Inline Bypass Network TAP Detect Heartbeat Message Respond for WAF IPS and FW

Inline Bypass Network TAP Detect Heartbeat Message Respond for WAF, IPS and FW

1. Bypass Switch Bypass TAP Intelligent Heartbeat Message Detection Technology
NetTAP® policy flow traction protector as an independent external health testing equipment, the protector to send heartbeat packets to the serial security device to perform health testing. The guard sends the heartbeat detection message from the up/down link of the serial security device and receives the heartbeat detection message transmitted from the other side from the upper/lower link of the serial security device,safety equipment working status is normal. Two-way heartbeat message detection mechanism can accurately reflect the current working state of the serial security equipment, more effective to ensure the normal work of the network.
NetTAP® Policy. The Traction Protector supports the ability to customize heartbeat parameters on any one of the serial devices, such as the heartbeat interval, the maximum number of heartbeat retries, and so on. The user can adjust the parameters according to the actual situation to ensure accurate detection of the normal working state of the serial safety equipment.
NetTAP® “bypass switch” also supports the opening of the heartbeat message detection customization function. That is, the monitor side supports the opening of the bilateral heartbeat detection function, the opening of the single-side heartbeat detection function and the closing of the bilateral heartbeat detection function. This feature can meet the special serial security device detection mechanism. The user can adjust the heartbeat detection function on or off according to the actual situation to ensure accurate detection of the normal working status of the serial security device.

2. Intelligent Bypass Swtich Application Solution​
Multi-series Device Network Flow Traction Protection (Variable Series Connection for Parallel)

In some key links (such as Internet outlets, server area exchange link) location is often due to the needs of security features and the deployment of multiple in-line security testing equipment (such as firewall, anti-DDOS attack equipment, WEB application firewall, intrusion prevention Equipment, etc.), multiple security detection equipment at the same time in series on the link to increase the link of a single point of failure, reducing the overall reliability of the network. And in the above-mentioned security equipment on-line deployment, equipment upgrades, equipment replacement and other operations, will cause the network for a long time service interruption and a larger project cut action to complete the successful implementation of such projects.
By deploying the "bypass switch" in a unified manner, the deployment mode of multiple security devices connected in series on the same link can be changed from "physical concatenation mode" to "physical concatenation, logical concatenation mode" The link on the link of a single point of failure to improve the reliability of the link, while the "bypass switch" on the link flow on demand traction, to achieve the same flow with the original mode of safe processing effect.

More than one security device at the same time in series deployment diagram:

Multiple Single Points of Failure

Physical Multiplexing in Series with the Deployment of Security Equipment

Bypass switch deployment diagram:

Physical Connection, Logical Connection Deployment Diagram

3. Bypass Switch Bypass TAP Technical Specifications

NetTAP® (Full named Chengdu Shuwei Communication Technology Co., Ltd.)was established in 2007. Focusing on the Research and Development of Network TAPs/NPBs Communication Equipment, Data Security Analysis Equipment, which provides products and solutions in Big Data Acquisition, Data Storage, Data Monitoring, Data Processing and Data Analysis for Telecom, TV Broadcasting, Government, Education, IT, Finance, Bank, Hospital, Transportation, Energy, Power, Petroleum, Enterprise and other industries.

NetTAP® has launched various types of high-density devices such as: Fast Gigabit, 10 Gigabit Ethernet Network Traffic Replication, Aggregation, Distribution Network TAPs/NPBs (Network Packet Broker), intelligent Hybrid Traffic Network TAPs, 25G, 40G, 100G, etc. high density and Performance Network TAPs/NPBs(Network Packet Broker).

NetTAP® has a hardware production plant, all the communication products have complete Software and Hardware Independent Intellectual Property Rights, with complete Copyright Registration and Product Certification.

MATRIX NetInsight™ - A Fully Function Network Visibility Control Platform

MATRIX NetInsight™ Network System Value

1- Data Acquisition with centralized planning, eliminate monitoring blind spot

2- Free distribution of data, saving analysis of the overall investment

3- Data Security Control, Reduce the risk of disclosure

4- Overall Traffic visible, Abnormal Located more accurate, Fault analysis more useful

MATRIX NetInsight™ Function Architecture

1- User Interaction Layer

2- Big Data Analysis Layer

3- Data Storage Layer

4- Analysis Visibility Layer

5- Data Acquisition Layer

Zain Cloud Project of Saudi Arabia Telecom