Network Bypass TAP kapena Network Bypass Switch Imapereka mapaketi a Heartbeats a Inline Security Appliance

TheNetwork Bypass Tap, yomwe imatchedwanso "Network Bypass switch", imapereka kuthekera koyang'anira kupezeka ndi kudalirika kwa chida chanu chapakati (IPS, WAF, FW / firewalls) nthawi iliyonse popanda kutsika kwa netiweki kapena kukhudza kupezeka kwa bizinesi pakukonza kapena kukweza.

Network Bypass Tap (Network Bypass Switch) imakhala yosasinthasinthaMapaketi a Heartbeatszomwe zimatumizidwa kuInline Security Appliance.Kugunda kwamtima uku kumawonetsa magwiridwe antchito a Inline Security Appliance: kugunda pafupipafupi kumatanthauzaDulani TAPikugwira ntchito bwino.Ngati kumenyedwa sikubwereranso kuDulani TAPTAP imangodumpha chipangizocho kuti mapaketi atumizidwe, mosasamala kanthu za kuchuluka kwa magalimoto.Imathanso kudziwa momwe chipangizocho chilili, chifukwa chake ikabweranso pa intaneti, izi zimazindikirika ndi TAP ndipo kuchuluka kwa magalimoto kumayendetsedwanso kudzera pa chipangizocho.

Network Bypass Tap "Inline Management" imakupatsani mwayi wopanga zida zatsopano za sandbox, kusanja zosintha, kukhazikitsa zigamba, kukonza kapena kuthetsa mavuto ndikutsimikizira kunja kwa gulu, osakhudza maulalo omwe alipo.

Chifukwa cha luso lathu komanso ntchito zathu zabwino, tadziwika kuti ndife ogulitsa odalirika kwa ogula ambiri apadziko lonse lapansi a Network Bypass TAP kapena Network Bypass Switch Amapereka Paketi Zapamtima pa Inline Security Appliance, Kampani yathu ikuyembekezera mwachidwi kukhazikitsa mabizinesi anthawi yayitali komanso othandiza. kuyanjana ndi makasitomala ndi mabizinesi ochokera padziko lonse lapansi.
Ndi chidziwitso chathu cholemera ndi ntchito zoganizira, tadziwika ngati ogulitsa odalirika kwa ogula ambiri apadziko lonse lapansiBypass TAP Network Bypass switch, Mapaketi a Heartbeats, Inline Security Appliance, Network Bypass Tap, Zogulitsa zathu zimatumizidwa ku Southeast Asia, Middle East, North America ndi Europe.Ubwino wathu ndi wotsimikizika.Ngati muli ndi chidwi ndi chilichonse mwazinthu zathu kapena mukufuna kukambirana za dongosolo, muyenera kukhala omasuka kutilankhula nafe.Tikuyembekezera kupanga ubale wabwino wamabizinesi ndi makasitomala atsopano padziko lonse lapansi posachedwa.

1- mwachidule

Pogwiritsa ntchito Mylinking™ Smart Bypass Switch:

• Ogwiritsa ntchito amatha kukhazikitsa / kuchotsa zida zotetezera mosavuta ndipo sizingakhudze maukonde omwe alipo komanso kusokoneza;
• Mylinking ™ Network Tap Bypass Switch yokhala ndi ntchito yozindikira thanzi lanzeru kuti iwonetsere nthawi yeniyeni momwe ingagwiritsire ntchito chida chachitetezo cha serial, chipangizocho chikangogwira ntchito, chitetezocho chimangodutsa kuti chisungike kulumikizana kwapaintaneti;
• Tekinoloje yosankha chitetezo chamsewu ingagwiritsidwe ntchito kuyika zida zachitetezo chamsewu, ukadaulo wa encryption potengera zida zowunikira.Mogwira ntchito siriyo kupeza chitetezo kwa enieni magalimoto mtundu, kutsitsa otaya akuchitira kuthamanga kwa mndandanda chipangizo;
• Ukadaulo wa Load Balanced Traffic Protection utha kugwiritsidwa ntchito pophatikiza zida zotetezedwa kuti zikwaniritse kufunikira kwachitetezo chamseri m'malo okwera kwambiri.

