NMS 16.1.50 GA + WebSafe UINew WebSafe UI VET eee ur lus PST ast ne) + Manage blacklists using the Operator Blacklist 1. Write a text files with the URLs and actions, Editor web application (block, redirect or monitor) 2. Savethe text fle as operator bl.url a 3. Save the files in NX server under _ \allot\netxplorer\jboss— Seale 5.1.0.GA\server\allot\websafe : = 4. Distribute files to $G devices by: = Tools + WebSafe — Distribute Files =e + The Operator BL eitor replaces the “websafe gui too” that was developed by Alot professional services + Wlebsafe Uli used fr Black Usts en (does not handle white ists)WebSafe Operator Blacklist Editor ay panes + The Operator Blacklist Editor is a web application hosted on the NetXplorer server 1. Log into the WebSafe Ul from any web browser which uses WebKit, such as Chrome: https: // /websafe 2. Login with the default user name websafe and default password allot NOTE: The password may be changed by logging into NetXplorer via SSH ConfigurationCLI.sh -updateWebSafeUser -username websafe password ConfigurationCLI.sh Managing WebSafe Users Meee Can maddvebsafeUaer username: aes ~seseription re password “updateWebsafelser ~username “description “role sword ~gotWebsateUsors Examples: Configarationcii.oh ~adivebSafeUser ~usernane new0ser “password Userl “role configuration —description Suser user user 34 S554" ConfiqurationCLI.sh -updatelehSefetser -username nevlser password User? ~rcle 1 ConfigurationchI.sh -deletewebsafeUser -usernane newiserBlack List window Columns AMOK see. contrat, secureView and sorting columns, Edit/Delete URLs allotView and sorting columns, Edit/Delete URLs allotSearching for a specific URLs allotExpiration Date and TimeAdding Multiple Blacklist Entries To load multiple Blacklist entries vie external text file: allot 1. Click on the Menu button and select Import from File 2. Click the Browse button to locate the text file and select it 3. Click the Set Expiration Date for all Items checkbox to set a date for all URLs in the text file (Optional) Gare 4, Click Import 5. Click Save Changes es peersCategories Window AlOF seo. contro. secireAdding a Custom Redirect Category Select Categories window Click the Add button Enter the Category name Enter the URL that the action will redirect the traffic to 5. Click Add to make the new category available for Blacklist entries Enter 2 uniqu 6. Click Save Changes Ci Enter the URL thatthe ee ea MOF see. contol. secureInternationalized Domain Name * Another new feature introduced in the WebSafe is Internationalized Domain Name (IDN) + IDN is a standard for encoding internet domain names with non-ascii characters, + IDN enables domain names to be displayed with international characters while encoding them to ascii for server-to-server communication in DNS and HTTP * The standard is defined in RFC 3490 + NXis encoding the domain part of the URL (up to the ‘/’) according to the IDN standard before sending it to the device + Encoding is done for both black and white lists For example: www-bingdlhaber.net will be encoded to ascii as www.xn~binglhaber-heb.netallot NX Reporting in Presence of ClearSeeNX Reporting in Presence of ClearSee Tae icy 16.1.50 + In Previous versions, when ClearSee is installed in * In NX 16.1.50.a new checkbox was added to the ‘your Network, the NX Reports were automatically GUI that enables using both ClearSee and NX disabled Reporting on the Network *+ Workaround could be enabled only by contacting Allot Professional Services. =Enabling NX Reporting in Presence of ClearSee Right Click on Network — Configuration + LS General Tab fez oe = — se + By default - the checkbox is — unchecked, so only ClearSee report are available * If ClearSee is not installed on your network, this checkbox is selected automatically and may not be unchecked AlOt see. contro. secure.allot New NX User Management Options Q=zoOUser Filtering + New NX option: ability to search/filter users + Toease the process of finding a specific user in the case of a great number of users defined in the system Tools (Menu Bar) > Users Configurations... MOF see. controt. securePassword Change at First Login + New NX option: ability to ask to change a password at the first login + To enable/disable this, option: 1. Login to NX by user with ‘Administrator role 2. Tools (Menu Bar) -> Users Configurations... AMlOF see. conro secure.allot ClearSee Reports: Report Administration ®Q=zoReport Administration MOF se. const seve ©z0 *Report Administration Enabled + Apparc on the Reporting panel + Relevant cubes are regularly refreshed Disabled + Does not appear on the Reporting panel + Relevant cubes are not refreshed Published ‘+ Manually refresh the cubesDisabled Reports by Default Network Folder SClearSee ¢ [Alot ClearSee | Coe) ‘AS Destinations Presents the top