Inkra Networks has taken on the enormous task of virtualizing security operations for the data center with its high-performance security switch. And while our tests found the product to be well architected overall, weak firewall, intrusion-prevention system and VPN applications, and poor management control mar the existing version of this product.

In short, Inkra has a solid vision for this product, but the switch needs more engineering efforts to live up to its potential.

The Inkra 1518TX Virtual Service Switch we tested - running Version 2.1 of Inkra's embedded operating system, which has been shipping since February - is an 18-port (16 10/100 ports and two gigabit interface card ports), 2U device that can simulate as many as 125 racks of security appliances. Using Inkra's terms, a rack is an arbitrary collection of security applications, mixed as needed.

With either a command-line interface or GUI, you stack the applications together and attach the stack to one or more of the physical interfaces on the Inkra device. As an easy starting point, we defined a rack with a firewall and an IPS appliance, and attached it to two virtual LANs  on the same physical port, replacing our existing VLAN-enabled firewall. With Inkra's virtualization architecture, you can build as many racks as you can afford (appliances are licensed on a per-rack basis), using either physical ports or VLANs to move them in and out of the Inkra multi-gigabit backplane.

After spending some time building racks, we uncovered the strengths and weaknesses of Inkra's approach. Unlike firewall vendors such as NetScreen Technologies and Cosine that have attempted to build virtual firewalls, Inkra has taken on every security application in the business, re-creating the engineering work needed for these products.

In all, Inkra has built firewall, global server load balancer, local server load balancer, intrusion prevention, Secure Sockets Layer  accelerator, VPN and Web accelerator modules.

Choice is great, but having so many modules with different functions means that Inkra has single-handedly taken on not only the creation of its own virtualization technology, but also every major market segment in the network security and server management space. If you believe in "best of breed" purchasing, this approach won't be attractive to you.

Whitepapers

• Network-Wide Change Management Visibility with Route Analytics
• A Comparative Study of CDN Architectures
• Best Practices for HP Servers and HP Enterprise Virtual Array in a Microsoft Exchange
• REMOTE CONTROL: How to Reduce the Cost, Complexity and Risk of Managing Your Distributed IT Infrastructure
• Best Practices for WAN Optimization with Data Replication
• Top 10 Considerations for Scaling a WAN Acceleration Solution

View more LANS & WANS whitepapers

Webcasts

• Branch Office Trends and Best Practices
• Correlating granular network and application visibility
• Migrating to an MPLS-Based Network
• Round Table Webcast with Forrester Research
• Best Practices for Deploying WAN Optimization for Disaster Recovery
• WAN Optimization Editorial Webcast

View more LANS & WANS webcasts

Special Reports

• Ehternet Services: WAN options mature
• Keeping Spam at Bay
• Network World Executive Guide: The Virtualization Equation
• Get More From Your WAN
• WAN Optimization: How to rev up sluggish applications
• Network World Executive Guide: Perfecting Application Performance Management

View more LANS & WANS special reports