|
|
| Solution Briefs |  prev | index | next  |
 |
Distributed Filter Solution
for protocol-specific monitoring of multiple perimeter and core and distribution networks |
| Summary |
Aggregation is an effective way to centralize monitoring and reduce equipment costs. But how does one deal with oversubscription when aggregating? Simple. Take a multi-directed approach that accounts for utilization, bandwidth, and available tools.
Option 1: Aggregate to a higher bandwidth
(Example: 10/100 inputs aggregated to gigabit outputs)
Option 2: Take advantage of low utilization at gigabit (typically 6-8%) to aggregate multiple links onto a single output
Each of the above options is subject to network-specific capabilities and may not apply in many environments; however, VSS' Distributed Taps enable a greater range of ameliorative options that allow for high port density aggregation that avoids oversubscription.
Option 3: Selectively aggregate. Have all capture points connected and available for aggregation, but only aggregate based on a user's real-time (or permanent) selection of inputs to outputs.
Option 4: Bond output ports. Port-bonding can increase the output bandwidth of the tap by up to x4.
Option 5: Filter! Significantly reduce traffic by applying targeted filters that pass only the specified traffic as defined by the user.
The following solution employs selective aggregation, filtering and port-bonding to reduce utilization, increase bandwidth and group a large number of networks into a single, manageable stream for a mixed monitoring application (intrusion detection and packet analysis).
|
|
Download full Solution Brief |
|
|
