Shulou(Shulou.com)06/01 Report--

The larger the network becomes today, the harder it is to monitor. Network blind spots can easily have a great impact on the network.

More and more network ports want to be monitored, and there is a substantial increase in the number of monitoring devices, which puts forward higher requirements for network managers. Traditional access monitoring methods (such as port mirroring) are very expensive and put great pressure on the mirrored devices. As the network is growing at an unprecedented rate, high-performance, scalable monitoring solutions have become a top priority.

Through the TAP network splitter in the form of serial or parallel connection in the network, collect network traffic data, can be copied to multiple ports, or multiple data aggregation to individual ports, and then to the back-end platform applications that need to analyze and monitor the network content, but also can filter out the data desired by the application platform according to certain rules. This flexible approach is gradually accepted by everyone. The Mingchen Zhihang network splitter is used in various fields. Here are a variety of connection schemes and typical cases in various industries:

(figure 1) flexible deployment of TAP network taps

The typical connection scheme of TAP network tap is shown in the following figure:

1 Serial access (Inline mode)

2 parallel access (Span mode)

Case

1. Typical application cases and explanations of TAP in the field of information security.

Typical application

Network security is concerned by many users, and there are many kinds of network security devices. Many customers will deploy a variety of security devices in the network, such as detection, WAF, SOC, IDS, IPS, missed scan, anti-DDOS, Internet behavior, various network security monitoring devices, and so on. How to deploy these devices to the network reasonably without generating applications for network transmission quality? Through the form of TAP network splitter, the network can be managed more conveniently and effectively.

TAP devices, regardless of the number of ports and port interface characteristics (electric port or optical port), in the field of information security, real-time line-speed collection of traffic data in the network, through replication, aggregation or certain rules, provide network data to IDS, IPS, DLP, etc., which are used in information security analysis applications. Mingchen Zhihang network splitter is widely used in various industries. The typical connection is shown below.

II. Application case and explanation of TAP network splitter in power industry.

In the construction and optimization of power network security protection, TAP solves the problem of connection and management between data and security equipment in the whole network. The total number of ports shall not be less than 24, and the interface shall support electric ports and optical ports; the data processing capacity of each port shall be at least 1000m, and the input and output can be flexibly configured; through various filtering rules, the required data can be collected, aggregated, distributed and copied for security equipment. The network of Mingchen Zhihang Network Splitter system is as follows

Third, the application case and explanation of TAP in a Unicom Iups signaling collection project.

After the acquisition data source passes through the splitter, it is connected to a number of GE optical ports and multiple XGE optical ports of TAP (Mingchen Intelligent Navigation Network Splitter), and the IP address data services that need to be analyzed and collected are aggregated to a 10 Gigabit optical port and a gigabit optical port output by IP filtering rules.

I hope my sharing can help you. Mingchen Zhihang, focus on network health.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.