High Density Network TAP for Bank Data Center Traffic Monitoring and Business Awareness Project

Network TAP for Bank Data Center Network Visibility Traffic Monitoring and Business Awareness Project

1. Overviews

2. Intelligent Traffic Processing Abilities​(Part)

ASIC Chip Plus Multicore CPU

480Gbps intelligent traffic processing capabilities

10GE Data Capture

10GE 48 ports, Max 24*10GE ports Rx/Tx duplex processing, up to 480Gbps Traffic Data Transceiver at same time, for network Data Acquisition, simple Pre-processing

Data Replication

Packet replicated from 1 port to multiple N ports, or multiple N ports aggregated, then replicated to multiple M ports

Data Aggregation

Packet replicated from 1 port to multiple N ports, or multiple N ports aggregated, then replicated to multiple M ports

Real-time Traffic Trend Monitoring

Supported real-time monitoring and statistics on port-level and policy-level data traffic, to show the RX / TX rate, receive / send bytes, No., RX / TX the number of errors, the maximum income / hair rate and other key indicators.

NetTAP® Visibility Platform

Supported NetTAP® Matrix-SDN Visual Control Platform Access

1+1 Redundant Power System(RPS)

Supported 1+1 Dual Redundant Power System

NT-FTAP-48XE Network TAP NPB.pdf

4. Typical Application Structures

A Bank Data Center Network Traffic Monitoring and Business Awareness Monitoring Project

According to the user's business needs and system status, xx NT-FTAP-48XE and xx NT-FTAP-40XG-DPI network taps are used for service networking to collect user-wide data. Among them, xx NT-FTAP-48XEs are used as access devices to collect xx 10-Gigabit mirroring ports on the entire network. The collected traffic is filtered based on multiple combinations of IP quintuples, packet characteristics, and fixed field offsets. Xx NT-FTAP-40XG-DPI as an aggregation device aggregates the filtered traffic of the access device, and then decomposes the aggregated traffic through deduplication, slicing, desensitization, timestamp marking, and application layer protocol identification. Processing; xx NT-FTAP-48XE as a unified distribution equipment, through the collection of aggregated equipment after the deep processing of traffic, and then according to the monitoring needs of the back-end monitoring and analysis equipment, to allocate the corresponding traffic, maximum support xx 10Gigabit ports ( It can be backward compatible with Gigabit as the output port of the back-end monitoring and analysis equipment, and provides strong data distribution support for the network traffic monitoring and analysis project of the Guangdong Development Bank's data center.

The NetTAP® Data Masking Technology for Banking Application as following:

The deployment NetTAP® device is nt-ftap-48xe desensitization application is shown above for the traffic in the network, the network load of the data may contain the card number, id number and other sensitive information. The user is worried about the leakage of data by the back-end analysis system, which may cause unnecessary problems. The user can desensitize the traffic and then output it to the back-end analysis system.This application USES application of Network TAP for Bank Data Center Network Traffic Monitoring and Business Awareness Monitoring Project to desensitization replacement of sensitive information, such as id card number or other sensitive information values (such as 0 xababab) output after replacement, it support the rules of the regular expression matching keywords, to replace any key fields within the original data, shielding sensitive information, in order to achieve output can be determined according to the user to configure the implementation flow strategy.

5. Specifications