Ndi chitukuko chofulumira cha intaneti, chiwopsezo chachitetezo chazidziwitso zapaintaneti chikukulirakulira, motero njira zosiyanasiyana zotetezera zidziwitso zimagwiritsidwa ntchito mochulukira.Kaya ndi zida zachikhalidwe zowongolera anthu (firewall) kapena mtundu watsopano wachitetezo chapamwamba kwambiri monga njira yopewera kulowerera (IPS), nsanja yolumikizana yowopsa (UTM), Anti-denial service attack system (Anti-DDoS), Anti- span Gateway, Unified DPI Traffic Identification and Control System, ndi zida zambiri zachitetezo zimayikidwa motsatizana pamakiyi achinsinsi, kukhazikitsidwa kwa mfundo zofananira zachitetezo cha data kuti zizindikire ndikuthana ndi magalimoto ovomerezeka / osaloledwa.Panthawi imodzimodziyo, makompyuta a makompyuta adzapanga kuchedwa kwakukulu kwa maukonde kapena kusokonezeka kwa maukonde pamene akulephera, kukonza, kukweza, kukonzanso zipangizo ndi zina zotero mu malo odalirika kwambiri opangira maukonde, ogwiritsa ntchito sangathe kupirira.

2- Network Tap Bypass Switch Advanced Features and Technologies

Mylinking™ "SpecFlow" Njira Yotetezera ndi "FullLink" Chitetezo cha Njira Yotetezera
Mylinking™ Fast Bypass Switching Protection Technology Technology
Mylinking™ "LinkSafeSwitch" Technology
Mylinking™ "WebService" Dynamic Strategy Forwarding/Issue Technology
Mylinking™ Intelligent Heartbeat Message Detection Technology
Mylinking™ Definable Heartbeat Messages Technology
Mylinking™ Multi-link Load Balancing Technology
Mylinking™ Intelligent Traffic Distribution Technology
Mylinking™ Dynamic Load Balancing Technology
Mylinking™ Remote Management Technology (HTTP/WEB, TELNET/SSH, “EasyConfig/AdvanceConfig” Khalidwe)

3- Network Tap Bypass Switch Configuration Guide

BYPASSChitetezo cha Port Module Slot:
Malowa amatha kuyikidwa mu gawo lachitetezo cha BYPASS chokhala ndi liwiro losiyana / nambala yadoko.Mwa kusintha mitundu yosiyanasiyana ya ma modules, imatha kuthandizira chitetezo cha BYPASS cha maulalo angapo a 10G/40G/100G.

ONANIPort Module Slot;
Malowa amatha kuyikidwa mu gawo la MONITOR port yokhala ndi liwiro / madoko osiyanasiyana.Itha kuthandizira angapo 10G/40G/100G ulalo pa intaneti serial monitoring chipangizo kuyika m'malo mitundu yosiyanasiyana.

Malamulo Osankhira Ma module
Kutengera maulalo osiyanasiyana omwe atumizidwa ndi kuyang'anira zida zowunikira, mutha kusankha masinthidwe osiyanasiyana kuti mukwaniritse zosowa zanu zenizeni;chonde tsatirani malamulo otsatirawa posankha:
1. Zida za chassis ndizovomerezeka ndipo muyenera kusankha zida za chassis musanasankhe ma module ena.Nthawi yomweyo, chonde sankhani njira zosiyanasiyana zamagetsi (AC/DC) malinga ndi zosowa zanu.
2. Makina onse amathandizira mpaka 2 BYPASS module slots ndi 1 MONITOR module slot;simungasankhe kuposa kuchuluka kwa mipata kuti musinthe.Malingana ndi kuphatikiza kwa chiwerengero cha mipata ndi chitsanzo cha module, chipangizochi chikhoza kuthandizira mpaka zinayi zotetezedwa za 10GE;kapena imatha kuthandizira maulalo anayi a 40GE;kapena ikhoza kuthandizira ulalo umodzi wa 100GE.
3. Mtundu wa module "BYP-MOD-L1CG" ukhoza kuikidwa mu SLOT1 kuti ugwire ntchito bwino.
4. Mtundu wa module "BYP-MOD-XXX" ukhoza kulowetsedwa mu gawo la module la BYPASS;mtundu wa module "MON-MOD-XXX" ukhoza kulowetsedwa mu MONITOR module slot kuti igwire bwino ntchito.

