产品介绍

- 详细内容 -

Background 
 
In today's modern network architectures, cyber and monitoring tools are required to handle incoming traffic from multiple visibility devices including TAPs, SPAN ports and NPB (Network Packet Broker) appliances.

The volume and diversity in the types of traffic can be overwhelming to these tools. Duplicated packets may cause applications to be stretched to the limits of their processing power whereas packets with multiple headers (e.g. MPLS, VLAN tags, ERSPAN etc.) are often unrecognized by these tools and are typically dropped.

 
 
 
Product Series 

1. CGS-NPB 
 
The CGS-NPB series introduces the next generation appliances providing network visibility that enables Cyber Security, Big Data analytics and monitoring tools deployed in high-end data centers and branch offices. The CGS-NPB appliances address the market requirement to reduce the cost, complexity and footprint of high-end network visibility solutions. The CGS-NPB series leverages a powerful state of the art platform combined with CGS innovative software, resulting in the most reliable, scalable, modular Packet Broker that support 1G, 10G, 25G, 40G and 100G ports and multiple interfaces (Optical, Copper, DAC) in a compact 1RU form factor.
 
The CGS-NPB series includes aggregation, replication, filtering, stacking and load balancing that enable and optimize the benefits of the tools. Additional advanced features with deep packet inspection capabilities that optimize network traffic management are available in a powerful data center ready 1RU server.


CGS-NPB 

Key Features
 
1. High density and compact 1RU form factor that saves rack space, power consumption and cooling
2. CGS-NPB-I:
48(SFP+) x 1G/10G + 6(QSFP) x 40G;
Each QSFP can breakout to 4 x 1G/10G
3. CGS-NPB-II:
32(QSFP28) x 40G/100G or 128 x 10G/ 25G
Each QSFP28 can breakout to 4 x 10G/25G
4. Cost effective data center ready platform

User Cases
1. Aggregation of TAP/SPAN network traffic to a centralized
    location where tools are deployed
2. Optimize tools performance by filtering network traffic
3. Eliminate duplicated packets that over utilize tools
4. Regenerate network traffic to multiple tools
5. Load balance traffic according to tools capacities
6. L2 Matrix switch for testing environment  
    (many to one, one to many, forwarding)



2. AFS (Advanced Features) 
 
Advanced network processing features such as Deduplication are CPU intensive and should not be performed on the aggregation device that is CPU bound by design. The CGS Server introduces the industry’s next generation NPB by leveraging advanced, high performance, modular and scalable ODM hardware that can be configured to the desired network capacity. This unique approach eliminates hardware performance constraints and allows alignment between hardware and performance requirements.

The CGS Server is the only NPB in the market that offers 100G network interfaces in a compact 1U form factor. The appliance is based on a powerful ultra-dense, reliable and versatile 1U rack server that can scale up with additional compute power and memory to meet the NPB requirements.


3. Mini Packet Processor
 
The Mini NPB is the most compact and full feature packet broker in the market, ideal for a small number of 1G copper links. It can meet the basic aggregation and filtering requirements as well as advanced features such as Load Balancing Header Stripping, Deduplication, Data Masking, Packet Slicing, Time-Stamping, Data Capture and De-Fragmentation.
 
AFS Mini Packer Broker processing 
Key Features Key Features
Affordable NPB (Network Packet Broker) with powerful performance
Affordable Network Packet Broker with advanced features
Powerful and scalable server architecture that meets performance requirements
Compact and portable Network Packet Broker
Wide range of transceivers, optics and cables that support 1G, 10G, 25G, 40G, 100G
5 x 1G ports
Aggregation, Filtering, Load Balancing Header Stripping, Deduplication, Data Masking, Packet Slicing, Time Stamping, Capture, De-fragmentation
Aggregation, Filtering, Load Balancing Header Stripping, Deduplication, Data Masking, Packet Slicing, Time Stamping, Capture, De-fragmentation

User Case
 
1. Remove duplicated packets to optimize security and monitoring application performance
2. Enhance legacy packet broker deployments with advanced features
3. Single appliance with basic and advanced packet broker features for small sites
4. MPLS stripping to enable monitoring of MPLS networks
5. Mask sensitive and private customer information


 
4. Passive Network Taps

The Tower Tap™ family is a 4th generation of passive Network Taps, designed with performance, scalability and quality in mind. The Tower Tap™ family provides an identical copy of the network traffic for security, monitoring and recording tools. Tower Tap™ Network Taps enable network infrastructure engineers to deploy decoupled, secure and failsafe test access points across their network quickly, easily and with minimal installation disruption. The high density design of the Tower Tap™ family supports up to 240 Network Taps in a 1RU (19” x 1.75” ) space, dramatically reducing the overall rack space footprint of traditional access methods. Modern data center design architecture utilities the Tower Tap™ family as a demarcation point to reduce the isolation time of performance failures in complex networks. This results in a major reduction in CAPEX and OPEX.

                               
 

Tower Tap™ family exclusive advantages :

  • Integrated Laser shutter for optical safety
  • 'Push to Open’ ejection mechanism, handle-free design supporting high density and improved fiber management
  • 'Phase shift’ insertion mode to ease the installation and operation of fibers in dense environments
  • Robust module retention system in chassis for ‘inserted’, and ‘phase shift’ modes
  • Tower Chassis™ 1RU enclosure, with guiderails supporting efficient mix and match of all four module sizes
  • MXC connector based modules, for high fiber density and data rate of up to 1.6Tb per connector
  • Color coding scheme for ease of installation, operation and identification