Ukuqinisekisa ukuphepha kwamanethiwekhi endaweni ye-IT eshintsha ngokushesha kanye nokuthuthuka okuqhubekayo kwabasebenzisi kudinga amathuluzi ahlukahlukene ayinkimbinkimbi ukwenza ukuhlaziywa kwesikhathi sangempela. Ingqalasizinda yakho yokuqapha ingaba nokuqapha ukusebenza kwenethiwekhi kanye nezinhlelo zokusebenza (i-NPM/APM), ama-data logger, kanye nabahlaziyi benethiwekhi bendabuko, kuyilapho izinhlelo zakho zokuzivikela zisebenzisa ama-firewall, izinhlelo zokuvikela ukungena (i-IPS), ukuvimbela ukuvuza kwedatha (i-DLP), i-anti-malware, nezinye izixazululo.
Kungakhathaliseki ukuthi amathuluzi okuphepha nokuqapha akhethekile kangakanani, wonke anezinto ezimbili ezifanayo:
• Udinga ukwazi kahle ukuthi kwenzekani kunethiwekhi
• Imiphumela yokuhlaziya isekelwe kuphela kudatha etholiwe
Ucwaningo olwenziwe yi-Enterprise Management Association (EMA) ngo-2016 luthole ukuthi cishe ama-30% abaphendulile babengathembi amathuluzi abo ukuthi azothola yonke idatha abayidingayo. Lokhu kusho ukuthi kukhona izindawo zokuqapha ezingabonakali kunethiwekhi, okuholela emizamweni engenamsebenzi, ezindleleni ezibiza kakhulu, kanye nengozi ephezulu yokugetshengwa.
Ukubonakala kudinga ukugwema ukutshalwa kwezimali okuchithayo kanye nokuqapha izindawo ezingabonakali zenethiwekhi, okudinga ukuqoqa idatha efanele kukho konke okwenzekayo kunethiwekhi. Ama-splitter/splitter kanye nama-mirror ports amadivayisi enethiwekhi, aziwa nangokuthi ama-SPAN ports, aba yizindawo zokufinyelela ezisetshenziselwa ukubamba ithrafikhi ukuze ihlaziywe.
Lokhu "umsebenzi olula"; inselele yangempela ukuthola idatha kusuka kunethiwekhi ngempumelelo iye kuwo wonke amathuluzi ayidingayo. Uma unezingxenye ezimbalwa zenethiwekhi kanye namathuluzi okuhlaziya ambalwa, lokhu kungaxhunywa ngqo. Kodwa-ke, uma ubheka isivinini amanethiwekhi aqhubeka ngaso ukukhula, noma ngabe kungenzeka ngokunengqondo, kunethuba elihle lokuthi lokhu kuxhumana komuntu nomuntu kuzodala iphupho elibi lokuphatha.
I-EMA ibike ukuthi ama-35% ezikhungo zamabhizinisi akhulume ngokuntuleka kwamachweba e-SPAN nama-splitter njengesizathu esiyinhloko sokuthi kungani bengakwazi ukuqapha ngokugcwele izingxenye zenethiwekhi yabo. Amachweba amathuluzi okuhlaziya aphezulu njenge-firewall nawo angase abe mancane, ngakho-ke kubalulekile ukuthi ungagcwalisi imishini yakho ngokweqile futhi wehlise ukusebenza.
Kungani udinga ama-Network Packet Brokers?
I-Network Packet Broker (NPB) ifakiwe phakathi kwe-splitter noma ama-SPAN port asetshenziselwa ukufinyelela idatha yenethiwekhi, kanye namathuluzi okuphepha nokuqapha. Njengoba igama lisho, umsebenzi oyisisekelo we-network packet broker iwukuba: ukuxhumanisa idatha yepakethe yenethiwekhi ukuqinisekisa ukuthi ithuluzi ngalinye lokuhlaziya lithola idatha eliyidingayo ngokunembile.
I-NPB inezela ungqimba olubucayi kakhulu lobuhlakani olunciphisa izindleko nobunzima, okukusiza ukuthi:
Ukuthola idatha ephelele nenembile yokwenza izinqumo ezingcono
Umthengisi wamaphakethe enethiwekhi onekhono lokuhlunga elithuthukisiwe usetshenziselwa ukuhlinzeka ngedatha enembile nephumelelayo yamathuluzi akho okuqapha nokuhlaziya ukuphepha.
