CASE STUDY 915-6939-01 Rev. A, September 2014 www.ixiacom.com Page 1 Overview A prominent U.S.-based bank recently selected Ixia’s Net Optics network visibility solutions to play a powerful role in a breakthrough security monitoring strategy. Within its innovative design, the Ixia Visibility Architecture mitigates the mounting complexities of securing financial industry networks with unrivaled flexibility, performance, and scalability. The Customer Need Like most major financial institutions, this multinational bank faces a steady stream of high-volume Denial of Service (DoS) attacks that can compromise both revenues and the company’s reputation. While its defenses have fared well so far, the organization proactively decided to upgrade its security infrastructure with a highly innovative, multi-layer approach. The bank’s IT team devised an innovative architecture featuring new DoS and malware protection, a state-of-the- art intrusion prevention system (IPS), security analytics, and third-party reputation services. After passing through traditional distributed denial of service (DDoS) prevention devices, traffic will be decrypted and forwarded to the IPS, then on to other security tools for real- time and future analysis of traffic and security trends. After this, the traffic will be re-encrypted and injected back into the network with no impact to network performance. This breakthrough security design also adds intelligent management and distribution of traffic between security elements so traffic can be load-balanced as the network grows. Ixia’s Net Optics xStream Network Packet Brokers (NPBs) and 10G Bypass Switches effectively serve as the glue that holds it all together, making sure traffic flows through the right elements in the right order—without adding latency that will impact network performance. Why They’re Banking on Ixia By adding visibility within a handful of critical data centers, Ixia Net Optics 10G Bypass Switches and xStream 40 devices maximize uptime by allowing changes to be made to the security architecture at any time, automatically bypassing misbehaving elements in the network. Advantages include: • Flexibility to support architectural innovations; • A “cut-through” solution that adds virtually no latency, even as traffic passes through the xStream 40 multiple times; • Scalability, both of the Ixia solution, and the ability to allow each security providers’ solution to scale most efficiently. As devices are added, we aggregate and play “traffic cop,” effectively distributing traffic across them; • Reliability as devices are taken in and out of the network without interrupting traffic flow. Ixia Visibility Solutions Help Leading Banks Improve Security Deployments Company A premier U.S.-based banking institution. Market Challenge International financial services providers continue to represent high-profile targets for malicious hackers and other security threats. Proactive end-to-end network and security monitoring plays a pivotal role in staying a step ahead of attackers and safeguarding organizations’ revenues and reputations. Key Issues Maintaining visibility across an innovative, multi-stage security architecture without negatively impacting network and application performance. Results Ixia’s Visibility Architecture helps maximize visibility, security, and uptime simultaneously. Ixia Net Optics Bypass Switches and xStream 40 devices maintain real-time performance while positioning the customer to continue evolving its security defenses into the future.