Autonomous Systems ‘destinations by both inbound bandwidth and ‘outbound bandwidth ASNext Hop Identifies the autonomous systems (AS) that are most used by subscribers on your network Versions Presents IP transport trends of selected C8 devices, device eperatng systems and device ‘vendors in your network ‘Session Duration Presents the average session duration of selected devices in your network ‘Technology __Provides key data on trends inthe use on your Migration network ofthe various cellular technologies lO se. contrat secure.Disabled Reports by Default Experience Folder ES ES ESS @illearSee < [Al Ceasee «| Se ea een ae s Vileos ter tie or for specc hors ofthe doy co Vide Eperonce Provideskny deta on vide experience, o- Including vide defnton and ideo sls ee see pete Sen inspect individual applications: Ranenene: ‘Vide bison Presents mets forthe top We == aes =o a Veno Sts 0) rekdesmerksfordvieeson yor oe Deter ay a Video Trends Provides key data on video usage trends, ——-? both daily and weekly, and statistics, such as lene lip wattiedVabcor ao SS SSeS Bas subscribers on your network by week, per percentile group,Disabled Reports by Default Device Folder Folder | ReportName__| Description learSee || Alot Clearsee + Device Usage Presents metrics for the major mobile Device Trends devices overtime, Alot se cons se o=sueSecurity Folder Changes ‘+ WSP Reports — Renamed to NS (Network Secure) ‘+ WS Reports ~ New added reports from WS. (WebSafe - URL Monitoring/URL Filtering) MOF see. conto. secre. | Allot ClearSee_¢|<@'ClearSee_¢ + Daten +oom +O cower seo wor snes Qoennens + 6 setsevee + Orman, + Dsterte + Q Benne ene "gece [me OQ ovnttaens + econallot New ClearSee Reports: Peak Reports Self-Service OG=ONew ClearSee Reports Ter at) lel ac) Top IP Monitor WWF ea Cay Eom AMOK sec, contiot. secure O20New ClearSee Reports New Metrics Peak Reports Pred Peak Bandwidth over 5 Minutes Peak Bandwidth over the Hour AllOF se cnt seve ©z0New ClearSee Reports New Metrics Pail ela cd eaPeak Reports — New Metrics + ustot new Metres adaee for the Peak Reports ‘+ RTTime esolutionis 15sec by default (configurable to 5-30 sec)5 Min Peak Bandwidth Metrics + Peak Bandwidth: ‘The highest bandwidth of the RT intervals over 5-minute period + SMIN Bandwidth: ‘Average bandwidth over a ‘S-minute period AMOK seo. contrat secure.Daily Peak Bandwidth Report Metrics + Peak Bandwidth: The highest bandwidth of the RT intervals over the 1 day period * Daily - Bandwidth: Average bandwidth over a 1 day period ALOK see. contrat. secre.Hourly Aggregation a ay ae ~\S 5106= 6:00» 10 “6:00= 7:00 =| (20) 7:00=" 50.Hourly Peak and Lowest Metrics Peak Lowest — —~— — SS A 2 1 year history year history Matin ores noes @ze *Hourly Peak and Lowest Metrics + Peak/Lowest Parameters may be per: + Application + Policy + etc. ® Peak Lowest 25 ras 5 =e 1 year history 1 year history AllOt ss cont Sea ©z0 *Peak Bandwidth RT Resolution * Collection bucket that is for Peak Reports is: CONV_RTU (Real-Time Unsolicited) + tis collected by DM from SG every 15 sec. (default value) ‘+ To change the Unsolicited Real Time conversation interval ge config data collect -rt_unsolic_conv_interval ‘+ Possible values are 5-30 seconds with 5 seconds steps "*Note: 5 second RT resolution may put more pressure on the AOS which may cause performance degradationNew ClearSee Reports LT) atl lela cd Self-Service AMOK see. contr secure Peak Bandwidth over 5 Minutes °Running the Peak Bandwidth over 5 Minutes DashboardRunning the Peak Bandwidth over 5 Minutes Dashboard + Self Service — Real Time —> Peak Bandwidth over 5 Minutes + Default values for this dashboard are already selected (You may add additional values if desired) + Scroll down for more attributes and metrics, ‘Glick “Run Dashboard” buttonPeak Bandwidth over 5 Minutes +The Dashboard consists of 2 parts: * Peak Total + Peak Bandwidth (i Bandwidth over § Minutes ! + Daily Peak i *ot: Tis default saliation~ self Serie options to change ‘the view a cestedWorking With The Dashboard + Click on one of the two ‘graphs on the screen + The V" appears near ‘the Datasets for chosen graph + The Editor Panel will reflect the Datasets of the chosen graph + Click on the other ‘graph on the screen to choose it ‘Note: ay attention to what DataSets you put ino Etor panel to prevent mistakes Fer example: “Peak Total Bandwidth” metrics appearn both datasets but eakiated ferent “Maximize/Restore Report + ToMaximize one ‘of the graphs, clickon the icon on the upper right corner + ToRestore the ‘original view, click onthe ¥* icon ‘once againZoom On Specific Area Select with the mouse the area that you ‘would like to 200m on Right Click Choose Keep Only ‘optionFocus On The Peak | i ft 1 : i ! i i 'Focus On The Peak i : i iZoom Out From Specific Area + Clickon the = icon on