CGS AFS模組式DPI網路流量複製器|流量分流器
CGS AFS模組式DPI網路流量複製器|流量分流器
CGS模組式DPI網路流量複製器與分流器,涵蓋了流量複製器與分流器從基本到最高階的功能。除了基本封包過濾、匯聚、複製、分流、加權比重流量負載平衡之外,使用RegEx對封包payload進行深度DPI全封包解析,並可將比對封包所在session的所有封包,一起過濾出來。可以分流如Youtube等串流影音,從Domain Name萃取對應IP清單、MAC置換、ERSPAN終端下車等,加上封包切片(Slicing)、去重複封包(Deduplication)與機敏資料遮罩(Data Masking)、Netflow/IPFIX產生等高階功能,亦支援Tool Service Chain,提升資安設備或網路效能設備分析能力。

原廠:CGS Tower Networks
CGS模組式DPI網路流量複製器與分流器,涵蓋了流量複製器與分流器從基本到最高階的功能。除了基本封包過濾、匯聚、複製、分流、加權比重流量負載平衡之外,使用RegEx對封包payload進行深度DPI全封包解析,並可將比對封包所在session的所有封包,一起過濾出來。可以分流如Youtube等串流影音,從Domain Name萃取對應IP清單、MAC置換、ERSPAN終端下車等,加上封包切片(Slicing)、去重複封包(Deduplication)與機敏資料遮罩(Data Masking)、Netflow/IPFIX產生等高階功能,亦支援Tool Service Chain,提升資安設備或網路效能設備分析能力。

產品說明
模組式AFS網路流量複製器屬於CGS網絡可視化產品組合中,最高階的產品,透過AFS提供正確的流量,與 流量提供 所需的資料、以及正確的格式,優化了網路安全和效能監控應用服務。CGS 網路流量複製器軟體搭配最先 進的網路晶片,搭配 正規表示式(Regular Expression)可以對全封包內容掃描與過濾,透過一致的可視化體系結構UVA(Unified Visibility Architecture),革新了網路可視化市場,從而簡化佈署了CGS軟體在最先進、可擴充且功能強大的Appliance和網路伺服器設備上,提供 了卓越的效能和可 擴充性、更廣泛的功能選項,增強的生產力和降低 TCO(Total Cost of Ownership)。
CGS AFS是1U的模組化的網路流量複製器(Network Packet Broker),可以安裝具備硬體Bypass功能的Network TAP模組,或是接收Switch Mirror流量的NPB模組,只為了因應客戶日漸複雜的網路架構,具有更高彈性的選配組合,介面數量可從初期少量採購,未來擴充到大量配備,介面速度可 從1G到 100G,可以任選電介面(Copper)、光介面(Fiber)的組合。
CGS AFS是1U的模組化的網路流量複製器(Network Packet Broker),可以安裝具備硬體Bypass功能的Network TAP模組,或是接收Switch Mirror流量的NPB模組,只為了因應客戶日漸複雜的網路架構,具有更高彈性的選配組合,介面數量可從初期少量採購,未來擴充到大量配備,介面速度可 從1G到 100G,可以任選電介面(Copper)、光介面(Fiber)的組合。
主要特色 |
完整NPB(Network packet broker)網路流量複製器功能,包括:De-duplication, layer 7 and regex filtering |
基本配備:2 x 10GE SFP+ Ports and 4 x NMC extension slots with Bypass options |
高達100G 網路封包處理能力 |
NMC slot options: 8 x 1G RJ45 Copper Ports with 4 Bypass pairs 8 x 1G RJ45 Copper or 1G SFP Ports 4 x 1G RJ45 Copper + 4 x 1G SFP Ports 4 x 10G SFP+ Ports with 2 Bypass pairs 4 x 10G SFP+ Ports 8 x 10G SFP+ Ports 2 x 25G SFP28 Ports 2 x 40G QSFP Ports + Bypass module option 1 x 100G QSFP28 (Requires two NMC Slots) |
使用情境
|
CGS Modular AFS
功能 | 效益 |
Aggregation | Aggregate and redirect network traffic for further processing |
Replication | Enable multiple tools to analyse the same traffic |
Inner Tunnel Filtering | Filtering according to inner tunnel parameters (GTP, VXLAN, L2TP) |
GRE Tunnelling | Interconnect packet brokers across multiple sites with L2/L3GRE protocol |
Filtering | Filtering out unnecessary network traffic with conditional 5-tuple classifiers |
User Defined Filters | Track packets that match a certain "window" in the incoming traffic |
AND/OR/NOT Operators | Simplify packet broker operation with logic filter actions |
Copy | Enable orthogonal filter paths on the same traffic |
Layer-7 Filtering | Perform DPI and identify thousands of layer 7 protocols |
Regex Filtering | Identity and filter traffic that includes specific strings |
Weighted Load Balancing | Distribute traffic across multiple tools and prevent over-subscription |
