AWS Technology Partnership

User Experience

Click to Enlarge Image

NETSCOUT uses the industry’s most scalable, lightweight distributed architecture to generate smart data. Through continuous monitoring and by capturing all wire data (traffic flows) traversing the hybrid cloud environment - performing simultaneous deep-packet inspection and real-time analysis – vSTREAM generates smart data at its point of collection.  vSTREAM seamlessly operates with NETSCOUT’s nGeniusONE solution to gain a centralized view into the performance characteristics of all infrastructure and application components and their dependencies across geographically dispersed data centers and cloud environments. CyberStream network security sensors convert raw packets into a rich source of data for advanced network threat detection and response. CyberStream is used in combination with Omnis Cyber Intelligence to provide enterprise-wide cybersecurity monitoring, alerting and detection, in-depth triage, and investigative workflows of potential threats.

With valuable and timely intelligence into application performance and security, you can proactively find and fix errors, latencies, and threats before they become service delivery problems.

As shown in the diagram, NETSCOUT integrates –or interoperates– with several AWS services and technologies:

• Amazon VPC Ingress Routing
• Amazon VPC Traffic Mirroring
• AWS Gateway Load Balancer (GWLB)
• Gateway Load Balancer Endpoint as a Target
• AWS Security Hub
• Amazon Security Lake

Click to Enlarge Image

Arbor Edge Defense (AED) provides an inline, always-on, first line of defense for inbound DDoS attacks and the last line of defense for outbound DDoS attacks and data exfiltration. AED provides a single holistic solution to protect customers’ assets no matter where they are, on-prem, in a private cloud, or in a public cloud. AED can be deployed in AWS to detect and mitigate attacks targeting customers’ assets in AWS, both inbound DDoS attacks from either outside of the AWS Cloud or across AWS VPCs as well as outbound DDoS attacks. AED blocks bulk inbound and outbound threat traffic to prevent overload of the rest of the virtual security stack (inbound) and to block and alert on any threat traffic that AED sees leaving the network (outbound) since at that point the traffic has already passed through and not been blocked by the rest of the security stack. This has often been the first indication of a critical malware infection at AED customers.

NETSCOUT solutions let you migrate workloads to AWS with confidence, providing a foundation for common situational awareness for NetOps, SecOps and other IT groups by monitoring a variety of availability, reliability, responsiveness and threat metrics - making them easily accessible in real time to the right team members with custom views relevant to their function.