RE: Taps supporting traffic aggregation ...

[kgeorgiades () toplayer com]

Thierry,

The best way to do this is using an IDS Balancer. (possibly the only way to
do it right)

The IDS Balancer will:
a) Aggregate the traffic 
b) Filter the traffic (if you want to do that, so that you can send
different traffic to different sensors)
c) Create multiple copies (e.g. same traffic to 2 different sensors)
d) Load balance the traffic to groups of sensors.

The pricing of the Top Layer IDS Balancer is very close to the prices of
taps.

The ROI of the IDS Balancer is so compelling that most of out customers
admit that the savings pay for the IDS Balancer from day one.

The Top Layer IDS Balancer is a family of products from entry level fast
Ethernet configurations to multi-GigE.

http://www.toplayer.com/content/products/intrusion_detection/ids_balancer.js
p


Note: I work for Top Layer.


Kyriacos (Ken) Georgiades
Senior Director, Product Line Management
Top Layer Networks, Inc
Tel: 508 870 1300 x 231
Cell: 508 783 5988
Fax: 508 870 9797
Email: kgeorgiades () toplayer com
www.toplayer.com


-----Original Message-----
From: Thierry Bôle [mailto:tbole () telsys ch]
Sent: Monday, January 26, 2004 8:00 AM
To: focus-ids () securityfocus com
Subject: Taps supporting traffic aggregation ...


Hello,

Has anyone tested taps supporting traffic aggregation (with the 
capability to mirror the traffic only on one link)

I know that we can have some bandwidth limitations: if the 2 network 
ports are operating at 100mbps and the IDS port is operating at 100mbps 
as well, then under sustained aggregate bandwidth of greater than 
100mbps, packets will get dropped.

Thank you for your feedback.

Thierry


---------------------------------------------------------------------------
---------------------------------------------------------------------------

---------------------------------------------------------------------------
---------------------------------------------------------------------------