Ukuqinisekisa ukhuseleko lweenethiwekhi kwindawo ye-IT etshintsha ngokukhawuleza kunye nokuguquka okuqhubekayo kwabasebenzisi kufuna uluhlu lwezixhobo ezintsonkothileyo zokwenza uhlalutyo lwexesha langempela. Iziseko zakho zokubeka esweni zinokuba nokubeka esweni ukusebenza kwenethiwekhi kunye nezicelo (i-NPM/APM), ii-data loggers, kunye nabahlalutyi benethiwekhi bendabuko, ngelixa iinkqubo zakho zokhuselo zisebenzisa ii-firewalls, iinkqubo zokukhusela ukungena (i-IPS), ukuthintela ukuvuza kwedatha (i-DLP), i-anti-malware, kunye nezinye izisombululo.
Nokuba izixhobo zokhuseleko kunye nokubeka esweni zikhetheke kangakanani na, zonke zinezinto ezimbini ezifanayo:
• Kufuneka wazi kakuhle ukuba kwenzeka ntoni kwinethiwekhi
• Iziphumo zohlalutyo zisekelwe kuphela kwidatha efunyenweyo
Uphando olwenziwe yi-Enterprise Management Association (EMA) ngo-2016 lufumanise ukuba phantse ama-30% abantu abaphenduleyo babengazithembi izixhobo zabo ukuba ziya kufumana yonke idatha abayidingayo. Oku kuthetha ukuba kukho ukubekwa esweni kweendawo ezingacacanga kwinethiwekhi, nto leyo ekugqibeleni ekhokelela kwimizamo engenamsebenzi, iindleko ezigqithisileyo, kunye nomngcipheko ophezulu wokuqhekezwa.
Ukubonakala kufuna ukuphepha utyalo-mali oluchitha imali kunye nokubeka esweni iindawo ezingabonakaliyo kwinethiwekhi, nto leyo efuna ukuqokelela idatha efanelekileyo kuyo yonke into eyenzekayo kwinethiwekhi. Ii-splitters/splitters kunye nee-mirror ports zezixhobo zenethiwekhi, ezaziwa ngokuba zii-SPAN ports, ziba ziindawo zokufikelela ezisetyenziselwa ukubamba ithrafikhi ukuze ihlalutywe.
Lo ngumsebenzi "olula"; umceli mngeni wokwenene kukufumana idatha kwinethiwekhi ngokufanelekileyo ukuya kuzo zonke izixhobo eziyifunayo. Ukuba uneziqendu ezimbalwa zenethiwekhi kunye nezixhobo ezimbalwa zohlalutyo, ezi zimbini zinokuqhagamshelwa ngokuthe ngqo. Nangona kunjalo, ngenxa yesantya iinethiwekhi eziqhubeka ngaso ukukhula, nokuba kunokwenzeka ngokwengqiqo, kukho ithuba elihle lokuba olu qhagamshelo lomntu nomntu luya kudala ingxaki enkulu yolawulo.
I-EMA ibike ukuba ama-35% amaziko ezoshishino akhankanye ukunqongophala kwamazibuko e-SPAN kunye nama-splitter njengesona sizathu siphambili sokuba angakwazi ukujonga ngokupheleleyo amacandelo enethiwekhi yawo. Amazibuko kwizixhobo zohlalutyo oluphezulu ezifana nee-firewalls nawo asenokuba mancinci, ngoko ke kubalulekile ukuba ungagqithisi izixhobo zakho kwaye wonakalise ukusebenza.
Kutheni ufuna iiNetwork Packet Brokers?
I-Network Packet Broker (NPB) ifakelwe phakathi kwe-splitter okanye i-SPAN ports ezisetyenziselwa ukufikelela kwidatha yenethiwekhi, kunye nezixhobo zokhuseleko kunye nokubeka esweni. Njengoko igama lisitsho, umsebenzi osisiseko we-network packet broker kuku: ukulungelelanisa idatha yephakheji yenethiwekhi ukuqinisekisa ukuba isixhobo ngasinye sohlalutyo sifumana ngokuchanekileyo idatha esiyidingayo.
