Allot Communications NetReality™ Product Overview NetReality overview NetReality controls the assignment of bandwidth, ensuring delivery of critical applications Dedicated monitoring and traffic shaping device with central management software Integrated software & hardware solution WAN based or LAN based multi service platform – one device, multiple functions: 7-layer real time and historical monitoring, traffic shaping, SLM, CSU/DSU functionality, Accounting, Security, VoIP management 2 NetReality overview Without NetReality: Bandwidth is used inefficiently, creating uneven traffic flow, and dropped packets. Business suffers while non-critical applications crowd out critical ones. With NetReality: Assignment of bandwidth is controlled, ensuring delivery of critical applications 3 Key Principles Behind NetReality The WAN edge is the site of critical network application exposure – the bottleneck. NetReality WAN based platform protects the site of greatest bandwidth constriction scalable architecture: The NetReality system uses a central monitoring and policy management system with distributed remote devices, performing as both probes and shaping policy execution points User friendly, point & click, JAVA based Graphical User Interface 4 NetReality System Architecture The NetReality system is comprised of three basic modules: NetReality WiseWan Devices NetReality Server and Database - Central management server built on top of an industry standard SQL database NetReality Console (GUI) 5 NetReality System Architecture HQ Router CSU WiseWan Traffic Data sent Using Compressed SNMP WAN CSU NetReality Server and Database Router Site A 6 NetReality System Architecture TCP/IP SQL Queries HQ Console Router CSU WiseWan Reports Generated in Console WAN CSU NetReality Server and Database Router Console Site A 7 NetReality System Architecture Policy Stored in Database Shaping Policy Update HQ Router CSU WiseWan WAN CSU NetReality Server and Database Router Console Site A 8 NetReality System Architecture Policy Stored in Database HQ Router CSU WiseWan Policy Distributed automatically WAN CSU NetReality Server and Database Router Console Site A 9 NetReality Benefits Ease of Installation: Fully automated install scripts for software installation Modest system requirements WiseWan devices use auto-detect features to allow very simple installation on the WAN link Multiple remote management functions available after installation 10 NetReality WiseWan The WiseWan is a dedicated hardware device located on the WAN edge. It functions as a QoS Policy Execution Point, manipulating the traffic on the link to conform to the corporate policies In addition the WiseWan functions as a remote probe monitoring traffic at all 7 layers The WiseWan Classifies more than 700 applications and protocols and performs deep packet inspection classification based on content 11 NetReality WiseWan The WiseWan is a powerful network device, with multiple CPU architecture Based on an industry standard real time operating system - VXworks Remote management of the unit is done through the standard WanXplorer console Supports telnet, SNMP and FTP version download for maintenance 12 NetReality WiseWan The WiseWan is an SNMP agent: Generates standard traps to alarm on events in the network RMON2, MIB2, FR-MIB and other standards compliant (Concord support) compressed statistics are transmitted to the WanXplorer database using SNMP with a private MIB – reducing the telemetry overhead up to 5% of typical RMON2 solutions 2 management connection options: 10/100 Ethernet side-band IP connection 10/100 Ethernet or on-the-WAN in-band IP connection 13 NetReality WiseWan Multiple WAN & LAN Interfaces: Low speed serial lines – up to 12 mbps (V.35, X.21, X.24, RS232, EIA530, RS449) High Speed Serial Interface (HSSI) – up to 52 mbps Native DS1 E1/T1 lines – 4 wire (BNC, RJ48, DB15) CSU/DSU Model (DS1 and Serial) Channellized T1/E1 10/100 BaseT Ethernet 14 WiseCable The WiseWan WiseCable is an intelligent cable that bypasses any power failure or hardware breakdown. In such an event, the WiseCable ensures that the data continues to flow on the line by detaching the WiseWan from the network as soon as a breakdown occurs. The network continues to operate smoothly until WiseWan is operational again. 15 WAN Network CSU/DSU (DB-25 male connector) WAN Network Router side (DB-25 female connector) WiseCable for G703 (RJ-48) Balanced TEM RJ-48 connectors DB-60M to WiseWan WAN port WiseCablefor G703 coaxial Unbalanced TEM 4 BNC connectors NetReality WiseWan Serial Connection 16 NetReality WiseWan Inline T1 Connection 17 NetReality WiseWan CSU DSU Connection 18 NetReality WiseWan On The WAN Solution ERRORS FECN FECN 19 BECN BECN CIR CIR NetReality WiseWan LAN Product Can see all traffic on star topology networks ? Can see WAN circuits - Frame Relay, channellized E1/T1 ? Can monitor WAN layer 1 & 2 - errors, performance, congestion ? Can have QoS adaptive to WAN circuit congestion ? Can be managed from the WAN without LAN access ? Supports multiple LANs in a router with one device ? Can handle router based VoIP/SNA gateways ? 