0
LAN, WAN, SAN,
   and now
     DAN
Data Access Network
What’s a DAN?
                             out-of-band passive monitoring network
                             Includes pa...
DAN provides “Data Sockets”
                                       Part of a Flexible Network Infrastructure
             ...
Why are DANs Needed Now?
                                          Things Have Changed

                             Enron...
Proliferation of Tools
                             New SOX compliance transaction monitors
                              ...
Proliferation Causes Contention
                                       for Span Ports




                                ...
An Analogy:


                             Using a DAN is like using a power strip.
Proprietary & Confidential
Too Many Power Tools?
                              Not Enough Sockets?



                                   ?

         ...
For Power Tools, use a Power Strip
Proprietary & Confidential
Too Many Monitoring Tools?
                               Not Enough Span Ports?

                                 ?

    ...
For Sensors/Monitors/Analyzers,
                                    Use a DAN Switch
Proprietary & Confidential




      ...
What Other Problems do DANs
                                               solve?
                             Distributed...
Monitoring a Mesh Network?
Proprietary & Confidential
Old Solution: Lots of Distributed Tools,
                                Deploy one tool per span port/switch
Proprietary ...
Better: Distribute Connections with a DAN
                                  Consolidate Tools; Save CapEx $$$
Proprietary ...
DAN is “Best Practice” for Network
                                   Infrastructure Design
                             T...
DAN Solves Access Problems By

                             • Aggregating many links to any tool
                         ...
Upcoming SlideShare
Loading in...5
×

Data Access Network for Monitoring and Troubleshooting

3,055

Published on

The Data Access Network is a critical network infrastructure element for network monitoring and troubleshooting. Gigamon, the leading provider of intelligent data access solutions, ensures network integrity including performance, security and compliance by enabling your monitoring tools to operate at maximum efficiency.

0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total Views
3,055
On Slideshare
0
From Embeds
0
Number of Embeds
1
Actions
Shares
0
Downloads
56
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide
  • Transcript of "Data Access Network for Monitoring and Troubleshooting"

    1. 1. LAN, WAN, SAN, and now DAN Data Access Network
    2. 2. What’s a DAN? out-of-band passive monitoring network Includes passive tools like: Security IDS Sensors, Application Performance Monitors, Troubleshooting Protocol Analyzers, VoIP QoS Probes, Proprietary & Confidential Forensic Recorders, and Data Access Switching
    3. 3. DAN provides “Data Sockets” Part of a Flexible Network Infrastructure • Plug-in multiple out-of-band tools – ANY data to ANY tool • Unobtrusive 24x7 tool connections – never touch the network • Aggregate, Replicate, Filter and load balance data streams • Use legacy 1Gig tools to monitor new 10Gig networks Proprietary & Confidential 3
    4. 4. Why are DANs Needed Now? Things Have Changed Enron and 9/11 spawned SOX auditing, increased security and lawful intercept requirement PLUS technology and business developments: Web site e-commerce and internet applications demand support VoIP and media convergence make the network more strategic Proprietary & Confidential Green networking demands smaller Data Center footprint Network is how business gets done. Downtime is unacceptable
    5. 5. Proliferation of Tools New SOX compliance transaction monitors Keep your boss out of jail! IDS Sensors detect external attacks From hackers NAC appliance protects networks from inside From your own people! CALEA lawful intercept and Forensic Recorders Configuration monitoring tools watch over network Proprietary & Confidential resources Application and Network troubleshooting
    6. 6. Proliferation Causes Contention for Span Ports Security and IT Engineers seen here Proprietary & Confidential “Negotiating” Over a SPAN Port
    7. 7. An Analogy: Using a DAN is like using a power strip. Proprietary & Confidential
    8. 8. Too Many Power Tools? Not Enough Sockets? ? ? ? ? Proprietary & Confidential
    9. 9. For Power Tools, use a Power Strip Proprietary & Confidential
    10. 10. Too Many Monitoring Tools? Not Enough Span Ports? ? ? ? ? Proprietary & Confidential
    11. 11. For Sensors/Monitors/Analyzers, Use a DAN Switch Proprietary & Confidential One Span port serves Many tools
    12. 12. What Other Problems do DANs solve? Distributed Monitoring burning the budget? Consolidate tools; $ave money on capital and operational budgets Unsecure monitor or tap ports risk data leakage? DAN can secure all access point to prevent snooping Too much traffic for one tool? Reduce and balance load over multiple units to match tool capacity Proprietary & Confidential Restrictive Configuration Management Policies? Deploy tools and make changes on your own schedule
    13. 13. Monitoring a Mesh Network? Proprietary & Confidential
    14. 14. Old Solution: Lots of Distributed Tools, Deploy one tool per span port/switch Proprietary & Confidential Lots of hardware…very expensive!
    15. 15. Better: Distribute Connections with a DAN Consolidate Tools; Save CapEx $$$ Proprietary & Confidential Aggregate and balance flows to Consolidated Tools
    16. 16. DAN is “Best Practice” for Network Infrastructure Design Totally flexible solution to many problems Facilitates unobtrusive instrumentation of a network Solves requirement for multiple tool access Gives tools the view of the total network Secures monitor and tap ports Proprietary & Confidential Improves monitor coverage, saves time and money.
    17. 17. DAN Solves Access Problems By • Aggregating many links to any tool • Multicasting any link to many tools • Filtering data to map packets to tools • Saving $$ Cap Ex and Op Ex budget$ Proprietary & Confidential Any to Any Many to Any Any to Many Bit-Mask Filtering
    1. A particular slide catching your eye?

      Clipping is a handy way to collect important slides you want to go back to later.

    ×