Network TAP for Bank Data Center Network Visibility Traffic
Monitoring and Business Awareness Project
1. Overviews
- High density 10 gigabit port acquisition
The Intelligent Traffic Identification and Data Slicing Network TAP
with 10GE Data Acquisition device is developed specifically for
high-density 10 gigabit Ethernet link acquisition requirements,
with up to 48 10GE ports, and each port supports input and output
reuse.It can meet up to 24 10G Ethernet link bidirectional
acquisition applications.
The above image shows the model of NT-FTAP-48XE Network TAP for
Bank Data Center Network Traffic Monitoring and Business Awareness
Monitoring Project, you'll see 48 SPF+ ports for your 10GE data
requirements.
2. Intelligent Traffic Processing Abilities(Part)
ASIC Chip Plus Multicore CPU
480Gbps intelligent traffic processing capabilities
10GE Data Capture
10GE 48 ports, Max 24*10GE ports Rx/Tx duplex processing, up to
480Gbps Traffic Data Transceiver at same time, for network Data
Acquisition, simple Pre-processing
Data Replication
Packet replicated from 1 port to multiple N ports, or multiple N
ports aggregated, then replicated to multiple M ports
Data Aggregation
Packet replicated from 1 port to multiple N ports, or multiple N
ports aggregated, then replicated to multiple M ports
Real-time Traffic Trend Monitoring
Supported real-time monitoring and statistics on port-level and
policy-level data traffic, to show the RX / TX rate, receive / send
bytes, No., RX / TX the number of errors, the maximum income / hair
rate and other key indicators.
NetTAP® Visibility Platform
Supported NetTAP® Matrix-SDN Visual Control Platform Access
1+1 Redundant Power System(RPS)
Supported 1+1 Dual Redundant Power System
NT-FTAP-48XE
Network TAP NPB.pdf
4. Typical Application Structures
A Bank Data Center Network Traffic Monitoring and Business
Awareness Monitoring Project
According to the user's business needs and system status, xx
NT-FTAP-48XE and xx NT-FTAP-40XG-DPI network taps are used for
service networking to collect user-wide data. Among them, xx
NT-FTAP-48XEs are used as access devices to collect xx 10-Gigabit
mirroring ports on the entire network. The collected traffic is
filtered based on multiple combinations of IP quintuples, packet
characteristics, and fixed field offsets. Xx NT-FTAP-40XG-DPI as an
aggregation device aggregates the filtered traffic of the access
device, and then decomposes the aggregated traffic through
deduplication, slicing, desensitization, timestamp marking, and
application layer protocol identification. Processing; xx
NT-FTAP-48XE as a unified distribution equipment, through the
collection of aggregated equipment after the deep processing of
traffic, and then according to the monitoring needs of the back-end
monitoring and analysis equipment, to allocate the corresponding
traffic, maximum support xx 10Gigabit ports ( It can be backward
compatible with Gigabit as the output port of the back-end
monitoring and analysis equipment, and provides strong data
distribution support for the network traffic monitoring and
analysis project of the Guangdong Development Bank's data center.
The NetTAP® Data Masking Technology for Banking Application as
following:
The deployment NetTAP® device is nt-ftap-48xe desensitization
application is shown above for the traffic in the network, the
network load of the data may contain the card number, id number and
other sensitive information. The user is worried about the leakage
of data by the back-end analysis system, which may cause
unnecessary problems. The user can desensitize the traffic and then
output it to the back-end analysis system.This application USES
application of Network TAP for Bank Data Center Network Traffic
Monitoring and Business Awareness Monitoring Project to
desensitization replacement of sensitive information, such as id
card number or other sensitive information values (such as 0
xababab) output after replacement, it support the rules of the
regular expression matching keywords, to replace any key fields
within the original data, shielding sensitive information, in order
to achieve output can be determined according to the user to
configure the implementation flow strategy.
5. Specifications
| NT-FTAP-48XE NetTAP® NPB Functional Parameters |
| Network Interface | 10GE SFP+ ports | 48 * SFP+ slots; support 10GE/GE; support for single and multi-mode
fiber |
| Out of Band management interface | 1* 10/100/1000M electrical interface； |
| Deployment mode | 10Gigabit spectral capture | Support 24*10GE bidirectional fiber links capture |
| 10Gigabit Mirror span capture | Support up to 48 mirror span traffic ingress
|
| Optical Splitter input | Input port can support single-fiber ingress; |
| Port multiplexing | Support input ports simultaneously as output ports; |
| Traffic output | Support 48 *10GE ports traffic output; |
| Traffic replication / aggregation / distribution | support |
| Link QTYs supporting Mirror replication / aggregation | 1 -> N link traffic replication (N <48) N-> 1 link traffic aggregation (N <48) G Group(M-> N Link) traffic replication and aggregation [G * (M
+ N) <48] |
| Distribution based on traffic identification | support |
| Distribution based on IP / protocol / port Five tuple traffic
identification | support |
| Distribution strategy based on protocol header the key labeled
traffic identifies | support |
| Ethernet encapsulation independence | support |
| CONSOLE network management | support |
| IP/WEB network management | support |
| SNMP network management | support |
| TELNET/SSH network management | support |
| SYSLOG protocol | support |
| User authentication function | Password authentication based on user name
|
| Electric(1+1 Redundant Power System-RPS) | Rated supply voltage | AC110-240V/DC-48V [Optional] |
| Rated power frequency | AC-50HZ |
| Rated input current | AC-3A / DC-10A |
| Rated power function | 200W |
| Environment | Operating Temperature | 0－50℃ |
| Storage Temperature | -20-70℃ |
| Operating Humidity | 10%-95%,Non-condensing |
| User Configuration | Console Configuration | RS232 Interface,115200,8,N,1 |
| Password authentication | support |
| Rack Height | Rack space (U) | 1U 485mm*44.5mm*350mm |
