Overview
Keysight Vision Orchestrator (KVO) is the centralized control and automation layer for Keysight's Visibility solutions. It is designed to simplify configuration, streamline deployment, and manage Vision Packet Brokers (VPB) and visibility fabrics across physical, virtual, and cloud environments. KVO provides a unified management interface that enables IT, NetOps, and SecOps teams to define and enforce visibility policies with consistency at scale. Through automation, role-based access, and intuitive workflows, it accelerates deployment, reduces human error, and ensures visibility architectures remain aligned with evolving network and security requirements. By integrating seamlessly with Keysight Vision Packet Brokers and CloudLens, Vision Orchestrator automates the end-to-end visibility workflow from tapping traffic to distributing curated data streams to monitoring and security tools. This ensures that every tool in the stack receives the right traffic, at the right time, in the right format, maximizing tool efficiency and delivering actionable insights in real time.
Highlights
- Manage virtual and physical Keysight visibility solutions from single pane of glass
- Optimize operations with automation and advanced customizable reporting
- Handle large deployments with simple cluster management
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Vendor refund policy
Contact our support team by emailing to support@ixiacom.com
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
What's New in KVO
ABAC Monitoring Policies now support optional attribute-based access control (ABAC), enabling read and write access based on matching Keycloak group attributes and Monitoring Policy labels.
Alert Added a consolidated Alert Details column for a unified view of alert information.
CloudLens vTAP
- Added support for tagging tapped traffic with VLAN for Custom Cloud and Kubernetes.
- Added ability to show if vHUB has the latest config applied.
- Added Cloud Collection stats view on Monitoring Policy Diagram View and List View.
- Added support for Sensor vHUB as a tool (not supported on NSX scenario).
Configuration Import Compatibility KVO now validates version information in exported configuration packages and supports imports only from the current release plus the previous three supported releases (N, N-1, N-2, N-3). Export packages include version metadata identifying the source KVO version and configuration package version, enabling compatibility checks during import. Packages exported from versions older than N-3 are not supported and cannot be imported.
Device State History Added Device State History for visibility into device configuration activity and change request synchronization status, improving troubleshooting and analysis.
Events Added a new Events section under Alerts to display notifications for events on monitored and controlled devices, including client login failures, device cold starts, receive utilization events, and other device related activities.
Failover Configuration on Attachment Points LOOPBACK Attachment Points can now be configured on the EGRESS side with primary and failover port bindings, with both bindings required to be on different devices.
Filters Information The Export CSV option in Inventory now includes a Filters Information export, providing filtering rules for GSC filters created on Vision X devices only.
KVO SSH Access KCOS commands accessed over SSH are now split into read and write permissions. Admin roles can perform both read and write operations, while non-admin roles are limited to read only. Note: KCOS firewall and licensing commands are unaffected.
Keysight Vision Assist Keysight Vision Assist is an AI powered conversational assistant built into KVO that helps users find answers to setup, configuration, and best practice questions based on official Keysight documentation for KVO, NPBs, MobileStack, AppStack, SecureStack, and CloudLens.
Monitored Device Backup A backup of the monitored device configuration can now be saved before switching the device to Controlled mode, and restored automatically when switching back to Monitored mode.
Multiple Active Change Requests Added support for multiple active change requests per user, allowing users to manage several pending change sets at the same time.
Multiple Scheduled Backup The Multiple Storage Locations feature allows users to configure and manage up to 50 scheduled backup locations, each with its own backup settings and schedule, improving flexibility and data protection.
NTP Connection Status The Date and Time page now displays the active NTP server and its synchronization status.
Port Configuration Changes Configured port changes are now reflected immediately in the Port Info and Transceiver Info views in the GUI. Updates to port name and speed in the Configure Ports tab immediately update the Port Info tab, and updated names also reflect in the Transceiver Info tab.
Port Labels for Monitored Devices Ports on monitored devices can now be assigned custom labels for use in Grafana dashboards and reporting.
Quick Filters and Address Filtering The Filtering As criteria can now be configured independently between Quick Filters and Address Filtering, while the Include and Exclude setting remains synchronized.
Sort Tables in Devices Table Added sorting support for the Name, Serial Number, Family, and Model columns in Inventory, Devices table.
Syslog Introduced label based device selection for configuring a dedicated syslog server on specific devices.
Additional details
Usage instructions
- Launch one Keysight Vision Orchestrator instance.
- Access Keysight Vision Orchestrator via Web UI at https://<Keysight-Vision-Orchestrator-instance-IP>
- Login with the operational user via Web UI at https://<Keysight-Vision-Orchestrator-instance-IP>
- Accept the EULA License.
- Follow the user guide section Getting Started with Keysight Vision Orchestrator.
You can access EC2 instance via SSH as below: Command - ssh -i <PEM_KEY> -p 9022 admin@<EC2_INSTANCE_IP>
User Guide - https://docs.keysight.com/kvok/files/1008014275/1037074125/1/1786002737000/KVO_3.1.0_UserGuide.pdf
Support
Vendor support
Contact our support team by emailing to support@ixiacom.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.