Government Network Data Broker Network Security Services For Data Loss Protection

Network Data Broker for Data Loss Protection Improving Network Security Efficiency

What is Network TAP?
A network TAP is an independent device that mirrors all traffic flowing between two network endpoints (nodes). This can then be output to various network tools while live traffic continues to pass through the network.
​What is TAP?
TAPs (Test Access Points) are network independent, which means they are fully configurable. This allows security and/or performance tools to perform complex packet manipulations.
TAP is the foundation of intelligent network access that maintains full visibility of security and monitoring platforms without compromise.
Live network traffic passes through the TAP, goes directly to the active tool, and returns to the network in real time. This enables the tool to analyze traffic, act on packets, stop suspicious packets, and take immediate action on links to block malicious traffic. These tools include active firewalls and intrusion prevention systems (IPS/NGFW). The TAP in the active stack has a unique bypass technology that sends a heartbeat signal to the active tool. If the tool goes offline for any reason, TAP can bypass the tool, maintaining real-time network traffic. When the heartbeat returns, flow automatically resumes normal operation through the tool. Managing and securing network infrastructure and information requires focused attention. Each of these devices is dedicated to a very compact range of functions. The examples above are by no means a comprehensive list of network monitoring, management, and security tool options. There are many tools built specifically for applications, such as data loss protection (DLP), customer experience management (CEM), and identity access management (IAM). A simple web search will reveal a wide variety of devices that can be added to these links based on specific threats or required analysis. Having a multi-port TAP foundation makes it easy and safe to add, repurpose or change tools based on the immediate needs of the network. When developing a visibility strategy, there is a logical step-by-step process; access, capture, analyze, secure and, if necessary, remediate. Ideally, if the right strategies and tools are in place, along with other organizational influences that will be discussed later, then hopefully no remedial steps will be needed. However, as it is often said, prepare for the best but prepare for the worst.
Matrix TCA CG is a network data visualization control device suitable for 10G/40G/100G high-density, high-traffic.
Matrix TCA CG is specially designed for data collection of densely distributed 10GE 40GE and 100GE links of operators' mobile Internet egress, IDC egress, provincial network and backbone network.
Based on the ATCA standard architecture, MATRIX-TCA-CG has high carrier-level reliability and strong scalability, and can be configured with function boards smoothly to meet port requirements of various specifications and sizes.
NTCA-CHS-7U7S is a 7U standard rack height. The chassis uses a horizontal slot service slot model. The appliance supports a total of seven slots, including two swap slots and five service slots. Each slot provides a cooling capacity of 300W, and the chassis adopts a pull-type cooling air duct to provide good heat dissipation performance for the whole machine. The backplane adopts dual-star architecture, providing 200Gbps full-duplex interconnection channel to the service slot in each switch slot. Fully equipped with two switch cards enabling 400G backplane bandwidth per service slot.
NTCA-CHS-16U14S is a 16U standard rack height. The chassis adopts the horizontal insertion service slot mode. The whole machine supports 14 card slots, including 4 exchange slots and 10 service slots. Each slot provides a cooling capacity of 300W, and the chassis uses a pull-type cooling air duct to provide good heat dissipation for the whole machine. The backplane adopts dual-star architecture, providing independent 100Gbps backplane bandwidth for each switch slot to service slot. Completely 4 switch cards can provide 400G backplane cross-board bandwidth application for each service slot.

NT-TCA-CG10 100G Data Acquisition, Data Capturing and Switch Service Card/Module

Card Interface

Service interface: 10*QSFP28 100G(compatible 40G)interface；Additional 10 QSFP28 100GE interfaces or 24 10GE SFP+ interfaces can be extended via RTM expansion boards.
Management interface: 1*RJ45 interface
CONSOLE interface: 1*RJ45 interface
BASE interface: 2*1000MInter-board communication interface
FABRIC interface: 4*100GService data dedicated transmission interface
IPMC interface: 1*RJ45 interface

Card Function Overview

NT-TCA-CG10 is a multi-function service card that integrates data service collection and aggregation of split output. Card supports:

1- 40G/100G links access and acquisition
2- 40G/100G links aggregation, filtering and diverting
3- 40G/100G links data accurate identification
4- 40G/100G links packets tag
5- Built-in simple ShMC monitors the operating temperature of the card.
6- Complete the data processing policy configuration and execution of this card
7- 4*100GBASE-KR backplane channel can complete Cross-board service input and output.

Network Packet Broker Specification and Module Type