Siv Cases rau Network Visibility Solutions

Siv Cases rau Network Visibility Solutions

Network Visibility yog dab tsi?

Kev pom pom tau txhais los ntawm Webster's Dictionary li "lub peev xwm kom pom tau yooj yim" lossis "qhov pom meej meej." Network lossis daim ntawv thov kev pom tau hais txog kev tshem tawm cov qhov muag tsis pom kev uas tsis pom kev muaj peev xwm pom tau yooj yim (lossis ntsuas) dab tsi tshwm sim hauv lub network thiab / lossis daim ntawv thov hauv lub network. Qhov kev pom no tso cai rau cov pab pawg IT cais tawm cov kev hem thawj ntawm kev nyab xeeb sai thiab daws teeb meem kev ua haujlwm, thaum kawg xa cov kev paub zoo tshaj plaws rau cov neeg siv khoom.

Lwm qhov kev pom yog dab tsi tso cai rau pab pawg IT los saib xyuas thiab txhim kho lub network nrog rau cov ntawv thov thiab cov kev pabcuam IT. Tias yog vim li cas network, daim ntawv thov, thiab kev pom kev nyab xeeb yog qhov tseem ceeb rau txhua lub koom haum IT.

Txoj hauv kev yooj yim tshaj plaws kom ua tiav kev pom kev network yog siv lub visibility architecture, uas yog cov txheej txheem kawg-rau-kawg uas muab lub cev thiab virtual network, daim ntawv thov, thiab kev ruaj ntseg pom.

Tso lub Foundation rau Network Visibility

Thaum lub visibility architecture nyob rau hauv qhov chaw, ntau qhov kev siv tau muaj. Raws li qhia hauv qab no, lub visibility architecture sawv cev rau peb theem tseem ceeb ntawm kev pom: qib nkag, qib tswj, thiab qib saib xyuas.

Siv cov ntsiab lus qhia, cov kws tshaj lij IT tuaj yeem daws ntau yam teeb meem hauv network thiab daim ntawv thov. Muaj ob hom kev siv cov ntaub ntawv:

• Basic Visibility Solutions
• Tag nrho network visibility

Core visibility solutions tsom rau kev ruaj ntseg network, txuag nqi, thiab kev daws teeb meem. Cov no yog peb yam uas cuam tshuam rau IT ntawm ib hlis, yog tias tsis yog txhua hnub, hauv paus. Ua tiav kev pom kev sib txuas hauv network yog tsim los muab kev pom ntau dua rau hauv qhov muag tsis pom kev, kev ua tau zoo thiab ua raws.

Koj tuaj yeem ua dab tsi tiag tiag nrog kev pom lub network?

Muaj rau qhov sib txawv siv rau kev pom kev network uas tuaj yeem ua kom pom tseeb tus nqi. Qhov no:

- Txhim kho kev ruaj ntseg network
- Muab sijhawm los tuav thiab txo cov nqi
- Txhim kho qhov teeb meem thiab ua kom muaj kev ntseeg siab hauv lub network
- Tshem tawm cov qhov muag tsis pom hauv network
- Optimizing network thiab daim ntawv thov kev ua tau zoo
- Txhim kho txoj cai ua raws cai

Hauv qab no yog qee qhov piv txwv siv tshwj xeeb.

Piv txwv No. 1 – cov ntaub ntawv lim dej rau cov kev daws teeb meem kev nyab xeeb uas nyob hauv kab (hauv-kab), ua kom cov kev ua tau zoo ntawm cov kev daws teeb meem no.

Lub hom phiaj ntawm qhov kev xaiv no yog siv lub network packet broker (NPB) los lim cov ntaub ntawv tsis tshua muaj kev pheej hmoo (piv txwv li, vis dis aus thiab lub suab) kom tsis suav nrog kev tshuaj xyuas kev nyab xeeb (kev tiv thaiv kev nkag mus (IPS), kev tiv thaiv cov ntaub ntawv poob (DLP), web application firewall (WAF), thiab lwm yam). Qhov kev tsheb "tsis txaus siab" no tuaj yeem txheeb xyuas thiab xa rov qab mus rau qhov hloov pauv thiab xa mus ntxiv rau hauv lub network. Qhov zoo ntawm qhov kev daws teeb meem no yog tias WAF lossis IPS tsis tas yuav pov tseg cov peev txheej processor (CPU) txheeb xyuas cov ntaub ntawv tsis tsim nyog. Yog tias koj lub network khiav lag luam muaj cov ntaub ntawv tseem ceeb ntawm cov ntaub ntawv no, koj tuaj yeem xav siv qhov tshwj xeeb no thiab txo lub nra ntawm koj cov cuab yeej ruaj ntseg.

