The allure of the cloud is compelling and offers greater agility, elasticity, and reduced capex. Businesses seek to reap these benefits by migrating to AWS, all while enforcing corporate governance and security policies to minimize risk. To accomplish this objective, businesses must continuously monitor the performance of complex applications, which is not practical with point solutions, such as bytecode instrumentation. In this session, learn how NETSCOUT’s smart data platform enables continuous monitoring in hybrid cloud environments to minimize risk and control costs. Hear real-life examples of how businesses optimized their AWS migration, gaining visibility and deep insights into both the physical and virtual worlds, to maintain the continuity and security of the services throughout the migration process.This session is brought to you by AWS partner, NETSCOUT Systems.

2. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
A New Approach to
Continuous Monitoring in the
Cloud: Migrate to AWS with
NETSCOUT
Michael Segal
AVP, Strategic Marketing
NETSCOUT
D E V 2 0 8 - S
Ray Krug
Solutions Architect
NETSCOUT

3. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Agenda
• Hybrid cloud migration challenges and solutions
• A new approach to continuous monitoring in hybrid cloud
• AWS migration use cases

4. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

5. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Corporate IT initiatives
AWS Cloud migration
• Geographically distributed hybrid cloud
• Use microservices to develop new apps
Continuous monitoring
• Of application performance and security
DevSecOps transformation
• Common situational awareness
To support business agility

6. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Hybrid cloud migration challenges
Which workloads to migrate?
How to assure application performance?
How to optimize application performance as you scale?
How to monitor vulnerabilities and security threats?

7. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
The problem: Hybrid cloud continuous monitoring
Server management
tools
Application management
tools
Network management
tools
Physical
servers
Virtual
servers
Legacy
network
Software-defined
network
Legacy
applications
Cloud
applications
In complex systems you can’t see the forest for the trees
Too many monitoring and management tools with little automation

8. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

9. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Software centric
Designed for both physical and virtual environments
1
2
Common situational awareness
Consistent views for DevSecOps
Open API & data formats
Kafka, REST, JSON, AVRO, CSV
Cloud visibility
VMware, AWS N/S/E/W visibility
4
What is Smart Data?
Smart visibility into network, applications, dependencies, and security
Deep packet inspection
performance and
security KPIs
Wire
Data
3

10. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
vSTREAM – Generating Smart Data
In hybrid cloud environments
Agent
Hypervisor/vSwitch
Operating system
Infrastructure
APP
GuestOS
AMI / VM
Plug-in
Operating system
Hypervisor/vSwitch
Infrastructure
VM
NSX
VM VM
Virtual machine (VM)
Operating system
Hypervisor/vSwitch
Infrastructure
VM
AMI / VM
VM VM
Container
Operating system
Docker Engine
Infrastructure
APP APP APP
Bins/Libs Bins/Libs Bins/Libs Bins/Libs

11. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
nGeniusONE – Using Smart Data for service assurance
DashboardGridReportingService MonitorDependency MapLink MonitorTraffic DiscoverySituation AnalysisCertificate MonitorAlertingPacket ForensicsThreat Monitor

12. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Proactive top-down approach – Service triage
nGeniusONE
Service dashboard
Gain visibility into critical service issues
Performance analysis
Launch service monitors to verify and
correlate service Impact
Session analysis
Perform granular user session tracing and
analysis
Deep-dive packet analysis
Deep-dive investigation of service delivery
issues
Services
KPI/Flows
Sessions
Packets

13. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
NETSCOUT Application Management Solution
Available in AWS Marketplace

14. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

15. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Deployment in the hybrid cloud
AWS cloud
instance
Singapore Region
nGeniusONE
Local Server
VPN
Gateway
VPN
Gateway
instance
London Region
nGeniusONE
Local Server
Web-App-
Database Oracle
E-Business Suite
Active
Directory
DNS
Web App
DB-Corp
App
nGeniusONE
Global Manager
App

16. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Service dependency discovered – In hybrid cloud
AWS
(London
Region)
AWS
(Singapore
Region)
Data
Center

17. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Performance monitoring – Hybrid cloud
Service triage
Application
errors in
Singapore
Region
Application
errors in
Web layer
Services
KPI/Flows
Sessions
Packets

18. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Service triage – Application performance
Singapore
Web EC2
instance
Errors on
increased
load
Services
KPI/Flows
Sessions
Packets

19. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Service triage – User experience
Services
KPI/Flows
Sessions
Packets
New user
group
identified

20. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Session analysis view and forensics
Services
KPI/Flows
Sessions
Packets
Session
information
and ladder
diagrams

21. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Packet forensics
Services
KPI/Flows
Sessions
Packets
Detailed
packet
analysis

22. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

23. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Performance – Single server
Dashboard Overtime, and Web Services Monitor show SLOW and ERRORS
Dashboard Overtime View –
High latency well above
threshold (140ms response)
Web Services Monitor
Details of errors:
500 Internal Server Failure
Services
KPI/Flows
Sessions
Packets
KPI/Flows

24. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS cloud
instance
Singapore Region
nGeniusONE
Local Server
VPN
Gateway
VPN
Gateway
instance
London Region
nGeniusONE
Local Server
Web-App-
Database Oracle
E-Business Suite
Active
Directory
DNS
Web App
DB-Corp
App
nGeniusONE
Global Manager
App
AWS cloud
instance
Singapore Region
nGeniusONE
Local Server
Classic
Load
Balancer
AWS Application
Auto Scaling
Grow – Pervasive visibility

25. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS configuration – Scale – Two servers
AWS Application Auto Scaling group

26. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Performance – Two servers
Service dependency – See the two Web servers – Split the load
Web
(2 x Web Servers)
Latency dropping (75 ms)
Therefore performance is
improving
Services
KPI/Flows
Sessions
Packets

27. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Performance – Eight servers
Performance issues resolved as load spread over multiple servers
Latency now at 40 ms
Performance improved and
response time now below
threshold and errors gone
Web
(8 x Web Servers)
Services
KPI/Flows
Sessions
Packets

28. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

29. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Security Operations
• Certificate monitoring
(and expiry)
• SSL/TLS cipher suite
monitoring
Security analytics on AWS with NETSCOUT Smart Data
Threat Analysis
• Volumetric state & app
exhaustion attacks
• Bad reputation sites
(e.g., DNS related)
• Forensics
Behavior Analytics
• Failed LDAP / FTP
anonymous / root logins
• Unexpected usage,
Unusual protocol
versions

30. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Threat analysis – Volumetric / state & app exhaustion
Services
KPI/Flows
Sessions
Packets

31. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Threat analysis – Packet forensics
Identifies IP
addresses
corresponding to the
attack
Services
KPI/Flows
Sessions
Packets

32. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Certificate analysis
Critical events –
Expired certificates
Remediation required
for:
TLS v1.0 and SSL
weak ciphers
and self signed
Services
KPI/Flows
Sessions
Packets

33. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

34. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Summary: NETSCOUT support for corporate IT initiatives
• AWS Cloud migration
• End-to-end visibility into hybrid cloud
• Effectively monitor microservices
Continuous monitoring
• Of application performance and security
utilizing Smart Data
Empowering DevSecOps
transformation
• With common situational awareness
To support business agility

35. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
The voice of NETSCOUT customers
“With nGenius, we have the ability to identify precursor
situations that may lead to numerous issues.”
Engineer, Henry Ford Health Systems
“nGenius is the complete solution. We don’t have to deal
with multiple vendors when problems arise.”
Engineer, Kansas City Southern Lines
“nGenius is a powerful engineering tool set that can be
utilized by network and application teams.”
Architect, Royal Caribbean International
“nGenius has assisted us in terms of service turn up time and
the reporting has provided stickiness with our customers
Engineer, Neotel Liquid Telecom

36. Thank you!
© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Michael Segal
michael.segal@netscout.com
Ray Krug
ray.krug@netscout.com

37. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.