It’s not uncommon for network engineers to accommodate security and monitoring tools that only have one NIC card or input port.
However, lawful intercept and more advanced threat defence systems require access to multiple points in a network to be able to see patterns. When this situation arises, an aggregation TAP is often the best solution.
Configured correctly, aggregation TAPs can merge eastbound and westbound traffic flow and send it to the attached monitoring device via a single port. Aggregation TAPs can also operate as a more standard breakout TAP if you are concerned with utilisation giving greater flexibility.
Download our Network TAPs 101 guide to find out how to setup an aggregation TAP or for more information about other TAP modes including:
- Filtration TAPs
- Replication TAPs
- The Bypass TAP
- Media Changing TAPs
- Passive vs Active TAPs
- Passive Network TAPs
- Managing Connectivity
- Engineering End-to-End Visibility