I-Inline Bypass Tap Switch: Ukuqinisekisa Ukuvikeleka Okungaphumeleli Ekuvikelekeni Kwenethiwekhi Okuthuthukisiwe
2*Bypass plus 1*Monitor Modular Design, 10/40/100GE Links, Max 640Gbps
Sethula:I-Inline Bypass Tap Switch: Ukuqinisekisa Ukuvikeleka Okungaphumeleli Ekuvikelekeni Kwenethiwekhi Okuthuthukisiwe
Ezweni elihlala livela lokusatshiswa kwe-cybersecurity, izinhlangano zibhekene nenselelo eqhubekayo yokuvikela amanethiwekhi azo ekuhlaselweni okunonya nokufinyelela okungagunyaziwe.Ukuze amelane nalezi zinsongo ngempumelelo, amabhizinisi asebenzisa amadivayisi okuphepha ashumekiwe asebenzayo njenge-Intrusion Prevention Systems (IPS) kanye nezibhulamlilo zesizukulwane esilandelayo (NGFWs).Kodwa-ke, ukuqinisekisa ukuxhumeka kwenethiwekhi okungaphazamiseki kuyilapho ugcina izinyathelo zokuphepha eziqinile kungaba umsebenzi oyinkimbinkimbi.Sibhekana nalesi sidingo esibalulekile sesixazululo esithembekile nesihlulekayo, sethula ngokuziqhenya i-Inline Bypass Tap Switch.Eyaziwa nangokuthi i-bypass switch, le divayisi esungulayo isebenza njengebhuloho phakathi kwamadivayisi enethiwekhi namathuluzi okuphepha enethiwekhi, ihlinzeka ngendawo evikelekile yokuhlukaniswa nokunciphisa ubungozi bokunqamuka kwenethiwekhi okungaba khona.
Phambili kubuchwepheshe bokuphepha benethiwekhi, i-Inline Bypass Tap Switch yethu yakhelwe ukunikeza ukwesekwa nokuvikelwa okungenakuqhathaniswa kumanethiwekhi akho abalulekile namathuluzi okuphepha.Ake sihlole izici eziphawulekayo nezinzuzo ezilethwa yilo mkhiqizo wesimanje etafuleni.
1. Izimbobo Zokungena Eziphephile:
I-Inline Bypass Tap Switch isungula izindawo zokufinyelela ezingehluleki kumadivayisi okuphepha ashumekiwe asebenzayo njenge-IPS nama-NGFW.Iqinisekisa ukuxhumeka kwenethiwekhi okungaphazamiseki ngokunika amandla ukwabelana okungenazihibe kwethrafikhi phakathi kwamadivayisi, okuvumela inethiwekhi ukuthi izilungise uma kwenzeka ithuluzi lokuvikela lihluleka noma lilungiswa.
2. Iphuzu Elinokwethenjelwa Lokuzihlukanisa:
Ngokusebenzisa ukushintshwa kwe-bypass phakathi kwamadivayisi enethiwekhi namathuluzi okuphepha, izinhlangano zingafinyelela iphuzu elithembekile lokuzihlukanisa.Lokhu kuhlukaniswa kunikeza isendlalelo esengeziwe sokuvikela, okuvumela amaqembu okuvikela ukuthi ahlaziye futhi anciphise izinsongo ezingaba khona ngempumelelo.
3. Ukuvikelwa Kwenethiwekhi Okuqinile:
I-Inline Bypass Tap Switch ithuthukisa ingqalasizinda yezokuphepha yenethiwekhi yakho nekhono layo lokuqondisa kabusha ithrafikhi egeleza ngamathuluzi okuvikela.Lokhu kunika amandla amadivayisi okuphepha afana ne-IPS nama-NGFW ukuze ahlole ithrafikhi yenethiwekhi kahle, ahlonze futhi anciphise noma yimiphi imisebenzi enonya noma imizamo yokufinyelela engagunyaziwe.
4. Ukuhlanganisa Okungenazihibe:
Iswishi yethu ye-bypass ihlanganisa kalula nezakhiwo zenethiwekhi ezikhona, yenza ukuthunyelwa kube lula futhi kuncishiswe ukuphazamiseka.Ngokuklama kwayo okuguquguqukayo nokunwebekayo, ingakwazi ukuphatha kahle ithrafikhi yenethiwekhi yevolumu ephezulu ngaphandle kokufaka engozini ukuphepha noma ukusebenza.
5. Ukutholakala Okuphezulu:
Ukungasebenzi kwenethiwekhi ngenxa yokwehluleka kwamathuluzi okuvikela kungabiza kakhulu ezinhlanganweni.Nokho, nge-Inline Bypass Tap Switch, isikhathi sokuphumula esinjalo siyancishiswa njengoba siqinisekisa ukugeleza kwethrafikhi okuqhubekayo ngisho naphakathi kokwehluleka kwamathuluzi okuvikela noma amawindi okulungisa.Lesi sici sokutholakala okuphezulu sigcina amasistimu akho abalulekile evikelekile ngenkathi kususwa iziphazamiso zenethiwekhi ezibizayo.
