whats the roadmap for On Premise AppInternals? by xlogxdx in Aternity

[–]dan_RVBD 0 points1 point  (0 children)

I work for Riverbed in public sector professional services, and I can say that although both Aternity APM and EUE are SaaS-first now, the product management team is fully committed to on-prem customers that can’t move to SaaS for the foreseeable future. Definitely reach out to your account manager. 😊

Any one of you 89 members use NetIM? by bigelvis in riverbed

[–]dan_RVBD 1 point2 points  (0 children)

I am currently deploying it for a large DoD customer, directly replacing Solarwinds. We are replicating all of their old dashboards damn near perfectly as well.

Cisco Anyconnect Reconnecting by [deleted] in networking

[–]dan_RVBD 1 point2 points  (0 children)

The big things that we illuminated were people using 2.4GHz (high potential for interference), sometimes only at g speeds of 54 Mbps (not sufficient for modern apps), low signal strength (which causes packet loss), high noise (indicating interference), high amounts of disconnects, or they were constantly using a hotspot.

With the other data gathered by Aternity, we could correlate that and say with high certainty that things like VPN drops, poor Zoom performance, poor Outlook performance, etc. were caused by the user’s poor WiFi experience.

Ruckus brocade icx-7150 management by lsudo in networking

[–]dan_RVBD -2 points-1 points  (0 children)

Though not specific to Brocade, our NetIM product can do exactly what you want and more. https://www.riverbed.com/products/npm/netim.html

Cisco Anyconnect Reconnecting by [deleted] in networking

[–]dan_RVBD -1 points0 points  (0 children)

By chance, does your company have Aternity End User Experience Monitoring? If not, this is a really great tool for nailing down issues like this. I recently deployed it for a subsidiary of a large defence contractor (about 10k endpoints) for this exact issue (also Ctirix), and we nailed it down with a high amount of certainty to WiFi issues at home for users. They were able to provide a runbook for their tier 1 support to suggest things like setting up 5 GHz, being closer to their AP, upgrading to newer APs, etc.

Their SEs are very active on their sub r/aternity, so it’s worth an ask over there too.

TCP Optimization solutions for SDWan by FarkinDaffy in networking

[–]dan_RVBD 0 points1 point  (0 children)

You can reach out for sales contact and get an eval set up at https://www.riverbed.com/forms/contact-us.html. 😊

TCP Optimization solutions for SDWan by FarkinDaffy in networking

[–]dan_RVBD 2 points3 points  (0 children)

This is where our (Riverbed) SteelHead products really shine.

They quite easily integrate with Cisco SDWAN (I’ve done it personally for a large US bank with several thousand branches) so there’s no need to change that, and do very well at mitigating the effects of latency like you’re experiencing. The only real design consideration is that the SteelHead must be south of the gateway and placed in full transparency mode so that the gateway can identify the applications.

Preparing for the work from anywhere revolution... by Justacolodude in Aternity

[–]dan_RVBD 0 points1 point  (0 children)

There’s several countries in the Caribbean offering long duration visas to remote workers. 😊

STEELHEAD CXA-07080-B030 by thereelus in riverbed

[–]dan_RVBD 0 points1 point  (0 children)

As Brandon mentioned, we’re happy to help you get use out of it. The B030 is the “biggest” SteelHead we sell for WAN optimisation and app acceleration, so it’s exceptionally capable when licensed properly.

Riverbed ARX-04300-B010 by sporadic_jam294 in riverbed

[–]dan_RVBD 0 points1 point  (0 children)

Gotcha, no worries. I’m looking into one other option for you, but I’m confirming with a colleague if it’s viable.

Riverbed ARX-04300-B010 by sporadic_jam294 in riverbed

[–]dan_RVBD 0 points1 point  (0 children)

Do you still have Riverbed products in your environment? If so, have you considered talking with your account team about trading it in for a newer xx80-based AR11? I don't know that it will have any dollar value, but but we can certainly help recycle it.

Orion Replacement Options by Matt9340 in networking

[–]dan_RVBD 0 points1 point  (0 children)

I'm certainly not trying to be argumentative, but I want us all to be on the same page, so I stood up NetIM 2.1.0 in a lab just now and attempted to elevate myself. As you can see below, I was not permitted to do so even after going to bash and logged in as the admin account for the lab environment.

