Menya impamvu umuhuzabikorwa wa Network Packet ari itegeko kugira ngo habeho igenzura ryizewe ry’imiyoboro y’itumanaho n’umutekano ukomeye w’imiyoboro y’itumanaho. Kosora uburyo imodoka zinyura mu muhanda, aho zitabona neza, ikibazo cy’aho ibikoresho bihagarara hamwe n’ingaruka zo kubahiriza amategeko ukoresheje uburyo bwa NPB buhuriweho.
Inzitizi z'ingenzi zo kugenzura SPAN/TAP-Only
Uko ibigo bikura amakuru kugeza kuri 10G, 40G na 100G byihuse, imirimo myinshi yo mu bicu bivanze, imiyoboro ya interineti ikoreshwa mu buryo bwa "virtual overlay" hamwe n'urujya n'uruza rw'ubucuruzi bihindura ahantu hanini hadasobanutse ku matsinda ya NetOps na SecOps ashinzwe kugenzura imiyoboro no kurinda umutekano w'imiyoboro. Imiryango myinshi ibanza kwishingikiriza gusa ku mbuga za "switch SPAN mirror ports" na "passive optical TAPs" kugira ngo ifate urujya n'uruza rw'abantu basura IDS, NPM, APM, SIEM n'ibikoresho byo gusesengura amakuru, nyamara iyi miterere y'amakuru idafite ishingiro itanga uburyo bwo kureba butizewe kandi butuzuye, ibyo bikaba byazamura ingaruka z'umutekano n'ingaruka z'imikorere.
Ibikoresho bya SPAN bikoresha ibikoresho by'agaciro byo guhinduranya, bigashyira paki munsi y'umuvuduko ukabije, ntibishobora gusuzuma uburyo bwo gufunga imiyoboro ya VXLAN / GRE / MPLS, kandi bikongera ibikoresho by'umutekano byo hasi hakoreshejwe paki ebyiri zikoreshwa. Insinga za TAP-to-tool zikora imiterere mibi, igoye gucunga neza, zigatera ahantu henshi hatandukanye ho gutsindwa, kandi zigapfusha ubusa imiyoboro mike iboneka ku bikoresho bihenze byo kugenzura. Iyo ibikoresho by'umutekano byakira abantu benshi badakoresheje uburyo bwa "raw filter", bipfusha ubusa uburyo bwa CPU, ububiko n'ububiko, akenshi bibura ibimenyetso by'ingenzi by'impanuka mu gihe amakuru menshi arenze urugero.
Umuhuzabikorwa wa Network Packet (NPB) akemuye izi nenge z’ibanze zo kureba, akora nk'agasanduku k’itumanaho gashyirwa hagati y’udusanduku two gufata amakuru (TAPs, SPAN ports, virtual cloud taps) n’ibikoresho byose byo kugenzura no kurinda amakuru ku rubuga. Bitandukanye n’ibikoresho bisanzwe byo kugenzura amakuru ku rubuga, NPB zikoresha gusa uburyo bwo kugenzura amakuru aturutse hanze y’umurongo w’itumanaho bushingiye kuri politiki y’umukoresha zidahinduye amakuru y’ubucuruzi bw’umusaruro. Ziteranya, zisukura, zinoza kandi zigakwirakwiza amakuru ajyanye neza na buri gikoresho cyo gusesengura, zigafunga icyuho cyo kubona amakuru mu gihe zikongera agaciro k’ishoramari ry’ibikoresho.
Iyi blog ya tekiniki isobanura impamvu zihutirwa z’ubucuruzi n’umutekano zo gushyiraho Network Packet Broker, ikoresheje inyandiko za tekiniki za Mylinking kugira ngo isobanure ingingo z’ingenzi zibabaza, ibyiza by’ingenzi mu mikorere, imiterere y’imikorere n’ivugurura rishoboka mu mikorere y’ahantu hagezweho ho kubika amakuru.