6. Ukusebenza Okuthuthukisiwe Nokuqina:
Ngoshintsho lwe-bypass, izinhlangano zingakhulisa ukusebenza kwamathuluzi azo okuvikela ngokunika amandla ukulinganisa komthwalo kuwo wonke amadivayisi amaningi.Lokhu kuvumela ukusetshenziswa kahle kwezinsiza zokuphepha kuyilapho kuqinisekisa ukukhula okukhulayo njengoba izimfuno zenethiwekhi ziyanda.
7. Ukuphatha kanye Nokuqapha Okumaphakathi:
I-bypass switch yethu ifakwe amandla aphelele okuphatha nokuqapha, okwenza izinhlangano zibe nokubonakala okuphelele nokulawula ithrafikhi yenethiwekhi yazo.Ukuphatha okumaphakathi kwenza ukumisa kube lula, ukuqapha, nokuxazulula izinkinga, kuqinisekisa ukuphathwa kokuphepha okusebenzayo.
Sengiphetha, iUkutholwa kokushaya kwenhliziyo,I-Bypass esemgqeni,I-Inline Bypass Switch,I-Inline Bypass Tap,I-Inline Security, ishintsha ukuphepha kwenethiwekhi ngokunikeza izimbobo zokufinyelela ezihlulekayo kumadivayisi okuphepha ashumekiwe asebenzayo.Ngokusebenza njengendawo evikelekile yokuhlukaniswa phakathi kwenethiwekhi nesendlalelo sokuvikeleka, kuthuthukisa kakhulu ukuvikelwa kwamanethiwekhi abalulekile kuyilapho kunciphisa ubungozi bokunqamuka kwenethiwekhi.Ngokuhlanganisa kwayo okungenazihibe, ukutholakala okuphezulu, namandla okuphatha aphakathi nendawo, lesi sisetshenziswa sesimanje sinikeza izinhlangano amandla okuvikela ezinsongweni ze-inthanethi eziguqukayo ngempumelelo.Thuthukisa ingqalasizinda yezokuphepha yenethiwekhi yakho nge-Inline Bypass Tap Switch futhi uqinisekise ukuvikeleka okungaphazamiseki nokuxhumana kwamasistimu abalulekile enhlangano yakho.Hlala isinyathelo esisodwa ngaphambi kwezinsongo ze-inthanethi ngesixazululo sethu esinobuhlakani!
Uhlolojikelele
I-Mylinking™ Network Tap Bypass Switch iyacwaningwa futhi yathuthukiswa ukuze isetshenziselwe ukuthunyelwa okuvumelana nezimo kwezinhlobo ezihlukahlukene zemishini yokuphepha esemgqeni kuyilapho inikeza ukwethembeka okuphezulu kwenethiwekhi.
Ngokusebenzisa i-Mylinking™ Smart Bypass Switch Tap:
- Abasebenzisi bangafaka/bakhiphe amathuluzi okuvikeleka kalula futhi ngeke kuthinte futhi kuphazamise inethiwekhi yamanje;
- I-Mylinking™ Network Tap Bypass Shintshela ngomsebenzi wokuthola impilo ehlakaniphile uye ekuqapheni ngesikhathi sangempela isimo esivamile sokusebenza semishini yokuphepha ekulayini.Uma amadivaysi okuphepha asemgqeni esebenza ngokuhlukile, umsebenzi wokuvikela uzozidlula ngokuzenzakalelayo ukuze kugcinwe ukuxhumana kwenethiwekhi okuvamile;
- Ubuchwepheshe obukhethekile bokuvikela ithrafikhi bungasetshenziswa ukufaka imishini ethile yokuphepha yokuhlanza ithrafikhi, ubuchwepheshe bokubethela obususelwa kumishini yokucwaninga.Yenza ngokuphumelelayo ukuvikelwa kokufinyelela okusemgqeni kohlobo oluthile lwethrafikhi, wehlise ingcindezi yokubamba ukugeleza kwedivayisi esemgqeni;
- Ubuchwepheshe bokuvikela i-Traffic Balanced Load bungasetshenziselwa ukuthunyelwa okuyiqoqo kwamadivayisi okuphepha avikelekile asemgqeni ukuze kuhlangatshezwane nokuvikeleka okusemgqeni ezindaweni ezinomkhawulokudonsa ophezulu.
