GenieATM 6000 Series
An Advanced Network Traffic Management System to provide Decision Support for Network Service Operation; Network Security reinforcement and instantaneous mitigation; comprehensive and intelligent Traffic Analysis; and auto-generation of abundant Traffic Statistics and Analytical Reports
To meet the discerning demands of today’s network management responsibility, Genie Network Resource Management Inc offers Network Service Providers its GenieATM 6000 Series, a state-of-the-art range of new generation tools, to deal with the growing complexities of very large scale networks on the one hand whilst coping with the expectations of enhancing cost efficiency and profitability on the other.
This task is indeed challenging, having to extricate and analyze a tremendous amount of data from multiple sources like SNMP polling, Flows and BGP routing in order to generate meaningful, relevant, accurate, but more importantly just-in-time, reports to support decision making on peering, capacity planning, troubleshooting, and even enabling introduction of value-added services.
The difficulties and complexities of this task are magnified with the Network Managers having to pay attention, at the same time, to keep the high capacity backbone being protected against malicious DoS/DDoS attacks, as there are limitations of conventional perimeter-centric security solutions, such as Firewalls and IDS, in detecting and blocking off not only “zero-day attacks” but attacks from “internal intrusions” as well.
The GenieATM 6000, equipped with the powerful Network Modeling Intelligence and Network Anomaly Detection engines, offers a total solution giving full visibility of the entire network environment. It enables network-wide traffic analysis, real-time troubleshooting and proactive security protection remediating the above inherent limitations of perimeter-centric security solutions. It also helps Service Providers with automation of O&M and optimizes ROI in its infrastructure investments.
Network Modeling With Network-Wide View
GenieATM 6000 provides “Network Modeling” presented in a network hierarchy perspective adopted by most large scale Service Providers. The in-built network modeling intelligence automatically classifies and aggregates network flows and generates various pre-defined traffic reports quickly and accurately. GenieATM 6000 provides a full network-wide view which enables: (a) network operators to configure the network with lesser efforts; and (b) network-wide visibility of the utilization of the network.
Flexible User-Definable Traffic Reports
GenieATM 6000 also comes with a User-Definable Reporting Engine that enhances the traffic analysis capability and flexibility. Using the “Rule-based Traffic Analysis Mechanism” together with Attribute Factors and Filters, users are able to sieve out the target flows for traffic analysis and monitoring, as well as generating different kinds of Top-N reports. The User-Definable Reporting Engine also provides a way to customize the traffic reports to suit users’ needs.
Network Anomaly Detection And Mitigation
The embedded “Network Anomaly Detection Engine” is able to quickly detect malicious traffic originating from either external or internal networks. It can also locate suspicious attackers and victims very promptly and proactively suggests appropriate “ACL commands” for mitigation. Traffic Anomaly, Protocol-Misuse and Application Anomaly can be detected for either known worms or “zero-day” attacks. Both dynamic threshold with auto-learning mechanism and static threshold are available to trigger alarms and notifications.
Enhanced BGP Analysis Capability
GenieATM 6000 provides BGP analysis capabilities that enables monitoring of “BGP Update Messages” over routers and neighbors, triggering alarms and notifications upon detecting any BGP routing instability or BGP Hijack event. In addition, encrypted BGP communication with TCP MD5 Signature is supported to prevent possible attacks over BGP communication between the GenieATM System and BGP routers.
Real-time And Retrospective Traffic Snapshot
Traffic Snapshot is an online troubleshooting tool incorporated in GenieATM 6000 to inspect network traffic over current flows in cache or historical flows in raw data. Given the network-wide view for troubleshooting, Network Administrators no longer need to trace problems by capturing and analyzing packets for every link in the network. GenieATM 6000 not only offers a powerful traffic filter with abundant analysis criteria for Traffic Snapshot, it also provides various aggregation methods to generate different real-time Top-N analyses. In addition, users are able to drill down into the suspicious traffic step by step to locate the attacking sources accurately. Meanwhile the system is able to generate a set of ACL commands as a suggestion to network operators for anomaly mitigation.
Distributed Architecture With Centralized Control
Large scale networks require a lot of computing resources and highly scalable capacity to perform all of the above mentioned tasks. With its Controller-Collector configuration built on top of its robust distributed architecture design, GenieATM 6000 is strongly positioned to offer the best scalability and performance tailor-made to do its job most efficiently. Extreme scalability is achieved by deploying the GenieATM Collectors across regional networks to collect Flows or BGP messages from routers and switches to perform traffic classification and analysis. The analyzed data are then forwarded to the GenieATM Controller for further aggregation and presentation. This centralized configuration management in the Controller enables the GenieATM 6000 to provide operators the global visibility of the network-wide traffic and anomalies in the most convenient and efficient manner.
Ease Of Use, Ease Of Maintenance
GenieATM 6000 is a superior network appliance that is built with a hardened Operating Software; guarantees performance; easy to deploy; and easy to maintain. Operators are able to monitor and analyze their network traffic reports anywhere and anytime via a user-friendly web user interface. Users do not have to worry about data management as this is a standard feature in the GenieATM 6000 offering. In addition, GenieATM 6000 is upgradeable from remotely thus reducing the cost of maintenance. The robustness of the system is further enhanced as GenieATM 6000 supports HA (High Availability) capability to ensure non-stop, uninterruptible operation even when one Controller fails. Being a “flow-based” technology, both deployment cost and TCO (Total Cost of Ownership) are low, compared with “link-based” solutions.
