Application
47
7 Application
This section will present techniques and applications describing the practical use and new remedies
for performing network analysis requirements using
7.1Gathering the Data (HyperTerminal configuration example)
PREMISE: This application consists of workgroup switches that allow end users to access a group of servers. The servers are connected to a single server switch and the users are distributed across several workgroup switches. The security department wants to see all server bound access from the users and server to server traffic.
GOAL: This application will use a
1.TAP access to critical server
2.Aggregate SPAN.
3.Provide access for analysis, security and recording devices.
The first goal requires an external tap between the server switch and the critical financial server. The tap copies all the data going to the financial server, and can't be shutdown like a SPAN port. The tap allows enhanced visibility for security purposes.
The second goal requires that a SPAN port is configured on the workgoup switches. This will only allow workgroup traffic to be replicated out the SPAN port.
The third goal involves aggregating and replicating traffic from the two previous goals for specific security and network analysis to be done.
© 2009 Datacom Systems Inc