I-NPB yongeza umaleko obalulekileyo wobukrelekrele onciphisa iindleko kunye nobunzima, ikunceda ukuba:
Ukufumana idatha ebanzi nechanekileyo yokwenza izigqibo ezingcono
Umthengisi weepakethi zenethiwekhi onobuchule bokucoca obuphambili usetyenziselwa ukubonelela ngedatha echanekileyo nesebenzayo kwizixhobo zakho zokubeka esweni kunye nohlalutyo lokhuseleko.
Ukhuseleko oluqinileyo
Xa ungakwazi ukubona isoyikiso, kunzima ukusimisa. I-NPB yenzelwe ukuqinisekisa ukuba ii-firewalls, i-IPS, kunye nezinye iinkqubo zokhuselo zihlala zifikelela kwidatha echanekileyo eziyidingayo.
Sombulula iingxaki ngokukhawuleza
Enyanisweni, ukuchonga nje ingxaki kwenza i-85% ye-MTTR. Ixesha lokungasebenzi lithetha ukulahleka kwemali, kwaye ukuyiphatha gwenxa kunokuba nefuthe elibi kwishishini lakho.
Ukucoca ulwazi oluhambelana nemeko okubonelelwa yi-NPB kukunceda ufumane kwaye uchonge unobangela weengxaki ngokukhawuleza ngokwazisa ulwazi oluphambili lwesicelo.
Yandisa inyathelo lokuqala
I-metadata ebonelelwa yi-smart NPB ngeNetFlow ikwanceda ukufikelela kwidatha eqinisekisiweyo ukulawula ukusetyenziswa kwe-bandwidth, iindlela, kunye nokukhula ukusombulula ingxaki ekuqaleni.
Imbuyekezo engcono kutyalo-mali
I-Smart NPB ayinakukwazi nje ukuhlanganisa ithrafikhi ukusuka kwiindawo zokubeka esweni ezifana nokutshintsha, kodwa ikwakwazi nokucoca nokuqokelela idatha ukuphucula ukusetyenziswa kunye nemveliso yezixhobo zokhuseleko kunye nokubeka esweni. Ngokuphatha kuphela ithrafikhi efanelekileyo, sinokuphucula ukusebenza kwezixhobo, sinciphise ukuxinana, sinciphise iziphumo ezingezizo, kwaye sifezekise ukukhuseleka okukhulu ngezixhobo ezimbalwa.
Iindlela ezintlanu zokuphucula i-ROI ngeNetwork Packet Brokers:
• Ukusombulula iingxaki ngokukhawuleza
• Fumana ubuthathaka ngokukhawuleza
• Nciphisa umthwalo wezixhobo zokhuseleko
• Yandisa ubomi bezixhobo zokubeka esweni ngexesha lokuphuculwa
• Yenza kube lula ukuthobela imithetho
Yintoni kanye kanye enokwenziwa yi-NPB?
Ukuhlanganisa, ukucoca, kunye nokuhambisa idatha kuvakala kulula ngokwethiyori. Kodwa enyanisweni, i-NPB ekrelekrele inokwenza imisebenzi enzima kakhulu, nto leyo ekhokelela ekusebenzeni kakuhle okuphezulu kunye nokuphucula ukhuseleko.
I-traffic yokulinganisela umthwalo yenye yemisebenzi. Umzekelo, ukuba uphucula inethiwekhi yakho yeziko ledatha ukusuka kwi-1Gbps ukuya kwi-10Gbps, i-40Gbps, okanye ngaphezulu, i-NPB ingacotha isantya sokwabela i-traffic yesantya esiphezulu kwibhetshi ekhoyo yezixhobo zokujonga uhlalutyo lwesantya esiphantsi se-1G okanye i-2G. Oku akupheleli nje ekwandiseni ixabiso lotyalo-mali lwakho lwangoku lokujonga, kodwa kukwathintela ukuphuculwa okubizayo xa i-IT ifuduselwa kwenye indawo.
Ezinye iimpawu ezinamandla ezenziwe yi-NPB ziquka:
Iipakethi zedatha ezingasafunekiyo ziyaphindaphindwa
Izixhobo zohlalutyo nezokhuseleko zixhasa ukwamkelwa kwenani elikhulu leepakethi eziphindwe kabini ezithunyelwa zivela kwii-splitters ezininzi. I-NPB inokuphelisa ukuphindaphinda ukuthintela izixhobo ekuchitheni amandla okucubungula xa kusetyenzwa idatha engafunekiyo.