4- Zosintha za Network TAP Bypass

5- Network TAP Bypass Switch Application (monga izi)

Zotsatirazi ndizofanana ndi IPS (Intrusion Prevention System), FW (Firewall) njira yotumizira, IPS / FW imayikidwa motsatizana ndi zida za netiweki (ma router, masiwichi, ndi zina) pakati pa magalimoto kudzera pakukhazikitsa macheke achitetezo, malinga ndi ndondomeko yokhudzana ndi chitetezo kuti mudziwe kumasulidwa kapena kutsekereza magalimoto ogwirizana, kuti akwaniritse zotsatira za chitetezo.

Nthawi yomweyo, titha kuwona IPS / FW ngati kutumizidwa kwa zida, zomwe nthawi zambiri zimayikidwa pamalo ofunikira mabizinesi kuti akwaniritse chitetezo chamseri, kudalirika kwa zida zake zolumikizidwa kumakhudzanso kupezeka kwamabizinesi onse.Zida zambiri zikangochulukira, kuwonongeka, zosintha zamapulogalamu, zosintha zamalamulo, ndi zina zambiri, kupezeka kwa netiweki yamabizinesi kumakhudzidwa kwambiri.Panthawiyi, timangodula maukonde, kudumpha kwa thupi kumatha kupangitsa kuti maukonde abwezeretsedwe, zomwe zimakhudza kwambiri kudalirika kwa intaneti.IPS / FW ndi zipangizo zina siriyo mbali imodzi bwino kutumizidwa kwa ogwira ntchito maukonde chitetezo, Komano amachepetsa kudalirika kwa maukonde ogwira ntchito, kuwonjezera chiopsezo maukonde palibe.

5.2 Inline Link Series Chitetezo cha Zida

Mylinking ™ "Bypass Switch" imayikidwa motsatizana pakati pa zida za netiweki (ma router, masiwichi, ndi zina), ndipo kuyenda kwa data pakati pa zida za netiweki sikukutsogolerenso ku IPS / FW, "Bypass Switch" kupita ku IPS / FW, pomwe IPS. / FW chifukwa chakuchulukirachulukira, kuwonongeka, zosintha zamapulogalamu, zosintha zamalamulo ndi zina zolephera, "Bypass Switch" kudzera pakuzindikira uthenga wamtima wanzeru Ntchito yopezeka munthawi yake, ndipo motero kudumpha chipangizo cholakwika, osasokoneza maziko a netiweki, zida zolumikizirana mwachangu zomwe zimalumikizidwa mwachindunji kuti ziteteze maukonde olumikizana bwino;pamene IPS / FW kulephera kuchira, komanso mwa mapaketi wanzeru kugunda kwa mtima Kuzindikira nthawi yake kudziwika ntchito, ulalo choyambirira kubwezeretsa chitetezo macheke ogwira ntchito maukonde chitetezo.

Mylinking ™ "Bypass Switch" ili ndi ntchito yozindikira kugunda kwamtima kwanzeru, wogwiritsa ntchito amatha kusintha momwe kugunda kwamtima kumakhalira komanso kuchuluka kwa zoyesereranso, kudzera mu uthenga wa kugunda kwamtima pa IPS / FW pakuyezetsa thanzi, monga kutumiza uthenga wotsimikizira kugunda kwamtima. kupita kumtunda / kumtunda kwa doko la IPS / FW, ndiyeno mulandire kuchokera kumtunda / kumtunda kwa doko la IPS / FW, ndikuweruza ngati IPS / FW ikugwira ntchito mwachizolowezi potumiza ndi kulandira uthenga wamtima.