I-Network Tap Bypass Shintsha Izici Ezithuthukile Nobuchwepheshe
I-Mylinking™ “SpecFlow” Protection Mode kanye ne-“FullLink” Protection Mode
I-Mylinking™ Fast Bypass Switching Protection
I-Mylinking™ “LinkSafeSwitch”
I-Mylinking™ “WebService” I-Dynamic Strategy Forwarding/Idaba
Ukutholwa komlayezo we-Mylinking™ Intelligent Heartbeat
Imilayezo ye-Mylinking™ Echaza Ukushaya Kwenhliziyo(Amaphakethe Okushaya Kwenhliziyo)
I-Mylinking™ Multi-link Load Balancing
I-Mylinking™ Intelligent Traffic Distribution
I-Mylinking™ Dynamic Load Balancing
I-Mylinking™ Remote Management Technology(HTTP/WEB, TELNET/SSH, “EasyConfig/AdvanceConfig” Isici)
I-Network Tap Bypass Switch Optional Configuration Guide
BYPASS ModuleIsikhala Semodyuli Yembobo yokuvikela:
Lesi sikhala singafakwa kumojuli yembobo yokuvikela ye-BYPASS enenombolo ehlukile yesivinini/yembobo.Ngokushintsha izinhlobo ezahlukene zamamojula, ingakwazi ukusekela ukuvikelwa kwe-BYPASS kwezidingo eziningi zezixhumanisi ze-10G/40G/100G.
QAPHELA ImojuliI-Port Module Slot;
Lesi sikhala singafakwa imojuli ye-MONITOR enezivinini/izimbobo ezihlukene.Ingakwazi ukusekela izixhumanisi eziningi ze-10G/40G/100G zokusetshenziswa kwedivayisi yokuqapha elandelanayo ngokushintsha amamojula ahlukene.
Imithetho Yokukhetha Imojuli
Ngokusekelwe kuzixhumanisi ezihlukene ezisetshenzisiwe kanye nezidingo zokuqapha zokuphakelwa kwemishini, ungakhetha kalula ukucushwa kwamamojula ahlukene ukuze uhlangabezane nesicelo sakho sangempela sendawo;sicela ulandele le mithetho elandelayo ngesikhathi sokukhetha imojuli yakho:
1. Izingxenye ze-chassis ziyisibopho futhi kufanele ukhethe izingxenye ze-chassis ngaphambi kokukhetha noma yimaphi amanye amamojula.Ngesikhathi esifanayo, sicela ukhethe izindlela ezihlukene zokuphakelwa kwamandla (AC/DC) ngokwezidingo zakho.
2. Lonke idivayisi isekela izikhala zemojuli ye-BYPASS ezingafika kwezi-2 kanye ne-slot yemojuli ye-MONITOR engu-1;awukwazi ukukhetha ngaphezu kwenani lezikhala ozozilungiselela.Ngokusekelwe ekuhlanganisweni kwenombolo yezikhala kanye nemodeli yemojuli, idivayisi ingasekela ukuvikelwa kwezixhumanisi ezine ze-10GE;noma ingakwazi ukusekela izixhumanisi ezine ze-40GE;noma ingakwazi ukusekela isixhumanisi esisodwa se-100GE.
3. Imodeli yemojuli "BYP-MOD-L1CG" ingafakwa kuphela ku-SLOT1 ukuze isebenze kahle.
4. Uhlobo lwemojula "BYP-MOD-XXX" lungafakwa kuphela ku-slot yemojuli ye-BYPASS;uhlobo lwemojuli "MON-MOD-XXX" lungafakwa kuphela kumojuli ye-MONITOR slot ukuze isebenze okuvamile.
Imodeli Yomkhiqizo | Amapharamitha omsebenzi |
I-Chassis(Umsingathi) | |
I-ML-BYPASS-M100 | I-rackmount ye-1U ejwayelekile engu-19-intshi;ukusetshenziswa kwamandla okuphezulu 250W;i-modular BYPASS umvikeli ophethe;2 BYPASS module Slots;I-slot yemojula engu-1 QAPHELA;I-AC ne-DC ngokuzithandela; |
I-BYPASS MODULE | |
I-BYP-MOD-L2XG(LM/SM) | Isekela ukuvikelwa kwe-serial ye-2-way 10GE, i-interface ye-4 * 10GE, isixhumi se-LC;i-transceiver optical eyakhelwe ngaphakathi;isixhumanisi se-optical single/multimode ozikhethela sona, sisekela i-10GBASE-SR/ LR; |
I-BYP-MOD-L2QXG(LM/SM) | Isekela ukuvikelwa kwe-serial ye-2-way 40GE, i-interface ye-4 * 40GE, isixhumi se-LC;i-transceiver optical eyakhelwe ngaphakathi;isixhumanisi se-optical single/multimode ozikhethela sona, sisekela i-40GBASE-SR4/ LR4; |