Ingingo z'ingenzi zibabaza udafite umuhuza w'amapake y'umuyoboro
Gukurikirana imiyoboro y'itumanaho no gucunga umutekano w'itumanaho nta muhuza wa Network Packet Broker wihariye bitera imbogamizi esheshatu zijyanye kandi zihenze mu mikorere no mu mutekano, ibyo bikaba byiyongera uko umuyoboro w'itumanaho n'ubuhanga bugenda bwiyongera:
1. Itsinda ry'abantu bafatiwe mu muhanda ryacitsemo ibice, ridashobora kwaguka
Insinga zituruka kuri buri switch SPAN na TAP y'amajwi zijya ku bikoresho bitandukanye byo kugenzura bitanga imiterere y'insinga zidasobanutse. Buri rack nshya ya seriveri, router cyangwa firewall bisaba izindi mirror ports na fibre physical runs, byongera umubare w'aho zishobora gucika intege no kongera imirimo isanzwe yo kubungabunga amakipe ya NOC. Kurenga urugero kwa port ya SPAN birushaho kwangiza imikorere ya switch mu gukora iyo hari indorerwamo nyinshi zibera icyarimwe.
2. Gukurikirana ibura ry'ibikoresho byo ku muyoboro no kudakoresha neza ibikoresho
Ibikoresho byo gusesengura umutekano n'imikorere bizana umubare uhoraho w'ibikoresho bifatika, byinshi muri byo bikaba bidakoreshwa neza iyo byakira abantu baturutse ahantu hamwe cyangwa babiri gusa. Hatabayeho guhuriza hamwe abantu basura urubuga, ibigo bigomba kugura ibikoresho by'inyongera byo kugenzura kugira ngo byihutishe abantu benshi basura urubuga, bigatera ubwiyongere bw'amafaranga akoreshwa mu ruganda. Ibikoresho byinshi bya kera bifite imiyoboro y'umuringa ya 1G yihuta cyane, ntibishobora guhagarika ubwiyongere bw'umuyoboro wa 10G/40G uturutse ku bikoresho bigezweho.
3. Ubwinshi bw'imodoka butagira umupaka n'amapaki akoreshwa mu buryo budasanzwe
Indorerwamo zikoresha uburyo bwa Cross-switch zikora udupaki dusa dufatanywe udupapuro dutandukanye twafashwe ku bice by’imiyoboro bihurirana. Aya makuru menshi anyura mu bikoresho byo kugenzura IDS, NDR n’imiyoboro, agakoresha ibikoresho byo gutunganya amakuru nta gutanga amakuru y’ikibazo cyangwa imikorere. Mu gihe cy’ubwiyongere bw’imihanda, ibikoresho byinshi bigabanya udupaki tw’ingenzi, bigahisha malware zo mu ruhande, DDoS mbere na porogaramu zitinda gukurikizwa.
4. Ahantu hakingira imodoka mu muhanda wa Tunnel
Ibigo bigezweho by’amakuru bya virtualized hamwe n’ibikoresho byinshi byo mu bicu byishingikiriza kuri protocole za VXLAN, GRE, GTP na MPLS zo gushyira hamwe imitwaro y’akazi. Inzira z’ibanze za SPAN na TAP zitanga paki zose zikubiye mu mapaki, nyamara ibikoresho byinshi byo kugenzura byigenga ntibigira uburyo bwo kwihutisha ibikoresho byo gukuraho imitwe y’inyuma y’amapaki, bigatuma akarere k’iburasirazuba n’iburengerazuba katabona urujya n’uruza rw’amaseriveri ku makipe ya SecOps. Ibi bituma habaho kunanirwa gukomeye mu kubahiriza amategeko y’umutekano wa Zero Trust, kuko amakipe adashobora kugenzura neza inzira zose z’imbere mu muyoboro.
5. Ingaruka zo kubahiriza amategeko zituruka ku makuru y'imizigo idashunguwe
Urujya n'uruza rw'abantu rugaragara mu buryo bugaragara rugaragaza amakuru adashobora guhindurwa (PII), amakuru y'ikarita yo kwishyura n'amakuru y'ubuzima arinzwe (PHI). Kohereza amafaranga yose adatunganyijwe ku bikoresho by'isesengura ry'abandi cyangwa ibikoresho byo kugenzura imiyoboro y'itumanaho imbere binyuranyije n'amategeko agenga PCI-DSS, HIPAA, GDPR na SOX, bigashyira ibigo mu kaga ko gucibwa amande n'amategeko agenga ihohoterwa rishingiye ku gitsina.
