Emulex Corporation announced the new EndaceFlow 3040 NetFlow generator appliance.

The EndaceFlow 3040, which is purpose-built for use with high-density 10Gb Ethernet (10GbE) networks, generates 100 percent accurate NetFlows on up to four Ethernet links at speeds up to 10Gb per second (10Gbps) line rate. This level of performance speeds detection, identification and resolution of critical security and network issues, improving network uptime and reducing operational expenditures (OPEX) in enterprise data centers.

“As enterprises move more deeply into the latest data center technologies, such as 10GbE, server virtualization and software-defined networking, they are finding that visualizing what is happening in their networks has become more challenging,” said Lee Doyle, principal analyst, Doyle Research. “This is compounded by the fact that many tools that worked well at 1Gbps speeds simply have not scaled up to 10Gbps. This has critical implications for the ways that enterprises approach security monitoring, forensics and network performance management, which can only be addressed by tools that are designed to enable network visualization at 10Gbps speeds and above.”

By providing 100 percent NetFlow generation, new threats to network security and performance can more easily be detected, identified and resolved - resulting in the detection of a wider range of network anomalies and intrusions in the security operations space and the identification of network choke points that impact application performance - and can be further treated with packet-based network recording and analysis tools.

“Traditionally, end users have used routers and switches to generate sampled NetFlows, which severely limits behavioral analysis and can impact switch and router performance,” said Mike Riley, SVP and GM, Endace portfolio, Emulex. “The Emulex EndaceFlow 3040 addresses these issues by offloading NetFlow generation onto a purpose-built appliance that can generate unsampled NetFlow across multiple 10GbE links. This gives our customers all of the data they need to diagnose and resolve complex security and network performance issues on 10GbE networks in a fraction of the time previously required.”

The Emulex EndaceFlow 3040 delivers complete network visibility through the unique combination of the following features and capabilities:

- Extreme Performance: The EndaceFlow 3040 provides complete full-stream flow visibility at 10Gbps over any combination of IPv4 and IPv6-based networks with up to 30Gbps of flow generation and a total active flow cache size of 64 million.

- Custom Filtering: The EndaceFlow 3040 supports up to 120 filters across four collectors for load balancing flow records across multiple collectors, enabling users to customize exports to gain visibility of specific networks within the data center.

- Advanced Hash Load Balancing (HLB): The advanced HLB feature of the EndaceFlow 3040 minimizes manual configuration with flow safe load balancing, reducing OPEX.

- Ease of Integration: The EndaceFlow 3040 supports V5 (IPv4), V9 (IPv6) and Internet Protocol Flow Information Export (IPFIX) flow formats and a broad range of fields, allowing the EndaceFlow 3040 to seamlessly integrate with any NetFlow collector in the market.

When the EndaceFlow 3040 is combined with behavioral-based analytics tools from partners such as Lancope and SevOne, NetOps and SecOps personnel are able to create complete solutions that significantly speed resolution of critical network and security issues. In the case of one customer, this reduced their time-to-resolution (TTR) for critical incidents from 30-50 hours to only a couple of hours. The result is significantly improved network uptime and lower OPEX through reduced TTR for these critical incidents.