I-BYP-MOD-L1CG (LM/SM) | Isekela ukuvikelwa kwe-serial kwesiteshi esingu-1 se-100GE, isikhombimsebenzisi esingu-2 * 100GE, isixhumi se-LC;i-transceiver optical eyakhelwe ngaphakathi;isixhumanisi sokubona i-multimode eyodwa ngokuzikhethela, isekela i-100GBASE-SR4/LR4; |
QAPHELA MODULE | |
I-MON-MOD-L16XG | I-16 * 10GE SFP + module yokuqapha imbobo;ayikho imojula ye-transceiver ebonakalayo; |
I-MON-MOD-L8XG | I-8*10GE SFP+ imojuli yembobo yokuqapha;ayikho imojula ye-transceiver ebonakalayo; |
I-MON-MOD-L2CG | I-2 * 100GE QSFP28 module yokuqapha imbobo;ayikho imojula ye-transceiver ebonakalayo; |
I-MON-MOD-L8QXG | 8* 40GE QSFP+ module yokuqapha port;ayikho imojula ye-transceiver ebonakalayo; |
I-Network TAP Bypass Switch Specifications
Indlela Yomkhiqizo | I-ML-BYPASS-M100 I-Inline Network Tap Bypass Switch | |
Uhlobo lwesixhumi esibonakalayo | Isixhumi esibonakalayo se-MGT | 1*10/100/1000BASE-T Isixhumi esibonakalayo sokuphathwa kwe-Adaptive;Sekela ukuphathwa kwe-HTTP/IP okukude |
I-Module Slot | 2 * BYPASS module slot; 1 * MONITOR module slot; | |
Izixhumanisi ezisekela ubukhulu | Ukusekelwa kwedivayisi okuphezulu kwezixhumanisi ezingu-4*10GE noma izixhumanisi ezingu-4*40GE noma izixhumanisi ezingu-1*100GE | |
Ukuqapha | Idivayisi isekela amachweba okuqapha aphezulu angu-16*10GE noma amachweba okuqapha angu-8*40GE noma amachweba okuqapha angu-2*100GE; | |
Umsebenzi | Ikhono eligcwele lokucubungula i-duplex | 640Gbps |
Ngokusekelwe ku-IP/protocol/port ama-tuples amahlanu akhethekile wokuvikela ukugeleza kwethrafikhi | Isekelwe | |
Ukuvikelwa kwe-Cascade okusekelwe kuthrafikhi egcwele | Isekelwe | |
Ukulinganisa imithwalo eminingi | Isekelwe | |
Umsebenzi wokuthola ukushaya kwenhliziyo ngokwezifiso | Isekelwe | |
Sekela ukuzimela kwephakheji ye-Ethernet | Isekelwe | |
UKUSHINTSHWA KWE-BYPASS | Isekelwe | |
I-BYPASS Shintsha ngaphandle kwe-flash | Isekelwe | |
I-CONSOLE MGT | Isekelwe | |
IP/WEB MGT | Isekelwe | |
I-SNMP V1/V2C MGT | Isekelwe | |
I-TELNET/SSH MGT | Isekelwe | |
Iphrothokholi ye-SYSLOG | Isekelwe | |
Ukugunyazwa komsebenzisi | Ngokusekelwe ekugunyazweni kwephasiwedi/AAA/TACACS+ | |
Ezogesi | I-voltage yokuhlinzeka elinganiselwe | AC-220V/DC-48V【Ongakukhetha】 |
Isilinganiso samandla obuningi | 50HZ | |
Okokufaka okulinganiselwe okwamanje | I-AC-3A / DC-10A | |
Amandla Alinganiselwe | 100W | |
Imvelo | Izinga Lokushisa Lokusebenza | 0-50℃ |
Izinga lokushisa lesitoreji | -20-70℃ | |
Umswakama osebenzayo | 10% -95%, Akukho ukufingqa | |
Ukucushwa komsebenzisi | Ukucushwa kwekhonsoli | RS232 interface,115200,8,N,1 |
Ingaphandle kwe-MGT ye-band interface | 1*10/100/1000M Ethernet interface | |
Ukugunyazwa kwephasiwedi | Isekelwe | |
I-Chassis Height | Isikhala se-Chassis (U) | 1U 19 intshi, 485mm*44.5mm*350mm |
I-Network TAP Bypass Switch Application(njengokulandelayo)
5.1 Ingozi Yezisetshenziswa Zokuvikeleka Ezixhumene Nelayini (IPS/FW)
Okulandelayo i-IPS ejwayelekile (I-Intrusion Prevention System), imodi yokukhipha ye-FW (Firewall), i-IPS/FW isetshenziswa njengemishini yenethiwekhi esemgqeni (njengamarutha, amaswishi, njll.) phakathi kwethrafikhi ngokusebenzisa amasheke okuphepha, ngokusho inqubomgomo yokuphepha ehambisanayo yokunquma ukukhululwa noma ukuvimba ithrafikhi ehambisanayo, ukuze kuzuzwe umphumela wokuvikela ukuvikela.