6. Kutagira igihe gisanzwe cyo gukora isuzumabumenyi ku baganga b'inzobere
Hatabayeho gushyira ikimenyetso cy’igihe mu bikoresho bya mudasobwa mu gihe cyo gufata amakuru, inyandiko z’amapaki ziturutse ku buryo butandukanye bwo gusimbuza, za router n’ibikoresho by’umutekano zigaragaza igihe ntarengwa cy’imikorere. Iyo habayeho ibibazo by’umutekano cyangwa ibura ry’umuyoboro w’itumanaho, abasesenguzi ntibashobora guhuza neza ibikorwa by’umuhanda mu buryo bwuzuye, bongera cyane igihe cyo gukemura ibibazo by’imikorere y’umuyoboro w’itumanaho (MTTR) haba ku makosa y’imikorere y’umuyoboro w’itumanaho ndetse no ku bitero by’ikoranabuhanga.
Ibintu by'ingenzi byo gushyiraho porogaramu bisaba umuhuzabikorwa wa paki y'umuyoboro
Ibigo bigomba gushyiraho umuhuzabikorwa wa Network Packet niba ingamba zabyo zo kugenzura imiyoboro n'umutekano w'imiyoboro bihuye n'ibi bintu bisanzwe by'ubucuruzi bivugwa mu gitabo cya tekiniki cya Mylinking:
1. Gukusanya amakuru ajyanye n'amakuru menshi: Amatsinda agomba gufata amakuru ajyanye n'amakuru aturuka ku buryo butandukanye bwo gukwirakwiza amakuru, insinga zo mu rugo, za router, za seriveri n'inzira zo mu rugo, ariko nta hantu ho guhuriza amakuru hose. Uburyo bwinshi bwo gushyiraho amakuru bwigenga bwa TAP butanga ahantu hatandukanye ho gutsindwa no kunoza imicungire.
2. Gutanga serivisi zo gutwara abantu mu buryo butandukanye hakoreshejwe ibikoresho byinshi: Uburyo bumwe bwo gufatira amakuru busaba kohereza amakuru icyarimwe ku bikoresho bitandukanye by’umutekano no kugenzura, harimo kumenya ibitero bya IDS, gukurikirana imikorere ya NPM, gusuzuma porogaramu za APM n’uburyo bwo kugenzura iyubahirizwa ry’amategeko. Gutanga amakuru mu buryo butaziguye byangiza imiyoboro y’indorerwamo.
3. Uburyo ibikoresho byihuta cyane bikoreshwa: Ikigo cy’ibanze cy’amakuru cyavuguruwe kikagera kuri 10G/40G/100G uplinks, nyamara ibikoresho bihari byo kugenzura umutekano bishyigikira gusa 1G copper interfaces kandi ntibishobora kwakira traffic yihuta cyane idahinduye imikorere kandi ihindura traffic.
4. Gukurikirana imyenda ya virtualized/cloud: Ibidukikije bikoresha imiyoboro ya VXLAN, MPLS cyangwa GTP, bisaba ko icyuma gikoresha ikoranabuhanga kugira ngo harebwe uburyo bwo kugenzura umuhanda w’imbere mu kirere urimo ibintu bibangamira umuhanda.
5. Gufata amakuru y’inganda mu buryo bugenzurwa: Imiyoboro y’imari, ubuvuzi n’iya leta igomba kudashyira amakuru y’ingenzi ku mushahara mbere yo kohereza amakuru ku mbuga zigenzura amakuru kugira ngo huzuzwe amahame y’amategeko agenga ubuzima bwite bw’amakuru.
6. Ubushakashatsi ku mihanda minini: Amatsinda y’umutekano akeneye gusinya neza igihe cya nanosecond ku mapaki yose yafashwe kugira ngo yongere kubaka imiyoboro y’ibitero n’inyandiko z’ibyabaye ziturutse mu bice byinshi by’imiyoboro mu gihe cy’iperereza ku byago.
Uburyo umuhuzabikorwa wa Network Packet akoresha neza ibikoresho byo kugenzura Network
Umuhuzabikorwa wa Network Packet ahindura by'umwihariko imikorere yo kugenzura network binyuze mu gukuraho uburyo bwo gutunganya amakuru busenyagura no kongera igihe cyo gukoresha ibikoresho bisesengura bisanzwe binyuze mu buryo butandatu bw'ingenzi bwo kunoza:
1. Guteranya abantu benshi mu buryo butandukanye
NPB ihuza uburyo bwinshi butandukanye bwa SPAN na TAP mu miyoboro yayunguruwe, bigatuma buri cyambu gikoreshwa neza ku bikoresho byo kugenzura biri munsi y’uruziga. Aho kugira ngo habeho uburyo bumwe bwo gufata amashusho bufata umurongo wose w’ibikoresho, itumanaho ryashyizwe hamwe ry’amakuru menshi ryuzuza ubushobozi bwa bandwidth buhari, bikuraho ko hakenewe ko habaho kongera gukoresha ibikoresho by’inyongera bihenze.
