Aviatrix vs. IBM Cloud Internet Services

This product offers simple ways to manage network routing between public cloud, on-prem, and external network. It has built-in options to secure network traffic, as well as option to direct traffic to 3rd party security products for a more advanced traffic inspection. The core function works and is easy to operate. On the other hand, I am unable to give it more than 7-star because some useful features are lacking. This includes lack of customization in email alerting, IPS policy management, and temproarily admin-down of an established site to site VPN connection.

Incentivized

In terms of business challenges, it simplifies the job of my engineers and significantly increases the productivity of my teams when they collaborate with IBM teams all over the world. Now that we have completed a proof-of-concept using the services supplied by IBM, we expect it to assist us in managing them more efficiently; thus far, management has been straightforward.

Incentivized

• With a few very easy steps to establish routing between AWS VPC
• Easy procedures to establish site to site VPN connection with external parties.
• Provide network access control on routing traffic using its own build-in firewall inspection or directing traffic to 3rd party NGFW for full stack inspection.

Incentivized

• Integration with IBM Cloud applications
• Easy to manage web application firewall
• Ease of protecting CloudFoundry applications
• Good console UI
• Protection for rare managed service offerings such as CouchDB through IBM Cloudant

Incentivized

• It lacks of ways to admin-down an established site to site VPN connections is one of the short coming.
• In network traffic inspection, it lacks options to customize the IPS function is another short coming.
• While the product allows lots of email alerting options, it lacks ways to customize the alerting email messages and ways to suppress alert flooding.

Incentivized

• Request proxying is done by way of DNS name resolution, which is inflexible.
• Proxy services do not work on wildcard DNS entries.

Incentivized

The core function of the product works very well. It really makes network traffic management easy in public clound, as well as crossing different public and private cloud platform.

Incentivized

I have seen faster and more user friendly interfaces like Azure

Incentivized

Very responsive and very strong technical skill even on the first teir support.

Incentivized

We initially tried using the native routing funcitons in AWS (transit gateway) and in Azure (virtual network). While those native options worked, it became difficult to opeate when we tried to impose security inspection on the routing traffic. This leads us to the Aviatrix solution.

Incentivized

I have used Salesforce to explore it as an app but I have found them both able to solve my needs and requirements when it comes to security. While I choose IBM Cloud Internet Services for more accessibility, a better price was available with Saleforce. Although that is just my observation.

Incentivized

• Reduce labor hours for network admin to manage public clound network routing policy.
• Build-in security features may be good enough for small/medium size companies, and thus saving money from full funciton NGFW solution.
• The Cost-IQ feature enable one to capture traffic volume of each VPC. This provides one way for the enterprise to perform cost charge back to various business funcitons at the VPC level.

Incentivized

• It had a positive impact with a big improvement on the performance of web applications.
• Services are quite fast to implement and easy to maintain from an IT perspective.

Incentivized