Network Data Broker Government Network Security Services for Data Loss Protection

Network Data Broker for Data Loss Protection Improving Network Security Efficiency

What's Network TAP?

Network TAPs are stand-alone devices that make a mirror copy of all of the traffic that flows between two network end-points (nodes). This can then be output to various network tools, while the live traffic continues to pass through the network.

​What's TAP?

TAPs (test access points) are independent of the network, meaning that they are fully configurable. This allows complex packet manipulation to be performed by security and/or performance tools.

TAPs are the foundation of Smart Network Access, maintaining total visibility across your security and monitoring platforms without compromise.

Live network traffic passes through the TAP, directly into the active tool and back into the network in real time. This allows the tool to analyze the traffic, manipulate packets, stop suspicious packets and take immediate action on the link to block malicious traffic. These tools include Active Firewall and Intrusion prevention systems (IPS/NGFW). The TAP in the active stack has unique bypass technology that sends a heartbeat to the active tool. If the tool goes off line for any reason, the TAP can bypass the tool keeping live network traffic flowing. When the heartbeat returns, traffic automatically returns to normal operation flowing through the tool. Managing and protecting network infrastructure and information requires focus. Each of these devices specializes on a very tight functional range. The example above is by no means a complete list of network monitoring, management and security tool options. There are many purpose built tools for applications such as Data Loss Protection (DLP), Customer Experience Management (CEM), and Identity Access Management (IAM). A simple web search will turn up a wide variety of devices that can be added to these links based on specific threats or required analysis. Having a multiple port TAP foundation allows tools to easily and safely be added, repurposed or changed depending on the immediate needs of the network. There is a logical step by step flow when developing a visibility strategy; access, capture, analyze, secure and remediate if necessary. Ideally, if the right strategy and tools are in place along with other organizational influences to be discussed later, the remediation step will hopefully not be required. However, as is often said, plan for the best but prepare for the worst.

 
Matrix-TCA-CG is a network data visualization control device for high density and large flow of 10G/40G/100G.
Matrix-TCA-CG is specially designed for the data collection of 10GE 40GE and 100GE links distributed intensively in operators mobile Internet export, IDC export, provincial network and backbone.
Based on ATCA standard architecture, MATRIX-TCA-CG has high carrier-level reliability and strong expansibility which can smoothly configure the functional board CARDS to cope with port demand scenarios of various specifications and sizes.

The NTCA-CHS-7U7S is a 7U standard rack height. The chassis adopts the horizontal slot service slot mode. The device supports a total of seven slots, including two switching slots and five service slots. Each slot provides 300W cooling capacity, the chassis uses a pull-type cooling air duct to provide good heat dissipation performance for the whole machine. The backplane adopts a dual-star architecture, providing 200Gbps full-duplex interconnected channels in each switch slot to the service slot. Fully equipped with two switch cards can achieve 400G backplane bandwidth per service slot.

The NTCA-CHS-16U14S is a 16U standard rack height. The chassis adopts the horizontal insertion service slot mode. The whole machine supports 14 card slots, including 4 switching slots and 10 service slots. Each slot provides 300W cooling capacity, the chassis uses a pull-type cooling air duct to provide good heat dissipation performance for the whole machine. The backplane adopts a dual-star architecture, providing independent 100Gbps backplane bandwidth for each switch slot to the service slot. Fully 4 switch cards can provide 400G backplane cross-board bandwidth application per service slot.

NT-TCA-CG10 100G Data Acquisition, Data Capturing and Switch Service Card/Module

Card Interface

Service interface: 10*QSFP28 100G(compatible 40G)interface；Additional 10 QSFP28 100GE interfaces or 24 10GE SFP+ interfaces can be extended via RTM expansion boards.
Management interface: 1*RJ45 interface
CONSOLE interface: 1*RJ45 interface
BASE interface: 2*1000MInter-board communication interface
FABRIC interface: 4*100GService data dedicated transmission interface
IPMC interface: 1*RJ45 interface

Card Function Overview

NT-TCA-CG10 is a multi-function service card that integrates data service collection and aggregation of split output. Card supports:

1- 40G/100G links access and acquisition
2- 40G/100G links aggregation, filtering and diverting
3- 40G/100G links data accurate identification
4- 40G/100G links packets tag
5- Built-in simple ShMC monitors the operating temperature of the card.
6- Complete the data processing policy configuration and execution of this card
7- 4*100GBASE-KR backplane channel can complete Cross-board service input and output.

Network Packet Broker Specification and Module Type