On 18 Oct 2023, at 19:49, Adam Thompson <athompson@merlin.mb.ca> wrote:

Sightline *Insight* is the piece the sales team won't sell me, and TAC won't support me, for deployment in our private-cloud environment

Insight isn’t used for first-order DDoS detection/classification/traceback/mitigation; Sightline/TMS provides those functions. 

Insight is a forensics, peering analysis, and traffic-engineering tool.

I am using Sightline/TMS virtually and it's fine there.

Thanks for the clarification!

[Full disclosure:  I am an employee of NETSCOUT.]