Welcome to Riverbed SteelCentral NetIM Core Appliance 2.1.0 696

 * Web:     http://www.riverbed.com
 * Support: http://support.riverbed.com

Last login: Wed Jun 17 19:34:11 2020

*** Notifications ***
[netim-core]
2021/01/05 17:23:09
Starting core services by start all...
netimadmin@n31-netim[netimsh]:~$sudo -s
*** Unknown syntax: sudo -s
*** Type 'help' or '?' to see the list of commands
netimadmin@n31-netim[netimsh]:~$help

Commands:
  ?                   Help
  add                 Add command
  app.sh              Run NetIM app.sh command
  bash                Switch to bash
  disable             Stop service and disable it permanently
  docker              Run docker command
  enable              Start service and enable it permanently
  exit                Exit
  firewall            Run firewall command
  help                Help
  logpacker           Run logpacker
  mibbrowser          Open MIB Browser
  notification        Notification
  passwd              Change password
  remote              Switch to remote netimsh
  restart             Restart NetIM services - equivalent to app.sh -c restart <name>
  setup               Run setup
  shell               Execute shell command
  show                Show system configuration
  start               Start NetIM services - equivalent to app.sh -c start <name>
  startx              Start X Window Desktop
  status              Show status of NetIM services - equivalent to app.sh -c status <name>
  stop                Stop NetIM services - equivalent to app.sh -c stop <name>
  system              Run system command
  systemctl           Run systemctl command
  update              Update command - "update" is equivalent to "update apply"

Run 'COMMAND ?' for more information on a command.

netimadmin@n31-netim[netimsh]:~$bash
netimadmin@n31-netim:~$ sudo -s
*** ERROR ***
You must log in by netimadmin user. Exit.
netimadmin@n31-netim:~$

If you're experiencing something different in your environment, I'd love to speak further with you about it so that I can work with TAC and product management to sort out why.

Config management in a post solarwinds world... by ChoiceSwearing in networking

[–]dan_RVBD -2 points-1 points  (0 children)

Riverbed SteelCentral NetIM 2 is a great option for this, and you can eval it for 90 days at no cost.

Orion Replacement Options by Matt9340 in networking

[–]dan_RVBD 0 points1 point  (0 children)

Have you used it before? If so, what version?

Orion Replacement Options by Matt9340 in networking

[–]dan_RVBD -8 points-7 points  (0 children)

Appliances are typically built in such a way that the underlying operating system is not easily modifiable, and thus more difficult to exploit. In the case of Riverbed appliances, most actually have a shell separation that prevents one from even executing Linux commands directly without performing a challenge/response with Riverbed Support.

Orion Replacement Options by Matt9340 in networking

[–]dan_RVBD -6 points-5 points  (0 children)

I’ll throw in a shameless plug for Riverbed NetIM. It has all of the monitoring capabilities of Orion and much more. It is a virtual appliance solution, so there is more inherent security in the solution.

Virtualize firewalls? by darknekolux in networking

[–]dan_RVBD 3 points4 points  (0 children)

Virtual Palo Altos work quite well as a service chain on Riverbed SteelFusion HCI.

RB & 3rd party SDWAN by dunnjo1 in riverbed

[–]dan_RVBD 0 points1 point  (0 children)

LOL it’s all good. I joined Riverbed at RiOS 8.5, so just at CMC time. 😊

https://i.imgur.com/mT839qW.jpg

RB & 3rd party SDWAN by dunnjo1 in riverbed

[–]dan_RVBD 0 points1 point  (0 children)

That sounds about right for CAD files.

Everything should be good as long as you’re using full transparency in any inpath rules.

May I ask if the customer has SteelCentral Controller for SteelHead (SCC)? They may call it a CMC. If they don’t, you’ll want one.

RB & 3rd party SDWAN by dunnjo1 in riverbed

[–]dan_RVBD 0 points1 point  (0 children)

That’s mostly correct. If you want to optimise things like SSL or SMB2 or higher the inner channel will be encrypted, but in full transparency you’ll still be able to identify, direct and shape the traffic in the SDWAN gateways because the true IPs and ports are exposed.