Designed to redefine how you approach your network, Garland Technology is excited to announce the launch of two new products to our purpose-built packet broker line. These products were specifically created to address critical needs of our customers: high density TAP aggregation and speed conversion, and the need for advanced features such as deduplication.
At Garland Technology we’ve taken the approach to deconstructing the network packet broker. With significant investment in security and monitoring tools, we recognize the need for a flexible, scalable, cost effective solution that is compatible with your network today and in the future.
We developed the Advanced Features devices as a hardware supplement to provide advanced features for both inline and out-of-band applications. The system supports deep window deduplication, NTP time stamping, and configurable packet slicing, which extends the feature set of any product. The Advanced Features systems aims at reducing the overall volume of traffic sent to security and monitoring tools, which decreases the possibility of oversubscription.
Deduplication: Network visibility fabrics are sensitive to duplicate packets, which can negatively impact application and performance monitoring tools from performing their core function. Monitoring networks can see up to 55% duplicate traffic, which reduces packet capture time from 24 hours to 12 hours. Additionally, all tools need CPU and memory resources, which are wasted by duplicate traffic, overloading the tool, and halting analysis.
Packet Slicing: With the removal of the payload of the packet, the unnecessary strain in NPM applications is eliminated.
Time Stamping: Timestamping packets when they enter the visibility fabric is a common requirement for security and performance monitoring applications.
The Advanced Features system can be added to any existing infrastructure or new install, increasing pre-tool bandwidth reduction. This system is made for flexibility; a scalable packet processing system that adds value when and where needed.

Diagram 1: Deduplication
Garland’s Advanced Aggregators improve ROI by reducing the total cost of a network visibility fabric and increasing the efficiency of existing infrastructure. The 100G 64 port Advanced Aggregator is a purpose built network aggregator, designed to be used at the network edge or in top-of-rack applications where port utilization tends to be low.
The system provides high density TAP aggregation and speed conversion, with up to 256 10G interfaces that can be managed on a single platform, reducing the need for central management and multiple systems.
Garland’s Advanced Aggregators are also capable of pre-filtering traffic prior to sending out to NPBs for advanced filtering, or taking the place of packet brokers in applications where only L2-L4 filtering is required.
Garland Technology’s best-in-class Network TAP and purpose built Packet Broker solutions provide an innovative, industry leading 360° view for modern visibility fabrics. Our unique adaptability makes it easy to deploy what you need, when you need it, and by adding value to existing infrastructure.

Diagram 2: High Density TAP Aggregation
[Want to learn more? Schedule a quick demo of the PacketMAX: 10G Advanced Features or PacketMAX: 100G 64 Port Advanced Aggregator today.]
If the inline security tool goes off-line, the TAP will bypass the tool and automatically keep the link flowing. The Bypass TAP does this by sending heartbeat packets to the inline security tool. As long as the inline security tool is on-line, the heartbeat packets will be returned to the TAP, and the link traffic will continue to flow through the inline security tool.
If the heartbeat packets are not returned to the TAP (indicating that the inline security tool has gone off-line), the TAP will automatically 'bypass' the inline security tool and keep the link traffic flowing. The TAP also removes the heartbeat packets before sending the network traffic back onto the critical link.
While the TAP is in bypass mode, it continues to send heartbeat packets out to the inline security tool so that once the tool is back on-line, it will begin returning the heartbeat packets back to the TAP indicating that the tool is ready to go back to work. The TAP will then direct the network traffic back through the inline security tool along with the heartbeat packets placing the tool back inline.
Some of you may have noticed a flaw in the logic behind this solution! You say, “What if the TAP should fail because it is also in-line? Then the link will also fail!” The TAP would now be considered a point of failure. That is a good catch – but in our blog on Bypass vs. Failsafe, I explained that if a TAP were to fail or lose power, it must provide failsafe protection to the link it is attached to. So our network TAP will go into Failsafe mode keeping the link flowing.
Single point of failure: a risk to an IT network if one part of the system brings down a larger part of the entire system.
Heartbeat packet: a soft detection technology that monitors the health of inline appliances. Read the heartbeat packet blog here.
Critical link: the connection between two or more network devices or appliances that if the connection fails then the network is disrupted.