SYS-VE50-AC Vision Edge 50 Network Packet Broker

Vision E50 is a fully-featured Network Packet Broker which makes it great For multiple uses, including top-of-the-rack aggregation.

Physical specifications:

• Operates at five different speeds — 1G, 10G, 25G, 40G, and 100G networks
• Features 48 SFP28 ports that support  1G, 10G, and 25G
• Supports eight QSFP28 ports that support 40G and 100G
• Includes hot-swap redundant power supplies and fans; available in AC and DC models
• Employs up to 80 10G / 25G ports when 4 x 10G / 4 x 25G break-out (fan-out)

Vision E50 is versatile because it can be used as a standalone unit or as a software-defined visibility solution in a software-defined network (SDN) within a security architecture. With Keysight  Fabric Controller, multiple Vision E50 and other Keysight Vision Network Packet Broker solutions can be managed through a single pane of glass in the topology you need to optimize your tool deployment. 

With Fabric Controller, you get unified management of distributed architectures, role-based access and controls, and oversight of all ports from all Vision network packet brokers at once, allowing you to configure an efficient, scalable visibility solution.

As part of your overall security architecture, Vision E50 enables you to to leverage Vision One turnkey solutions and the highly scalable Vision 7300 when your deployment is ready. 

With these network packet brokers and the visibility intelligence capabilities of Keysight PacketStack, Keysight NetStack, and Keysight AppStack, you can manipulate and mold traffic so your tools always get the right data. With Vision One, you can also monitor virtual traffic with the Keysight CloudLens platform for public, private, and hybrid cloud visibility.  

Deploy both inline, out-of-band, or both simultaneously based on your security and monitoring needs.

Inline

Robust inline tool deployment enables users to deploy intrusion prevention systems (IPS), data loss prevention (DLP), and similar tools while assuring high service availability, even when parts of the system fail or become overloaded. Data from the network passes through a KeysightvVision E100 network packet broker via a bypass switch for resilience. Vision E100 sends the data to the IPS, DLP and other tools, which process the data and send back safe information via the Vision E40 and bypass switch back into the network.

Out-of-band

Process and monitor packet data with a variety of tools without affecting the network with an Out-of-Band (OOB) deployment. Data is passively copied from the network with our Taps and sent to Vision E100 and other network packet brokers for filtering and processing. Relevant data is then sent to tools, at appropriate speeds, so the tools can operate efficiently. With only the right data being sent, false positives are minimized and your team has improved the relevance of alerts, for a quicker response to incidents.

Save rack space and leverage your investments by using Keysight’s Double your Ports (DyP or simplex) capability. The Double Your Ports feature enables ports for packet processing to be logically divided into two interfaces: one that connects to the network and the other that connects tools for security or monitoring.

• Use a single port to get data from the network – taps, bypass or aggregators – and use the same port to send traffic to tools.
• Separates link state on the network and tool interfaces
• Halve your rack space requirement for monitoring (see also high-density taps)

The Vision E50 has a space-efficient 1RU design. To get the most out of the rack space used and to optimize data speeds for tools, Keysight offers a Fan-Out capability on Vision E50. With fan-out, a 40G/100G port can be used with a break-out to operate as 4, 10G/25G ports which are ideal for tools that may have only a 10G/25G capacity. Combined with the load-balancing capability, you can ensure your tools are not overloaded and are operating at the optimal capacity.

To further optimize space and performance, Vision E50 also has a fan-in capability. A higher throughput of 40G/100G, could be brought in through 4 ports of 10G/25G each, which effectively operate as one. The 4 ports fan-in the data and operate together to provide the throughput needed. Combined with fan-out, multi-speed and load-balancing you can achieve what you need, custom to your network configuration.