Virtual Security Appliance
(works with VMware ESX, Citrix XenServer & Virtual Iron )
Reflex VSA can be deployed differently depending on need. The three common deployment methods are: In Line Active Protection, In Line Segmented, and Off line Passive Monitoring.

In Line Active Protection
Deployed In Line, Reflex VSA has complete control of all network traffic between guests and the external network. Comprehensive network security can be accomplished via firewall, IPS, and network policy enforcement.

In Line Segmented Protection
Deployed to inspect and restrict traffic between specific guests, Reflex VSA has complete control of all network traffic between virtual network segments. Segmentation and comprehensive network security can be accomplished via firewall, IPS, and network policy enforcement.

Off Line Passive Monitoring
Deployed to passively inspect and alert on malicious activity or policy violations, Reflex VSA can provide visibility into the virtual environment and event notification.