the left upper cornerZoom Out From Specific Area + Clickon the = icon on the left upper corner + Choose “Clear All” optionNew ClearSee Reports if allela cy Say AIO see. contro secure Peak Bandwidth over the Hour @=0Running the Peak Bandwidth over the Hour Dashboard + Self Service — Real Time —> Peak Bandwidth over the Hour AMOK see, controt secure ©20 "Running the Peak Bandwidth over the Hour Dashboard + Self Service > Real Time — Peak Bandwidth over the Hour + Choose Metries and Attributes * Only ONE selection is available for each section AIOE see, contro. secure. ©2UPeak Bandwidth Over The Hour + The following Grid appears: + By default, the following Attributes and Metrics are shown + Network Level Values (selected) + Peak in Bandwidth + Peak Out Bandwidth ALOK see. contot. securPeak Bandwidth Over The Hour + Let's look on a specific line: Instant Message Application>Skype + Peak In Bandwidth = 173.77Kbps + Meaning that * During the last 22 Hours (chosen time uration), the max value that was reached on Skype application for Inbound Bandwidth was 173.77Kbps ‘+ Lremind you that this repétt is Self-Service! + Add more visualizations of your choicePeak Bandwidth Over The Hour Examples Example 1: Peak and Lowest Bandwidth per Application MOH see, contot secure Bi al 2 “ aiPeak Bandwidth Over The Hour Examples Example 2: Time of Peak per Application AMOK sec. conse secure.allot New ClearSee Reports: Top IP Monitor Real-Time @G=zONew ClearSee Reports Peak Reports aCe) eos Te hS cy ceed er] AMlOF sec, consi. secure ©=0+ TheTop Ni New ClearSee Reports Top IP Monitor Cer taken from last CONV bucket arrived to ClearSee + Once Top IPs are defined, the Real-Time data for them is taken from CONV._ATS buckets + (P addresses are internal P addresses only O20Top IP Monitor Running the Report 1. Real Time Monitors—> Top IP Monitor AMlOF sec. conto secure ( ClearSee +Top IP Monitor Running the Report Real Time Monitors—> ‘Top IP Monitor 2. Select the number of Top Client IPs 3. Select the Metrics 4, Run Report AMlOF see. conto. secureTop IP Monitor Graph Metrics ©38e MOH sec, conto, secure.Top IP Monitor Graph Types e080 Sto meee All su cot seve ez «allot New ClearSee Reports: WebSafe Security ®QD=ONew ClearSee Reports Peak Reports Top IP Monitor WSS 1 ETc Card coca Al see. conor secur, ©20New ClearSee Reports WebSafe Monitoring WebSafe oot WebSafe Monitoring Real Time + Data is collected by Generic Bucket type2 = WEBSAFE bucket ‘+ WEBSAFE bucket is collected every 30sec => used in WabSafe Real Time report ~ Aasreraion of WEBSAFE bucket => used in Webiafe Monitoring reportWebSafe Monitoring Running the Report * Security —> WS Reports — WebSaie Monitoring MOE sec, conic. secre. ClearSee_« O20WebSafe Monitoring SAAAAN SSASSSWebSafe Monitoring — Time Frame ‘+ Report Time Duration - From 20 min. back from the present tll last month ‘ast 4B Hours 20minutesbackfomthe Sin present ‘Yestorly ——‘Thelast complete calendar 1 hour ast 70072 ‘Tela even days uptothe day ‘lends Previous Week Thelat complete calendar day weet ‘Previous Month Thelast complete calendar 1.doy mont AMlOt see, consot. secure “New ClearSee Reports MS Par WebSafe Monitoring — Real Time AMlOF seo. contot. secureWebSafe Monitoring — Real Time & Running the Report WebSafe Monitoring ~ Real Time AlOF see. conto. secue.WebSafe Monitoring — Real Time Monitoring report, but in High Resolution (30sec)16.5GA SG-9700 ConfigurationsSG-9700 Features ; Configurations: Throughput: Aeear sie HP DL380 Geni0 300 Gbps B: 8x 100GE + 8 x1/106E andllater servers (iLO 5) C; 4x 1O0GE + 24 x 1/10GE Number of Number of Connections/Flows: Lines/Pipes/Virtual Channels: 2U 19" Rack Mount 72,000,000/144,000,000 512/4,800,000/9,600,000 AMlOK see. control. secure =USG-9700 — Configuration A: 40 x 10GE ez”SG-9700 — Configuration A: 40 x 10GESG-9700 — Configuration A: 40 x 10GE Network Connection + To connect the network ports to the Bypass unit with 106 interfaces please use the Fan Out Cable: 1. Insert the QSFP+ module into the PCle socket 2. Connect the Fan out Fiber Optic cable into the ‘QSFP+ module Connect the four 106 interfaces into the bypass unit 4. The order of cables will be as the order of NIC interfaces. Therefore for example, P1.L1 through 1.L4 originate from the first 40G interface on. PCle card 1 and P1.15-P1.L8 originate from the second, and so on. eet Re Ro "= Teonnection onthe lft andthe Rxconnaction onthe ight MOF sec. conto. secureSG-9700 — Configuration A: 40 x 10GE Ports Mapping SecondSG-9700 — Configuration B: 8x100GE + 8x1/10GESG-9700 — Configuration B: 8x100GE + 8x1/10GE Network Connection 1100GE Links + Please note that 1006E links are comprised of vertically located interfaces CPU Usage: + P1,P2 are managed by CPU1 + P4,PS are managed by CPU2 * For better performance results, if only ‘two 100GE links should be connected in the system, itis recommended to connect each link from different CPU MOF s0e. contrat secu$G-9700 — Configuration B: 8x100GE + 8x1/10GE Ports MappingSG-9700 — Configuration C: 4 x 100GE + 24 x 1/10GESG-9700 — Configuration C: 4 x 100GE + 24 x 1/10GE Network Connection 100GE Links *+ Please note the 100GE connection links: * P2 is used for Internal connections for both LINK3 and LINK4 * P5 is used for External connections for both LINK3 and LINK4 Alt see. conto secure @z0 »$G-9700 — Configuration Ports Mapping : 4.x 100GE + 24 x 1/10GE 106 1006, 106 1006 06 106 06 106 1006 106 1006 106 106 106 106 106 06 106 106 106 06 106 06 106 06 106 106 106at RT Cy. ClearSee aN OE)Agenda * Installation & Upgrade ee UCase} entry. Fi | Installation (New Options) ote + There are 2 new options added to the Installation in 16.5, + IPv6 network protocol support + Encryption of Versca internal ‘communication network AMOK sec. contro. secure. eS V pilesInstallation (New Options) + There are 2 new options added to the installation in 16.5 + IPv6 network protocol support + Encryption of Vertica internal ‘communication network + Both features are enabled via advanced mode of the installation script (-a) 11, To install CS with IPv6 run the installation script in advanced mode Trootdce install] ./Allot_clearses.ah ~; allot Single Installation J Cluster Installation Running preparath pgrade sr tpaeade ster the cption number: Seripe Choose option 1. for Single Mode installation ‘choose option 2. {ot Guster installationInstallation with IPv6 2. Choose the IPv4/IPv6 desired option For option 3: you will Fave to provide both IPva and IPvé addresses for each server: [Bite cclonralanRepeat tha sroe ewan contin oral hacer odes |Cluster only Installation with Encrypted Vertica Internal communicatiillct a 3. Configure Vertica’s internal communication to be encrypted or not 4, Confirm the Advanced ‘system configuration = Cluster Installation options options 2 SSE TPH servers id > Verte encrypted commanication Enabling eneryption might impact the performance.Upgrade to 16.5 Neste CALM AND UPGRADEallot a 1 ey Upgrade to 16.5 | KEEP Crete ier) ins0 Cease veren ies Censee eon Seno (oSSaeoe CALM eee ieee ae ig S60 a al FANT) Indo Vertes ppd UPGRADE “Nove: Migration shale ony fr 4.x version and aly in a thee technUpgrade Steps Bre Cree 11. Upgrade ACP to version 17.13.x On all the nodes Bis and DWHS 2. Allow Root Login (installation script will try to connect by opt /adnin/bin/aliotiegin.sh enable ‘SSH to different locations in order to instal or make changes to some files) un the command on all nodest 3. Copy ClearSee.tgz file itusing the arioavetkcclearscs]elia following command Copy te build tothe primary 8! node “biprimary” 4. Run the Install/Upgrade wizard tense eres ‘ed /opt/adnin//install [ost@cs inatall]# ./Allot_Clearsee-ah un the wizard from bi primary nodeUpgrade Steps 5. Choose the desired option for Upgrade options: Now single installation ow cluseer # Single Upgra Cluster Upgrade Bat Please enter the option nunber: Choose option 3. CChoose option 4. {for Single Mode Upgrade fer Custer UpgradeUpgrade Steps ott a 6. Configure System Parameters > | Guster configuration: Tieeriee seeds to ov Tie provide Custer specific Parameters, such as Vitual IP address and numberof WH node in the enter the nimber of Ons OF eployment,Upgrade Steps oilet oe Cree ‘Confirm System | °F***"* Configuration | 3} Seay WA is garek oe 7D | RATE Opros nmbee may ferent om erson a verona be hw Sg ander ployer. G tes et vonth umber bet oly on he capo ofthe open NOTE: The options marked with "N/A in upgrade mde reconfigured ony during the ntl instalation and not during the upgradeUpgrade Steps okt a Bec ad 8. Configure network parameters Repeat the network cnfiguation ora Coster nodes There are? Bode and minimum 3 DWH nodes, i eaeaauaalallot Upgrade Steps 9. Confirm Network Parameters Potions: Reminder: lersee Cater Piao Wa Te woarade node ptionn rs Wi Ts" uparade node er. Le ee eerieAgenda Sn (ete aad Selma] ygClearSee Access Privileges Ra Koo nell=r-Tps\ — + We all are familiar wth the user Web_Admin/Web Admin + Web_Admin isthe administrator of ClearSee and hhas access to every dashboard in report on ClearSee. eT But... what if you want to allow different dashboards would be available for different access levels? hs =ClearSee Access P: Predefined Groups leges + Access to information and ClearSee objects is based. ‘on the groups to which the users are assigned, + The groups are predefined in ClearSee SW, + Access levels are defined in the table: with no option to refine the access levels Erg + To.create a user witha specific access level esd ry Es 1. Create a user 2. Assign the user to a group Real Time Renee sasasess xasessss xaxesnas xo 44% x4 