Ngaba ukhe weva ngempompo yenethiwekhi? Ukuba usebenza kwindawo yothungelwano okanye i-cybersecurity, usenokuba uqhelene nesi sixhobo. Kodwa kwabo bangenjalo, inokuba yimfihlelo.
Kwihlabathi lanamhlanje, ukhuseleko lwenethiwekhi lubaluleke kakhulu kunanini na ngaphambili. Iinkampani kunye nemibutho ixhomekeke kuthungelwano lwabo ukugcina idatha ebuthathaka kunye nokunxibelelana nabathengi kunye namaqabane. Banokuqinisekisa njani ukuba uthungelwano lwabo lukhuselekile kwaye alunafikelelo olungagunyaziswanga?
Eli nqaku liza kuphonononga ukuba yintoni impompo yenethiwekhi, isebenza njani, kwaye kutheni isisixhobo esibalulekileyo sokhuseleko lwenethiwekhi. Ngoko masingene ngaphakathi kwaye sifunde ngakumbi ngesi sixhobo sinamandla.
Yintoni i-TAP yeNethiwekhi (iNdawo yokuFikelela kwiSitena)?
Ii-TAP zeNethiwekhi zibalulekile ekusebenzeni ngempumelelo kunye nokhuseleko lwenethiwekhi. Babonelela ngeendlela zokubeka iliso, ukuhlalutya, ukulandelela, kunye nokukhusela iziseko zenethiwekhi. Ii-TAP zeNethiwekhi zenza "ikopi" ye-traffic, eyenza izixhobo ezahlukeneyo zokubeka iliso zifikelele kulo lwazi ngaphandle kokuphazamisa ukuhamba kokuqala kweepakethi zedatha.
Ezi zixhobo zibekwe ngobuchule kulo lonke iziseko zothungelwano ukuqinisekisa olona hlolo lusebenzayo lunokwenzeka.
Imibutho inokufakela ii-TAP zenethiwekhi kwiindawo eziva ngathi kufuneka ziqwalaselwe, kubandakanywa kodwa kungaphelelanga kwiindawo zokuqokelela idatha, ukuhlalutya, ukubeka iliso ngokubanzi, okanye kubaluleke ngakumbi njengokubhaqwa kokungena.
Isixhobo se-TAP sothungelwano asitshintshi imeko ekhoyo yayo nayiphi na ipakethi kumsebenzi womnatha osebenzayo; yenza ngokulula umfuziselo wepakethi nganye ethunyelweyo ukuze ikwazi ukuhanjiswa ngojongano lwayo oluqhagamshelwe kwizixhobo zokubeka iliso okanye iinkqubo.
Inkqubo yokukopa iphunyezwa ngaphandle kokugxininisa amandla okusebenza kuba ayiphazamisi imisebenzi eqhelekileyo kwintambo emva kokucofa kugqityiwe. Ke ngoko, ukwenza imibutho ibe umaleko owongezelelekileyo wokhuseleko ngelixa ibona kwaye ilumkisa ngomsebenzi okrokrelayo kuthungelwano lwabo kwaye ibeke iliso kwiingxaki ze-latency ezinokuthi zenzeke ngexesha lokusebenzisa okuphezulu.
Isebenza Njani i-TAP yeNethiwekhi?
Ii-TAP zeNethiwekhi zizixhobo eziphucukileyo ezenza ukuba abalawuli bavavanye ukusebenza kwenethiwekhi yabo yonke ngaphandle kokuphazamisa ukusebenza kwayo. Ziyizixhobo zangaphandle ezisetyenziselwa ukubeka esweni umsebenzi womsebenzisi, ukufumanisa i-traffic enobungozi kunye nokukhusela ukhuseleko lwenethiwekhi ngokuvumela uhlalutyo olunzulu lwedatha ephumayo kwaye iphuma kuyo. Inethiwekhi ye-TAPs ibhuloka umaleko obonakalayo apho iipakethi zihamba khona kwiintambo kunye nokutshintsha kunye neengqimba eziphezulu apho usetyenziso luhlala khona.
