CloudLens Self-Hosted

Pick a Hypervisior, Any Hypervisor

With support for leading virtual environments, VMware ESXi and NSX, Nutanix AHV, OpenStack KVM, and Microsoft Hyper-V, CloudLens Self-Hosted enables complete visibility into all your private cloud deployments via a single management interface.

Moreover, CloudLens Self-Hosted is vSwitch/router agnostic—giving you even more flexibility when needed.

Capture Inter-VM Traffic With VTAP

Packet data traveling between VMs is notoriously difficult to capture. However, CloudLens Self-Hosted captures this east-west traffic with its proprietary vTap capability. The platform can virtually tap both inline and out-of-band (OOB) traffic in two modes:

1. Tap only: copies and forwards data, similar to a physical tap,
2. Tap and filter: copies data and filters it with basic Layer 2 to Layer 4 criteria, so only relevant data is forwarded

Additionally, Cloud Sensor vTaps can access network traffic in environments where your administrators have limited or no hypervisor access, such as with Microsoft Azure Stack. This enables you to achieve true hypervisor-agnostic visibility, since you can run CloudLens vTap sensors in your virtual workloads, filter the tapped traffic with L2 to L4 criteria, and forward packet data to any available interface with GRE tunneling.

As with any of our products, management is simple. The easy-to-use CloudLens Sensor Management Platform integrates seamlessly with the CloudLens GUI — enabling you to deploy sensors wherever you need them, even in secure environments or without internet access.

Save Bandwidth and Reduce Latency by Filtering at the Source

Packet-level cloud visibility makes your tools better, but more data isn't always the answer. Security tools rely on timely, contextual intelligence — and unfiltered packet data can easily lead to false positives or undetected intrusions. While many tools offer intelligent filtering themselves, CloudLens is more efficient. This reduces costs while enabling you to maximize your existing security and monitoring investments.

The only platform that aggregates, filters, and processes packets virtually, CloudLens Self-Hosted offers Keysight's industry-leading visibility intelligence, including NetStack, PacketStack, and AppStack.

With NetStack, you can aggregate, load-balance, and filter traffic with L2 to L4 criteria — similar to what a physical packet broker can offer, but as a set of software agents deployed on your private cloud infrastructure.

From there, you can utilize PacketStack and AppStack for more advanced capabilities such as de-duplication, header stripping, signature-based application detection, geolocation, Layer 7-based filtering, threat detection, and NetFlow generation.

Easily Adaptable For Multiple Architecutures

Because it deploys and runs in your data center, CloudLens Self-Hosted is flexible. This enables you to select the right approach to get the right data to your security and monitoring tools.

Route A

• Send tapped traffic directly to virtual tools
• Send L2 to L4 filtered traffic to virtual tools
• Send virtually processed, brokered packets to virtual tools

Route B

• Send tapped traffic directly to physical tools
• Send L2 to L4 filtered traffic to physical tools
• Send virtually processed, brokered packets to physical tools

Route C

• Send tapped traffic directly to a physical network packet broker, which aggregates, processes, and sends it to tools
• Send L2-L4 filtered traffic to a physical network packet broker, which then aggregates, processes, and sends it to tools