Specflow Policy Flow Protection Bypass Switch Based On Network Packet Broker Vendors

Specflow Policy Flow Traction Series Protection of​ Network Packet Generator based on Network Packet Broker

1.Overviews

NetTAP® bypass switch manual is researched and developed by Chengdu Shuwei Communication Technology Co., Ltd, which can be used for flexible deployment of various types of serial security equipment while providing high network reliability.

By deploying NetTAP® Smart Bypass Protector:

• Users can flexibly install/uninstall security equipment and will not affect the current network and interrupt;
• NetTAP® bypass switch manual with intelligent health detection function to real-time monitoring of the normal working state of the serial security device, once the serial security device work exception, the protection will automatically bypass to maintain the normal network communication;
• Selective traffic protection technology can be used to deploy specific traffic cleaning security equipment, encryption technology based on the audit equipment. Effectively carry out the serial access protection for the specific traffic type, unloading the flow handling pressure of the series device;
• Load Balanced Traffic Protection technology can be used for clustered deployment of secure serial devices to meet the need for serial security in high-bandwidth environments.

2.Intelligent Bypass Swtich Application Solution​

“Specflow” Policy Flow Traction Series Protection

Figure 1 SpecFlow Specific traffic series protection

As shown in Figure 1 above, when the security network device only needs to deal with the specific traffic in series security protection, through the NetTAP® "bypass switch" traffic per-processing function, through the traffic screening strategy to connect the security device " Concerned "traffic is sent back directly to the network link, and the" concerned traffic section "is traction to the in-line safety device to perform safety checks. This will not only maintain the normal application of the safety detection function of the safety device, but also reduce the inefficient flow of the safety equipment to deal with the pressure; at the same time, the "policy flow traction protector" can detect the working condition of the safety device in real time. The safety device works abnormally bypasses the data traffic directly to avoid disruption of network service.

The NetTAP® Traffic Traction Protector can identify traffic based on the L2-L4 layer header identifier, such as VLAN tag,source / destination MAC address, source IP address, IP packet type, transport layer protocol port, protocol header key tag, and so on. A variety of matching conditions flexible combination can be defined flexibly to define the specific traffic types that are of interest to a particular security device and can be widely used for the deployment of special security auditing devices (RDP, SSH, database auditing, etc.).

3. Bypass Switch Bypass TAP Technical Characteristics

SpecFlow/FullLink Protection

The NetTAP® "INLINE Network Security Bypass Swtich based on Network TAP Strategic Traffic Protector" supports serial protection for complete link traffic and a serial protection mode for a specific traffic type. Users can choose the appropriate deployment mode according to the deployment requirements of different security devices.

FullLink protection mode. In this mode, the Policy Traffic Traction Protector forwards all traffic from the deployed link to the security device and performs real-time monitoring of the state of the security device. If the status of the security device is abnormal, the protector will automatically switch to the bypass state ensures network availability.

SepcFlow protection mode. In this mode, the Policy Traffic Traction Protector forwards some of the user-specified traffic types in the deployment link to the security device for processing. The remaining traffic is automatically bypassed without passing through the security device. While the protector on the state of the safety device to perform real-time monitoring, once the safety device status is abnormal, the protector will automatically switch to bypass state to ensure the availability of the network.

4. Bypass Switch Bypass TAP Technical Specifications

NT-MBYP-CHS Bypass Switch.pdf