ICS Network Security: SPAN vs. TAP | SANS ICS Security Brief

Поделиться
HTML-код
  • Опубликовано: 29 окт 2024

Комментарии • 6

  • @justinsearle4461
    @justinsearle4461 2 года назад +2

    Great 5 minute presentation! Definitely a topic that many of us in the industry take for granted and forget that people new to the industry may have never been exposed to these technologies.

  • @jeffturner415
    @jeffturner415 Год назад +1

    Great presentation. Cisco SPAN may not capture 802.1Q tags on a trunk; a tap will.

  • @boredymcboredface8624
    @boredymcboredface8624 2 года назад

    Yet another great vid :-) I think spanning multiple entire vlans should be called out as a pretty big thing. Unless you are tapping a trunk port it’s hard to get that vis. Also worth noting that you should absolutely measure switch stats before and after implementing spanning. I have over seen a fairly large spanning deployment and for the most part regardless of vender (though mainly Cisco) we didn’t see an a real increase. Which depending on switch architecture is a reasonable assumption. But the one time we saw an increase- it really mattered

  • @JurekOK
    @JurekOK Год назад +3

    the performance of TAP and SPAN architectures is owed entirely to the manipulation of airborne particulate matter and single-surface reflective devices.

  • @cpuuk
    @cpuuk Год назад

    What are people using as a tap, it looks like a simple hub switch? Just wondering if it's something special.

    • @blaze9525
      @blaze9525 Год назад

      You can find various options in online stores. If 100 Mbps is enough, throwing star LAN tap suffices. If you need 1 Gbps, options cost around $200 and are powered.
      Typically unless you have a hub lying around these are cheaper choices in 2022, but I wouldn’t fully rely on the quality of a throwing star LAN tap. Definitely check reliability of any TAP before use.