2. Gupima Imitwaro y'Isomo
Ku bijyanye n'umuvuduko mwinshi wa 10G/40G/100G, NPB ikwirakwiza uburyo bwo kugenzura ikoranabuhanga ku buryo bungana mu matsinda y'ibikoresho byo kugenzura ikoranabuhanga bikoresha umuvuduko muto ikoresheje uburyo bwa L2-L7 hash algorithms. Ibi birinda ibikoresho bya buri kimwe kugera ku mupaka wo gukoresha no kugabanya amapaki y'ingenzi mu masaha y'akazi, mu gihe bifasha ibigo kugumana ibikoresho byo kugenzura ikoranabuhanga rya 1G/10G igihe kirekire nyuma yo kuvugurura ikoranabuhanga rya sosiyete. NPB kandi ikora nk'igikoresho cyo guhindura ikoranabuhanga, ihuza imiyoboro yo gufata fibre n'ibikoresho byo kugenzura ikoranabuhanga rya umuringa gusa nta bikoresho bitandukanye bya transceiver.
3. Gukata Paki Ishingiye kuri Politiki
Imikoreshereze myinshi y’igenzura ry’amakuru ku rubuga ikenera gusa amakuru y’umutwe wa L2-L4 kugira ngo ikorerwe isesengura ry’uburyo bwo gupima no gutinda, nta mpamvu yo gufata amakuru yose ku mushahara. NPB igabanya amapaki ntarengwa kugeza ku burebure bushobora guhindurwa (bytes 64–1518) kuri buri politiki yo kugenzura, ikajugunya amakuru atari ngombwa ku mushahara kandi ikagabanya uburyo bwo gukoresha amapaki n’ububiko kugeza kuri 90%. Gufata amakuru yose ku rubuga biguma bishobora guhindurwa gusa ku mupaka wa interineti ufite ibyago byinshi ndetse n’umuyoboro wa DMZ usaba igenzura ryimbitse ry’ubugenzuzi.
4. Gutanga ipaki yikora
Gukuraho vuba ibikoresho bikoresha ikoranabuhanga bikuraho udupaki dusa twakusanyijwe mu bice by’indorerwamo bihurirana, bigabanya umubare w’imodoka zose zoherezwa mu bikoresho byo kugenzura umuyoboro ku kigero cya 40–60%. Kubera ko inzira nke zikoreshwa mu gutunganya, urubuga rwa NPM na APM rutanga ibipimo by’imikorere byiza kandi nyabyo kandi bigabanya amakuru atari yo aturuka ku rusaku rw’imodoka.
5. Gushungura ibinyabiziga bigamije kugenzurwa
Abayobozi bakora amategeko yo kuyungurura imiterere y’amakuru ashingiye ku bwoko bwa Ethernet, tagi za VLAN, IP seven-tuple, TCP flags n’ahantu ho gutandukanya paki za byte 128. NPB yohereza gusa abantu bareba buri gikoresho cyabugenewe cyo kugenzura—urugero, kohereza gusa inzira z’ubucuruzi kuri sisitemu za APM no kujugunya inzira zidafite akamaro cyangwa inzira za IoT—bikuraho umutwaro utari ngombwa wo gutunganya ibikoresho by’isesengura ry’imikorere.
6. Gushyira mu mahanga isaha imwe n'imwe no kohereza amafaranga mu mahanga
Uburyo bwo gupima igihe bwa nanosecond bwubatswemo buhujwe na seriveri za NTP z’ibigo buhuza amakuru y’igihe kuri paki zose zafashwe, butuma habaho isano nyayo hagati y’ibicuruzwa n’ibikoresho bitandukanye mu gukemura ibibazo by’urusobe rw’amakuru. NPB kandi ikora inyandiko zisanzwe za NetFlow/IPFIX ku ma dashboards yo gutegura ubushobozi, bikuraho ko hakenewe uburyo bwo gutunganya amakuru ku bikoresho bigenzura imitungo.
Ni gute umuhuza wa pakiti z'itumanaho ashimangira umutekano w'itumanaho kuva ku mpera kugeza ku mpera?