Ngasikhathi sinye, singakwazi ukubona i-IPS(Intrusion Prevention System)/FW(Firewall) njengokusatshalaliswa okungaphakathi kwemishini, evamise ukuthunyelwa endaweni ebalulekile yenethiwekhi yebhizinisi ukuze kusetshenziswe ukuphepha okungaphakathi komugqa, ukuthembeka kwemishini yayo exhunyiwe kuthinta ngqo. ukutholakala kwenethiwekhi yebhizinisi jikelele.Uma idivayisi yokuphepha esemgqeni igcwele ngokweqile, ukuphahlazeka, izibuyekezo zesofthiwe, izibuyekezo zenqubomgomo, njll., konke ukutholakala kwenethiwekhi yebhizinisi kuzothinteka kakhulu.Kuleli qophelo, thina kuphela ngokusikwa kwenethiwekhi, i-bypass jumper ebonakalayo ingenza inethiwekhi ukuthi ibuyiselwe, kodwa ithinta kakhulu ukwethembeka kwenethiwekhi.I-IPS(Intrusion Prevention System)/FW(Firewall) namanye amadivaysi asemgqeni ngakolunye uhlangothi athuthukisa ukuthunyelwa kokuphepha kwenethiwekhi yebhizinisi, ngakolunye uhlangothi futhi kunciphisa ukuthembeka kwamanethiwekhi ebhizinisi, okwandisa ubungozi benethiwekhi ayitholakali.
5.2 I-Inline Link Series Ukuvikelwa Kwezisetshenziswa
I-Mylinking™ " I-Bypass Switch " isetshenziswe njengokusemgqeni phakathi kwamadivayisi enethiwekhi (amarutha, amaswishi, njll.), futhi ukugeleza kwedatha phakathi kwamadivayisi enethiwekhi akusaholeli ngokuqondile ku-IPS(Intrusion Prevention System) / FW(Firewall), " Bypass Switch " kuya ku-IPS / FW, lapho i-IPS / FW ngenxa yokugcwala, ukuphahlazeka, izibuyekezo zesofthiwe, izibuyekezo zenqubomgomo nezinye izimo zokwehluleka, "I-Bypass Switch" ngokutholwa komlayezo wokushaya kwenhliziyo ohlakaniphile Umsebenzi wokutholwa ngesikhathi, futhi ngaleyo ndlela weqe idivayisi enephutha, ngaphandle kokuphazamisa isisekelo senethiwekhi, imishini yenethiwekhi esheshayo exhunywe ngokuqondile ukuvikela inethiwekhi evamile yokuxhumana;lapho i-IPS / FW alulame ukwehluleka, kodwa futhi ngokusebenzisa ezihlakaniphile Heartbeat Packets Ukuthola ukutholwa ngesikhathi umsebenzi, isixhumanisi sokuqala ukubuyisela ukuphepha amasheke ezokuphepha kwenethiwekhi yebhizinisi.
I-Mylinking™ "Bypass Switch" inomsebenzi onamandla ohlakaniphile wokutholwa komlayezo we-Heartbeat, umsebenzisi angakwazi ukwenza ngokwezifiso isikhawu sokushaya kwenhliziyo kanye nenani eliphakeme lokuzama futhi, ngomlayezo ongokwezifiso wokushaya kwenhliziyo ku-IPS / FW wokuhlolwa kwezempilo, njengokuthumela umlayezo wokuhlola ukushaya kwenhliziyo. ethekwini elikhuphuka nomfula / elingezansi lomfula le-IPS / FW, bese uthola kusukela echwebeni elikhuphuka nomfula / elingezansi lomfula le-IPS / FW, bese wahlulela ukuthi i-IPS / FW isebenza ngokujwayelekile yini ngokuthumela nokwamukela umlayezo wokushaya kwenhliziyo.
5.3 “SpecFlow” Policy Flow Inline Traction Series Protection
Uma idivayisi yenethiwekhi yezokuvikela idinga kuphela ukubhekana nethrafikhi ethile ekuvikelweni kochungechunge, ngokusebenzisa umsebenzi we-Mylinking™ "Network Tap Bypass Switch" wokucubungula ngakunye, ngesu lokuhlola ithrafikhi ukuze kuxhunywe idivayisi yezokuphepha " Okhathazekile" ithrafikhi ithunyelwa. emuva ngqo kusixhumanisi senethiwekhi, futhi" isigaba sethrafikhi esithintekayo "sidonsela kudivayisi yokuphepha esemgqeni ukuze wenze ukuhlola kokuphepha.Lokhu ngeke nje kugcine ukusetshenziswa okuvamile komsebenzi wokuthola ukuphepha kwedivayisi yokuphepha, kodwa futhi kunciphise ukugeleza okungasebenzi kahle kwemishini yokuphepha ukubhekana nokucindezela;ngesikhathi esifanayo, "I-Network Tap Bypass Switch" ingathola isimo sokusebenza sedivayisi yokuphepha ngesikhathi sangempela.Idivayisi yezokuphepha isebenza ngendlela engavamile idlula ithrafikhi yedatha ngokuqondile ukuze igweme ukuphazamiseka kwesevisi yenethiwekhi.