Ukuphepha okuqinile
Uma ungakwazi ukubona usongo, kunzima ukuluvimba. I-NPB yakhelwe ukuqinisekisa ukuthi ama-firewall, i-IPS, nezinye izinhlelo zokuvikela zihlala zifinyelela idatha eqondile eziyidingayo.
Xazulula izinkinga ngokushesha
Eqinisweni, ukuhlonza inkinga nje kubangelwa u-85% we-MTTR. Isikhathi sokungasebenzi sisho ukulahlekelwa yimali, futhi ukuyiphatha kabi kungaba nomthelela omubi ebhizinisini lakho.
Ukuhlunga okuqaphela umongo okunikezwa yi-NPB kukusiza ukuthola nokunquma imbangela yezinkinga ngokushesha ngokuletha ubuhlakani bezinhlelo zokusebenza obuthuthukisiwe.
Khulisa isinyathelo
I-metadata enikezwa yi-NPB ehlakaniphile nge-NetFlow iphinde isize ukufinyelela kudatha engokoqobo ukuphatha ukusetshenziswa kwe-bandwidth, izitayela, kanye nokukhula ukuze kuxazululwe inkinga kusenesikhathi.
Inzuzo engcono ekutshalweni kwezimali
I-Smart NPB ayikwazi nje ukuhlanganisa ithrafikhi kusuka ezindaweni zokuqapha ezifana nokushintsha, kodwa futhi ihlunge futhi ihlanganise idatha ukuze ithuthukise ukusetshenziswa kanye nokukhiqiza kwamathuluzi okuphepha nawokuqapha. Ngokuphatha ithrafikhi efanele kuphela, singathuthukisa ukusebenza kwamathuluzi, sinciphise ukuminyana, sinciphise imiphumela engamanga, futhi sifinyelele ukumbozwa okukhulu kokuphepha ngamadivayisi ambalwa.
Izindlela ezinhlanu zokuthuthukisa i-ROI ngama-Network Packet Brokers:
• Ukuxazulula izinkinga okusheshayo
• Thola ubuthakathaka ngokushesha
• Nciphisa umthwalo wamathuluzi okuphepha
• Yandisa impilo yamathuluzi okuqapha ngesikhathi sokuthuthukiswa
• Yenza kube lula ukuthobela imithetho
Yini ngempela i-NPB engayenza?
Ukuhlanganisa, ukuhlunga, nokuletha idatha kuzwakala kulula ngokombono. Kodwa empeleni, i-NPB ehlakaniphile ingenza imisebenzi eyinkimbinkimbi kakhulu, okuholela ekusebenzeni kahle okuphezulu kakhulu kanye nokuzuza kokuphepha.
Ithrafikhi yokulinganisela umthwalo ingenye yemisebenzi. Isibonelo, uma uthuthukisa inethiwekhi yakho yesikhungo sedatha kusuka ku-1Gbps kuya ku-10Gbps, 40Gbps, noma ngaphezulu, i-NPB ingahlehlisa ijubane ukuze yabele ithrafikhi yesivinini esiphezulu eqenjini elikhona lamathuluzi okuqapha ukuhlaziya asheshayo we-1G noma i-2G. Lokhu akugcini nje ngokwandisa inani lokutshalwa kwezimali kwakho kwamanje kokuqapha, kodwa futhi kugwema ukuthuthukiswa okubizayo lapho i-IT ithuthwa.
Ezinye izici ezinamandla ezenziwa yi-NPB zifaka:
Amaphakethe edatha angadingeki ayaphindaphindwa
Amathuluzi okuhlaziya kanye nokuphepha asekela ukwamukelwa kwenani elikhulu lamaphakethe aphindwe kabili athunyelwa kusuka kuma-splitter amaningi. I-NPB ingaqeda ukuphindaphindwa ukuze ivimbele amathuluzi ekuchitheni amandla okucubungula lapho kucutshungulwa idatha engadingeki.