Uretse inyungu mu kugenzura imikorere y’umuyoboro w’itumanaho, Network Packet Broker ni urwego rw’ibanze rwo kumenya umutekano w’umuyoboro w’itumanaho, rukemura ibibazo bikomeye bituma ubucuruzi bushobora kwangirika mu buryo butunguranye no gukwirakwiza porogaramu za malware ku ruhande:
1. Gukuraho umutwe w'imiyoboro y'amazi yo mu bwoko bwa Tunnel kugira ngo hagenzurwe ibitero bihambiriye
Imirongo yo gukuraho uduce twa VXLAN, GRE, ERSPAN, MPLS na GTP yo hanze mbere yo kohereza amakuru y’imbere mu bikoresho by’umutekano bya IDS/NDR. Ibi bihishura ibitero byihishe mu burasirazuba bw’uburengerazuba mu myenda y’abakodesha benshi, byuzuza ibisabwa mu miterere ya Zero Trust kugira ngo harebwe buri ruhererekane rw’imbere rwa seriveri hagati ya seriveri na seriveri. Amategeko yihariye agenga imikoreshereze y’uduce twasesenguwe n’umukoresha anashyigikira amabwiriza yihariye yo gufunga utundi duce nta kuvugurura firmware.
2. Gukuraho SSL yihuta mu bikoresho
Abarenga 95% by'abakoresha interineti bagezweho banyura muri TLS encryption, abatera ibitero bakoresha kugira ngo bahishe ransomware, gusohora amakuru no gutumanaho. NPB ishyira SSL/TLS decryption ikoresha ibikoresho byinshi ku miyoboro yabugenewe, ikuraho HTTPS payloads ku gipimo cy'umurongo kandi yohereza traffic text idafite ishingiro ku bikoresho byo gutahura impanuka. Ibi birinda ko CPU ibangamira ibikoresho bihenze by'umutekano kandi bikuraho ahantu hadasobanutse mu bijyanye n'umutekano w'umuhanda.
3. Gupfuka amakuru y’ingenzi ashingiye kuri politiki
Uburyo bwo gupfuka amakuru karemano buhindura PII, nimero z'amakarita yo kwishyura n'inyandiko z'ubuzima zirinzwe mu mifuka y'amapaki mbere yuko urujya n'uruza rugezwa ku mbuga zigenzura imiyoboro y'itumanaho no gusesengura umutekano. Ubu buryo bwo gukumira ikoranabuhanga bukuraho gukenera ko ibikoresho byo gukaraba imodoka byigenga kandi bwujuje amategeko mpuzamahanga agenga ubuzima bwite bw'amakuru, bigagabanya ibyago byo kwangirika kw'ibicuruzwa ku nganda zigenzurwa.
4. Uburyo bwo gukusanya amakuru mu buryo bw'ubwenge ku bijyanye n'umutekano w'ibice byinshi
NPB ikora porogaramu zikoresha uburyo bwo kugenzura amakuru y’umutekano mu buryo butunguranye (high risk transmissions) icyarimwe: uburyo bwo kugenzura amakuru y’umutekano bugera kuri sisitemu zo kugenzura amakuru y’abantu, uburyo bwo kugenzura amakuru y’abantu ku buryo bwa VLAN (payment VLAN transport) bugera kuri porogaramu za DLP, n’uburyo bwo kugenzura amakuru y’abantu ku buryo bwa kure bugera kuri porogaramu zisesengura ibibazo by’imyitwarire. Buri gikoresho cy’umutekano cyakira gusa uburyo bwo kugenzura amakuru y’ihohoterwa gikeneye, bigatuma amakuru y’ihohoterwa arushaho kuba meza mu gihe hagabanywa urusaku rw’amakuru rudakenewe.
5. Igenzura rya Protocole y'Urwego rw'Ikoreshwa ry'Icyiciro cya Deep Application
Moteri za DPI zihuza ikoranabuhanga zifata ibikumwe byinshi kuri porogaramu za porogaramu z’ibigo (HTTP, DNS, MySQL, BitTorrent, serivisi za SaaS zo mu bicu) kandi zigatanga amakuru y’urujya n’uruza rw’amakuru ku matsinda ya SecOps. Ubu bushishozi bwa porogaramu butuma haboneka hakiri kare kohereza dosiye z’igicucu cya IT, itumanaho ritemewe hagati y’amakuru n’ibitero bya malware ku byiciro bya porogaramu, ibikoresho by’umutekano gusa bitabasha kumenya.
