VIAVI CyberFlood Cybersecurity Test and Validation Solution with Zero Trust Network Access (ZTNA) Testing

VIAVI CyberFlood test solution for validating the performance, scale and policy efficacy of SASE, SD-WAN and Zero Trust network security.

Supported Identity Provider (IdP): Okta
Authentication protocols: SAML and OIDC
IdP simulation: CyberFlood SAML IdP simulation

Datasheet

Overview

VIAVI Cybersecurity Test and Validation is built around CyberFlood, which generates contextual application traffic to validate the performance, scalability and effectiveness of network security infrastructure, including SASE and SD-WAN deployments.

Zero Trust Network Access testing

CyberFlood Zero Trust Network Access (ZTNA) emulates the user authentication workflow alongside application traffic generation to validate secure ZTNA Policy Enforcement Points (PEPs) and to measure the impact of access policies on end-user quality of experience (QoE). It emulates user groups representing authenticated/unauthenticated and authorized/unauthorized users and their application interactions across a distributed hybrid network.

CyberFlood test agents or test ports interact statefully with the Policy Enforcement Point and authenticate with the Okta Identity Provider before generating test traffic for hundreds of simulated users. Simulated users, carrying legitimate and malicious traffic, are first redirected by the PEP to authenticate and, once authentication succeeds, are redirected again to access and retrieve data from the protected application.

A CyberFlood SAML IdP simulation allows Policy Enforcement Point policies to be validated at scale without the integration overhead and rate limiting of an external Identity Provider.

Key Features

Test the Zero Trust Policy Enforcement Point (PEP) and verify that connections and per-user access policies function as intended
Directly configure user groups that emulate authenticated/unauthenticated and authorized/unauthorized users accessing applications
Validate user identity authentication for application access based on SAML and OIDC
Build relationships between application traffic, subnets and groups of users to measure the impact of PEP access policies on performance and QoE
Measure the impact of an actual Identity Provider (IdP) on user authentication; current supported IdP is Okta
Overcome external IdP rate limiting with CyberFlood SAML IdP simulation
Test interoperability of Identity Provider, Policy Enforcement Point (SASE, NGFW, APM) and security policies based on user context
Emulate hundreds of authentication requests and concurrent sessions in a repeatable manner
Measure KPIs such as throughput, concurrent users and application latencies before and after implementing Zero Trust controls
Combine authenticated, unauthenticated and unauthorized users to validate least-privilege access policies
Assess Zero Trust policy enforcement points on a continuous or periodic basis to detect unintended deviations

Specifications

Identity and Authentication

Supported Identity Provider (IdP)	Okta Current support IdP is Okta
Authentication protocols	SAML and OIDC
IdP simulation	CyberFlood SAML IdP simulation Overcomes external IdP rate limiting

Test Capabilities

Policy Enforcement Point types	SASE, NGFW, APM
Emulated user groups	authenticated/unauthenticated and authorized/unauthorized users
Emulated traffic	legitimate and malicious
Scale	hundreds of authentication requests and concurrent sessions In a repeatable manner
Measured KPIs	throughput, concurrent users, application latencies Before and after implementing Zero Trust controls

Licensing

License models CF-SW-ZTNA, CF-SW-ZTNA-SUB	Perpetual, Subscription
Appliance licenses	CF-SW-ZTNA-CF30, CF-SW-ZTNA-C100/C200, CF-SW-ZTNA-CF400

Specifications are taken from the manufacturer's documentation. See the datasheet for complete and current values.

Applications

Zero Trust Network Access (ZTNA) validation
SASE testing
SD-WAN security and performance validation
NGFW policy testing
APM Policy Enforcement Point testing
Identity Provider interoperability testing
Least-privilege access policy validation

Options & Accessories

Option	Description
CF-SW-ZTNA	CyberFlood ZTNA Testing Perpetual — Includes integration with OKTA IdP and SAML & OIDC authentication.
CF-SW-ZTNA-SUB	CyberFlood ZTNA Testing Subscription — Includes integration with OKTA IdP and SAML & OIDC authentication.
CF-SW-ZTNA-CF30	CyberFlood ZTNA Testing for Appliances — Includes integration with OKTA IdP and SAML & OIDC authentication.
CF-SW-ZTNA-C100/C200	CyberFlood ZTNA Testing for Appliances — Includes integration with OKTA IdP and SAML & OIDC authentication.
CF-SW-ZTNA-CF400	CyberFlood ZTNA Testing for Appliances — Includes integration with OKTA IdP and SAML & OIDC authentication.