I-Mylinking™ Inline Traffic Bypass Tap ingakwazi ukuhlonza ithrafikhi ngokusekelwe kusihlonzi sesihloko sesendlalelo se-L2-L4, esifana nethegi ye-VLAN, ikheli le-MAC lomthombo, ikheli le-IP lomthombo, uhlobo lwephakethe le-IP, imbobo yephrothokholi yesendlalelo sezokuthutha, umaka wokhiye wesihloko sephrothokholi, kanye njalonjalo.Izinhlobonhlobo zezimo ezifanayo inhlanganisela evumelana nezimo zingachazwa ngendlela eguquguqukayo ukuze kuchazwe izinhlobo ezithile zethrafikhi ezithakaselwayo kudivayisi ethile yokuvikela futhi zingasetshenziswa kabanzi ukuze kusetshenziswe imishini yokuhlola ukuphepha okukhethekile (i-RDP, i-SSH, ukuhlolwa kwesizindalwazi, njll.) .
5.4 Layisha ibhalansi yochungechunge lokuvikela
I-Mylinking™ "Network Tap Bypass Switch" isetshenziswa njenge-inline phakathi kwamadivayisi enethiwekhi (amarutha, amaswishi, njll.).Lapho ukusebenza kokucubungula okukodwa kwe-IPS/FW kunganele ukubhekana nokugcwala okuphezulu kwesixhumanisi senethiwekhi, Umsebenzi wokulinganisa umthwalo wethrafikhi womvikeli, "ukuhlanganisa" kwe-IPS / FW cluster processing network network traffic eminingi, kunganciphisa ngempumelelo i-IPS/FW eyodwa. ingcindezi yokucubungula, thuthukisa ukusebenza okuphelele kokucubungula ukuze kuhlangatshezwane nomkhawulokudonsa ophezulu wesimangalo sendawo yokuphakela.
I-Mylinking™ "Network Tap Bypass Switch" inomsebenzi onamandla wokulinganisa umthwalo, ngokuya ngethegi ye-VLAN yohlaka, imininingwane ye-MAC, imininingwane ye-IP, inombolo yechweba, iphrothokholi kanye nolunye ulwazi lokusatshalaliswa kokulinganisa komthwalo we-Hash ukuze kuqinisekiswe ukuthi i-IPS / FW ngayinye. ithole ukugeleza kwedatha Ubuqotho beseshini.
5.5 I-Multi-series Inline Equipment Flow Traction Protection (Shintsha Uxhumano Lwe-Serial lube Ukuxhumana Okufanayo)
Kwezinye izixhumanisi ezibalulekile (njengezitolo ze-inthanethi, isixhumanisi sokushintshana kwendawo yeseva) indawo ivamise ukuba ngenxa yezidingo zezici zokuphepha kanye nokuthunyelwa kwemishini eminingi yokuhlola ukuphepha okusemgqeni (njenge-firewall(FW), okokusebenza kokuhlasela kwe-DDOS, I-WEB Application Firewall(WAF), I-Intrusion Prevention System(IPS), njll.), okokusebenza okuningi kokuthola ukuphepha ngesikhathi esisodwa ochungechungeni kusixhumanisi ukukhulisa isixhumanisi sephuzu elilodwa lokwehluleka, ukunciphisa ukuthembeka kukonke kwenethiwekhi.Futhi kulokhu okushiwo ngenhla kwemishini yokuvikela ukuthunyelwa ku-inthanethi, ukuthuthukiswa kwemishini, ukushintshwa kwemishini nokunye ukusebenza, kuzobangela inethiwekhi ukuphazamiseka kwesevisi isikhathi eside kanye nesenzo esikhulu sokusika iphrojekthi ukuze kuqedelwe ukuqaliswa ngempumelelo kwamaphrojekthi anjalo.
Ngokusebenzisa "I-Network Tap Bypass Switch" ngendlela ebumbene, imodi yokuphakelwa yamadivayisi amaningi okuvikela axhunywe ochungechungeni kusixhumanisi esifanayo ingashintshwa isuke kokuthi "imodi yokuhlanganisa ngokomzimba" iye kokuthi "ukuhlangana ngokomzimba, imodi yokuhlanganisa okunengqondo" isixhumanisi sephuzu elilodwa lokwehluleka ukuthuthukisa ukwethembeka kwesixhumanisi, kuyilapho "iswishi yokudlula" ekugelezeni kwesixhumanisi ekudonseni kokufunwa, ukufeza ukugeleza okufanayo ngemodi yasekuqaleni yomphumela wokucubungula ophephile.
