure
Subscriber whitelisting – Ensure specific
customers are always included in the
•1 •
session sample sent to probes for
monitoring.
Packet core filtering- selectively sending
traffic to probes based on traffic types:
RAT (2G, 3G, 4G), Bearer QoS class •
identification (QCI), and Access Point
Name (APN)
Tradestack
Gap Detection - Quickly detect gaps in
multicast data to recognize market feed

network problems with alerts to other
tools and systems.
Feed and Channel Health - Simplify feed
troubleshooting by monitoring channel •
performance and alerts
Traffic statistics - Improve capacity
planning by streaming metadata off
TradeVision to analysis tools where •
network engineers can build up data on
historical traffic patterns.
Microburst Detection - Detect and
remedy “bursty” network traffic, where

small bursts can cascade into dropped
data.
Auto Feed Updates – automatic updates

of market feeds and channels
1
SIP/RTP

Find us at www.keysight.com Page 8


GTP Session Controller 7433
Vision Edge 10S
Vision Edge 100

Vision Edge OS
Vision Edge 1S
Vision Edge 40

Vision 7300

TradeVision
VEOS 7816

Vision ONE

Vision X
Simple Feed Management – feed
channel configurations are auto •
populated
One Way Latency •
Two Point Latency •
Synthetic Mesh Latency •
Real Time Dashboards •
TradeStream •
IP Burst Detection •1
Feed Channel Bandwidth Utilization •1
Active Monitoring
Hawkeye Endpoint – Able to register as
active monitoring endpoint and generate •
traffic
Node to node traffic – can generate
traffic toward other Hawkeye endpoints
for network heartbeats, voice, video, •
skype for business, throughput and
speed test (TCP and UDP)
Real service traffic – can validate access
to http/https service on premise or on
cloud, validate DNS service, send ICMP, •
UDP and TCP to echo ports on the
network
Path discovery – can discover and map
out network topology to reach remote •
destination, on-net of off-net
10G interface - active monitoring •
1G interface – active monitoring •
1
Requires 5.4

Learn more at: www.keysight.com


For more information on Keysight Technologies’ products, applications or services,
please contact your local Keysight office. The complete list is available at:
www.keysight.com/find/contactus

Find us at www.keysight.com Page 9


This information is subject to change without notice. © Keysight Technologies, 2020, Published in USA, September 4, 2020, 7019-0202.EN

You might also like