Network Monitoring In AWS Virtual Private Cloud Environments
Using cloud servers and network infrastructure clearly provides many significant and well-known benefits. However, many companies needed additional network monitoring capabilities.
Why is this? When you operate your own switches and routers, you have tools like mirror ports and NetFlow data, which can be used to analyze overall security and performance. In a cloud environment, these options have not been available. Additionally, monitoring network traffic on cloud servers traditionally required an agent-based approach where each machine needed to have software installed to collect traffic records. This approach simply doesn’t work if the machine can’t run the software agent.
Now there’s a new option for Amazon Web Services (AWS) customers who operate virtual private cloud (VPC) networks. AWS recently introduced VPC Flow Logs, which facilitate logging of all the IP traffic to, from, and across your network. These logs are stored as records in special Amazon CloudWatch log groups and provide the same kind of information as NetFlow data.
"This is the best solution I have found for network intrusion detection in the cloud. It doesn't require an agent to run on your AWS instances, and it sees the traffic that doesn't make it past the security group rules. Their alerts are worth looking into which saves time over other intrusion detection solutions. Stealthwatch Cloud is an important part of our compliance control regime."
~ Blake Blackshear, CTO - Concert Genetics
Interested in learning more about our commitment to Network Monitoring in AWS cloud- get a Look at our Whitepaper here! Fill out the form below: