A smart company is not necessarily a digital company, but there is no doubt that a digital company must be smarter.
Modern enterprise operations emphasize using data to speak. The famous saying of Linus, the great master, "Talk is cheap, show me the code" has been changed by many enterprise operation managers to "Talk is cheap, show me the DATA" ( Empty talk is unfounded, just bring the data). Only by mastering real and effective data can enterprises identify opportunities, avoid risks, improve performance, and become truly smart enterprises. The core part of digital transformation, the construction and operation management of data centers, is particularly important.
With the popularity of concepts such as "big data", "artificial intelligence", and "cloud computing", the market's demand for data centers has further increased. From the beginning, a number of data centers were built intensively by the government. To financial and telecommunications companies, and then to large companies in other industries, building their own data centers is becoming the only way for enterprises to undergo digital reform and transformation.
According to data from the China Academy of Information and Communications Technology, my country's IDC (Internet Data Center) industry maintains an annual growth rate of 32%. As of the end of 2018, China has the second largest number of ultra-large data centers in the world. , accounting for 8% of the world, second only to the United States. But just as a coin has two sides, there are many problems behind the rapid growth of data centers, such as low server utilization, excessive energy consumption, architectural flaws, and security risks.
Recently, Gigamon was invited to participate in the "Sixth China Enterprise Data Center Innovation Summit", and at the meeting, it focused on the core of enterprise digital transformation - how to ensure the rapid operation of data centers. Safe and shared relevant experiences.
New architecture of security nodes
Gigamon
In the current common Internet security node architecture, there are generally a large number of security devices connected in series in the network. Connected equipment provides multiple levels of security protection.
Common Internet security node architecture
However, this common architecture also has shortcomings. First of all, numerous serially connected devices will bring more fault points, making it more difficult to troubleshoot export equipment. Secondly, when we need to upgrade and maintain security equipment or add or delete equipment, we need to interrupt the network and apply for a window. time; in addition, when we upgrade the backbone network, it is difficult to deploy security products on the high-bandwidth network backbone; finally, as security requirements increase, the emergence of a large amount of encrypted traffic makes it extremely difficult for security equipment to handle, directly affecting the performance and performance of security products. Overall network security.
Gigamon’s new secure node architecture replaces the traditional serial connection method with a new bypass deployment method, which avoids many problems.
Gigamon's innovative new security node architecture
This innovative architecture can maximize the performance of security tools, and its flexible traffic policy greatly improves the monitoring efficiency of security tools;
Flexible guidance of data flow
Simplified the serial link architecture, making it easier to add, remove, and maintain security products on the serial link;
< p> In addition, the bypass mode avoids the problem of multiple faulty nodes in the Internet egress side node, turning multi-point failures of multiple security tools into a single point of failure, and solving it through hardware bypass;Physical security equipment bypasses
Finally, the encrypted traffic can be decrypted once through Gigamon's equipment, and then the decrypted traffic is distributed to multiple security devices for processing and analysis, and finally the traffic is The traffic is returned after encryption. Through this method of once decrypting and using it multiple times, the performance consumption of security equipment in encryption and decryption is greatly reduced.
Gigamon solution: Decrypt once, use many times
Network visualization
Gigamon
As digital transformation continues to deepen, enterprises We are beginning to face many management dilemmas: the current monitoring system is too decentralized, inefficient and unstructured, and is unsustainable.
With the growth of the network, there are more and more monitoring requirements, and more and more monitoring tools are deployed. The monitoring tools are not coordinated and unified or distributed and individually monitored, and there is no unified planning.
Non-uniform traffic collection results in the deployment and management of network monitoring tools, performance analysis tools and security monitoring tools being scattered and independent information islands.
The limitations of port mirroring resources themselves cause some tools to be unable to obtain the required traffic or to be unable to obtain traffic.
For customers with high network visualization requirements, implementing mirroring functions such as SPAN/RSPAN through switches consumes a lot of CPU, and there is a large amount of duplicate data in the network, resulting in excessive load on the NPM product and resulting Not precise.
Fixed layout
Set fixed width and height on the toolbar
The background can be set to be included
The background image and text can be perfectly aligned< /p>
And make your own templates
There are huge data sets in physical, virtual and cloud environments. Let’s say an enterprise has three different security tools, each of which collects a limited amount of data. data, processing their own related work, lack of global visualization, and unable to cooperate with each other. In this traditional data collection method, most of the data received by the tool is irrelevant, which means that the tool needs to consume a lot of resources to process this irrelevant data.
Enterprises urgently need a solution that can provide clear network visibility, eliminate visual blind spots, adapt to changes and developments in infrastructure and security, improve tool performance, and get more from existing tools. Benefits, thereby reducing the workload and leaving more time for research, analysis and planning, and various Ops team work can be better coordinated and benefited.
Gigamon provides such a visualization solution, which extracts the traffic in all physical environments, virtual environments, and cloud environments into a unified visualization and analysis platform. It will contain multiple devices and tools, each of which can provide 100% visibility into the data in the network. The platform ensures that only relevant data is distributed to a single tool, making each tool more efficient and effective, and ultimately Help enterprises operate faster and more securely.
In addition, Gigamon's solution is a proven solution on the market. According to third-party research, the average return on investment for Gigamon customers is 153%, and the return on investment cycle is generally within 7 months.
Benefits brought by Gigamon Traffic Intelligence Visualization Security Platform
This year, many companies are actively seeking digital transformation or upgrade. There are more and more data, more and more servers, and analysis There are also more and more tools, which means that the traffic that data centers need to handle will only increase. In the post-epidemic era, facing various uncertainties and a new era of tomorrow, deploying or upgrading your data center as soon as possible to achieve visualization, allowing you to run quickly while ensuring security, must be a required course in the digital transformation of your enterprise.
Gigamon is committed to helping enterprises operate quickly and safely and achieve innovation. Welcome to click the bottom of the article to read the original text and contact us to take an important step in the digital transformation and upgrading of enterprises!