Network Visibility with Niagara Networks
Niagara's TAPs and packet brokers create a visibility network for feeding security appliances and network monitoring solutions with the right data at a single location. Niagara forms the base of future-proof security monitoring, improving network reliability and uptime.
Bypass and load-balancing
Intelligent packet processing
Provide the right traffic to each device
Once Niagara is deployed, you can add new monitoring devices with just a few clicks.
Niagara also takes care of brokering and providing the exact traffic that your monitoring appliance needs: filter the unnecessary traffic to save cost on licensing, remove payloads for compliance, decrypt SSL for DLPs or create netflows without reconfiguring the live network.
TAP vs SPAN
So what are TAPs and packet brokers?
Security appliances, network performance monitoring and UEBA tools, or even SIEMs need to sniff the right network traffic. Too much may overload the device or increase hardware or software licensing costs, too few will not result in efficient operation.
With Niagara Networks taps and packet brokers, you can create a visibility network to collects all traffic in a single, centrally managed solution.
After deploying Niagara, it takes just a few clicks to add a new security appliance, receiving only the right amount and right kind of filtered or unfiltered traffic - without reconfiguring any device in your network. This makes both the appliance installation, maintenance and changes a breeze.
Niagara TAP stands for Test Access Port: it is the passive, high performance network sniffer, while the Niagara packet brokers are smart, centrally managed devices that can process and forward the right TAP traffic straight into the right device.
But what's wrong with SPAN ports?
Using switch and router SPAN ports seem to be the easiest way of network monitoring. However, there are some key shortcomings to consider:
- It's impossible to manage all geographically distant SPAN ports in a single monitoring network. As the network grows, SPAN is simply not enough.
- SPAN ports introduce CPU and memory load on the network switches and may drop packets in high traffic
- Number of SPANs are limited and may not be enough for all your appliances
- SPAN traffic may not be legally considered as the real network traffic, causing compliance issues