Ukususwa kokubethela kwe-SSL
Ukubethela i-Secure Socket Layer (SSL) kuyindlela ejwayelekile esetshenziswa ukuthumela ulwazi oluyimfihlo ngokuphephile. Kodwa-ke, abaduni bangafihla nezinsongo ze-cyber ezinonya kumaphakethe abethelwe.
Ukuhlola le datha kumele kususwe ukubethela, kodwa ukuqedwa kwekhodi kudinga amandla abalulekile okucubungula. Abathengisi bepakethe yenethiwekhi abaphambili bangakhipha ukuqedwa kokubethela kumathuluzi okuphepha ukuqinisekisa ukubonakala okuphelele ngenkathi kunciphisa umthwalo ezinsizeni ezibiza kakhulu.
Ukufihla Idatha
Ukususwa kokubethela kwe-SSL kwenza idatha ibonakale kunoma ubani onokufinyelela kumathuluzi okuphepha nokuqapha. I-NPB ingavimba izinombolo zekhadi lesikweletu noma ze-Social Security, ulwazi lwezempilo oluvikelwe (i-PHI), noma olunye ulwazi oluyimfihlo oluhlonza umuntu (i-PII) ngaphambi kokudlulisa ulwazi, ukuze lungadalulwa kuthuluzi nakubaphathi balo.
Ukususa Izihloko
I-NPB ingasusa ama-header afana ne-VLAN, i-VXLAN, i-L3VPN, ngakho-ke amathuluzi angakwazi ukuphatha lawa maphrothokholi asengamukela futhi acubungule idatha yephakethe. Ukubonakala okuqaphela umongo kusiza ukuthola izinhlelo zokusebenza ezinonya ezisebenza kunethiwekhi kanye nezinyathelo ezishiywe abahlaseli njengoba zisebenza ohlelweni nakunethiwekhi.
Ubuhlakani bokusebenzisa kanye nosongo
Ukutholwa kusenesikhathi kobuthakathaka kunciphisa ukulahleka kolwazi olubucayi kanye nezindleko zobuthakathaka ekugcineni. Ukubonakala okuqaphela umongo okunikezwa yi-NPB kungasetshenziswa ukwembula izinkomba zokungena (i-IOC), ukuhlonza indawo yama-vector okuhlasela, kanye nokulwa nezinsongo ze-cryptographic.
Ubuhlakani bohlelo lokusebenza budlula izendlalelo 2 kuya ku-4 (imodeli ye-OSI) yedatha yephakethe kuze kufike ku-sendlalelo 7 (isendlalelo sohlelo lokusebenza). Idatha ecebile ngokuziphatha komsebenzisi kanye nohlelo lokusebenza kanye nendawo kungadalwa futhi kuthunyelwe ukuze kuvinjelwe ukuhlaselwa kwezendlalelo zohlelo lokusebenza lapho ikhodi enonya izenza idatha evamile kanye nezicelo zamakhasimende ezivumelekile.
Ukubonakala okuqaphela umongo kusiza ukuthola izinhlelo zokusebenza ezinonya ezisebenza kunethiwekhi yakho kanye nezinyathelo ezishiywe abahlaseli njengoba besebenza ohlelweni lwakho kanye nenethiwekhi.
Ukuqapha Isicelo
Ukubonakala kokubona kohlelo lokusebenza nakho kunomthelela omkhulu ekusebenzeni nasekuphathweni. Mhlawumbe ufuna ukwazi ukuthi abasebenzi basebenzise nini izinsizakalo ezisekelwe efwini njengeDropbox noma i-imeyili esekelwe kuwebhu ukuze badlule izinqubomgomo zokuphepha futhi badlulise amafayela enkampani, noma lapho abasebenzi bangaphambili bezama ukufinyelela amafayela besebenzisa izinsizakalo zokugcina umuntu siqu ezisekelwe efwini.
Izinzuzo ze-NPB
• Kulula ukuyisebenzisa nokuphatha
• Ubuhlakani bokususa imithwalo yeqembu
• Akukho ukulahleka kwephakethe - isebenzisa izici ezithuthukisiwe
• Ukuthembeka okungu-100%
• Ukwakhiwa kokusebenza okuphezulu
Isikhathi sokuthunyelwe: Jan-20-2025

