iBypass HD
Network Security Trends
• Intrusions escalating in
§ Sophistication
§ Severity
§ Frequency
• Malware and spam proliferating
• Insider attack vectors growing
• Intrusion Prevention Systems (IPSs) being deployed
• Next-generation firewalls encroaching on IPS functionality
• Data Loss Prevention (DLP) systems tracking data at rest & in motion
• Unified Threat Management (UTM) systems attempting to do it all
The Security Monitoring Access Challenge
Deploy today’s sophisticated IPSs,
next-generation firewalls,
DLP systems, and UTM products
in-line in the network
while minimizing the risk of downtime
The Bypass Switch Solution
Bypass switches provide fail-safe ports for in-line security devices
• Provides peace of mind when deploying new technology in-line
• Protects against power, link, and application failure
• Flexibility for testing, upgrades, and moves
• Heartbeat packet monitors health of attached IPS
• Fully passive –when Bypass Switch loses power, the link is still up
Normal Operation
(Bypass Off)
IPS Failure
(Bypass On)
iBypass HD
• “HD” is for High-Density – 8 iBypass Switches in a 1U chassis
• 1 Gigabit initially, 10 Gigabit to follow
• Modular: Four Dual Bypass Modules (DBMs) per chassis
• DBMs can be configured as High Availability (HA) failover pairs
• Enterprise-ready management functionality
iBypass HD Features
• Two to eight iBypass Switches in a single 1U chassis
• Mix and match fiber and copper DBMs (hot-pluggable)
• Fault-tolerant failover configurations
• Manual (forced) Bypass On mode
• Tap mode: Each bypass switch independently configurable as
a full-duplex breakout Tap (also Tap mode when Bypass On)
• Dual Heartbeat packets check both directions of data flow
• Heartbeat packets configurable for each bypass switch
• Link Fault Detection (LFD) & Bypass Detection
• Fail-closed mode
Fiber GA: 5/15 Copper GA: 4/30
More Features
• Remote monitoring (RMON) traffic statistics
• RADIUS and TACACS+ authentication and authorization
• Remote CLI using secure SSH
• Dual hot-swappable redundant power supplies
• AC and -48VDC models
• Slide rail mounting (chassis is 27” deep!)
iBypass HD Benefits
• Protects links with IPSs and other in-line devices against
– Power failure (IPS or bypass switch)
– IPS failure (hardware, software hangs or slowdowns)
• Increases solution reliability by independently checking the IPS
• Provides flexibility to down or move IPSs without interrupting link traffic;
also flexibility to use as Taps
• Saves rack space by packing more bypass switches in a smaller footprint
• Increases traffic visibility
– Counts bytes and packets entering and leaving the IPS
– Counts CRC errors and Jumbo Packets
• Supports High Availability (HA) network architectures
HA Mode – Redundant Tools
Net Optics> module set dbm=1 ha_mode=tool
HA Mode – Redundant Links
Net Optics> module set dbm=1 ha_mode=link
HA Mode – Redundant Links & Tools
Net Optics> module set dbm=1 ha_mode=both
HA Mode – Tool Failure
Net Optics> module set dbm=1 ha_mode=both
HA Mode – Tool & Link Failure
Net Optics> module set dbm=1 ha_mode=both
HA Mode – Link Failure
Net Optics> module set dbm=1 ha_mode=both
HA Mode – Back to Normal!
Net Optics> module set dbm=1 ha_mode=both
Part Numbers
IBP-8000 iBypass HD, Main Chassis, 4 DBM Bays
IBP-8000-DC iBypass HD, Main Chassis, 4 DBM Bays, -48V
DBM-100 DBM, 10/100/1000, RJ45
DBM-200 DBM, Gig, MM, 62.5um, SFP Monitor Ports
DBM-250 DBM, Gig, MM, 50um, SFP Monitor Ports
DBM-300 DBM, Gig, SM, 8.5um, SFP Monitor Ports
Thank You!
拜伯里通信科技有限公司成立于2003年,总部设立在中国.上海,致力
于网络监测和优化领域的设备代理和服务,为中国的数据网络提供安
全接入和增强的可视性解决
方案
气瓶 现场处置方案 .pdf气瓶 现场处置方案 .doc见习基地管理方案.doc关于群访事件的化解方案建筑工地扬尘治理专项方案下载
。
联系方式:
销 售: 86-15221922572
电 话: 86-21-56378000
传 真 : 86-21-56377000
公司地址: 中国.上海志丹路10号长富大厦三层
电子邮件: sales@biburycom.com(销售业务)
公司网站:
http://www.biburycom.com/www.bibury.cn/www.bibury.com.cn