5.3 "SpecFlow" Policy Flow Inline Traction Series Chitetezo

Pamene chipangizo chachitetezo chachitetezo chimangofunika kuthana ndi kuchuluka kwamtundu wachitetezo chachitetezo chamndandanda, kudzera pa Mylinking ™ "Bypass Switch" ntchito yosinthira magalimoto, kudzera munjira yowunikira magalimoto kuti mulumikizane ndi chipangizo chachitetezo " Okhudzidwa "magalimoto amatumizidwa mwachindunji. ku ulalo wa netiweki, ndipo" gawo lokhudzidwa la traffic "ndikutengera chipangizo chachitetezo chapamzere kuti chifufuze zachitetezo.Izi sizidzangosunga ntchito yodziwika bwino ya chitetezo cha chitetezo cha chipangizo cha chitetezo, komanso kuchepetsa kuyenda kosakwanira kwa zida zotetezera kuti zithetse kupanikizika;nthawi yomweyo, "Bypass Switch" imatha kuzindikira momwe chipangizocho chikugwirira ntchito munthawi yeniyeni.Chipangizo chachitetezo chimagwira ntchito modabwitsa podutsa kuchuluka kwa data mwachindunji kuti zisasokonezeke pa intaneti.

Mylinking ™ Traffic Bypass Protector imatha kuzindikira kuchuluka kwa magalimoto potengera chizindikiritso chamutu cha L2-L4, monga tag ya VLAN, gwero / kopita adilesi ya MAC, adilesi ya IP, mtundu wa paketi ya IP, doko la protocol yoyendetsa, chizindikiro chamutu wa protocol, ndi zina zotero. pa.Mitundu yosiyanasiyana yofananira yosakanikirana imatha kufotokozedwa momveka bwino kuti ifotokoze mitundu yamtundu wamayendedwe omwe ali ndi chidwi ndi chida china chachitetezo ndipo angagwiritsidwe ntchito kwambiri popereka zida zapadera zowunikira chitetezo (RDP, SSH, kuwunika kwa database, ndi zina). .

5.4 Katundu wokhazikika wa Chitetezo cha Series

Mylinking ™ "Bypass Switch" imayikidwa motsatizana pakati pa zida za netiweki (ma router, ma switch, ndi zina).Pamene imodzi IPS / FW processing ntchito sikokwanira kuthana ndi ulalo ulalo nsonga kuchuluka kwa magalimoto, The traffic katundu kugwirizanitsa ntchito ya mtetezi, ndi "bundling" angapo IPS / FW masango processing maulalo ulalo magalimoto, akhoza bwino kuchepetsa limodzi IPS / FW processing pressure, kupititsa patsogolo ntchito yonse ya processing kuti ikwaniritse bandwidth yapamwamba ya Deployment environment Claim.

Mylinking ™ "Bypass Switch" ili ndi ntchito yamphamvu yolumikizira katundu, malinga ndi tag ya VLAN, chidziwitso cha MAC, chidziwitso cha IP, nambala ya doko, protocol ndi zidziwitso zina pa Hash load balancing distribution of traffic kuonetsetsa kuti IPS / FW iliyonse ilandila data. flow Gawo kukhulupirika.

5.5 Multi-Series Inline Equipment Flow Traction Protection (Sinthani Connection seriyoni ku Parallel Connection)
Mu maulalo ena ofunikira (monga malo ogulitsira pa intaneti, ulalo wa kusinthana kwa malo a seva) nthawi zambiri amakhala chifukwa cha zofunikira zachitetezo ndikuyika zida zingapo zoyezera chitetezo (monga firewall, anti-DDOS attack equipment, WEB application firewall). , Zida zopewera kulowerera, ndi zina zotero), zida zodziwira chitetezo zambiri panthawi imodzimodzi pamndandanda pa ulalo kuti muwonjezere ulalo wa mfundo imodzi yolephera, kuchepetsa kudalirika kwathunthu kwa intaneti.Ndipo pazida zachitetezo zomwe tatchulazi pa intaneti, kukweza zida, kusinthira zida ndi ntchito zina, zipangitsa kuti maukonde asokonezeke kwa nthawi yayitali komanso ntchito yayikulu yodula ntchito kuti amalize kukhazikitsa bwino ntchito zotere.

