Lumeta IPsonar Technology

Network Situational Awareness

Network Situational Awareness is the understanding of a network infrastructure in its totality. It starts with creating a “baseline” level of network intelligence to more closely manage change within the enterprise.

A network baseline offers real-time situational awareness of large, complex geographically dispersed networks. It provides a means to uncover all active IP space, automatically catalogue those address ranges that fall within the IP space provided initially (i.e., those ranges that are “known”) vs. all newly-discovered IP space, which may contain active, but previously “unknown” IP devices. By taking this holistic approach to the baselining process, IT security managers can make accurate decisions based on the best information available as to the nature of individual networks/devices within any network.

Network Situational Awareness - Lumeta IPsonar

 

Recursive Network Indexing Techniques

IPsonar uses Target CIDR block as its initiator for discovery. IPsonar identifies the network perimeter, network topology and devices that encompass a company’s infrastructure by utilizing the following methodologies:

  • network protocols (learning network information via SNMP, TCP, UDP, DNS, HTTP, HTTPS, ICMP)
  • port responses (determining the services running in the network)
  • network packets (understanding the connectivity of a network via sending lightweight, standard, properly formed packets throughout the network)
  • network path tracing (reaching for devices within the network via tracing data paths)

Recursive Network Indexing Techniques - Lumeta IPsonar

 

Architecture & Delivery Options

IPsonar is a subscription‐based offering hosted either in the client’s VMware infrastructure or in the Lumeta Cloud (the analytics engine would be hosted in the Lumeta Cloud). The subscription price includes Standard Maintenance & Support.

IPsonar requires no disruption to operations, and is extremely fast to deploy and scan a network – no matter how far-flung or numerous the resources are. IPsonar is made to handle large data sets as easily as it does small data sets. Thus, IPsonar is a true enterprise application, able to work efficiently in both large and small deployments.

IPsonar ‘s three-tiered architecture is proven at the world’s most complex networks and has been used to scan the entire Internet:

  • Report Servers: Functioning as the data repository, Report Servers separate report generation from scanning to further reduce IPsonar’s operational footprint. A single remote Report Server can support multiple Scan Servers.
  • Scan Servers: These resources are positioned at appropriate points in the network to assure that business applications and even the lowest-speed network links are unaffected by IPsonar network traffic. Multiple scans can be run simultaneously.
  • Sensors: Accurate, complete network scanning is achieved through the use of network entry points called Sensors. These entry points are portable, providing flexibility to address even the most fast-changing networks.

The number of systems required and subscription costs depend on the size, complexity and segmentation of the network to be scanned. Your Account Manager and Solutions Architect will work with you to determine the best architecture and product configuration for your environment.

System Requirements

Up to 100,000 IPs

Report Server:  7 GB RAM, 100 GB Disk, 2 CPU

Scan Server:  2 GB RAM, 100 GB Disk, 1 CPU

Sensor:  1 GB RAM, 8 GB Disk, 1 CPU

Up to 250,000 IPs

Report Server:  16 GB RAM, 250 GB Disk, 2 CPU

Scan Server:  2 GB RAM, 100 GB Disk, 1 CPU

Sensor:  1 GB RAM, 8 GB Disk, 1 CPU

Up to 500,000 IPs

Report Server:  32 GB RAM, 600 GB Disk, 2 CPU

Scan Server:  2 GB RAM, 100 GB Disk, 1 CPU

Sensor:  1 GB RAM, 8 GB Disk, 1 CPU

Above 500,000 IPs

Contact your Solutions Architect (via Lumeta Client Support) for system requirements.

Software & Operating System Requirements

Virtual Server: VMware ESXi 5.1 or later
Guest OS: CentOS 6.5 or later
Bridged networking can be used as a default option, otherwise choose a network type that suits your environment.

Compatible Browsers & Plug-In Requirements

Lumeta products are compatible with the two most-recent releases of Chrome, Firefox, and Internet Explorer. Check the About page on your browser menu to ensure the browser version you’re running performs well with IPsonar.

Versions supported as of June 16, 2016 are listed here:

Chrome
Version 51
Version 50

Firefox
Version 46
Version 45

Internet Explorer
Version 11
Version 10