NetTAP Modularized Bypass Protector Bypass TAP and Inline Ethernet TAP

NetTAP Multirate Modularized Bypass Protector Bypass TAP and Inline Ethernet TAP with 16 * 10G Monitoring Ports

1.Overviews

With the rapid development of the Internet, the threat of network information security is becoming more and more serious, so a variety of information security protection applications are used more and more widely. Whether it is traditional access control equipment (firewall) or a new type of more advanced protection means such as intrusion prevention system (IPS),Unified threat management platform (UTM), Anti-denial service attack system (Anti-DDoS), Anti-spam Gateway, Unified DPI Traffic Identification and Control System, and many security devices are deployed in series in the network key nodes, the implementation of the corresponding data security policy to identify and deal with legal / illegal traffic. At the same time, however, the computer network will generate a large network delay or even network disruption in the case of fail over, maintenance, upgrade, equipment replacement and so on in a highly reliable production network application environment, users cannot stand it.

Real Product Picture
- with 1*10G modular +1*40G modular +1*100G monitoring module
- The first and second slot can insert bypass modular, the third slot insert monitoring modular bypass
- Customer can choose 10G/40G/100G bypass/monitoring modular flexibly as they need

Monitoring Module: MON-MOD-L16XG with 16*10G monitoring Ports

2. Main Features

Wire speed-Inline-protecting

Inline protect based on specific traffic (ACL)

Multiple-Link Protector；

Bypass switch lower delay(8ms)；

Custom-format heartbeat packet checking；

Service-Level Healthy-checking

Load-balance inline deployment

Support multiple security inline device protect

Vlan-TAG/TRANSLATE /untagged support

Remote & local management ；

Dual-Power / DC/ AC support

Modularize design : flexible support 10G/40G/100G by replacing bypass module

BYPASS MODULE

MONITOR MODULE

3. Intelligent Bypass Swtich Application Solution​

Link Series Device Protection

Figure 1: Policy Flow Traction Protector Normal Working Data Stream

Figure 2: Policy Traffic Traction Protector Bypass Switch Data Flow

As shown in Figures 1 and 2, the NetTAP® "Policy Traffic Traction Protector" is deployed in series between network devices (routers, switches, etc.), and the data flow between network devices no longer leads directly to IPS / FW, NetTAP® "policy traction protector" to IPS / FW, when the IPS / FW due to overload, crash, software updates, policy updates and other conditions of failure, the "bypass switch" through intelligent heartbeat message detection Function of the timely discovery, and thus skip the faulty device, without interrupting the premise of the network, the rapid network equipment directly connected to protect the normal communication network; when the IPS / FW failure recovery, but also through intelligent heartbeat packets Detection of timely detection of the function, the original link to restore the security of enterprise network security checks.

NetTAP® "Bypass switch" has a powerful intelligent heartbeat message detection function, the user can customize the heartbeat interval and the maximum number of retries, through a custom heartbeat message on the IPS / FW for health testing, such as send the heartbeat check message to the upstream / downstream port of IPS / FW, and then receive from the upstream / downstream port of IPS / FW, and judge whether the IPS / FW is working normally by sending and receiving the heartbeat message.

NT-MBYP-CHS Bypass Switch.pdf

NetTAP® (Full named Chengdu Shuwei Communication Technology Co., Ltd.)was established in 2007. Focusing on the Research and Development of Network TAPs/NPBs Communication Equipment, Data Security Analysis Equipment, which provides products and solutions in Big Data Acquisition, Data Storage, Data Monitoring, Data Processing and Data Analysis for Telecom, TV Broadcasting, Government, Education, IT, Finance, Bank, Hospital, Transportation, Energy, Power, Petroleum, Enterprise and other industries.

NetTAP® has launched various types of high-density devices such as: Fast Gigabit, 10 Gigabit Ethernet Network Traffic Replication, Aggregation, Distribution Network TAPs/NPBs (Network Packet Broker), intelligent Hybrid Traffic Network TAPs, 25G, 40G, 100G, etc. high density and Performance Network TAPs/NPBs(Network Packet Broker).

NetTAP® has a hardware production plant, all the communication products have complete Software and Hardware Independent Intellectual Property Rights, with complete Copyright Registration and Product Certification.

MATRIX NetInsight™ - A Fully Function Network Visibility Control Platform

MATRIX NetInsight™ Network System Value

1- Data Acquisition with centralized planning, eliminate monitoring blind spot

2- Free distribution of data, saving analysis of the overall investment

3- Data Security Control, Reduce the risk of disclosure

4- Overall Traffic visible, Abnormal Located more accurate, Fault analysis more useful

MATRIX NetInsight™ Function Architecture

1- User Interaction Layer

2- Big Data Analysis Layer

3- Data Storage Layer

4- Analysis Visibility Layer

5- Data Acquisition Layer

Zain Cloud Project of Saudi Arabia Telecom