Now, when we deploy the NSX application platform or as its friends call it, NAP
, there's actually
four major categories or features that we can get as a result of having that
platform in place.
And one of those is NSX Intelligence. A second benefit is the feature of NSX
network detection and response. Another benefit is NSX Malware Prevention. And
a fourth major
component and feature is NSX Metrics. So in this set of videos and in the skill
, I like to focus on
this specific feature first and that is NSX Intelligence. What exactly does WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
this specific feature first and that is NSX Intelligence. What exactly does
that bring to the table?
Why would we want this? So that is a great question. Let's consider what a lot
of networks
are doing by default. They've got network segments and these could be inside of
an NSX
environment or traditional networking. So let's say we have network A up here
and network B and
network C and we have some hosts that are connected to all those networks. Then
we have some routing
functions between those networks. So we have a connection here and a connection
here and a
connection here. These could be physical or logical routers either way. And WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
connection here. These could be physical or logical routers either way. And
then one of the
benefits of networking in general is to be able to communicate across those
networks. So maybe over
here we have front-end web servers and maybe over here we have some database
servers and over here
we have yet another type of application server or maybe over here instead of
application servers
maybe we have a network of clients. And also of course, it's very likely we
have connectivity
out to the public internet as well. And we want to permit traffic that needs to
go out to the
internet to be allowed to go through. So here's my question for you. How do we
know what the actual
traffic patterns are across these network segments? Now we could use things WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
traffic patterns are across these network segments? Now we could use things
like netflow and we could
analyze the traffic that way to get a ballpark picture of the traffic patterns
and so forth.
But if we really want to lock this down and only permit the protocols and
services that are needed
by the business and then filter or tonight everything else, we need some really
good insight as to
what's happening. And that's what NSX Intelligence brings to the table. It
allows us to visualize
the actual network traffic flows about what's really happening between our
segments and between
our devices in our network. So instead of the NSX Manager using the NSX WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
our devices in our network. So instead of the NSX Manager using the NSX
Intelligence as part of the
NSX application platform, we can bring up a pane within the NSX Manager and see
exactly what's
happening and what our traffic flows are. But not only will it help us see
exactly what's happening
what the traffic flows are, it'll also make recommendations for us regarding
security policy
rules for a firewall that we can then implement to help improve our micro
segmentation and our
security controls between devices inside of our network. And the other third
main benefit
that NSX Intelligence brings to the table is it can help us identify suspicious WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
that NSX Intelligence brings to the table is it can help us identify suspicious
activity. And all
those features are part of the NSX Intelligence, which once again is one of
these sub features as
part of the NSX application platform. Now one of the challenges by default is
that once we have the
NSX application platform deployed and functioning in our network, the feature
for the NSX Intelligence
is not, I repeat, it is not enabled by default. So that's going to be one of
our first steps.
And that's also where we get to continue our journey in the very next video as WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And that's also where we get to continue our journey in the very next video as
we start
enabling and then putting NSX Intelligence to work. So I'll see you in the next
video in just a moment.