Session Tracking | Track the entire session once the desired pattern has been identified |
Port Labelling | Track packet path by adding VLAN tags that indicate its ingress port |
Header Stripping | Remove headers (MPLS, VLAN, PPP, QinQ, VN-TAG, VXLAN, GRE, GTP, L2TP) |
Header Editing | Modify MAC, VLAN and IP headers |
Deduplication | Maximize tool performance by eliminating duplicated packets |
Data Masking | Protect sensitive data by overwriting it before it is sent to the tools |
Packet Slicing | Reduce data overload by removing packet payload and/or any unnecessary data |
Capping & Sampling | Reduce traffic by sampling traffic and/or limiting rates |
Time Stamping | Enhances network visibility with nanosecond time stamping capabilities |
Capture | Capture PCAP files in filter granularity for further analysis |
De-Fragmentation | Assemble packet fragments to complete packets |
IPFIX/NetFlow | Generation and distribution of IPFIX/NetFlow flows |
Management | Web UI, CLI, SNMP, Net CONF, REST API |
功能特性
CGS Modular AFS
功能 | 效益 |
Aggregation | Aggregate and redirect network traffic for further processing |
Replication | Enable multiple tools to analyse the same traffic |
Inner Tunnel Filtering | Filtering according to inner tunnel parameters (GTP, VXLAN, L2TP) |
GRE Tunnelling | Interconnect packet brokers across multiple sites with L2/L3GRE protocol |
Filtering | Filtering out unnecessary network traffic with conditional 5-tuple classifiers |
User Defined Filters | Track packets that match a certain "window" in the incoming traffic |
AND/OR/NOT Operators | Simplify packet broker operation with logic filter actions |
Copy | Enable orthogonal filter paths on the same traffic |
Layer-7 Filtering | Perform DPI and identify thousands of layer 7 protocols |
Regex Filtering | Identity and filter traffic that includes specific strings |
Weighted Load Balancing | Distribute traffic across multiple tools and prevent over-subscription |
Session Tracking | Track the entire session once the desired pattern has been identified |
Port Labelling | Track packet path by adding VLAN tags that indicate its ingress port |
Header Stripping | Remove headers (MPLS, VLAN, PPP, QinQ, VN-TAG, VXLAN, GRE, GTP, L2TP) |
Header Editing | Modify MAC, VLAN and IP headers |
Deduplication | Maximize tool performance by eliminating duplicated packets |
Data Masking | Protect sensitive data by overwriting it before it is sent to the tools |
Packet Slicing | Reduce data overload by removing packet payload and/or any unnecessary data |
Capping & Sampling | Reduce traffic by sampling traffic and/or limiting rates |
Time Stamping | Enhances network visibility with nanosecond time stamping capabilities |
Capture | Capture PCAP files in filter granularity for further analysis |
De-Fragmentation | Assemble packet fragments to complete packets |
IPFIX/NetFlow | Generation and distribution of IPFIX/NetFlow flows |
Management | Web UI, CLI, SNMP, Net CONF, REST API |