In our 101 network TAP series, we have explained the functionality of the various network TAPs that are available to gain access to the traffic that is typically found in a network. We have reviewed passive fiber TAPs, copper network TAPs, aggregation TAPs, SPAN/regeneration TAPs and the bypass TAP.
Now we have a new 1U or 2U Chassis System that supports our filtering TAPs – which for you, means an affordable 1G Packet Broker System that can do it all in one box.
Read on to see what filtering can do for your network…
A network TAP will copy all of your data – every bit, byte and packet on your network. But often your tools don’t need to see everything. Your VoIP or Wireshark only needs to see the traffic required to do it's job. In this case we need to add the additional technology of filtering. When we are not interested in all the traffic that is going through the link, we can filter out what is not required by the tool – this ensures we will not oversubscribe the monitor ports.
This scenario (below) shows four 1G links with a filter applied and then aggregated together and sent out port D on TAP four to the monitoring or security tool.
Port Mapping for Maximum Efficiency
Port mapping (aka: filtering backplane) on the new 1G Chassis System is an important feature because it allows you to aggregate low traffic links such as 1G VoIP links together. You can aggregate up to four 1G links to send to a VoIP analyzer and use only 1 port on the analyzer. This benefit minimizes of the number of monitor ports required on the monitoring tools and appliances.
Of course, when aggregating the traffic of multiple links there is the possibility of oversubscribing the TAP’s monitoring ports. To eliminate the possibility of oversubscribing we need to filter out the traffic that the monitoring appliances are not interested in, we do this with rule-based filters (see below). We also have the option to not apply a filter by sending all the data to a critical appliance like an intrusion detection system (IDS).
Smart Filtering and Aggregation
The 1G Modular Chassis System with Garland’s new filtering TAP provides the capability of filtering network traffic at Layers 2, 3 and 4 of a packet. Providing the monitoring tools with only the traffic that they are interested in and creating efficiency to do only the processing they are designed for.
So, being able to aggregate the links together is good and then filtering out the traffic that the monitoring appliances are not interested in is better.
Today's blog is all about the filtering capabilities in our new chassis system. However, this new 1G wonder box can do it all because it supports all of Garland's modular TAPs, including: copper network TAPs, aggregation TAPs, SPAN/regeneration TAPs and bypass TAPs.
Garland Technology's, The 101 Series is an educational series on how network TAPs work and the different functions they provide to the overall network design for access and visibility.
[Want more about filtering? Watch our training video The 101 Series on Filtering]