Web TAP Netinsight Support Packet Broker Eliminate Monitoring Blind Spots And Security Threats

NetInsight™ Network Packet Broker Eliminate Monitoring Blind Spots and Security Threats

NetTAP^® NetInsight™ Network Visibility Management Background

Cloud e-government network security system planning is mainly composed of the physical layer, resource layer, application security, and data collection mainly involves in the network layer, the cloud in the electronic government affairs, by deploying meet the requirements of relevant safety products for real-time monitoring network data analysis so as to achieve security monitoring, security situational awareness effect. Such security products can be subdivided into IDS, Data Audit Equipment, Behavior Analysis equipment, Situational Awareness, Big Data Security Analysis System, etc., but this kind of equipment does not have the active Data Capture function.Therefore, in the complicated e-government network architecture, the cloud, when performing a multilevel security need to deploy a large number of security products at different positions of nodes in the network security monitoring, at the same time a large number of security products distributed deployment, has the high investment cost, easy to form the information isolated island, lead to monitor the blind spot, and also can't avoid duplicate data monitoring, not only reduces the analysis accuracy, but also caused the difficulty of management and maintenance.

NetTAP^® has been committed to for all enterprise users with entire network flow visualization acquisition monitoring solution, after 10 years of technology accumulation and precipitation, releasing MB, Gigabit, 10G, 40G, 100G and other highly dense flow visualization acquisition monitoring equipment, independent research and development of MATRIX - NetInsight^TM lead network visualization monitoring tide flow visualization system, have powerful SDN(Software Defined Network) flow collection and distribution of MATRIX, network video, business function such as visual and abnormal flow storage module, for the whole network security situational awareness to build a strong support network level.

NetTAP^® SDN Traffic Capture and Distribution Matrix

SDN Traffic Capture and Distribution of MATRIX component as MATRIX - NetInsight^TM Traffic Visibililty System of the bottom support components, complete the user key network nodes (core switching nodes, servers region, communications link, before and after the firewall, load balancing, before and after the distribution layer, access layer key exchange node, the key operational areas, etc.) of the data set acquisition, through more than one unit of traffic acquisition device flexible ad-hoc network, the application of advanced SDN flow distribution technology, will be the operator or enterprise network monitoring traffic monitored 360 degrees no dead Angle.

Each device unit of SDN traffic acquisition and distribution matrix adopts hardware ASIC chip for message classification and strategic forwarding based on classification.On the one hand, the performance of the flow is to ensure that the complete collection and lossless distribution to each back-end analysis equipment;On the one hand, through accurate filtering and classification of traffic, the analysis system based on different dimensions provides different types of traffic and effectively eliminates a large number of background traffic, which can greatly reduce the performance pressure on the back-end analysis system and save users' investment.On the other hand, the collection and distribution matrix can accept the precise collection requirements of the third party in real time through the API, and accurately collect message data output or storage or even transmit it to the visual analysis component for analysis to the specific link/host/terminal at a specific time (such as Fault Analysis, Network Debugging, Eliminate Monitoring Blind Spots and Security Threats)

MATRIX Traffic Collection/Capture and Distribution Visibility Management System

The MATRIX traffic collection and distribution visual management system is an independent centralized management component of the underlying SDN traffic collection and distribution MATRIX unit.Based on the idea of SDN centralized controller, the control surface and data surface of each collection and distribution matrix unit are separated and managed on a web-based visualization platform.

The main features are:

1. Visualization of the logical topology of the user's presence network and the relationship between data collection points

MATRIX flow collection and distribution of eliminating the traditional visual management system centered on acquisition device view of presentation, replaced by the user network topology and traffic analysis as the center of the presentation, let users to collect traffic sources can be clear at a glance, clearly know where traffic come from, where to go, the type of flow distribution and so on, make sure the user flow visualization.

2. Centralized monitoring and management of traffic distribution strategy.

Based on uniform flow field sites (with current network topology association) and back-end flow analysis system of unified view and shielding SDN matrix of the complexity of the internal, traction strategy provides a concentrated flow unified view configuration management interface, user can highly flexible definition from where the flow of input to any output analysis system;At the same time, the system supports message preprocessing based on different application analysis characteristics, such as high precision timestamp, specific input mark of message source, message deprocessing, truncation of data load, etc., which can effectively reduce the performance pressure of back-end analysis system.

3. Collection link flow model visual monitoring and analysis.

The system supports real-time flow visualization monitoring of each acquisition link and output link, historical flow trend query, flow model self-learning machine modeling and analysis, alarm based on flow model and other advanced flow model visualization.

The recommended Network Packet Broker type with MATRIX NetInsight™ Network Visibility Platform:

NetInsight™ Network Packet Broker System Module