Dualcomm Gigabit Multi-TAP / NST Pro Combos

Low Cost Gigabit Multi-TAPs and Network Surveillance Solutions for the Security Professional

The following solutions are being offered to networking professionals in need of a convenient and low cost method to monitor and capture traffic simultaneously on a two network segments (See article: Multi-TAP Network Packet Capture for additional information):

Gigabit DCGS-2005 Multi-TAP and NST Pro Single License Gigabit DCGS-2005 Multi-TAP and NST Pro Site License
Accessory
Accessory
Gigabit ETAP-2105 Regeneration Multi-TAP and NST Pro Single License Gigabit ETAP-2105 Regeneration Multi-TAP and NST Pro Site License
Accessory
Accessory
Gigabit ETAP-3105 Regeneration Multi-TAP and NST Pro Single License Gigabit ETAP-3105 Regeneration Multi-TAP and NST Pro Site License

Use Case 1: Gigabit Multi-TAP Network Monitor / Capture Across a Firewall Device

The following use case depicts how to setup a "Multi-TAP" configuration to monitor / capture network packets on both sides of a Firewall. Two Dualcomm Technology, Inc gigabit switch TAPs (model: DGCS-2005) are placed inline on each side of the Firewall / Router. NST running on a system configured with three NICs can be used to perform a variety of network / security tasks with network traffic entering or leaving the Small and Medium Business (SMB) or Corporate Intranet. Example usage: NAT and PAT network packets can be examined for proper translations by the Firewall and network bandwidth and throughput monitoring can be performed in real-time. The NST WUI Multi-TAP Network Packet Capture interface was designed to simultaneously capture packets with this configuration.

Dualcomm Gigabit Multi-TAP / NST Pro Combo - Monitor / Capture Network Traffic Across Firewall

Use Case 2: Gigabit SPAN Port Repilcation Using Regeneration TAPs

The following use case depicts how to replicate SPAN ports using a Dualcomm Technology, Inc gigabit Regeneration TAPs (model: ETAP-2105). A SPAN port enabled on both the Firewall and the LAN Gigabit Switch are fed into Port: 1 of each regeneration TAP. Full-duplex network SPAN traffic is replicated at Gigabit rates between the inline port (Port: 1) across the four monitor ports (Ports: 2, 3, 4 and 5). A total of six (6) NST probe servers with their respective network security application are shown.

The NST WUI Multi-TAP Network Packet Capture interface was specifically designed to simultaneously capture packets with this particular configuration using traffic generated from both SPAN ports on NST probe: 4. Wireless network packets from the WAN to the wireless device can be simultaneously captured. Separate network security monitoring systems as shown in this diagram may be a requirement for certain organizations.

Gigabit SPAN Port Repilcation Using Dualcomm Regeneration TAPs

Use Case 3: NST Multi-Tap Network Packet Capture Using Full Line Rate Regeneration TAPs

The following use case demonstrates how to setup a "Multi-TAP" configuration to capture network packets at full line rate on both sides of a Firewall. Two Dualcomm Technology, Inc gigabit switch TAPs (model: ETAP-3105) are placed inline on each side of the Firewall. An NST server configured with two (2) dual-port Gigabit NIC adapters can be used to perform network packet capture on all traffic entering or leaving the Corporate Intranet.

Example usage: NAT and PAT network packets can be examined for proper translations by the Firewall or for performing security penetration analysis, security hardening and auditing. The NST WUI Multi-TAP Network Packet Capture interface was designed to simultaneously capture packets with this configuration.

The ETAP-3105 Regeneration TAP duplicates its inline network traffic as two (2) non-aggregation data streams. One stream for Receive Data (RxD) and the other one for Transmit Data (TxD). Ports: 4 and 5 provide the non-aggregation traffic flow at the full line rate of 2 Gpbs to each Dual-Port Gigabit Adapter shown on the NST server. The ETAP-3105 Regeneration TAP also replicates the data traffic running between the two inline Ports: 1 and 2 to both the aggregation monitor Port: 3. The aggregation monitor Port: 3 on each TAP is not used in this Use Case.

NST Multi-Tap Network Packet Capture Using Full Line Rate Regeneration TAPs