Zenya Technology

Silicom IBS(1G), IS40(10/40G), IS100(100G) Bypass Switches belong to the highest level of protection, with active and passive bypass capabilities, which can protect the network from monitoring The device has been disconnected from the network due to maintenance, downtime, or power outages. In addition to sending heartbeat packets for monitoring to monitor the information security host for bypass switching, it also monitors its own health status. It can also perform bypass switching when it crashes or is powered off without becoming a network host. point of failure.

It is generally believed that the most common causes of network disconnection of Inline information security equipment are: software instability, crash, wrong rule setting, attack, etc., or the traffic processing speed is very slow, but there is no disconnection. The ""half-dead"" state causes users to be unable to access the Internet; even if the HA architecture is used, when this happens, it is still necessary to manually unplug or power off the Active line to completely disconnect the Active line before HA routing can be activated. The expected built-in bypass network card cannot achieve the expected protection effect in the case of a crash, still causing the network Downn Time, and still need to deal with the disconnection problem manually, so more and more managers begin to pay attention to the difference in disconnection protection levels , and are willing to accept a more effective bypass switch disconnection protection scheme.

Traffic is the foundation of all information security and network performance analysis. Any network tool needs to receive the correct traffic in order to achieve the best benefits. How to simplify the traditional traffic mirror method and filter out the massive traffic Feeding the correct traffic to the corresponding tool is the most important function of the traffic replicator and splitter.

CGS Network Packet Broker (NPB), covering the basic to the most advanced functions of NPB. In addition to basic packet filtering, aggregation, replication, distribution, and weighted traffic load balancing, it can also handle advanced output packets, including packet slicing, de-duplication, MAC/IP replacement, Get off the ERSPAN terminal, transfer 100% of the traffic to Netflow, extract the corresponding IP list from the Domain Name, data masking and other advanced functions, and use RegEx to perform in-depth DPI full packet analysis of the packet payload, and compare the packet location. All packets of the session are filtered out together. It also supports Tool Service Chain, concatenates and distributes traffic to multiple Inline tools, and uses Heartbeat to detect the health status of Inline tools, so that a single faulty tool will not affect the detection traffic of other tools, which greatly simplifies the deployment of cyber security tools , and improve device or network performance device analysis capabilities.

Provide 4G/5G mobile network ACC100 FEC acceleration card, and exclusive Silicom time synchronization card, suitable for 5G DU, CU, RU, UPF and other ORAN and CORE network equipment.