PacketRavenVirtual
Virtual Network TAP (vTAP)

With the increase in the use of virtual, cloud-based and hybrid environments in the enterprise space, the number of blind spots on the network has also increased, making much-needed, 100 per cent visibility of network traffic impossible.

But without visibility into your East-West traffic, how do you know if danger is currently looming or that you haven’t already been compromised?

NEOXPacketRavenVirtual is a virtual Network TAP and provides physical and virtual security and monitoring tools with complete network visibility across virtualised private, public and hybrid cloud environments.

Simply installed using a Debian package, you immediately get full visibility of virtual machine (VM) traffic (including traffic between VMs) for monitoring security, availability and performance in native Linux systems and cloud environments without impacting performance or architectures and without having to make changes to your network infrastructure.

The often used and already existing (virtual) SPAN/Mirror port is unsuitable for professional purposes, as it lacks some important features that the TAP offers.

Whereas with port mirroring the entire data traffic to be mirrored is sent to all destinations (security/monitoring tools), with the Virtual NEOX TAP a much more granular, such as an n:1 (aggregation) or a 1:n (regeneration) allocation is possible. Furthermore, with the TAP it is also possible to mirror the traffic per direction, i.e. the incoming, the outgoing or the complete network traffic.

Furthermore, the NEOX-TAP offers the possibility to connect to physical devices via GRE/VxLAN tunneling, which is difficult or impossible with port mirroring.
Another feature is the use of stateful filtering (connection-oriented filtering) to copy out only the data that is relevant and to relieve the connected tools. Filter criteria on OSI layers 2-4 are supported.

And last but not least, there is the danger that cloud providers can restrict mirrored port mirror traffic according to their terms and conditions. This would result in partial or even total loss of network transparency.

• Available for various environments: Linux OS, Azure Cloud, Google Cloud, AWS, VMWare, Docker etc.
• No restrictions in terms of network speed
• More reliable alternative to virtual port mirroring
• OSI Layer 2-4 stateful filtering (connection-oriented filtering) possible
• Multiple GRE/VxLAN tunnels possible
• Supports Aggregation and Regeneration modes or n:1 and 1:n
• Easy to install (Debian package, Docker image) and intuitive to configure
• Programmed, developed and tested in Germany