NetTAP Multirate Modularized Bypass Protector Bypass TAP and Inline Ethernet TAP

NetTAP Multirate Modularized Bypass Protector Bypass TAP and Inline Ethernet TAP

1.Overviews

With the rapid development of the Internet, the threat of network information security is becoming more and more serious, so a variety of information security protection applications are used more and more widely. Whether it is traditional access control equipment (firewall) or a new type of more advanced protection means such as intrusion prevention system (IPS),Unified threat management platform (UTM), Anti-denial service attack system (Anti-DDoS), Anti-spam Gateway, Unified DPI Traffic Identification and Control System, and many security devices are deployed in series in the network key nodes, the implementation of the corresponding data security policy to identify and deal with legal / illegal traffic. At the same time, however, the computer network will generate a large network delay or even network disruption in the case of fail over, maintenance, upgrade, equipment replacement and so on in a highly reliable production network application environment, users cannot stand it.

Real Product Picture
- with 1*10G modular +1*40G modular +1*100G monitoring module
- The first and second slot can insert bypass modular, the third slot insert monitoring modular bypass
- Customer can choose 10G/40G/100G bypass/monitoring modular flexibly as they need

Monitoring module:MON-MOD-L16XG with 16*10G monitoring ports

10G bypass configuration

100G bypass module configuration

2. Main Features

Wire speed-Inline-protecting

Inline protect based on specific traffic (ACL)

Multiple-Link Protector；

Bypass switch lower delay(8ms)；

Custom-format heartbeat packet checking；

Service-Level Healthy-checking

Load-balance inline deployment

Support multiple security inline device protect

Vlan-TAG/TRANSLATE /untagged support

Remote & local management ；

Dual-Power / DC/ AC support

Modularize design : flexible support 10G/40G/100G by replacing bypass module

BYPASS MODULE

MONITOR MODULE

3. Intelligent Bypass Swtich Application Solution​

Link Series Device Protection

Figure 1: Policy Flow Traction Protector Normal Working Data Stream

Figure 2: Policy Traffic Traction Protector Bypass Switch Data Flow

As shown in Figures 1 and 2, the NetTAP® "Policy Traffic Traction Protector" is deployed in series between network devices (routers, switches, etc.), and the data flow between network devices no longer leads directly to IPS / FW, NetTAP® "policy traction protector" to IPS / FW, when the IPS / FW due to overload, crash, software updates, policy updates and other conditions of failure, the "bypass switch" through intelligent heartbeat message detection Function of the timely discovery, and thus skip the faulty device, without interrupting the premise of the network, the rapid network equipment directly connected to protect the normal communication network; when the IPS / FW failure recovery, but also through intelligent heartbeat packets Detection of timely detection of the function, the original link to restore the security of enterprise network security checks.

NetTAP® "Bypass switch" has a powerful intelligent heartbeat message detection function, the user can customize the heartbeat interval and the maximum number of retries, through a custom heartbeat message on the IPS / FW for health testing, such as send the heartbeat check message to the upstream / downstream port of IPS / FW, and then receive from the upstream / downstream port of IPS / FW, and judge whether the IPS / FW is working normally by sending and receiving the heartbeat message.

NT-MBYP-CHS Bypass Switch.pdf