Download PDF
Virtual Insights with CloudLens: European ISP Extends Visibility into Virtualized Infrastructure
Technology Category
- Infrastructure as a Service (IaaS) - Virtual Private Cloud
- Wearables - Virtual Reality Glasses, Headsets & Controllers
Applicable Industries
- Glass
- National Security & Defense
Use Cases
- Traffic Monitoring
- Transportation Simulation
Services
- Cloud Planning, Design & Implementation Services
The Challenge
Proximus, the largest internet service provider (ISP) in Belgium, embarked on a network function virtualization (NFV) initiative in 2018. The project involved deploying various telecommunication applications using a cloud infrastructure, including virtual IP multimedia subsystems (vIMS), and software-defined wide area networking (SD-WAN). However, migrating complex physical ISP networks to a new network with virtualized functions was a long-term project, taking several years. During this transition, Proximus faced the challenge of maintaining the same visibility and analytics across both physical and virtual functions. The company had deployed several traffic analytics probes that relied on physical taps, tap aggregation switches, and Keysight Vision network packet brokers in the legacy environment. However, in the new virtual environment, network functions ran as virtual machines (VMs) on the same physical server, and the east-west traffic did not cross any of the physical links where the physical taps would have been located. Proximus needed to maintain the same level of visibility in the virtual environment as in the physical one, while also containing the total cost of ownership.
The Customer
Proximus
About The Customer
Proximus is the largest internet service provider (ISP) in Belgium. In 2018, the company launched its network function virtualization (NFV) initiative, deploying various telecommunication applications using a cloud infrastructure. This included virtual IP multimedia subsystems (vIMS) and software-defined wide area networking (SD-WAN). The migration from complex physical ISP networks to a new network with virtualized functions was a long-term project, taking several years. During this transition, Proximus faced the challenge of maintaining the same visibility and analytics across both physical and virtual functions. The company was also driven by the need to contain the total cost of ownership while preserving their investments in existing monitoring and security tools.
The Solution
Proximus addressed these challenges by deploying Keysight CloudLens, a visibility solution for virtualized environments. One of the key components of this solution, CloudLens vTap, offers virtual tapping and filtering capabilities. This enabled Proximus to capture traffic from the virtualized environment that previously fell into a blind spot and forward it to the right destination. Proximus did not need to change their current processes for support, monitoring, and security. The end-to-end reporting remained the same using a single platform, regardless of the origin of the traffic, be it physical or virtual. Proximus deployed Open vSwitch software and CloudLens vTap to mirror the network traffic at the virtual workload or virtual switch level. The virtual taps were deployed to the monitored hosts and managed from the CloudLens management server (CLMS), which administers the virtual taps and packet capture policies. The VisionONE network packet broker sanitized the mirrored network traffic between the virtualized functions via a generic routing encapsulation (GRE) tunnel to third-party monitoring and security tools.
Operational Impact
Related Case Studies.
Case Study
Data Capture for Afghanistan Forces
Electronic equipments on the field of Afghanistan provided information on the status of the vehicle and to identify potential threats surrounding it to the British Force. The monitoring and interpretation of this data requires robust and sophisticated digitization for data capture and communication.
.png)
Case Study
Discrete Manufacturing Industries (Fiberglass Pipe)
The implementation of ERP software in a Discrete Manufacturing organization needs to be strategic, irrespective of its size and capacity. The client had already implemented an ERP system which fulfilled their requirements but was not efficient enough. Efficiency here meant Synchronized Planning, Updating and Multisite Planning. Planning at client’s place was done outside the ERP system. Lack of proper synchronization to the ERP system paved way to huge delays in the changes getting updated in the system. These delays caused disruption in achieving delivery schedules. Multisite Planning is a solution to an organization which has multiple production units (may or may not be geographically separated) and thus needs planning across these units to synchronize production activities within them. The client also has multiple factories and hence Production Planning control is very essential in their case. Since Multisite planning was not possible with Baan ERP system, this was another bottleneck for the client.
Case Study
Major Aerospace Company Automates Asset Management
The O&M division of an aerospace and global security company was using spreadsheets to manually track more than 3,000 assets assigned to students and staff. Maintaining audit trails for this high volume of equipment became increasingly time-consuming and challenging. The chore involved knowing precisely what equipment was on hand, what had been issued, its location and the name of the custodial owner of each item. Every aspect of this task was carried owner of each item. Every aspect of this task was carried out by individuals with spreadsheets. Manually documenting the full lifecycle of each asset added to the burden. This included tracking maintenance requirements and records, incidents and damages, repairs, calibrations, depreciation, and end-of-life data.
Case Study
Securing a Large Data Center in the EMEA Region: An IoT Case Study
A leading data-center operator in the EMEA region, with multiple facilities spanning over 25,000 square meters, faced significant security challenges. The operator experienced interruptions in their internal IT network due to unsupervised work of third-party technicians. Despite having a high-end building control system that provided 24x7 monitoring and control to all the building’s infrastructure, the data center was vulnerable from a cyber perspective as it was connected to the IT network infrastructure. The operator launched an urgent OT cyber security project that included both IT-OT network segmentation and OT network asset mapping and anomaly detection. The main objectives were to harden the security of the server systems, secure the facility’s power supply and server cooling system, strengthen the segmentation between building and operational systems, create a visual OT network map, and set up a system for presenting supply-chain attacks that may threaten the data center through equipment vendors’ maintenance activities.
Case Study
Enhancing Security Precision with IoT: A Case Study of Guardsman Group
Guardsman Group, a leading security company in the Caribbean, faced a significant challenge in maintaining the security of its digital infrastructure. The company provides security equipment, personnel, and systems for various businesses across the region. However, one of its offices experienced a security incident that affected all communications at that location. The existing security tools were not sufficient to provide the necessary protection, and it took hours to identify the source of the issue. This incident highlighted the need for a dynamic solution that could proactively identify threats. The company's primary concern was any disruption to its business, as it manages a significant portion of Jamaica's money and cannot afford for its operations to go down.
Case Study
Asia Airfreight Terminal Enhances Operational Efficiency with CommScope's RUCKUS Solutions
Asia Airfreight Terminal (AAT), a leading cargo handling company based out of Hong Kong International Airport, was facing challenges with its Wi-Fi network, which was critical for the functioning of its automated Material Handling System (MHS) within the warehouse. Any interference or lost signals could directly impact their operational efficiency. AAT also had separate networks for their office and CCTV cameras, which made the job of their data center challenging. The company was in search of a Wi-Fi network configuration that could streamline their networks and reduce its network management workload. AAT was already running on equipment from a competing vendor, and the new solution needed to prove its worth in scalability and reliability.