Cov tuam txhab tau muaj cov xwm txheej uas muaj txog li 35% ntawm kev pheej hmoo tsawg ntawm kev sib txuas hauv network tsis suav nrog IPS tshuaj xyuas. Qhov no cia li ua rau IPS bandwidth ua haujlwm tau zoo los ntawm 35% thiab txhais tau tias koj tuaj yeem tso tseg kev yuav khoom ntxiv IPS lossis hloov kho dua tshiab. Peb txhua tus paub tias kev sib txuas hauv network tau nce ntxiv, yog li ntawm qee lub sijhawm koj yuav xav tau IPS ua tau zoo dua. Nws yog ib lo lus nug tiag tiag ntawm seb koj puas xav txo tus nqi lossis tsis.

Piv txwv No. 2 – load balancing extends the life of 1-10Gbps devices on a 40Gbps network

Qhov thib ob siv rooj plaub yog txo tus nqi ntawm cov tswv cuab ntawm cov khoom siv network. Qhov no yog ua tiav los ntawm kev siv pob ntawv brokers (NPBs) kom sib npaug ntawm cov tsheb khiav mus rau kev ruaj ntseg thiab cov cuab yeej saib xyuas. Yuav ua li cas thauj khoom sib npaug pab cov lag luam feem ntau? Ua ntej, kev nce hauv network tsheb yog qhov tshwm sim ntau heev. Tab sis dab tsi txog kev saib xyuas qhov cuam tshuam ntawm kev muaj peev xwm loj hlob? Piv txwv li, yog tias koj tab tom hloov kho koj lub network tseem ceeb ntawm 1 Gbps rau 10 Gbps, koj yuav xav tau 10 Gbps cov cuab yeej rau kev saib xyuas kom raug. Yog tias koj nce qhov nrawm mus rau 40 Gbps lossis 100 Gbps, tom qab ntawd ntawm qhov nrawm no, kev xaiv cov cuab yeej saib xyuas me dua thiab tus nqi siab heev.

Pob brokers muab qhov tsim nyog sib sau ua ke thiab thauj khoom sib npaug. Piv txwv li, 40 Gbps tsheb sib npaug tso cai saib xyuas cov tsheb khiav mus rau faib ntawm ntau yam 10 Gbps instruments. Tom qab ntawd koj tuaj yeem txuas ntxiv lub neej ntawm 10 Gbps li kom txog thaum koj muaj nyiaj txaus los yuav cov cuab yeej kim dua uas tuaj yeem tswj cov ntaub ntawv ntau dua.

Lwm qhov piv txwv yog muab cov cuab yeej sib txuas hauv ib qho chaw thiab pub rau lawv cov ntaub ntawv tsim nyog los ntawm pob broker. Qee zaum cov kev daws teeb meem cais tawm hauv lub network tau siv. Kev soj ntsuam cov ntaub ntawv los ntawm Enterprise Management Associates (EMA) qhia tau hais tias 32% ntawm kev lag luam kev daws teeb meem tsis tau siv, lossis tsawg dua 50%. Cov cuab yeej centralization thiab load balancing tso cai rau koj mus koom cov peev txheej thiab nce kev siv siv tsawg dua. Tej zaum koj yuav tos mus yuav cov cuab yeej ntxiv kom txog thaum koj qhov kev siv tau siab txaus.

Piv txwv No. 3 – kev daws teeb meem kom txo/tshem tawm qhov xav tau kom tau txais kev tso cai los ntawm Pawg Thawj Coj

Thaum cov cuab yeej pom kev pom (TAPs, NPBs ...) tau teeb tsa hauv lub network, koj yuav tsis tshua xav tau hloov pauv hauv lub network. Qhov no tso cai rau koj los txhim kho qee qhov kev daws teeb meem los txhim kho kev ua haujlwm.

Piv txwv li, ib zaug TAP tau teeb tsa ("teeb ​​nws thiab tsis nco qab nws"), nws dhau mus xa ib daim qauv ntawm tag nrho cov tsheb mus rau NPB. Qhov no muaj qhov txiaj ntsig loj ntawm kev tshem tawm ntau yam ntawm bureaucratic hassle ntawm tau txais kev pom zoo los hloov pauv hauv lub network. Yog tias koj tseem nruab ib pob broker, koj yuav muaj kev nkag mus sai sai rau yuav luag txhua cov ntaub ntawv xav tau rau kev daws teeb meem.