20 r r r r r r r WAN Product NetReality WiseWan PBX WiseWan The VoIP Advantage VoIP Traffic Router LAN Shapers LAN 21 Serial V.35, X.21 DSU WAN NetReality WiseWan Deep Packet Inspection Application HTTP analysis for URL and MIME type, Citrix – Application over MetaFrame, Oracle SQLNET info, H.323 call information… Transport 700+ Applications over IP and IPX including dynamic port tracking TCP,UDP,SPX, ICMP… Network IP, IPX, DECNET, SNA, APTLK … Link Frame Relay, PPP , HDLC … Physical T1 ,E1 ,CHE1/T1 ,G.703 ,V.35 , X.21… WAN ONLY 22 NetReality Server Central management software running on Sun/Solaris 2.51, 2.6, 2.7, 2.8 or MS Windows NT 4.0 or Windows 2000 using an industry standard SQL database – Sybase is included and embedded in the product Enables easy integration with third party applications The database is self-managed; therefore database system administrator intervention is not required – it will perform automatic database management, backup, data aging and purging This integrated database extensively and periodically polls the WiseWan NAPSs it manages, and inserts the information into the database 23 NetReality Server WanXplorer features include: Management of multiple NAPSs from one central location Integration with leading management platforms, such as HPOV and CiscoWorks Acts as the Policy Server (PDP) for the WiseWan devices – The servers is a central data repository for the system - statistics, configuration, shaping policies Allows distributed deployment across multiple server to enhance performance and scalability 24 NetReality Console Java based, platform independent application - Unix, NT, Win95/98/2000 Pure client - connects to the NetReality server, does not store anything on the client station Can be launched from a web browser or as a native Java run time program Provides reports based on statistics from the database for viewing or export Acts as the event console for all system and network events detected by WiseWan 25 NetReality Console Multiple consoles, can reside anywhere on the network Easy to use, point and click GUI, with both graphical and textual views, and drill down capabilities Password protected to restrict access - Embedded security with multiple access levels for different users and groups Integrates with HP/OV NNM 26 NetReality Monitoring Measuring the real bandwidth on the WAN The available bandwidth on public networks varies continuously, and may be below, at, or above the bandwidth the carrier agreed to deliver (in FrameRelay - the CIR) The WiseWan can analyze the circuit performance and report back to the user Real time monitoring and analysis for troubleshooting purposes Long term storage of all monitoring data for History analysis and capacity planning 27 NetReality Monitoring Line utilization, errors and bursts Frame Relay analysis: Congestion - FECN , BECN PVC performance (can you reach your CIR) Response time measurement per PVC PVC Usage Protocol / Application / Host distribution analysis Conversation monitoring: top hosts, talkers and listeners, application bandwidth distribution per session 28 NetReality Monitoring 29 NetReality Monitoring 30 NetReality Monitoring 31 NetReality Monitoring 32 NetReality Monitoring Line and PVC Service Level Agreement: Availability Mean Time Between Failures Mean Time To Repair Response time average and breaches Frame Relay congestion breaches (BECN below CIR) Summery and detailed failure reports available 33 NetReality Monitoring 34 WanTel Enhanced management and control facilities for voice-over-IP H.323 and SIP traffic WanTel enables NetReality WiseWan to recognize VoIP traffic, and perform monitoring and traffic shaping of that traffic WiseWan will distinguish between voice, video and data sessions, as well as RAS, RTP (Real Time Protocol) and RTCP (Real Time Control Protocol) conversations WanTel is an add-on for the WiseWan product family, requiring an additional license for usage 35 WanTel Used to monitor and shape VoIP traffic WanXplorer provides reports for VoIP in Real-time and History. This includes information regarding VoIP PBX statistics (call and signaling information) and a detailed calls report The traffic shaper can guarantee bandwidth or limit the number of voice calls, Prioritizing voice and data transmissions for best bandwidth utilization 36 WanTel 37 WanAccountant Application usage accounting tool for Frame Relay and IP networks, Works in conjunction with the WiseWan server management system Enables allocation of WAN charges to enterprise users based on service level criteria Tracks usage by applications or groups of applications; application servers or application server groups; departments or business units and even time-of-day WanAccountant is an add-on for the WiseWan product family, requiring an additional license for usage 38 WanAccountant 39 Classification and Prioritization