Low Cost Gigabit TAP and Network Surveillance Solutions for the Security Professional
The following solutions are being offered to networking professionals in need of a convenient and low cost method to monitor and capture traffic on a single network segment (See article: SPAN Out of the Box for additional information):
| Gigabit DCGS-2005L TAP and NST Pro Single License | Gigabit DCGS-2005L TAP and NST Pro Site License |
|---|---|
|
|
| Gigabit ETAP-2105 Regeneration TAP and NST Pro Single License | Gigabit ETAP-2105 Regeneration TAP and NST Pro Site License |
|---|---|
|
|
Use Case 1: Gigabit Network Monitor / Capture on the Dirty Side of a Firewall
The following use case depicts monitoring / capturing network packets on the "dirty" side of a Firewall. A Dualcomm Technology, Inc gigabit switch TAP (model: DGCS-2005L) is placed between the network provider and a Firewall / Router external connection. NST running on a notebook system in this instance can be used to perform a variety of network / security tasks with network traffic entering or leaving the Small and Medium Business (SMB) or Corporate Intranet. Example usage: NAT and PAT network packets can be examined for proper translations by the Firewall and network IDS can be performed to mitigate against any possible network attacks.
Use Case 2: Gigabit Network Monitor / Capture on the Clean Side of a Firewall
The following use case depicts monitoring / capturing network packets on the "clean" side of a Firewall. A Dualcomm Technology, Inc gigabit switch TAP (model: DGCS-2005L) is placed between the Firewall / Router internal connection and the Intranet switching fabric. NST running on a notebook system in this instance can be used to perform a variety of network / security tasks with network traffic entering or leaving the Small and Medium Business (SMB) or Corporate Intranet. Example usage: Host locations and IP Address conversations can be determined an plotted on bit images and / or Google Earth for network traffic origination and usage patterns.
Use Case 3: Gigabit Network Bandwidth Monitor / Geolocation / IDS on the DMZ Side of a Firewall
The following use case depicts Network Bandwidth Monitoring, Host Geolocation, and IDS Detection on the "DMZ" side of a Firewall. The public web services are located in the DMZ network and are being monitored by multiple NST probes providing a unique security surveillance solution. A Dualcomm Technology, Inc gigabit Regeneration TAP (model: ETAP-2105) is placed in the DMZ network between the Firewall / Router and the Web Server Complex load balancing switch.
The ETAP-2105 Regeneration TAP replicates the full-duplex network traffic running at Gigabit rates between the two inline ports (Ports: 1 and 2) across the three monitor ports (Ports: 3, 4 and 5). This provides each NST probe server and its respective network interface with its own mirrored copy of web traffic flowing in and out of the DMZ. Separate network security monitoring systems as shown in this diagram may be a requirement for certain organizations.
