Inline Bypass Network TAP Detect Heartbeat Message Respond for WAF IPS and FW

Product Specification

Inline Bypass Network TAP Detect Heartbeat Message Respond for WAF, IPS and FW
 
1. Bypass Switch Bypass TAP Intelligent Heartbeat Message Detection Technology
NetTAP® policy flow traction protector as an independent external health testing equipment, the protector to send heartbeat packets to the serial security device to perform health testing. The guard sends the heartbeat detection message from the up/down link of the serial security device and receives the heartbeat detection message transmitted from the other side from the upper/lower link of the serial security device,safety equipment working status is normal. Two-way heartbeat message detection mechanism can accurately reflect the current working state of the serial security equipment, more effective to ensure the normal work of the network.
NetTAP® Policy. The Traction Protector supports the ability to customize heartbeat parameters on any one of the serial devices, such as the heartbeat interval, the maximum number of heartbeat retries, and so on. The user can adjust the parameters according to the actual situation to ensure accurate detection of the normal working state of the serial safety equipment.
NetTAP® “bypass switch” also supports the opening of the heartbeat message detection customization function. That is, the monitor side supports the opening of the bilateral heartbeat detection function, the opening of the single-side heartbeat detection function and the closing of the bilateral heartbeat detection function. This feature can meet the special serial security device detection mechanism. The user can adjust the heartbeat detection function on or off according to the actual situation to ensure accurate detection of the normal working status of the serial security device.
 
2. Intelligent Bypass Swtich Application Solution​
Multi-series Device Network Flow Traction Protection (Variable Series Connection for Parallel)
 
In some key links (such as Internet outlets, server area exchange link) location is often due to the needs of security features and the deployment of multiple in-line security testing equipment (such as firewall, anti-DDOS attack equipment, WEB application firewall, intrusion prevention Equipment, etc.), multiple security detection equipment at the same time in series on the link to increase the link of a single point of failure, reducing the overall reliability of the network. And in the above-mentioned security equipment on-line deployment, equipment upgrades, equipment replacement and other operations, will cause the network for a long time service interruption and a larger project cut action to complete the successful implementation of such projects.
By deploying the "bypass switch" in a unified manner, the deployment mode of multiple security devices connected in series on the same link can be changed from "physical concatenation mode" to "physical concatenation, logical concatenation mode" The link on the link of a single point of failure to improve the reliability of the link, while the "bypass switch" on the link flow on demand traction, to achieve the same flow with the original mode of safe processing effect.
 
More than one security device at the same time in series deployment diagram:
 
                                                                                   Multiple Single Points of Failure

                                                Physical Multiplexing in Series with the Deployment of Security Equipment
 
Bypass switch deployment diagram:

                                                       Physical Connection, Logical Connection Deployment Diagram
 
3. Bypass Switch Bypass TAP Technical Specifications

1*GE Electrical BYPASS Link(NT-FBYP-L1G)

 

Product Model		NT-CBYP-L1G
Interface form	SFP electrical port	4*10/100/1000M GE electrical port；
	GE electrical BYPASS link	1 link
Deploy mode	Number of link protection links	Maximum support for a GE electrical BYPASS link
	Monitor	Maximum support 1*GE electrical link monitor
Functional performance	Number of link protection links	4
	Line speed processing capacity	4Gbps
	Cross - link protection based on IP / protocol / port quintuple specific traffic	Support
	Based on the total flow of the series protection	Support
	Multi - channel load balancing function	-
	Custom heartbeat message function	Support
	Ethernet encapsulation support	Support
	BYPASS switching function	Support
	Bypass switch without flash	Support
	CONSOLE network management	Support
	IP/WEB network management	Support
	SNMP V1/V2C network management	Support
	TELNET/SSH network management	Support
	SYSLOG protocol	Support
	User authentication function	Based on user name and password authentication
Electric	Rated supply voltage	AC-220V/DC-48V【Optional】
	Rated power frequency	50HZ
	Rated input current	AC-3A / DC-10A
	Rated Power	40W
Environment	Working Temperature	0－50℃
	Storage temperature	-20-70℃
	Working humidity	10％-95％,No condensation
User configuration	console configuration	RS232 interface,9600,8,N,1
	Outside network management interface	1*10/100/1000M Ethernet interface
	Password authentication	Support
Dimension	Chassis dimension (U)	1U 485mm*44.5mm*350mm

 

NT-MBYP-CHS Bypass Switch.pdf