Ubushobozi bwa NPB bwubatswemo mu buryo bw'ibanze bukemura icyuho cyo kugaragara kwa interineti
Uburyo bwose bwa Mylinking enterprise-grade Network Packet Broker buhuza ibi bintu by'ingenzi byihutishwa na hardware kugira ngo buhuze uburyo bwo kugenzura umuyoboro n'imikorere y'umutekano w'umuyoboro:
1. Guteranya imodoka, gukurura imizigo myinshi no kuringaniza imizigo mu gihe runaka
2. Gushungura paki ya L2-L7 no kuyihuza na byte 128 by'amajwi
3. Gukuraho uduce duto tw'imiyoboro (VXLAN/GRE/MPLS/GTP/ERSPAN) no gukoresha VLAN tag mu gukosora
4. Gukuraho paki, gukata amakuru hakurikijwe politiki no gupfuka amakuru y'ingenzi
5. Gushyiraho igihe cyo gukoresha ibikoresho bya Nanosecond neza bihujwe na NTP
6. Gukuraho uburiganya bwa SSL/TLS mu bikoresho kugira ngo hagaragare ibitero bihishe
7. Gukora record y'ikoreshwa rya NetFlow V9/IPFIX mu gusesengura ubushobozi
8. Gusohora umuyoboro w'amashanyarazi no kohereza imiyoboro imwe mu buryo buhendutse bwo gukoresha umuyoboro w'amazi (toilet)
9. Ingufu ebyiri zishobora guhindurwa zishyushye kugira ngo ikigo cy'amakuru kibe cyizerwa amasaha 24/7
10. Gucunga uburyo bwo gukoresha uburyo bwinshi butandukanye: CLI console, HTTP web UI, SNMP, SYSLOG na RADIUS authentication
Imiterere y'Impande: Umuyoboro udafite NPB ugereranije n'Umuyoboro ukoresha NPB ihuza
Ubwubatsi bwa 1: Umuhuza w'amapaki y'umuyoboro udafite umuyoboro
Nkuko bigaragara mu gishushanyo mbonera cya Mylinking, insinga za SPAN/TAP-to-tool zikora ikintu kidakora neza kandi kidakora neza:
○Uburyo butandukanye bwo gukoresha fibre buhuza buri switch na firewall mirror port kuri IDS, NPM, APM n'ibikoresho byo kubahiriza amategeko.
○Ubwinshi bw'ipaki ivanze n'ibice by'indorerwamo bihurirana butuma ibikoresho by'umutekano biremereye cyane
○Ibikoresho byo mu mazi bya VXLAN/GRE bicukuwe ntibiragenzurwa n'ibikoresho biri inyuma y'uruzitiro
○Ibikoresho bike bisaba kugura ibikoresho by'inyongera byo kugenzura kugira ngo ufate ahantu henshi
○Amakuru y'ingenzi y'imishahara adasubiwemo atera ibyago byo kubahiriza amategeko
○Ingengabihe z'igihe zidahuye zitinza igisubizo cy'impanuka no gukemura ikibazo cy'amakosa
Ubwubatsi bwa 2: Uburyo bwo kunoza umuyoboro wa interineti hakoreshejwe Mylinking Network Packet Broker
Gushyira NPB mu bikorwa rusange bihuza uburyo bwose bwo gufata amakuru mu buryo bumwe bwo kugaragara:
○Uburyo bwose bwa TAP, switch SPAN na virtual cloud capture feeds bihuza neza na ports za NPB zinjira vuba cyane.
○NPB ikora ibikorwa byo guteranya, gukusanya, gushungura, gutandukanya no gupfuka amakuru binyuze mu miyoboro y'ibikoresho
○Uburyo bwo kugenzura imiyoboro y'itumanaho busukuye kandi bwihariye bukwirakwizwa binyuze mu kuringaniza imitwaro kuri buri gikoresho cyo kugenzura imiyoboro y'itumanaho n'umutekano w'imiyoboro y'itumanaho.
○Imitwe y'imiyoboro ya Tunnel irakurwaho, SSL irahindurwamo uburyo bwo gushakisha amakuru y'ingenzi kandi amakuru y'ingenzi agapfukwa mbere yo gusohoka.
