Andrisoft Wanguard 5.2, Руководство пользователя и администратора, Страница: 44 / 73

WANGUARD 5.2 User Manual & Administrator's Guide
Comparison between Packet Sniffing and Flow Monitoring
The table below provides a quick comparison between the two available trafc capturing technologies. The
hardware requirements for each method are diferent. We keep an updated hardware requirements list on our
website.
WANGUARD
Sensor
Snifng Sensor Flow Sensor
Capturing Technology
- Port Mirroring (SPAN, Roving Analysis
Port)
- Network TAP
- In-line Deployment
- NetFlow version 5, version 7, version 9 –
including jFlow, NetStream, cfowd*
- sFlow version 4, version 5*
- IPFIX*
Maximum Trafc Capacity
per Sensor
10 GigE
>150,000 endpoints**
multples of 10 Gbps
>10,000 endpoints**
Anomaly Detecton Time <= 5 seconds < fow export tme + 5 seconds
IP Graphs Accuracy >= 5 seconds >= 20 seconds
Trafc Validaton Optons IP classes, MAC addresses, VLANs, BPF
IP classes, Interfaces, AS Numbers,
Ingress / Egress
* Cisco Systems ( ASR 1000, ISR G1, ISR G2 - 800, 1800, 1900, 2800, 2900, 3800, 3900 -, 1700, 3660, Catalyst 4500,
Catalyst 6500, Cisco 7500, 7600, 10000, 12000, ASR 9000, CRS-1, C3KX-SM-10G, XR12000 ), Adtran ( NetVanta
3200, 3305, 4305, 5305, 1524, 1624, 3430, 3448, 3130, 340, and 344 ), AlaxalA Networks ( AX7800R , AX7800S ,
AX7700R , AX5400S ), Alcatel ( OmniSwitch 6850 , OmniSwitch 9000), Allied Telesis ( SwitchBlade 7800R series ,
SwitchBlade 7800S series , SwitchBlade 5400S series ), Brocade ( BigIron series, FastIron series, IronPoint series,
NetIron series,SecureIron series, ServerIron series ), Barracuda ( Barracuda NG Firewall ), Comtec Systems ( !-Rex
16Gi & 24Gi & 24Gi-Combo ), Dell - Force 10 Networks ( PowerConnect 6200 series, PowerConnect 8200 series, E
series ), D-Link ( DGS-3600 series ), Enterasys , Extreme Networks ( Alpine 3800 series, BlackDiamond 6800 series,
BlackDiamond 8800 series, BlackDiamond 10808, BlackDiamond 12804C , BlackDiamond 12804R ,Summit X450
Series , Summit i series ), Fortgate ( FortSwitch series, FortGate series ), Huawei , H3C , Hewlet-Packard ( ProCurve
2610 series, ProCurve 2800 series , ProCurve 2900 series, ProCurve 2910al series, ProCurve 3400cl series , ProCurve
3500yl series , ProCurve 4200vl series , ProCurve 5300xl series , ProCurve 5400zl series , ProCurve 6200yl series ,
ProCurve 6400cl series , ProCurve 6600 series, ProCurve 8212zl, ProCurve Wireless Edge Services xl Module,
ProCurve Wireless Edge Services zl Module, ProCurve Access Point 530ProCurve 9300m series , ProCurve Routng
Switch 9408sl ), Hitachi ( GR4000 , GS4000 , GS3000 ), Juniper Networks , Maipu ( S3300 Series, S3400 Series,
S3900 Series ), MikroTik , NetGear ( GSM7352S-200, GSM7328S-200 ), Nortel ( 5500 & 8600 Series ), NEC
( IP8800/R400 series , IP8800/S400 series , IP8800/S300 series ), Palo Alto , Riverbed , Sonicwall ( SonicWall NSA
E5500 ), Vyata ( Vyata 514, Vyata 2500 series, Vyata Virtual Router, Firewall, VPN )
** An endpoint is an IP address that belongs to your network. The sofware is not limited by the number of
connectons between IPs.
- 43 -