I-TAP yeNethiwekhi isebenza njengotshintsho lwezibuko olwenziwayo oluvula amazibuko amabini anenyani ukubamba zonke izithuthi ezingenayo neziphumayo kulo naluphi na uqhagamshelo lwenethiwekhi oludlula kuyo. Isixhobo senzelwe ukuba sibe yi-100% engabonakaliyo, ngoko ngelixa ivumela ukubeka iliso ngokubanzi, ukufunxa, kunye nokucoca iipakethi zedatha, ii-TAP zeNethiwekhi aziphazamisi okanye ziphazamise ukusebenza kwenethiwekhi yakho nangayiphi na indlela.
Ngaphaya koko, basebenza kuphela njengamatshaneli okuhambisa idatha efanelekileyo kwiindawo ezichongiweyo zokubeka iliso; oku kuthetha ukuba abanako ukuhlalutya okanye ukuvavanya ulwazi abaluqokelelayo - befuna esinye isixhobo somntu wesithathu ukuba sikwazi ukwenza oko. Oku kuvumela abalawuli ulawulo oluchanekileyo kunye nokuguquguquka xa kuziwa ekulungiseleleni indlela abanokuthi basebenzise ngayo i-Network TAPs zabo ngelixa beqhuba imisebenzi ngaphandle kokuphazamiseka kwinethiwekhi yabo iphela.
Kutheni sifuna i-TAP yenethiwekhi?
Ii-TAP zeNethiwekhi zibonelela ngesiseko sokuba nembonakalo ebanzi neyomeleleyo nenkqubo yokubeka iliso kuyo nayiphi na inethiwekhi. Ngokucofa kwi-medium yonxibelelwano, banokuchonga idatha kwi-wire ukuze ihanjiswe kwezinye iinkqubo zokhuseleko okanye zokubeka iliso. Eli candelo libalulekileyo lokubonakala kwenethiwekhi liqinisekisa ukuba yonke idatha ekhoyo kumgca ayiphoswanga njengoko i-traffic idlula, oku kuthetha ukuba akukho zipakethi eziye zawa.
Ngaphandle kwee-TAPs, uthungelwano alunakujongwa kwaye lulawulwe ngokupheleleyo. Abalawuli be-IT banokubeka iliso ngokuthembekileyo kwiisongelo okanye bafumane ingqiqo yegranular kuthungelwano lwabo olungaphandle kwe-band ulungelelwaniso olunokuthi lufihle ngokubonelela ngokufikelela kulo lonke ulwazi lwendlela.
Ngaloo ndlela, ikopi echanekileyo yonxibelelwano olungenayo noluphumayo lunikiwe, luvumela imibutho ukuba iphande kwaye ithathe amanyathelo ngokukhawuleza kuwo nawuphi na umsebenzi okrokrelayo abanokudibana nawo. Ukuze uthungelwano lwemibutho lukhuseleke kwaye luthembeke kweli xesha langoku lolwaphulo-mthetho lwe-cyber, ukusebenzisa i-TAP yothungelwano kufuneka kuthathwe njengokunyanzeliswa.
Iintlobo zee-TAP zeNethiwekhi kunye nendlela ezisebenza ngayo?
Xa kuziwa ekufikeleleni nasekubekeni iliso kwi-traffic yenethiwekhi, kukho iindidi ezimbini eziphambili ze-TAPs - i-Passive TAPs kunye ne-Active TAPs. Bobabini babonelela ngendlela efanelekileyo kunye nekhuselekileyo yokufikelela kwi-data stream kwinethiwekhi ngaphandle kokuphazamisa ukusebenza okanye ukongeza i-latency eyongezelelweyo kwinkqubo.
I-TAP ye-passive isebenza ngokuvavanya imiqondiso yombane edlula kwikhonkco eliqhelekileyo le-point-to-point cable phakathi kwezixhobo ezibini, ezinje phakathi kweekhompyuter kunye neeseva. Inika indawo yoqhagamshelwano evumela umthombo wangaphandle, njenge-router okanye i-sniffer, ukuba ifikelele kwi-signal flow ngelixa idlula kwindawo yayo yokuqala ingaguqulwanga. Olu hlobo lwe-TAP lusetyenziswa xa kubekwa iliso kwintengiselwano ethatha ixesha okanye ulwazi phakathi kwamanqaku amabini.
