NetTAP Multirate Modularized Bypass Protector Bypass TAP and Inline
Ethernet TAP with 16 * 10G Monitoring Ports
1.Overviews
With the rapid development of the Internet, the threat of network
information security is becoming more and more serious, so a
variety of information security protection applications are used
more and more widely. Whether it is traditional access control
equipment (firewall) or a new type of more advanced protection
means such as intrusion prevention system (IPS),Unified threat
management platform (UTM), Anti-denial service attack system
(Anti-DDoS), Anti-spam Gateway, Unified DPI Traffic Identification
and Control System, and many security devices are deployed in
series in the network key nodes, the implementation of the
corresponding data security policy to identify and deal with legal
/ illegal traffic. At the same time, however, the computer network
will generate a large network delay or even network disruption in
the case of fail over, maintenance, upgrade, equipment replacement
and so on in a highly reliable production network application
environment, users cannot stand it.
Real Product Picture
- with 1*10G modular +1*40G modular +1*100G monitoring module
- The first and second slot can insert bypass modular, the third
slot insert monitoring modular bypass
- Customer can choose 10G/40G/100G bypass/monitoring modular
flexibly as they need
Monitoring Module: MON-MOD-L16XG with 16*10G monitoring Ports
2. Main Features
Wire speed-Inline-protecting
Inline protect based on specific traffic (ACL)
Multiple-Link Protector；
Bypass switch lower delay(8ms)；
Custom-format heartbeat packet checking；
Service-Level Healthy-checking
Load-balance inline deployment
Support multiple security inline device protect
Vlan-TAG/TRANSLATE /untagged support
Remote & local management ；
Dual-Power / DC/ AC support
Modularize design : flexible support 10G/40G/100G by replacing
bypass module
BYPASS MODULE
| BYP-MOD-L2XG | BYP-MOD-L1CG | BYP-MOD-L1QXG |
| Links supporting | 2*10G links inline bypass module | 1*100G links inline bypass module | 2*40G links inline bypass module |
| Maximum module number inserted in a Chassis | 2 unit | 1 unit | 2 unit |
MONITOR MODULE
| MON-MOD-L16XG | MON-MOD-L8XG | MON-MOD-L2CG | MON-MOD-L8QXG |
| Monitor ports | 16 * 10G monitoring ports | 8* 10G monitoring ports | 2 * 100G monitoring ports | 8*40G monitoring ports |
| Maximum module number inserted in a Chassis | 1 unit | 1 unit | 1 unit | 1 unit |
3. Intelligent Bypass Swtich Application Solution
Link Series Device Protection
Figure 1: Policy Flow Traction Protector Normal Working Data Stream
Figure 2: Policy Traffic Traction Protector Bypass Switch Data Flow
As shown in Figures 1 and 2, the NetTAP® "Policy Traffic Traction
Protector" is deployed in series between network devices (routers,
switches, etc.), and the data flow between network devices no
longer leads directly to IPS / FW, NetTAP® "policy traction
protector" to IPS / FW, when the IPS / FW due to overload, crash,
software updates, policy updates and other conditions of failure,
the "bypass switch" through intelligent heartbeat message detection
Function of the timely discovery, and thus skip the faulty device,
without interrupting the premise of the network, the rapid network
equipment directly connected to protect the normal communication
network; when the IPS / FW failure recovery, but also through
intelligent heartbeat packets Detection of timely detection of the
function, the original link to restore the security of enterprise
network security checks.
NetTAP® "Bypass switch" has a powerful intelligent heartbeat
message detection function, the user can customize the heartbeat
interval and the maximum number of retries, through a custom
heartbeat message on the IPS / FW for health testing, such as send
the heartbeat check message to the upstream / downstream port of
IPS / FW, and then receive from the upstream / downstream port of
IPS / FW, and judge whether the IPS / FW is working normally by
sending and receiving the heartbeat message.
NT-MBYP-CHS Bypass Switch.pdf
