The Data Access Network is a critical network infrastructure element for network monitoring and troubleshooting. Gigamon, the leading provider of intelligent data access solutions, ensures network integrity including performance, security and compliance by enabling your monitoring tools to operate at maximum efficiency.

1. LAN, WAN, SAN,
and now
DAN
Data Access Network

2. What’s a DAN?
out-of-band passive monitoring network
Includes passive tools like:
Security IDS Sensors,
Application Performance Monitors,
Troubleshooting Protocol Analyzers,
VoIP QoS Probes,
Proprietary & Confidential
Forensic Recorders,
and Data Access Switching

3. DAN provides “Data Sockets”
Part of a Flexible Network Infrastructure
• Plug-in multiple out-of-band tools – ANY data to ANY tool
• Unobtrusive 24x7 tool connections – never touch the network
• Aggregate, Replicate, Filter and load balance data streams
• Use legacy 1Gig tools to monitor new 10Gig networks
Proprietary & Confidential
3

4. Why are DANs Needed Now?
Things Have Changed
Enron and 9/11 spawned SOX auditing, increased security
and lawful intercept requirement
PLUS technology and business developments:
Web site e-commerce and internet applications demand support
VoIP and media convergence make the network more strategic
Proprietary & Confidential
Green networking demands smaller Data Center footprint
Network is how business gets done. Downtime is unacceptable

5. Proliferation of Tools
New SOX compliance transaction monitors
Keep your boss out of jail!
IDS Sensors detect external attacks
From hackers
NAC appliance protects networks from inside
From your own people!
CALEA lawful intercept and Forensic Recorders
Configuration monitoring tools watch over network
Proprietary & Confidential
resources
Application and Network troubleshooting

6. Proliferation Causes Contention
for Span Ports
Security and IT
Engineers seen
here
Proprietary & Confidential
“Negotiating” Over
a SPAN Port

7. An Analogy:
Using a DAN is like using a power strip.
Proprietary & Confidential

8. Too Many Power Tools?
Not Enough Sockets?
?
? ?
?
Proprietary & Confidential

9. For Power Tools, use a Power Strip
Proprietary & Confidential

10. Too Many Monitoring Tools?
Not Enough Span Ports?
?
?
?
?
Proprietary & Confidential

11. For Sensors/Monitors/Analyzers,
Use a DAN Switch
Proprietary & Confidential
One Span port serves Many tools

12. What Other Problems do DANs
solve?
Distributed Monitoring burning the budget?
Consolidate tools; $ave money on capital and operational budgets
Unsecure monitor or tap ports risk data leakage?
DAN can secure all access point to prevent snooping
Too much traffic for one tool?
Reduce and balance load over multiple units to match tool capacity
Proprietary & Confidential
Restrictive Configuration Management Policies?
Deploy tools and make changes on your own schedule

13. Monitoring a Mesh Network?
Proprietary & Confidential

14. Old Solution: Lots of Distributed Tools,
Deploy one tool per span port/switch
Proprietary & Confidential
Lots of hardware…very expensive!

15. Better: Distribute Connections with a DAN
Consolidate Tools; Save CapEx $$$
Proprietary & Confidential
Aggregate and balance flows to Consolidated Tools

16. DAN is “Best Practice” for Network
Infrastructure Design
Totally flexible solution to many problems
Facilitates unobtrusive instrumentation of a network
Solves requirement for multiple tool access
Gives tools the view of the total network
Secures monitor and tap ports
Proprietary & Confidential
Improves monitor coverage, saves time and money.

17. DAN Solves Access Problems By
• Aggregating many links to any tool
• Multicasting any link to many tools
• Filtering data to map packets to tools
• Saving $$ Cap Ex and Op Ex budget$
Proprietary & Confidential
Any to Any Many to Any Any to Many Bit-Mask Filtering