<Ii-TAP zeNethiwekhi esebenzayo>
I-TAP esebenzayo isebenza kakhulu njengeqabane layo elingenzi nto kodwa inenyathelo elongeziweyo kwinkqubo - ukwazisa uphawu lokuvuselela umqondiso. Ngokusebenzisa uhlaziyo lwesiginali, i-TAP esebenzayo iqinisekisa ukuba ulwazi lunokujongwa ngokuchanekileyo ngaphambi kokuba luqhubele phambili ezantsi emgceni.
Oku kubonelela ngeziphumo ezingaguqukiyo nakumanqanaba ombane ahlukeneyo asuka kweminye imithombo eqhagamshelwe ecaleni kwetsheyini. Ukongeza, olu hlobo lwe-TAP lukhawulezisa ukuhanjiswa kuyo nayiphi na indawo efunekayo ukuze kuphuculwe amaxesha okusebenza.
Ziziphi iiNzuzo ze-TAP yeNethiwekhi?
I-Network TAPs ziye zanda kakhulu kwiminyaka yakutshanje njengoko imibutho izama ukwandisa amanyathelo abo okhuseleko kunye nokuqinisekisa ukuba uthungelwano lwabo luhlala lusebenza kakuhle. Ngokukwazi ukubeka iliso kumazibuko amaninzi ngaxeshanye, ii-TAP zeNethiwekhi zibonelela ngesisombululo esisebenzayo kunye neendleko ezisebenzayo kwimibutho ejonge ukufumana ukubonakala okungcono kwinto eyenzekayo kuwo wonke uthungelwano.
Ukongezelela, kunye neempawu ezifana nokukhusela i-bypass, i-packet aggregation, kunye nezakhono zokucoca, i-Network TAPs inokubonelela ngemibutho ngendlela ekhuselekileyo yokugcina amanethiwekhi abo kwaye iphendule ngokukhawuleza kwiisongelo ezinokuthi zibe khona.
Inethiwekhi ye-TAP ibonelela ngemibutho ngeenzuzo ezininzi, ezinje:
-Ukwandiswa kokubonakala kokuhamba kwetrafikhi yenethiwekhi.
- Ukuphuculwa kokhuseleko kunye nokuthotyelwa.
- Ukunciphisa ixesha lokuphumla ngokubonelela ngokuqonda ngakumbi unobangela wayo nayiphi na imiba.
- Ukwanda kokufumaneka kwenethiwekhi ngokuvumela ubunakho bokubeka iliso obuphindwe kabini.
- Iindleko ezicuthiweyo zobunini njengoko zikholisa ukonga ngakumbi kunezinye izisombululo.
Inethiwekhi ye-TAP vs. SPAN Isibuko sesibuko (Indlela yokuBamba iTrafikhi yeNethiwekhi? Itephu yeNethiwekhi vs Port Mirror?):
I-Network TAPs (iiNdawo zokuFikelela kwiTrafikhi) kunye ne-SPAN (i-Switched Port Analyzer) zizixhobo ezibini ezibalulekileyo zokubeka iliso kwi-traffic yenethiwekhi. Ngelixa zombini zibonelela ngokubonakala kuthungelwano, iiyantlukwano ezifihlakeleyo phakathi kwezi zimbini kufuneka ziqondwe ukumisela eyona nto ifanele imeko ethile.
I-TAP yeNethiwekhi sisixhobo sangaphandle esidibanisa kwindawo yokudityaniswa phakathi kwezixhobo ezibini ezivumela ukubekwa esweni konxibelelwano oludlula kuyo. Ayitshintshi okanye iphazamisane nedatha ehanjiswayo kwaye ayixhomekeke kwiswitshi elungiselelwe ukuyisebenzisa.
Ngakolunye uhlangothi, i-port ye-SPAN luhlobo olukhethekileyo lwe-port yokutshintsha apho i-traffic engenayo nephumayo ibonakaliswe kwelinye izibuko ngeenjongo zokubeka iliso. Izibuko ze-SPAN kunokuba nzima ukuyiqwalasela kune-Network TAPs, kwaye ifuna ukusetyenziswa kokutshintsha ukuba kusetyenziswe.
Ngoko ke, ii-TAP zeNethiwekhi zifaneleke ngakumbi kwiimeko ezifuna ukubonakala okuphezulu, ngelixa izibuko ze-SPAN zingcono kwimisebenzi elula yokubeka iliso.
Ixesha lokuposa: Jul-12-2024