Ukususwa kwe-SSL
Ukubethela i-Secure Socket Layer (SSL) yindlela eqhelekileyo esetyenziswa ukuthumela ulwazi oluyimfihlo ngokukhuselekileyo. Nangona kunjalo, abaphangi banokufihla izoyikiso ze-cyber ezinobungozi kwiipakethi ezifihliweyo.
Ukuhlola le datha kufuneka kususwe ikhowudi, kodwa ukuyisusa ikhowudi kufuna amandla axabisekileyo okucubungula. Abathengisi beepakethi zenethiwekhi abaphambili banokususa ikhowudi kwizixhobo zokhuseleko ukuqinisekisa ukubonakala ngokubanzi ngelixa benciphisa umthwalo kwizixhobo ezibiza kakhulu.
Ukufihla idatha
Ukususwa kwe-SSL kwenza idatha ibonakale kuye nabani na onokufikelela kwizixhobo zokhuseleko kunye nokubeka esweni. I-NPB inokuthintela iinombolo zekhadi letyala okanye zoKhuseleko lweNtlalo, ulwazi lwezempilo olukhuselweyo (i-PHI), okanye olunye ulwazi oluyimfihlo oluchaza umntu (i-PII) ngaphambi kokuba ludluliswe, ukuze lungatyhilelwanga kwisixhobo kunye nabalawuli baso.
Ukuhluba iintloko
I-NPB inokususa ii-headers ezifana ne-VLAN, i-VXLAN, i-L3VPN, ngoko ke izixhobo ezingakwaziyo ukuphatha ezi protocols zisenokufumana kwaye zicwangcise idatha yepakethi. Ukubonakala okuqaphela imeko kunceda ekufumaneni usetyenziso olunobungozi olusebenza kwinethiwekhi kunye neenyawo ezishiywe ngabahlaseli njengoko besebenza kwinkqubo nakwinethiwekhi.
Ulwazi malunga nokusetyenziswa kunye nosongelo
Ukufunyanwa kwangethuba kobuthathaka kunciphisa ukulahleka kolwazi oluyimfihlo kwaye ekugqibeleni kunciphisa iindleko zobuthathaka. Ukubonakala okuqaphelekayo okubonelelwa yi-NPB kungasetyenziselwa ukutyhila izalathisi zokungenelela (IOC), ukuchonga indawo yeevektha zohlaselo, kunye nokulwa neengozi ze-cryptographic.
Ubukrelekrele besicelo budlula iileya ezi-2 ukuya kwezi-4 (imodeli ye-OSI) zedatha yepakethi ukuya kwileya ezi-7 (ileya yesicelo). Idatha etyebileyo malunga nokuziphatha komsebenzisi kunye nesicelo kunye nendawo inokudalwa kwaye ithunyelwe ngaphandle ukuze kuthintelwe ukuhlaselwa kweleya yesicelo apho ikhowudi enobungozi izenza ngathi yidatha eqhelekileyo kunye nezicelo zabathengi ezisebenzayo.
Ukubona okucacileyo ngemeko kunceda ekufumaneni ii-apps ezinobungozi ezisebenza kwinethiwekhi yakho kunye neenyawo ezishiywe ngabahlaseli njengoko besebenza kwinkqubo yakho nakwinethiwekhi yakho.
Ukubeka iliso kwizicelo
Ukubonakala kwendlela ebonwa ngayo isicelo kunempembelelo enkulu ekusebenzeni nasekulawuleni. Mhlawumbi ufuna ukwazi ukuba abasebenzi basebenzise nini iinkonzo ezisekelwe kwilifu ezifana neDropbox okanye i-imeyile esekwe kwiwebhu ukuze badlule imigaqo-nkqubo yokhuseleko kunye nokudlulisa iifayile zenkampani, okanye xa abasebenzi bangaphambili bazama ukufikelela kwiifayile besebenzisa iinkonzo zokugcina umntu ezisekelwe kwilifu.
Iingenelo ze-NPB
• Kulula ukuyisebenzisa nokulawula
• Ubukrelekrele bokususa imithwalo yeqela
• Akukho lahleko lwepakethi - isebenzisa iimpawu eziphambili
• Ukuthembeka kwe-100%
• Uyilo oluphezulu lokusebenza
Ixesha leposi: Jan-20-2025
