Inline Bypass Network Bypass Switching TAP with ​Load Balance to Protect Web Service

Inline Bypass Network Bypass Switching TAP with ​Load Balance to Protect Web Service

1.Overviews

With the rapid development of the Internet, the threat of network information security is becoming more and more serious, so a variety of information security protection applications are used more and more widely. Whether it is traditional access control equipment (firewall) or a new type of more advanced protection means such as intrusion prevention system (IPS),Unified threat management platform (UTM), Anti-denial service attack system (Anti-DDoS), Anti-spam Gateway, Unified DPI Traffic Identification and Control System, and many security devices are deployed in series in the network key nodes, the implementation of the corresponding data security policy to identify and deal with legal / illegal traffic. At the same time, however, the computer network will generate a large network delay or even network disruption in the case of fail over, maintenance, upgrade, equipment replacement and so on in a highly reliable production network application environment, users cannot stand it.

NetTAP® bypass switch manual is researched and developed by Chengdu Shuwei Communication Technology Co., Ltd, which can be used for flexible deployment of various types of serial security equipment while providing high network reliability.

By deploying NetTAP® Smart Bypass Protector:

- Users can flexibly install/uninstall security equipment and will not affect the current network and interrupt;

- NetTAP® bypass switch manual with intelligent health detection function to real-time monitoring of the normal working state of the serial security device, once the serial security device work exception, the protection will automatically bypass to maintain the normal network communication;
- Selective traffic protection technology can be used to deploy specific traffic cleaning security equipment, encryption technology based on the audit equipment. Effectively carry out the serial access protection for the specific traffic type, unloading the flow handling pressure of the series device;

- Load Balanced Traffic Protection technology can be used for clustered deployment of secure serial devices to meet the need for serial security in high-bandwidth environments.

2.Intelligent Bypass Swtich Application Solution​

Load balanced Series Network Protection

As shown above, the NetTAP® "bypass switch" is deployed in series between network devices (routers, switches, etc.). When a single IPS(Intrusion Prevention System) / FW(Fire Wall) processing performance is not sufficient to cope with network link peak traffic, The traffic load balancing function of the protector, the "bundling" of multiple IPS / FW cluster processing network link traffic, can effectively reduce the single IPS / FW processing pressure, improve the overall processing performance to meet the high bandwidth of the deployment environment Claim.

NetTAP® "bypass switch" has a powerful load balancing function, according to the frame VLAN tag, MAC information, IP information, port number, protocol and other information on the Hash load balancing distribution of traffic to ensure that each IPS / FW received data flow Session integrity.

3. Bypass Switch Bypass TAP Technical Characteristics

WebService Dynamic Strategy Delivery Technology

NetTAP® "policy traction protector" supports flexible and easy integration with third-party web service interface, third-party security features protection device can be easily through the web service interface strategy to NetTAP® "policy flow traction protector", in order to facilitate the dynamic traction care about the flow to the safety function of the protective equipment, the implementation of the corresponding flow cleaning or traffic safety processing. Please contact our technical support personnel for the specific interface definition of web service.

4. Bypass Switch Bypass TAP Technical Specifications

NT-MBYP-CHS Bypass Switch.pdf