2
Combat cyber crimes with efficiency and scale by deploying FireEye Threat Prevention Platforms, featuring advanced signatureless protection, with SDNbased Big Tap Monitoring Fabric. This solution achieves new levels of threat protection, while offering significant operational scale, simplicity and cost savings. THE CHALLENGE As seen by security breaches on some of the world’s biggest brands and financial entities, today’s data centers need new sophisticated threat protection mechanisms. These modern requirements include: • Ubiquitous network monitoring: Traditional approaches place threat protection devices in locations across the network that are perceived to be more likely to witness cyber attacks, leaving a majority of the traffic unchecked and the network exposed. With the rise of virtualized networks, a broader approach to monitoring is needed. • Multiteam coordination: The same strategic spots that demand high scrutiny by security administrators need to be monitored by network administrators as well for trouble shooting and performance characterization. This requires multiteam coordination for tap or SPAN port sharing, which can add significant cost and operational complexity. • Lower cost of monitoring: With constrained IT budgets, ubiquitous traffic monitoring needs to be achieved at the lowest possible CAPEX and OPEX costs. THE SOLUTION FireEye Threat Prevention Platforms and the Big Tap Monitoring Fabric work together to deliver an efficient, costoptimized, datacenterwide threat prevention system. The joint solution combines the FireEye signatureless protection, which creates real time threat intelligence, along with an SDNmanaged baremetal switching fabric to combat cyber attacks with unmatched efficiency and at an unprecedented scale. The scaleout architecture of Big Tap monitoring fabric enables centrally deployed FireEye platforms to access network traffic from any tap at any time based on policies. Customers can realize the full potential of datacenterwide threat protection while enjoying the benefits of simplified management due to colocation of the FireEye platforms. THE SOLUTION COMPONENTS FireEye Threat Prevention Platform FireEye helps organizations combat sophisticated attacks that easily bypass conventional signaturebased defenses such as next generation firewalls, IPS, antivirus, and gateways. FireEye Threat Prevention Platforms do not rely solely on signatures, so they can identify and block these threats in real time. The core of the FireEye platform is a virtual execution engine, complemented by dynamic threat intelligence, that empowers security teams to prevent, detect, analyze, and respond to today’s advanced attacks. The FireEye platforms supplement traditional security defenses, such as traditional and nextgeneration firewalls, IPS, AV, and gateways, in containing advanced malware from impacting the majority of corporate networks. The Big Tap Monitoring Fabric The Big Tap Monitoring Fabric is a nextgeneration, multitier, scale out solution that leverages commodity baremetal switches and software defined networking (SDN) design principles. The Big Tap Controller fully manages multitenant monitoring policies, provisions the fabric, programs the forwarding paths of monitored flows, and centrally controls all switches and their interconnections. This enables data center wide monitoring with the ability to tap every rack and send it to any tool. With the ability to tunnel monitoring traffic, this capability is being extended to every location across the enterprise. In addition to supporting TAP/SPAN aggregation, flow filtering, replication, load balancing, and deep packet matching upto 128 bytes, Big Tap can also leverage Network Packet Brokers (NPBs), attached as service nodes, for packet modification functions such as deduplication and packet slicing. Big Tap will redirect designated flows to one or more NPB service nodes in a service chain, as defined in the associated monitoring policy, prior to delivering these flows to the FireEye platform. Scalable and Advanced Threat Prevention with FireEye and Big Switch and Big Tap Monitoring Fabric
