Access Control Lists (ACLs) filter network traffic by controlling whether packets are forwarded or blocked based on Layer 1 through Layer 3 criteria specified within the ACL.

ACLs can be saved and stacked together, facilitating the formation of complex filters ensuring only the traffic that a tool needs is sent to that tool.

Identify overall port health, port configurations, and port tags for maximum control over traffic flow.

View statistics from all or specific ports on all or specific blades installed in the switch on one screen. With the addition of an optical bypass tap connections can be:

• One-to-One
• One-to-Many
• Many-to-Many
• Many-to-One One-to-load balance group (LBG)
• Many-to-load balance group (LBG)

Application filtering identifies and categorizes Layer 7 applications and protocols even when encrypted or obfuscated, facilitating more efficient tool usage. Control traffic by filtering out low-risk traffic like streaming apps or identifying applications with security flaws or known vulnerabilities. DPI-based packet classification on the IntellaView HyperEngine provides between 60 and 70G of application filtering per service engine in real time.

The HyperEngine can use regular expressions to match packet contents and filter traffic, allowing you to search on individual packets, sessions, or across fragmented packets.

Actions include:

• None – useful for getting stats or insights into the traffic
• Mask - swap out the text that matches the regex with a user-specified character
• Pass - pass packets that match the regex
• Drop - drop packets that match the regex
• Session pass - pass all packets in the flow when a packet matches the regex
• Session drop - drop all packets in the flow when a packet matches the regex

Tools typically have minimal buffer space so traffic is dropped quickly if a tool is sent more traffic than it can handle. An overburdened tool may also become overwhelmed and not perform its function properly. Use a HyperEngine blade to limit transmitted traffic to a user-specified average rate by buffering incoming packets and sending them out at a steady, even flow. Each HyperEngine service engine can buffer from 3 to 160 million packets, depending on packet size, shared across all connections to ensure your existing tools are never oversubscribed even as bandwidth expands.