Visibility Solutions

Garland Technology is committed to educating the benefits of having a strong foundation of network visibility and access. By providing this insight we protect the security of data across your network and beyond.

Resources

Garland Technology's resource library offers free use of white papers, eBooks, use cases, infographics, data sheets, video demos and more.

Blog

The TAP into Technology blog provides the latest news and insights on network access and visibility, including: network security, network monitoring and appliance connectivity and guest blogs from Industry experts and technology partners

Partners

Our extensive technology partnership ecosystem solves critical problems when it comes to network security, monitoring, application analysis, forensics and packet inspection.

Company

Garland Technology is dedicated to high standards in quality and reliability, while delivering the greatest economical solutions for enterprise, service providers, and government agencies worldwide.

Contact

Whether you are ready to make a network TAP your foundation of visibility or just have questions, please contact us. Ask us about the Garland Difference!

Blogheader image.png

TAP Into Technology

Leading the Way in Network Technology

Making a Case for Network TAPs to Provide Digital Legal Evidence

Posted by Kumar Rajaram | 11/5/19 8:00 AM

Sometimes we come across interesting requests from customers that are outside the normal security and monitoring applications within data centers or branch office locations. Recently, a law enforcement agency reached out to Garland Technology with a question as to whether our Network TAPs could assist them in obtaining sound digital evidence for a trial. This is a great example of lawful intercept, a scenario when a government law enforcement agency is granted legal means to obtain communications network data pursuant to lawful authority for the purpose of analysis or evidence. It’s a similar concept to the examples you see in movies or television shows where the FBI gets a warrant to tap the phone line of someone under a federal investigation, except in this instance, we’re tapping the network data. 

Making a Case for Network TAPs 

The Network TAP (test access point) transmits both the send and receive data streams simultaneously on separate dedicated channels, ensuring all data arrives at the monitoring device in real time - 100% of the time. Because TAPs ensure 100% of the data arrives at the monitoring tool, they are CALEA approved for lawful intercept cases over SPAN ports.

The SPAN port on a switch, also sometimes called a mirror port, will drop packets when ports are oversubscribed and can cause distortions in real time communications like VoIP and video chats. Since the data cannot be trusted 100% of the time, they are not a reliable option for lawful intercept cases. 

Garland Technology + SYNESIS for Lawful Interception

In this instance, the law enforcement agency had already determined that they wanted to use a SYNESIS network packet recorder to ensure high speed data capture of the live network data. A network recorder is a specialized hardware appliance that has filtering capabilities that can be programmed to look for all the data packets associated with a target’s IP address, and then records that information in a digital format. Network recorder tools must have the ability to capture and store extremely large amounts of data, with advanced ones storing amounts in the petabyte range.

The law enforcement agency was looking for a way to properly capture and store data according to warrant parameters, while delivering data directly from the source to the mediation device without any human intervention or packet loss. In lawful intercept cases it’s important to be sure that the traffic feeding the packet recorder adheres to specific regulations providing clear access to all data without any loss of information or impact on the network being monitored. 

That’s why the agency turned to Garland. We have a long standing relationship with Toyo and have worked with their SYNESIS tool many times. We were able to deliver an integration solution that combines Garland’s Network TAPs that deliver a 100% complete full-duplex copy of network traffic without packet loss, to the SYNESIS network packet recorder. SYNESIS is the only solution available in the market today that can record and collect 100G traffic without losing a single bit. Using TAPs instead of SPAN ports ensures that the packet recorder didn’t sacrifice high fidelity lossless packet capture performance, regardless of the network speed. 

Toyo Lawful Intercept

The integrated solution provided the law enforcement agency with two critical components, the TAPs and network recorder appliances, both of which are needed for successful lawful interception. If the solution were unable to access and record data completely at network speeds up to 100G, it would compromise the integrity of the surveyed data. And more importantly the incomplete data captures likely wouldn’t hold up in court. 

It isn’t every day we get to collaborate on such interesting cases. It’s solutions and applications like these that make my job fun. Now if I only knew what cases they were using our TAPs to help solve, that would be really interesting!

Topics: Network TAPs, TAPs vs SPAN, Network Visibility/Monitoring, Technology Partners

Written by Kumar Rajaram

Kumar Rajaram is the Regional Director for APAC at Garland Technology in Australia. Kumar is passionate towards solving network visibility problems to customers across Asia Pacific.