Vision Edge 40 Network Packet Broker

Vision E40 is a fully-featured Network Packet Broker which makes it great For multiple uses, including top-of-the-rack aggregation.

Physical specifications:

• Capable of (3) speeds - 1G, 10G and 40G networks
• (48) 1G or (48) 10G SFP+ ports
• (6) 40G QSFP+ ports
• Hot swap redundant power supplies and fans
• Available in AC and DC models
• Up to (72) 10G ports when using 40G ports with 4x10G break-out (Fan-out)

Vision E40 is versatile because it can be used as a standalone unit or as a software-defined visibility solution in a software-defined network (SDN) within a security architecture. With Ixia Fabric Controller (IFC), multiple Vision E40 and/or other Vision network packet brokers can be managed through a single pane of glass in the topology you need to optimize your tool deployment. With IFC, you get unified management of distributed architectures, role-based access and controls, and oversight of all ports from all Vision network packet brokers at once, allowing you to configure an efficient, scalable visibility solution.

As part of your overall security architecture, Vision E40 also provides the ability to leverage our turnkey Vision ONE and massively scalable Vision 7300, when your deployment is ready. With these network packet brokers and the visibility intelligence capabilities of PacketStack, NetStack, and AppStack, you can manipulate and mold traffic so your tools always get the right data. With Vision ONE, you can also monitor virtual traffic with Keysight's CloudLens platform for public, private, and hybrid cloud visibility.

Deploy both inline, out-of-band, or both simultaneously based on your security and monitoring needs.

Inline

Robust inline tool deployment enables users to deploy intrusion prevention systems (IPS), data loss prevention (DLP), and similar tools while assuring high service availability, even when parts of the system fail or become overloaded. Data from the network passes through a Vision E100 network packet broker via a bypass switch for resilience. Vision E100 sends the data to the IPS, DLP and other tools, which process the data and send back safe information via the Vision E40 and bypass switch back into the network.

Out-of-band

Process and monitor packet data with a variety of tools without affecting the network with an Out-of-Band (OOB) deployment. Data is passively copied from the network with our Taps and sent to Vision E100 and other network packet brokers for filtering and processing. Relevant data is then sent to tools, at appropriate speeds, so the tools can operate efficiently. With only the right data being sent, false positives are minimized and your team has improved the relevance of alerts, for a quicker response to incidents.

Save rack space and leverage your investments by using Keysight’s Double your Ports (DyP or simplex) capability. The Double Your Ports feature enables ports for packet processing to be logically divided into two interfaces: one that connects to the network and the other that connects tools for security or monitoring.

• Use a single port to get data from the network – taps, bypass or aggregators – and use the same port to send traffic to tools.
• Separates link state on the network and tool interfaces
• Halve your rack space requirement for monitoring (see also high-density taps)

The Vision E40 has a space-efficient 1RU design. To get the most out of the rack space used and to optimize data speeds for tools, Keysight offers a Fan-Out capability on Vision E40. With fan-out, a 40G port can be used with a break-out to operate as 4, 10G ports which are ideal for tools that may have only a 10G capacity. Combined with the load-balancing capability, you can ensure your tools are not overloaded and are operating at the optimal capacity.

To further optimize space and performance, Vision E40 also has a fan-in capability. A higher throughput of 40G could be brought in through 4 ports of 10G each, which effectively operate as one. The 4 ports fan-in the data and operate together to provide the throughput needed. Combined with fan-out, multi-speed and load-balancing you can achieve what you need, custom to your network configuration.