Viavi: Nearly 90 Percent of Enterprise Network Teams Spend Time Troubleshooting Security Issues; 80 Percent Report More Time Spent on Security vs. Last Year

Tenth Annual “State of the Network” Global Survey from Viavi Reveals Network and Security Trends from over 1,000 Network Professionals

In April 2017, Viavi Solutions (NASDAQ: VIAV) released the results of its tenth annual State of the Network global study today. This year’s study focused on security threats, perhaps explaining why it garnered the highest response rate in the survey’s history. Respondents included 1,035 CIOs, IT directors, and network engineers around the world. The study is now available for download.

“As our State of the Network study shows, enterprise network teams are expending more time and resources than ever before to battle security threats. Not only are they faced with a growing number of attacks, but hackers are becoming increasingly sophisticated in their methods and malware,” said Douglas Roberts, Vice President and General Manager, Enterprise & Cloud Business Unit, Viavi Solutions. “Dealing with these types of advanced, persistent security threats requires planning, resourcefulness and greater visibility throughout the network to ensure that threat intelligence information is always at hand.”

Highlights of the 2017 study include:

  • ​ Network team members’ involvement in security: Eighty-eight percent of respondents say they are involved in troubleshooting security-related issues. Of those, nearly 80 percent report an increase in the time they spend on such issues, with nearly three out of four spending up to 10 hours a week on them.
  • Evolution of security threats: When asked how the nature of security threats has changed in the past year, IT teams have identified a rise in email and browser-based malware attacks (63 percent), and an increase in threat sophistication (52 percent). Nearly one in three also report a surge in distributed denial of service (DDos) attacks.
  • Key sources of security insight: Syslogs were cited by nearly a third of respondents as the primary method for detecting security issues, followed by long-term packet capture and analysis (23 percent) and performance anomalies (15 percent).
  • Overall factors driving network team workload: Bandwidth usage in enterprises continues to surge, with two out of three respondents expecting bandwidth demand to grow by up to 50 percent in 2017. This trend is in turn driving increased adoption of emerging technologies including software-defined networks (SDN), public and private clouds and 100 Gb. Network teams are managing these major initiatives while simultaneously confronting an aggressive rise in security issues.

 “A combination of new technology adoption, accelerating traffic growth and mounting security risks has spawned unprecedented challenges throughout the enterprise market,” commented Shamus McGillicuddy, Senior Analyst at Enterprise Management Associates. “The need to detect and deal with security threats is notably complicated by the diverse mix of today’s enterprise traffic, which spans across virtual, public and hybrid cloud environments in addition to physical servers.”

Key takeaways: what should IT service delivery teams do?

  • ​Know your “normal” – Recognizing abnormal traffic is critical for pinpointing an ongoing attack or security issue. Start comparing network traffic and behavior over points in time, either manually with freeware analyzer Wireshark, or using automated benchmarking in commercial network performance monitoring and diagnostic (NPMD) tools.
  • Speed discovery with traffic evidence – According to the recent Mandiant M-Trends report, the median number of days that attackers were present on a victim’s network before being discovered is still 146 days; despite the use of IDS and other traditional security tools. Using packet capture with retrospective analysis, network teams can rewind to the time of the incident(s) and track exactly what the hackers accessed.
  • Ensure long-term packet retention – For high-traffic enterprise, data center, or security forensics applications, a purpose-built appliance with its own analytics may be the next step. Depending on size and volume, there are appliances that can capture and store up to a petabyte of network traffic for later analysis, simplifying forensic investigation for faster remediation.
  • Facilitate effective network and security team cooperation – Ensure successful collaboration between network and security teams on investigations with documented workflows and integration between security, network forensics, and performance management tools.

Thanks to Viavi for this article ​

Ixia’s new hyperscale visibility with cost effective pricing

Vision Edge 100 & Vision Edge 40


Ixia Vision Edge 40

Vision Edge 40

​Expanding your hyperscale data center? Adding microscale data centers to provide a better experience for end users? Be sure to see everything, in every cluster—whether it is a part of your core infrastructure or a remote site—with the latest in Ixia’s Vision Portfolio of network packet brokers (NPBs). Ixia has expanded the company’s growing visibility portfolio of NPBs with Vision Edge 40 (10/40G platform) and Vision Edge 100 (100G platform). 

These new cost-effective and scalable solutions help IT teams supporting hyperscale and microscale data centers, resolve application performance bottlenecks, trouble shoot problems, and improve data center automation, as well as better utilize network analysis and security tools. Ixia’s Vision portfolio of NPBs provides intelligent, sophisticated, and programmable network flow optimization, delivering comprehensive visibility and security coverage. The new Vision Edge 40 and Vision Edge 100 offer real-time visibility, insight, and security into high density hyperscale and microscale data centers, even as they expand. Each is capable of inline and out-of-band deployments, and delivers control, coverage, and performance to protect and improve crucial networking, data center, and cloud business assets. 


Ixia Vision Edge 100

Vision Edge 100

​Key Points of Vision Edge 40 and Vision Edge 100:

  • Extend visibility and security coverage everywhere it is needed 
  • Quickly resolve application performance issues, troubleshoot problems, and improve data center automation 
  • Better utilize expensive network analysis and security tools to improve understanding hyperscale and microscale data center networks

Vision Edge 40 and Vision Edge 100 offer the following customer benefits:

  • ​Ease-of use 
  • Point-and-click web-interface offers an intuitive network-to-tools layout, enabling users to easily translate to real-life physical configurations
  • 3-stages of filtering: ingress, dynamic, and egress; naturally providing a built-in capability for AND/OR logic, and simplifying configuration of complex Boolean filtering rules 

Performance

  • ​​Top of the rack aggregation supported at the required throughput eliminates blind spots
  • Multi-speed capability, can be used for initial deployments and scaled for the required throughput 

Visibility Intelligence 

  • ​Dynamic filter compiler auto-resolves overlapping filter rules to help eliminate errors
  • Aggregation, replication, load balancing, and source port labeling helps ensure tools get the right data at the right speed

“IT management will appreciate the flexibility and agility of Vision Edge 40 and Vision Edge 100,” says Recep Ozdag, VP of Product Management at Ixia. “They can build a data-center at any size, and leverage a standalone NPB that does everything they need right out of the box, while also having the best balance of features and value, which is crucial for managing an efficient and cost effective IT operation.”


Learn more about Ixia, and Vision Edge 40 and Vision Edge 100 today. 

Thanks to Ixia and AMPDigest.com for this article and information.