Variants involving scanners FoxStat
Network Tap
Advantages:
- Scanning is purely passive - "tapping" - does not affect the actual transmission or other network devices
- High accuracy (no packet losses or delays)
- Options for metalic and fiber optic lines
- Aggregation NetTap monitoring multiple lines
Restriction:
- For one data line probe are required 2 ports (for each direction 1)
SPAN / Port Mirror
Advantages:
- Uses existing switches
- Possibility to monitor a large number of ports
- Quick add / chang modification of monitored ports through switch configuration
- Minimal cabling (only 1 cable from a dedicated port)
Restriction:
- necessary to consider the possibility of influencing the operation switch under high load
NetFlow
Advantages:
- Uses existing routers
- large number of interfaces can be monitored
- Quick add / change
- Minimal cabling
Restrictions:
- operation of the router can be affected according to the line load
- NetFlow protocol does not contain information about the content of communication, no widespread detection, decoding or communication storing is available
SecureBox / LinuxBox server
Advantages:
- The solution most suitable for regular clients of LinuxBox.cz Ltd.
- Large number of interfaces can be monitored
- Quick add / change
- Minimimal cabling
- Probe directly on the server
- Preferable location of the collector
- Solves the NAT, proxy, FW
- Possibility of multiple probes with one collector
Restriction:
- Almost no limits