Idivayisi yokuvikela engaphezu kweyodwa ngesikhathi esifanayo njengomdwebo wokuphakelwa okukulayini:
I-Mylinking™ Network TAP Bypass Switch Deployment Diagram:
5.6 Ngokusekelwe Kusu Elinamandla Lokuvikelwa Kokuthola Ukuvikeleka Kokuhamba Kwethrafikhi
"I-Network Tap Bypass Switch" Esinye isimo sohlelo lokusebenza esithuthukisiwe sisekelwe isu eliguquguqukayo lezinhlelo zokusebenza zokuvikela ukutholwa kokuphepha kokudonsa kwethrafikhi, ukusetshenziswa kwendlela njengoba kuboniswe ngezansi:
Thatha "Ukuvikeleka kokuhlasela nokutholwa kwe-Anti-DDoS" okokusebenza kokuhlola kokuphepha, isibonelo, ngokusetshenziswa kwe-"Network Tap Bypass Switch" kanye nezinto zokuvikela ezimelene ne-DDOS bese uxhumeke "Ekushintsheni Kwenethiwekhi Tap Bypass", " Kumvikeli we-traction "ejwayelekile" enanini eligcwele lokudlulisa isivinini sethrafikhi ngesikhathi esifanayo isibuko esigelezayo esiphumayo "kudivayisi yokuvikela ukuhlasela kwe-DDOS", uma kutholwa iseva ye-IP (noma ingxenye yenethiwekhi ye-IP) ngemva ukuhlasela," idivayisi yokuvikela ukuhlasela kwe-DDOS " izokhiqiza imithetho eqondiwe yokufanisa ukugeleza kwethrafikhi futhi iyithumele "Ekushintsheni Kwenethiwekhi Ye-Tap Bypass" ngokusebenzisa isixhumi esibonakalayo sokulethwa kwenqubomgomo eguqukayo.I-"Network Tap Bypass Switch" ingabuyekeza "i-traffic traction dynamic" ngemva kokuthola imithetho eguquguqukayo yenqubomgomo Iqoqo Lomthetho "futhi ngokushesha" umthetho ushaye ithrafikhi yeseva yokuhlasela "ukudonsela" ekuvikelweni kokuhlasela kwe-anti-DDoS nokutholwa "kokusebenza ukuze kucutshungulwe, ukuze isebenze ngemva kokugeleza kokuhlasela bese iphinda ijovwe kunethiwekhi.
Uhlelo lohlelo lokusebenza olususelwe "ku-Network Tap Bypass Switch" kulula ukulusebenzisa kunomjovo womzila we-BGP ovamile noma esinye isikimu sokudonsa kwethrafikhi, futhi indawo ezungezile ayincikile kunethiwekhi futhi ukwethembeka kuphezulu.
"I-Network Tap Bypass Switch" inezici ezilandelayo zokusekela ukuvikeleka kokutholwa kwenqubomgomo enamandla:
1, "I-Network Tap Bypass Switch" ukuze unikeze ngaphandle kwemithetho esekelwe kusixhumi esibonakalayo se-WEBSERIVCE, ukuhlanganiswa okulula namadivayisi okuphepha enkampani yangaphandle.
2, "I-BNetwork Tap Bypass Switch" esekelwe ku-hardware ehlanzekile ye-ASIC chip edlulisela phambili amaphakethe esivinini sentambo angu-10Gbps ngaphandle kokuvimbela ukudluliselwa kweswishi, kanye "nelabhulali yomthetho we-traffic traction dynamic" kungakhathaliseki inombolo.
3, "I-Network Tap Bypass Switch" umsebenzi owakhelwe ngaphakathi we-BYPASS wobungcweti, noma ngabe isivikeli ngokwaso singaphumeleli, singaphinda sidlule isixhumanisi sokuqala se-serial ngokushesha, asithinti isixhumanisi sokuqala sokuxhumana okuvamile.
Sethula I-Inline Bypass Tap Switch: Ukuqinisekisa Ukuvikeleka Okungaphumeleli Kokuphepha Kokuvikela Inethiwekhi Okuthuthukisiwe
Ezweni elihlala livela lokusatshiswa kwe-cybersecurity, izinhlangano zibhekene nenselelo eqhubekayo yokuvikela amanethiwekhi azo ekuhlaselweni okunonya nokufinyelela okungagunyaziwe.Ukuze amelane nalezi zinsongo ngempumelelo, amabhizinisi asebenzisa amadivayisi okuphepha ashumekiwe asebenzayo njenge-Intrusion Prevention Systems (IPS) kanye nezibhulamlilo zesizukulwane esilandelayo (NGFWs).Kodwa-ke, ukuqinisekisa ukuxhumeka kwenethiwekhi okungaphazamiseki kuyilapho ugcina izinyathelo zokuphepha eziqinile kungaba umsebenzi oyinkimbinkimbi.
Sibhekana nalesi sidingo esibalulekile sesixazululo esithembekile nesihlulekayo, sethula ngokuziqhenya i-Inline Bypass Tap Switch.Eyaziwa nangokuthi i-bypass switch, le divayisi esungulayo isebenza njengebhuloho phakathi kwamadivayisi enethiwekhi namathuluzi okuphepha enethiwekhi, ihlinzeka ngendawo evikelekile yokuhlukaniswa nokunciphisa ubungozi bokunqamuka kwenethiwekhi okungaba khona.
Phambili kubuchwepheshe bokuphepha benethiwekhi, i-Inline Bypass Tap Switch yethu yakhelwe ukunikeza ukwesekwa nokuvikelwa okungenakuqhathaniswa kumanethiwekhi akho abalulekile namathuluzi okuphepha.Ake sihlole izici eziphawulekayo nezinzuzo ezilethwa yilo mkhiqizo wesimanje etafuleni.