○Imbonerahamwe z'igihe zisanzwe za Nanosecond zishyirwa ku mapaki yose kugira ngo habeho isesengura ry’ubugenzuzi rihuriweho
○Gucika kw'ibyambu no gushyigikira fibre imwe bigabanya ikiguzi rusange cy'imari mu bijyanye no gukwirakwiza fibre
URUHARE RW'UBUCURUZI ...BW'IBIHUGU MU GUSHYIRAHO UMUCURUZI WA PAKETI Y'UMUYOBORO
1. Kongera igihe cy'ubuzima bw'ibikoresho byo kugenzura: Kugabanya imizigo, kuyikata no kuyiteranya bikuraho ibisabwa byihuse byo kuvugurura ibikoresho by'umutekano byihuse, bigabanye amafaranga akoreshwa ku gishoro ku kigero cya 30–50%.
2. Kugabanya ibyago by’umutekano MTTR: Kubona neza inzira z’imodoka mu buryo bwa "tunnel"/ "encrypted" no guhuza igihe byagenwe bigabanya igihe cyo gukora iperereza ku bibazo ku matsinda ya SecOps ho hejuru ya kimwe cya kabiri.
3. Kugabanya ububiko n'ubwikorezi bw'amakuru: Gukuraho no gukata amapaki bigabanya umubare w'abagenda boherezwa ku mbuga zigenzura amakuru, bigabanura ikiguzi cyo kohereza amakuru hagati y'amakuru n'ibindi bigo.
4. Kugabanya ibyago byo kubahiriza amategeko: Gupfuka amakuru karemano bikuraho gukenera ibikoresho byo gukaraba by’abandi kandi bigatuma imikorere yo gufata amakuru ihura n’amabwiriza ya PCI-DSS, HIPAA na GDPR.
5. Kugabanya umwanya w'ububiko bw'amakuru n'ikiguzi cyo gushyira insinga mu bubiko: Guteranya ibikoresho bihuriweho bikuraho uburyo bwinshi bwo gukoresha insinga n'ibikoresho by'inyongera, bigabanyiriza ibikorwa remezo.
6. Kuraho ingaruka ku mikorere y'imashini zikora: Gufata indorerwamo hifashishijwe NPB bigabanya ikoreshwa rya SPAN port kuri core switches, bikarinda ibura ry'ipaki ijyanye n'indorerwamo ku muvuduko w'ubucuruzi bw'imashini zikora.
Kora isura yuzuye ukoresheje Mylinking Network Packet Broker
Gahunda zigezweho zo kugenzura imiyoboro n'umutekano w'imiyoboro ntizishobora gutanga uburyo bwo kumenya ibitero cyangwa gukemura ibibazo mu buryo bwizewe hatabayeho umuhuza wa Network Packet nk'urwego rwo hagati rwo kugenzura uko ibintu bimeze. Gukoresha SPAN na TAP-only bidakoresheje ikoranabuhanga bitera umuvuduko ukabije w'imodoka, ahantu hatagenzurwa neza, ibura ry'aho ibikoresho bihurira, intege nke zo kubahiriza amategeko hamwe n'imiterere y'imodoka igenda igabanuka, bigatuma NetOps na SecOps bikora nabi.
Ibikoresho bya Mylinking enterprise-grade Network Packet Broker bikemura ikibazo cyose cy’ingenzi cyo kubona amakuru binyuze mu mikorere yo gutunganya amakuru yihuta mu bikoresho: guteranya amakuru, kuyakuraho, kuyayungurura, kuyakuraho mu tunnel, kuyakuraho amakuru ya SSL, kuyakata no kuyahisha amakuru yibanda ku kubahiriza amategeko. Binyuze mu gushyira hamwe uburyo bwose bwo gufata amakuru mbere yo kuyakoresha mu gikoresho kimwe gito cyo gushyiramo amakuru, ibigo bifungura uburyo bwose bwo kubona amakuru yose ku mipaka ya interineti y’amajyaruguru n’amajyepfo n’urujya n’uruza rw’imyenda iva mu burasirazuba, bikongera inyungu ku ishoramari risanzwe rikoreshwa mu kugenzura no mu gucunga umutekano mu gihe bikomeza imiterere y’umutekano muri rusange.
Ku byuzuyeAbahuza ba Network Packetinama ku bijyanye n'ibisubizo, sura urupapuro rwemewe rwa Mylinking:https://www.mylinking.com/network-packet-broker/
Igihe cyo kohereza: Kanama-06-2026