Potumiza "Bypass Switch" molumikizana, njira yotumizira zida zingapo zotetezedwa zolumikizidwa pamndandanda womwewo zitha kusinthidwa kuchoka ku "kulumikizana kwathupi" kupita ku "kulumikizana kwakuthupi, kulumikizana koyenera" Ulalo womwe uli pa ulalo wa nsonga imodzi yolephera kupititsa patsogolo kudalirika kwa ulalo, pomwe "cholumikizira cholambalala" pamalumikizidwe akuyenda pamayendedwe ofunikira, kuti mukwaniritse kuyenderera komweko ndi njira yoyambira yoyendetsera bwino.

Zida zopitilira chitetezo chimodzi nthawi imodzi pamndandanda wotumizira:

Chithunzi cha Mylinking™ Network TAP Bypass Switch Deployment:

5.6 Kutengera ndi Dynamic Strategy of Traffic Traction Security Detection Protection
"Bypass Switch" Zochitika zina zotsogola zimatengera njira yachitetezo chachitetezo chodziwikiratu pamsewu, kuyika momwe zikuwonekera pansipa:

Tengani zida zoyezera chitetezo cha "Anti-DDoS attack and kuzindikira", mwachitsanzo, kudzera kumapeto kwa "Bypass Switch" kenako zida zotetezera zotsutsana ndi DDOS ndikulumikizidwa ndi " Bypass Switch ", mwachizolowezi " Woteteza kukoka "kuchuluka kwa magalimoto otumizira mawaya-liwiro nthawi yomweyo kutulutsa kalirole wopita ku" anti-DDOS chida chodzitchinjiriza ", chomwe chidapezeka pa seva IP (kapena gawo la netiweki ya IP) pambuyo pa kuukira," anti -Chida chodzitetezera cha DDOS "chipanga malamulo ofananira ndi magalimoto omwe akuyenda ndikuzitumiza ku "Bypass Switch" kudzera panjira yoyendetsera mfundo."Bypass Switch" ikhoza kusinthira "kuthamanga kwa magalimoto" pambuyo polandira malamulo amphamvu a Rule pool "ndipo nthawi yomweyo" lamulo linagunda pa seva yowukira "kutengera" anti-DDoS chitetezo chitetezo ndi kuzindikira "zida zogwirira ntchito, kuti zikhale ogwira pambuyo kuukira otaya ndiyeno kachiwiri jekeseni mu maukonde.

Dongosolo logwiritsa ntchito "Bypass Switch" ndilosavuta kugwiritsa ntchito kuposa jakisoni wanthawi zonse wa BGP kapena njira ina yotsatsira magalimoto, ndipo chilengedwe sichidalira maukonde ndipo kudalirika ndikokwera.

"Bypass Switch" ili ndi zotsatirazi kuti zithandizire chitetezo chodziwikiratu:
1, "Bypass Switch" kuti apereke kunja kwa malamulo kutengera mawonekedwe a WEBSERIVCE, kuphatikiza kosavuta ndi zida zachitetezo cha chipani chachitatu.
2, "Bypass Switch" kutengera chipangizo choyera cha ASIC chotumizira mpaka mapaketi othamanga pawaya a 10Gbps popanda kutsekereza kutumiza, ndi "laibulale yamayendedwe oyendetsa magalimoto" mosasamala nambala.
3, "Bypass Switch" yomangidwa mwaukadaulo wa BYPASS ntchito, ngakhale mtetezi yekhayo atalephera, amathanso kuzilambalala ulalo woyambirira, sizikhudza ulalo woyambirira wa kulumikizana kwabwinobwino.