Shaping policies are configured by the user using a point and click central policy console, and then distributed to the WiseWans WiseWans use advanced protocol and application decoding to classify the traffic in wire speed and determine if shaping is necessary Traffic to be shaped will be queued by priorities WiseWan releases the frames back at line speed, but different order - according to policy Low priority sessions will be delayed and slowed down, high priority sessions will be accelerated 40 Traffic Classification Applications and Protocol Support for more than 700 protocols and applications, including recognition of some applications using dynamic ports, user defined applications, and application header information – Citrix Published apps, Oracle information, HTTP URL and MIME type Direction Server and Client Host Source and destination: Hosts, networks, IP subnets and user groups, by defining their IP or IPX address Schedule Time of day, day of week Circuit Line or DLCI that the policy needs to be applied on 41 WiseWan Policy 42 Traffic Shaping Traffic shaping actions: Prioritization - the priority level of the rule by using the 6level slider. The range is: Pass through, High, MediumHigh, Medium, Low, and Block. Pass through allows data to be transmitted with highest priority with no constraints. Block prevents all data from being transmitted Bandwidth guarantee - minimum amount of bandwidth that this conversation/class should be guaranteed to Bandwidth limit - maximum amount of bandwidth consumption that you want this conversation/class to consume DiffServ Tagging – overwrite the DiffServ tag with a custom tag based on it’s calssification 43 WiseWan Bandwidth Policy Editor 44 Shaping Per PVC The Shaping Per PVC functionality allows WiseWan to guarantee bandwidth for congested PVCs regardless of the overall line congestion All WiseWan NAPS systems are defined by default for shaping per PVC. How Shaping Works - The user defines the Committed Information Rate (CIR) and the Maximum Information Rate (MIR) for each DLCI Shaping is triggered when traffic utilization on the PVC reaches ~85% of the MIR, and shaping stops when utilization drops below 60% Limits always work 45 WiseWan Shaping per PVC 46 Scheduled Reports NetReality console includes the ability to configure reports that will be created automatically Choose report type, object to be generated on Report format (Various HTML templates, PDF, applet, CSV) Customize reports to be generated (Graph type etc) Interval for report creation (hourly, daily etc) Time frame for report (hourly, daily etc) Target directory to publish the report to 47 Event Notification NetReality Console will allow the user to define which events (line up/down, high utilization etc) will trigger notifications Filter events by different parameters Define timeouts for event notification Forward events to email, pager Launch scripts as reaction to events Customize event notification message format 48 Product Family All WiseWan Systems come complete with: - WiseWan Device - Cables - Server and Database software - Client Software Some models available as rack-mount or desktop models, Serial line, in-line DS1, CSU/DSU, or Ethernet (Broadband) models 49 WiseWan 50: 128kbps WiseWan 100: up to 512 kbps WiseWan 200: up to 2mbps WiseWan 230: Channellized T1/E1 WiseWan 400: up to 12 mbps WiseWan 600: up to 52 mbps WiseWan 1001: up to 100 mbps Add-on software modules WanTel Voice over IP WanAccountant Competitive Landscape BW Mangment (min/max) 50 Application Priority WAN Monitoring/ Shaping Centralized Reporting/ Pol Mgmnt NetReality √ √ √ /√ √ /√ NetEnforcer / NetPolicy √ √ -/- √/- Packeteer √ √ -/- √ /√ Sitara √ √ -/- √ /√ Visual Networks - - √/- √/- NetScout - - √/- √/- Market Segmentation Enterprise WAN BW Mangment 51 Enterprise Application Priority Enterprise ISP (CPE) WAN Mon/ WAN Mon/ Shaping Shaping NetReality √ √ √ /√ √ /√ NetEnforcer / NetPolicy √ √ -/- -/- Packeteer √ √ -/- -/- Sitara √ √ -/- -/- Visual Networks - - √/- √/- NetScout - - √/- √/- IDC on SLA Today’s cost-conscious IT managers are monitoring SLAs and the utilization of bandwidth as a way to optimize their relationships with carriers based on changes in their business, such as layoffs and downsized ecommerce initiatives, or simply making sense of overprovisioning practices 52 Contact Details Americas Europe, Middle East and Africa Japan 250 Prairie Center Drive #335 World Trade Center Nishi Ginza Bldg 2F Eden Prairie, MN 55344 1300, Route Des Cretes 5-5-9 Ginza Chuo-ku Tel: (952) 944-3100 BP 255 Sophia Antipolis Cedex Tokyo 104-0061, Japan Fax: (952) 944-3555 France 06905 Tel: 81 3 5537-7114 Tel: 33-(0)4-92-38-80-27 Fax: 81 3 5537-5281 www.allot.com sales@allot.com 24/7 Support: 1-800-204-1364 53 Fax: 33-(0)4-92-38-80-33 International HQ Asia Pacific 5 Hanagar Street 9 Raffles Place Hod Hasharon, 45800 Republic Plaza #27-01 Israel Singapore 048619 Tel: 972-(0)9-761-9200 Tel: 65-6832-5663 Fax: 972-(0)9-744-3626 Fax: 65-6832-5662