Subgroups: Theres aso a post to map exsing wer to subgroups ‘These subroups canbe astodated wth the learSee predefined groupe ering thir access levelsClearSee Access Pri Administrator Page leges allo + To create users and map them into groups, you aa should access the Administrator P From your browser: :8080/ClearSee/serviet/mstrWebAdmin Credentials: admin/MstrWebAdmin + Onthe Administrator page, Hover Clearsee the mouse in the Properties column and click the ‘Administration Portal 4 leon alllat nt eoClearSee Access Privileges allot User Manager Site fa ClearSee + On the next ClearSee login page provide the Web_Admin user credentials. * Inthe User Manager page you can choose the leon or lst view. Fe ClearSee mmmAdding a new user + Toadd anew user,clickonthe | @ ClearSee_~ New User icon “{iClearSee & = j=—= == + On the General Tab provide the Login and the Full Names of the User and his password. Perera ee)Adding a new user Addresses + Enrich user's information by adding an email or + Assign the user to one of the ClearSee’s groups other user parameters on the Addresses Tab. fon the Groupe Tab, {@ ClearSee a [@eClearSee wa seme mn store oeView and Modify Existing Users + Click on the ClearSee icon to go back to User Manager window + In the example: 2users were added Diana and Gali. + Hover the mouse over user lines an “Edit” icon would appear.allot Creating Sub-Groups + Toadd a new sub-group, cick on the New Group icon + On the General Tab provide the = ‘name of the group. + In the example: Users belong to “PM Dep." sub-group ‘associated with Marketing ClearSee group. + On the Groups Tab re @ ClearSee itt wmf) select the parent group |‘ : that the subgroup will Ae St em Aen be associated with.Agenda Bessel eeu Se) act Sees MLPA} * ClearSee User Management OX elm eolac ea e-]o) | LDAP ALOK sec. conto. secure.LDAP Users in ClearSee + In 165 access management was added CearSee DAP Server through company’s LDAP Server instead of manual manage ofthe users. a AMOK sec. contri. secure oFee OEM tLe =1 (ClearSee 16 + In 16:5 access management was added ‘through company’s LDAP Server Instead of manual menage of the users. + When mapped to a CearSee group, all the users of the LOAF group receive ClearSee user accounts with privileges based on that ClearSee group. 4. Copy the authentication certificate of the LOAP server (cacert,pem) to the ClearSee server. learSee Access Groups cacertpem Clearsee LDAP Server — mapping —- S53, 4 Coss LDAP UsersLDAP Configuration oe 2. Open LDAP configuration folder Tadmindea 165 ~]6 od Jopt/allot/elearses/inatali/efa/@3_10R07 ‘The folder contains scripts, json and log files. LOAP_Parane=Jeon LaAE Pre config. log IDAPLPre_config-py LDAP specific _Farans.Json Italso contains “howto” file with, configuration explanstionLDAP Configuration 3, Edit the LDAP_Params/son file:LDAP Configuration Cate nen 3. Editthe LDAP_Params json file: Re aieLDAP Configuration let 4, Run the Run_LDAP_Config.ym script which will execute and Implements the configured parameters. ayboak opt allot/clearsee/install /efg/cs 1A?/Run LOAF Config. w. /opt /allot/clearsee/install/cf9/CS_LDAP/LDAP_Parans json -p is the password for the administrative user of your active directory server, with access privileges. ‘Note: This command takes about five minutes to run ‘Ran_LDAP_Conlig yl options general help sw rad iain litle) 1 -apdate (speci LDAP Conti) “dle Users tom Micostrtegy ‘delete help. wh “wizard hep th-opdate helpLDAP Configuration 5. From your browser, access the Administrator site CLEARSEE IP>1 /ClearSee/servist/matiWebhanin Son 6. Sign in as “admin” eens admin 7. Default Properties tab > Login mode table > LDAP Authentication row: select Enabled and Default [@ClearSee ——~LDAP Configuration Updating Existing LDAP-ClearSee mapping + Toupdate an existing LDAP-ClearSee mapping: 11, Copy the relevant (to be changed) fields from LDAP_Params,json to LDAP_Specific_Params,json file and edit the values as required: c “oser Aaniniserators": *Cecs_Adnin Group, OU=CsLDRP 7 2. Run the following command: ° ‘Note; This command takes about five minutes to run Sapte piagbeck [opt /atice/ciesress/Tostali/of@/o= ERED Ban CORE CongDeleting ClearSee LDAP Accounts oe aA = User account in ClearSee is not deleted automatically ater the account is removed from the LDAP server side. ‘Thus it has to be removed manually. Prepare LDAP_Delete_Users jzon file in the following format : T “peletevsers": (*account”,“account2") Run the following command: ‘ansible-playbook Jopt/allot/clearsee/instal "parans='Ga)/opt/allot/clearsee/insts LOA delet 3Agenda * ClearSee Visualizations eRe EE ae SS rie Borel Cte Moston Cease) ST aaa AMO see. corto. secure.Service Gateways & Policies dashboard ~ 2 ClearSee 16.1.50 fol Tete te) + Clearsee 16.5 consolidates Service Gateways, Policy