LECS Virtual brings the same internal visibility capability and advanced traffic detection to virtualized environments, without physical appliances.
SCROLL THE DIAGRAM →
LECS Virtual brings LECS security to virtualized environments, on the infrastructure you already have.
Leverage the resources already available in your data center and match CPU, RAM and storage to the actual load.
LECS Virtual grows with your environment, maintaining a scalable and replicable approach.
It collects and organizes traffic data in a way that is useful for monitoring, analysis, and incident response.
The result is concrete internal visibility, ready to be integrated into existing security processes.
You can choose centralized management in the Cloud or an On-Premises mode with local dashboard via HTTPS, also suitable for contexts with restrictive policies or critical segmentation.
LECS Virtual observes traffic from inside the virtualized infrastructure, without interfering with hosts: more visibility into east-west flows, anomalies intercepted and data ready for response.
No host configuration changes, no interruption of active services.
Import the LECS Virtual package into the chosen hypervisor and prepares the instance in the environment to be monitored.
Configure a network for management and two dedicated interfaces for mirrored traffic, according to the planned architecture.
Set up connectivity via DHCP or static IP and perform the necessary reachability tests.
Frequently asked questions about LECS technology in virtualized version
LECS Virtual is designed for VMware, Hyper-V, and Proxmox environments so that it can be deployed consistently across different virtualized infrastructures.
Not necessarily. On-Premises management with local dashboard via HTTPS is also available. However, for some essential services such as updates and licensing, an outbound connection to LECS servers is required, consistent with corporate network policies.
Sizing depends on the volume of traffic and the number of hosts. The correct principle is not to stop at the minimum necessary, but to provide an adequate margin to ensure continuity, performance and scalability.
The solution uses two dedicated interfaces for mirroring traffic analysis, keeping the management network separate from the flow observation component.