Yog tias tsis muaj qhov xav tau hloov pauv, koj tuaj yeem hla cov theem ntawm kev pom zoo cov kev hloov pauv thiab mus ncaj qha rau kev debugging. Cov txheej txheem tshiab no muaj qhov cuam tshuam loj rau kev txo qis Lub Sijhawm Kho Mob (MTTR). Kev tshawb fawb qhia tau hais tias nws muaj peev xwm txo tau MTTR txog li 80%.

Case Study #4 – Application Intelligence, Siv Daim Ntawv Thov Lim thiab Cov Ntaub Ntawv Masking los txhim kho kev ruaj ntseg zoo

Application Intelligence yog dab tsi? Cov tshuab no muaj nyob ntawm IXIA Packet Brokers (NPBs). Qhov no yog kev ua haujlwm siab heev uas tso cai rau koj mus dhau txheej 2-4 pob ntawv lim (OSI qauv) thiab txav mus rau txhua txoj hauv kev mus rau txheej 7 (daim ntawv thov txheej). Qhov kom zoo dua yog tias tus neeg siv thiab kev coj tus cwj pwm thiab qhov chaw cov ntaub ntawv tuaj yeem tsim thiab xa tawm hauv txhua hom ntawv xav tau - pob ntawv nyoos, cov ntawv lim dej, lossis NetFlow (IxFlow) cov ntaub ntawv. Cov tuam tsev IT tuaj yeem txheeb xyuas cov ntawv thov hauv network zais, txo cov kev hem thawj ntawm kev ruaj ntseg network, thiab txo qis lub sijhawm network thiab / lossis txhim kho kev ua haujlwm hauv network. Cov yam ntxwv tshwj xeeb ntawm cov ntawv thov paub thiab tsis paub yuav raug txheeb xyuas, ntes thiab sib koom nrog cov cuab yeej tshwj xeeb saib xyuas thiab kev ruaj ntseg.

• kev txheeb xyuas cov ntawv thov tsis raug cai / tsis paub
• txheeb xyuas tus cwj pwm tsis txaus ntseeg los ntawm geolocation, piv txwv li, tus neeg siv los ntawm North Kauslim txuas rau koj lub server FTP thiab hloov cov ntaub ntawv
• SSL decryption rau kev tshuaj xyuas thiab tshuaj xyuas qhov muaj peev xwm hem
• tsom xam ntawm daim ntawv thov malfunctions
• tsom xam ntawm cov tsheb ntim thiab kev loj hlob rau kev tswj cov peev txheej thiab nthuav kev kwv yees
• npog cov ntaub ntawv rhiab heev (credit cards, credentials...) ua ntej xa

Kev pom kev txawj ntse muaj peev xwm muaj nyob rau hauv lub cev thiab virtual (Cloud Lens Private) pob brokers IXIA (NPB), thiab hauv pej xeem "huab" - Huab Lens Public:

Ntxiv rau cov qauv kev ua haujlwm ntawm NetStack, PacketStack thiab AppStack:

Tsis ntev los no, kev ruaj ntseg ua haujlwm kuj tau ntxiv: SecureStack (kom ua kom zoo dua ntawm kev ua haujlwm tsis pub lwm tus paub), MobileStack (rau cov neeg siv xov tooj ntawm tes) thiab TradeStack (rau kev saib xyuas thiab lim cov ntaub ntawv kev lag luam nyiaj txiag):

tshawb pom

Network pom kev daws teeb meem yog cov cuab yeej muaj zog uas muaj peev xwm ua kom zoo dua kev saib xyuas network thiab kev ruaj ntseg architectures uas tsim cov kev sau thiab sib koom ntawm cov ntaub ntawv tseem ceeb.

Siv cov ntaub ntawv tso cai:

• muab kev nkag mus rau cov ntaub ntawv tshwj xeeb tsim nyog raws li qhov xav tau rau kev kuaj mob thiab kev daws teeb meem
• ntxiv / tshem tawm cov kev daws teeb meem kev nyab xeeb, saib xyuas ob qho tib si hauv kab thiab sab nraud
• txo MTTR
• xyuas kom ceev cov lus teb rau cov teeb meem
• ua kev soj ntsuam txog kev hem thawj
• tshem tawm feem ntau bureaucratic kev pom zoo
• txo cov txiaj ntsig nyiaj txiag ntawm hack los ntawm kev sib txuas sai sai rau cov kev daws teeb meem tsim nyog rau lub network thiab txo MTTR
• txo tus nqi thiab kev ua haujlwm ntawm kev teeb tsa SPAN chaw nres nkoj

Tau qhov twg los: www.hab.com