Lines, Policy Pipes, and Policy Virtual Channels dashboards into the ingle unified Service Gateways & Policies dashboard MOE soo. content secre zmService Gateways & Policies + ri into Lines, pipes and VCs will change the visualization itself and not open new web windows as it was in previous neallot Service Gateways & Policies - Pipes + Bample: Diving into Policy pipes callatToolbar & InfoBox silt ClearSee 16.1.50 ee) wiclea seo © Clearsee ClearSee = AMlOt sce. conto. secre © 5aToolbar & InfoBox okt =. ee ee) Ce leaSee « in\ClenSea + > | iClearSee + ‘@CleaSee slearSee ClearSee 77 a + Descriptive information ‘of the relevant matries fand attributes utilized ‘within the dashboard AlOK seo. conta secur.More Informative Views + For clear understanding ‘Senvioe Gateway & Poices- of the attributes and metrics with a specific Table, hover the mouse over the column caption to sea deseription of that column alltSaving User Report — Pervious Versions sawitlewsee +> possiblity tosaveareportin: (=. + Shared Reports + MyReports Diana’ to th Betis + Saving report in “Shared Reports” allowed other users to.open the report. * Saving report in “My Reports” provided access to the report only to the user who created the report. + Saving a report in Shared Reports Folder could be done in a newly created folder or Jn the Shared Reports Area. rere, enCustom Reports Folder (CS 16.5) WUearsee +> + In 365 the following changes were implemented: 4. Canned {out-of-the box) Reports cannot be saved any more, notin “My” nor in “Shared” Reports folder 2. Self-Service Reports can be now saved under: + custom Reports + My Reports oma + Rises Cette = Bivtene 3. Shared Reports folder contains only ystemdefined folders. fen ere): ‘ he new integrated Self-Service Dossier See aaa added new abiltes tothe Clearsee Self-Service Reports. Dossier — is the new layout for Self-Service Dashboards. (SdleaSee +o em: ; seieeraie allot a Self-Service Dossier aera q E added new abilities to the 5 Glearsce set service Reports = + Dossier ~is the new layout for Self-Service Dashboards. feiclearsee ~ =Self-Service Dossier Re oe tcied new elites tothe ClearSe Slt service Reports + Dossier — is the new layout for Self-Service Dashboards.New Self-Service Visualizations allot Compound Grid ‘A Compound rid isa visualization that allows you to build complex grids that ‘analyze different aspects of data across a ‘common dimension. This means you ‘can have multiple Unrelated attributes =n and metrics in different (===) sets of columns that El are then stitched together in one grid. Mea Each column set can g appear differently as 2 thresholds, advanced Fries fiers, and formatting as can be applied to each TF set.New Self-Service Compound Grid ‘A Compound Grid is a visualization that allows you to build complex grids that analyze different aspects of data across a common dimension. This means you can have multiple Unrelated attributes and metrics in different sets of columns that are then stitched together in one grid. Each column set can appear differently as. thresholds, advanced filters, and formatting can be applied to each set. ualizations allot + Example: Applications & Policies Compound GridNew Self-Service Visualizations Compound Grid ‘A Compound Grid is @ visualization that allows you to build complex grids that \alyze different aspects of data across a ‘common dimension. This means you can have multiple Unrelated attributes = and metrics in different Sets of columns that ate then stitched together n one grid Wn) 2 Eacheslumn setcan | 9. | a | yy, appeerditerentvas |") thresholds, advanced | goog filters, and formatting can be applied to each set.New Self-Service Visualizations allot Compound Grid — A. Compound Grid is a visualization that + Example: Applications & Policies Compound Grid fe Ceacsee allows you to build complex grids that ‘analyze different aspects of data across a ‘common dimension. fant tivelatedaibtes |= @ = Be thenstithed together in one grid. olla || -} | met Piste advanced fer and formating This rears you andmetisindierent |e sets of columns that E ach colar at ca appear diferetyas canbe applied to each eeNew Self-Service Visualizations “A KPIs + Example: Network key values and trends KPI Vieualisatione are useful for providing easily formatted representations of key values in the dataNew Self-Service Visualizations al A kPls : etwork key values and trends | ES ‘+ KPI Visualizations are useful for providing easily formatted representations of key values in the data.New Self-Service Visualizations KPIs + KPI Visualizations are useful for providing easily formatted representations of key values in the dataNew Self-Service Visualizations allot KPIs + Example: Network key values and trends SSE + KPI Visualizations are useful for providing easly formatted representations of key values in the data. = ‘ezarsanonm Am) | ActWey Ti (20) Are ||| PAC ra 830.60 Kops 164,261,140 HIE vf ligeNew Self-Service Visualizations all KPIs + Example: letwork key values and trends == + KPI Visualizations are useful for providing easly formatted representations of key ‘values in the data, EI 2 ie ally) 2) mat 042614New Self-Service Visualizations allot A KPIs + Example: Network key values and trends CONE + KPI Visualizations are useful for providing easily formatted representations of key values in the data,New Self-Service Visualizations allot Box Plot + Example: Number of Domains visit per Me A Boxplot isa graph type designed to ‘compare similar statistical distributions. The Boxplot is useful for isolating the extreme values and. Identifying the range of middle values in the data. It shows the median values of 2 variable, while the Whiskers stretch to the Breatest and lowest Values of that variable.New Self-Service Visualizations “2 Box Plot + Example: Number of Domains visit per Me ‘A Boxplot is a graph type designed to compare similar statistical distributions. ‘The Boxplots useful for isolating the a extreme values and identifying the ange | of middle values inthe =~ data. It shows the. Le] i= median values of 2 alle aa pies wine Pe) rn ll ma Whiskers stretch tothe 6, greatest and lowest cE oles ofthat variable. “la+ AWaterfall chart is a New Self-Service Visualizations allot Waterfall Charts RIA cen rete ee + Example: Application Group throughput waterfall increase and decrease across categories. weleasee 5 =a special case of a bar chart in which each new bar begins where the previous bar ended.Self-Service Enhancements Free-language Visualization and Free Layout + Example: Free Language Visualization hot =Self-Service Enhancements allot Free-language Visualization and Free Layout + Example: Free Language Visualization + Example: Free Layout fetiexsoe——— Hee a |Self-Service Enhancements allot Free-language Visualization and Free Layout — ‘+ Example: Free Language Visualization + Example: Free LayoutSelf-Service Enhancements Customize your dashboards with background pictures + Customize your dashboards with background pictures in visualizations® Self-Service Enhancements Customize your dashboards with background pictures + Customize your dashboards with background pictures in visualizationsSelf-Service Enhancements Customize your dashboards with background pictures + Customize your dashboards with background pictures in visualizationsSelf-Service Enhancements allot Customize your dashboards with background pictures comms, + Customize your dashboards with = fi background pictures in visualizationsAgenda LUA Seo cy Uy OTe gs UR at oe cel] el eoallot UDS — Used Defined Signatures ude? + Ifa user tries to use soft link when the parent service or the UDS doesn’t exist, the UDS will be handled as a standard UDS and it will receive its own ID.How to debug UDS Soft Link? “a + To see DPI related information in acstat command, use the ‘-d’ flag acstat -ixed ALOE seo. conti secure © = BheretionmnUDS Soft Link — RxdIClientBC ee CAE BURA ec Te eyAgenda + New Product Series: ACG-500/2000 HW Connection Initial Configuration ACG Wizard XeeR el * AGM UpdateACG Series Comparison allot Specification Sever Type elt Hee Re ax iGe axiceoce thereat Interfaces ee es Trwoushout Upto SooMbps 2Gbps Lcense options 50/100/200/S00Miops 500M/16/2Gbps Power Spey Single at Netoplorer Netxplorer om Se oM ‘0Dos Secure Controller ‘learseeACG-500 emo s00Mbps (ioracs) enter A eee ae (Copper Only) AMO seesACG-500 Front View + System Health and System ID indiator codes Sold blue Inlates that the system tured o,sstem sheath, and system 0 mode snot active. Blinking blue Indicates that the system IO mode is active. Press the system heath and system 1D buton to th osyetem heath mode Salil amber -Indeates that the tem ein faa mode, Blinking smber- indicate that the yetem i experiencing 2 aut Off = Deactivated AMOK s0e. conto: secure aACG-500 Rear Panel AMlOF sc. conto. secu. esoACG-2000 allot aa SCVE DM NK cS SMP Ose 2Gbps ise kos) Interfaces se options tiie ee 10 19" Rack Mount Copper/SFPr de allot s+.ACG-2000 Front Panel allot allotACG-2000 Rear Panel allot allot «.Agenda * New Product Series: ACG-500/2000 Deca ste Reon PXeCR WLI) ACG InstallationACG-500: Setting the IP for the iIDRAC PressF2 during Power-on Seftext(POST) | OU Sytem Setup Main Menu > IORAC Under Enable NC select Enabled and from ‘érolldown tse up or v6 Network For saving the confguraton cick Sack->ACG-500: Setting the IP for the IDRAC allot ress F2 during Poweron ites: (POST) | octane 2. Sytem Setup Main Mena >IORAC ee Stings = Network 4. Under Enable Ni, select Enabled nd rom the MC Selection drop-down men, select, Dedicated Séroldown to set up Por v6 Network