1. Izimbobo Zokufinyelela Eziphephile:I-Inline Bypass Tap Switch isungula izindawo zokufinyelela ezihlulekayo zokuvikela amadivayisi ashumekiwe asebenzayo njenge-IPS nama-NGFW.Iqinisekisa ukuxhumeka kwenethiwekhi okungaphazamiseki ngokunika amandla ukwabelana okungenazihibe kwethrafikhi phakathi kwamadivayisi, okuvumela inethiwekhi ukuthi izilungise uma kwenzeka ithuluzi lokuvikela lihluleka noma lilungiswa.
2. Iphuzu Elinokwethenjelwa Lokuhlukaniswa: Ngokusebenzisa iswishi ye-bypass phakathi kwamadivayisi enethiwekhi namathuluzi okuphepha, izinhlangano zingafinyelela iphuzu elithembekile lokuzihlukanisa.Lokhu kuhlukaniswa kunikeza isendlalelo esengeziwe sokuvikela, okuvumela amaqembu okuvikela ukuthi ahlaziye futhi anciphise izinsongo ezingaba khona ngempumelelo.
3. Ukuvikelwa Kwenethiwekhi Okuqinile:I-Inline Bypass Tap Switch ithuthukisa ingqalasizinda yezokuphepha yenethiwekhi yakho nekhono layo lokuqondisa kabusha ukugeleza kwethrafikhi ngamathuluzi okuvikela.Lokhu kunika amandla amadivayisi okuphepha afana ne-IPS nama-NGFW ukuze ahlole ithrafikhi yenethiwekhi kahle, ahlonze futhi anciphise noma yimiphi imisebenzi enonya noma imizamo yokufinyelela engagunyaziwe.
4. Ukuhlanganisa Okungenazihibe:Iswishi yethu ye-bypass ihlanganisa kalula nezakhiwo zenethiwekhi ezikhona, yenza ukuthunyelwa kube lula futhi kuncishiswe ukuphazamiseka.Ngokuklama kwayo okuguquguqukayo nokunwebekayo, ingakwazi ukuphatha kahle ithrafikhi yenethiwekhi yevolumu ephezulu ngaphandle kokufaka engozini ukuphepha noma ukusebenza.
5. Ukutholakala Okuphezulu:Isikhathi sokungasebenzi kwenethiwekhi ngenxa yokwehluleka kwamathuluzi okuvikela singabiza izinhlangano.Nokho, nge-Inline Bypass Tap Switch, isikhathi sokuphumula esinjalo siyancishiswa njengoba siqinisekisa ukugeleza kwethrafikhi okuqhubekayo ngisho naphakathi kokwehluleka kwamathuluzi okuvikela noma amawindi okulungisa.Lesi sici sokutholakala okuphezulu sigcina amasistimu akho abalulekile evikelekile ngenkathi kususwa iziphazamiso zenethiwekhi ezibizayo.
6. Ukusebenza Okuthuthukisiwe Nokuqina: Ngoshintsho lwe-bypass, izinhlangano zingakhulisa ukusebenza kwamathuluzi azo okuvikela ngokunika amandla ukulinganisa komthwalo kuwo wonke amadivayisi amaningi.Lokhu kuvumela ukusetshenziswa kahle kwezinsiza zokuphepha kuyilapho kuqinisekisa ukukhula okukhulayo njengoba izimfuno zenethiwekhi ziyanda.
7. Ukuphatha Okuphakathi Nokuqapha: I-bypass switch yethu ifakwe amakhono aphelele okuphatha nokuqapha, okwenza izinhlangano zibe nokubonakala okuphelele nokulawula ukugcwala kwenethiwekhi yazo.Ukuphatha okumaphakathi kwenza ukumisa kube lula, ukuqapha, nokuxazulula izinkinga, kuqinisekisa ukuphathwa kokuphepha okusebenzayo.
Sengiphetha, i-Inline Bypass Tap Switch ishintsha ukuphepha kwenethiwekhi ngokunikeza izimbobo zokufinyelela ezihlulekayo zokuvikela amadivayisi ashumekiwe asebenzayo.Ngokusebenza njengendawo evikelekile yokuhlukaniswa phakathi kwenethiwekhi nesendlalelo sokuvikeleka, kuthuthukisa kakhulu ukuvikelwa kwamanethiwekhi abalulekile kuyilapho kunciphisa ubungozi bokunqamuka kwenethiwekhi.Ngokuhlanganisa kwayo okungenazihibe, ukutholakala okuphezulu, namandla okuphatha aphakathi nendawo, lesi sisetshenziswa sesimanje sinikeza izinhlangano amandla okuvikela ezinsongweni ze-inthanethi eziguqukayo ngempumelelo.Thuthukisa ingqalasizinda yezokuphepha yenethiwekhi yakho nge-Inline Bypass Tap Switch futhi uqinisekise ukuvikeleka okungaphazamiseki nokuxhumana kwamasistimu abalulekile enhlangano yakho.Hlala isinyathelo esisodwa ngaphambi kwezinsongo ze-inthanethi ngesixazululo sethu esinobuhlakani!