Sleds and toboggans should go downhill, not IT or OT network out-of-band deployments. This blog discusses frequent setbacks the Garland engineering team hears from customers in the field when relying on SPAN mirroring for copies of packets sent to out-of-band tools.
As my son approaches his 3rd birthday, we've loosened up the rules on watching cartoons. Now, we all look forward to Saturday morning cartoons … and pancakes.
Personally, I haven’t watched cartoons in 30 years. Surprisingly, it seems animators are still reusing the same “character rolls down a snowy hill and becomes a giant snowball” bit.
As an adult, I empathize with the character inside the snowball.
I think about IT and OT network tool deployments gone wrong. With one setback after another, the project begins to literally snowball out of control.
Perhaps your installation of a brand new NDR, IDS, or OT security sensors feels like it’s going downhill right now!
People often call us for help when their projects hit setbacks. These are some of the common culprits we hear about:
In response, we generally ask these 6 questions:
A Garland technical engineer will then recommend some options for consideration. Often, a Network TAP or Hardware Data Diode is part of our suggested solution.
TAPs and Hardware Data Diodes come in a wide variety of types and specs, making them a versatile, go-to solution for resolving these situations. They can help you quickly overcome installation delays and avoid disappointing stakeholders.
A TAP is a physical device that sits between two other network appliances (like a switch and router). Traffic flows full speed through the TAP while the device simultaneously copies the packets and sends the duplicates off to monitoring and security tools for further inspection.
Hardware Data Diodes are purpose-built network devices that enforce one-way data flow for Switch Mirror ports with physical hardware separation. They guarantee protection of critical systems, such as industrial control systems (ICS), from inbound cyber threats. Garland Technology’s Hardware Data Diodes ensure any ethernet packet flows in one direction out the monitoring ports.
New cybersecurity tool deployments too often hit setbacks and end up with people on planes. When this happens, you (or your engineer) become the center of the snowball, as the project quickly careens downhill.
There’s a better way! Network TAPs and Hardware Data Diodes can help you gain control over installation delays and also help you avoid last-minute flights (aka the middle seat special) to deal with unexpected setbacks.
Here’s to a setback free 2024. Happy New Year!