Parameters for IORAC.Dible DHCP for For saving the configuration cick Back >ACG-500 : Log in to iDRAC + Opa a web brow pete reso te RAC & ee eee)ACG-500 : iDRAC Virtual Console lg + Clckon the Virtual Console to a Systm Configuration > Network Options 5. Press F1Dto sie and reboot the Stem allotACG-2000 : Setting the IP for the iLO + Open a web browser and type the IP address of the LO Paseword:Peswordl© AMO see. corset secureACG-2000 : Log in to iLO + Selact Remote Console & Media to configure the server network «Select ether the Web start o aie 10 reAgenda New Product Series: ACG-500/2000 HW Connection Initial Configuration Neca rz T Neca el) AMOK see. contro secure.ACG Wizard allot + Toopen the Alot ACG = Deployment Wizard, open 3 5 web browser and visit (=== =) + ACG Main Dashboard displays ‘966 key information: Sos oo Ace iP {AC Version Produc Status — allot ..ACG Modules Configuration + Toconfigure ACG Modules, g0 10 ‘Manage instances” men + Clickon “Change Configuration’ tozsie + For each one ofthe modules, provide the network parameters + Clickon “Apply Changes” to save thy configurationACG Modules Configuration + Configure all ACG Modules x + SMP >) oe he flowing modules SSF alate on or AC 2000 + Glickon “Start Instance” to start up the ACG ModuleHost Configuration + Tosee the Host Networking Configuration, goto the ‘Server Network Wizard” section =5 To change current configuration, click on the “Change Configuration” ® togele and provide new values. + Click onthe “Apply Changes” button to save the new configuration, MOH see. co EeAgenda * New Product Series: ACG-500/2000 Pee ca fea) Initial ConfigurationACG-500 ACP Installation Clekon “Connect vital Media" ab Clickon “Browse” button and clactthe ACP fe Click on “Map Devi” to map the AP Image file 5. Reboot the server ad then wil tart the instalation ofthe ACP+ After ACP installed, configure Most Parameter: ACG Host Configuration (Open the terminal and connect tothe ACG dmin/aliot ‘Switch to rot: su=/ bagobu (Open the Network Configuration Men 1} Management address 10) MNGTUF aa) ‘Selct 12) [Quit and then choose “Apply Changes”ACG Package Installation + ACG package is provided in tg. format + Toinetall the ACG package: 1. Use the FTP and copy the new ACG version to this folder: 2, From that folder, run the fllowing script: 3. Specly the ACG product to instal 4. Install the ACG product: MOH s2-. co . eeACG Package Installation allotACG Wizard ‘Open the Allo ACG Deployment r ‘Witard, by providing the IF address. on a web browser MOF see. cosACG Prerequi: te allot Under “Manage ACG Server" cick on “Server Prerequisite @ (Check & Installation” option < « « = Selectall package options and click Install Checked PackagesAOS Configuration 4. For AOS, configure the folowing elds ° Subnet + Gateway lick Next to proceed tothe next stepOther Components Configuration Complete the NX Configuration sereen ‘component configuration ‘After completing ll steps, click “Finish” tocose the Wizard Tesi te les may ae ane alllot «..AGM UpdateAllot Gateway Manager Wizard Allot Gateway Managers aso ‘upgraed wit mew Web Wieatd, e Just as the ACG products — To connect tothe Gateway Manager, Just browse to: ee oo titp//chos AMOK see. corti secureAteneo AEB AU rice ce) Allot Enterprise SuiteEnterprise Portfolio Recap O20Allot Enterprise Product Series ALOE see. conrat secure.Summary: Enterprise Portfolio Recap # Ports x 100Ge ax 0k 4 x1006¢ 2a IOGE 20x 1n0e 16x10 exist axanoce sum CGSSSCGSOG 3G 006 2506 Speed ALOK seo. conto. secure.Allot Platforms — ACG/SSG Appliances ACG Ed oe ce Ce Be wesc) Oscbps | _2Gbps | 1Gbps | 8Gbps | BGbps | 40Gbps ‘Number of Connections/Fiows 2M/an 2.25M/45M 1aM/24M “Traffic Control Policies: ‘Static 512/SK/15K ee cn Cane 10.54/40K/80K 10.5K/280K/800K | 105K/IM/2M ‘Number of figsts/Employees [_« 2k ox | 60K | sox | 380K ‘System Interfaces Network UO ports 4x1Ge | 4x16F/106e ax16e s6x16E/106E copper_|_Copper/SFP ‘copper Copper/SFP errr) 35Gbps 20M/40M 1055x/150%/600K 180K 2oxice/10ce Copper/SFP+ ~ Actval throughput and performance metrics depend on enabled featres, policy configuration, afc mix, and other deployment characteristics 1GE— Copper(RJ45) or Fiber (SFP+ IGBASE-LX/SK) |10GE - Fiber (SFP+ 1OGBASE-SR/LR) @= -Allot Platforms — SG-9000 Series Appliances Capacity* Thwoughput er platform 50Gbps ‘Number of Connections/Fiows M24 ‘Number of registored UsersfEmployoes 15M “Trafic ControtPatices state ‘Unes/Pipes/virtual Channe's ad scien ‘system intafaces, ‘Network YO ports 161/106 + IGE SPs (1GBASEDYSI/ Copper) + 10GE ~SeP* (10GRASE SRR) /80SFP+ fr 56-9700 cont A only + 100GE ~a5t26 006A SRA). 140 Gbps 250 Gbps 36M/72M ‘80M/160M 45M 10M 512/5K/15K 105«/3M/6M $512/250K/500K |: 20x1/10GE ‘A: 40x106E (10¥40GE} 8B: x1O0GE + Bx1/1OGE |B: BK1O0GE + 8x1/10GE :Axl00GE + 2414/106E