Introduction to TAPS

A guide for monitoring network

traffic with Test Access Ports
Ideal for security, network monitoring and end-to-end performance analysis

What is a TAP Aggregation? Who Needs TAPs

TAP stands for Test Access Port. It is a Use an Aggregation Tap when: • Companies who require 24 x 7 monitoring
network device that is placed on an • You need to monitor both directions capabilities (Intrusion Detection, VoIP
Ethernet segment which can then provide of full duplex transmissions but your Recording, etc)
a copy of that traffic for analysis with monitoring tool only has one NIC (full • Service organizations who may need to
network tools like Wireshark, Snort or other duplex aggregation) “plug in “ to conduct troubleshooting in
monitoring tools. • You need to monitor aggregated* or support of an SLA agreement, avoiding
non-aggregated** traffic from one link SPAN or Port Mirror configuration of a
with multiple tools (regeneration) switch or router which may be tied to
Why use TAPS • You need to monitor aggregated or a configuration change policy at the
• For secure 24/7 point of access for non-aggregated traffic from multiple customer location.
network tools for for troubleshooting links with one tool (link aggregation) • Compliance Requirements where
• All fiber taps are passive devices and will • The number of links you need to all data needs to be captured and
not be a single point of failure monitor exceeds the number of tools analyzed -- combination of tapping and
• They make copies of data in real-time with you have available (link aggregation) SPAN/Port Mirrors.
very little or no traffic delay • Your network links and tools are not the • Companies looking to reduce
• They are physical layer devices, able to same made up of various media types operational expenses and mitigate risk
provide all traffic over that link for analysis (media conversion)
• TAPs are low cost and a highly reliable
* The sum of aggregated traffic from all network links
way to provide data non-intrusively to should not exceed 100% of the monitoring port bandwidth
network tools
• They can be used to provide the physical ** Most models can be configured to perform aggregation
and/or function like a standard nonaggregating tap
layer traffic to other aggregation devices,
complementing the collection from a
SPAN or Port Mirror captures for improved
analysis
• They allow you to retain use of ports on
network switches

Where to place TAPs TAP

Placement of TAPs is typically in the TAP

locations with the most critical information
in the network. TAPs will provide continuous
monitoring on links where critical
information travels, or on links leading
to servers or storage devices where the TAP
data resides. TAPs are designed around a
hardware-based architecture that minimizes
latency, so their deployment can be made
anywhere in the network.

Similar to security probes, some common

locations for TAPs include inside the firewall,
network trunks or links to or from critical
servers.

© 2015 Datacom Systems, Inc

Network Taps from Datacom Systems
Network
Media Monitor
Product Photograph Speed Inline (TAP) Port Types** Aggregation
Type Ports
Ports*

10-100 AT 10/100 Network Tap (RJ45). 2

Copper 10/100 ✔ 1 2
Monitoring 10/100 (RJ45).
N

10/100/ 10/100/1000 Network

CTP-1000 Copper 1000 Full ✔ 1 2 Tap (RJ45). 2 Monitoring Y
Duplex 10/100/1000 (RJ45).

FTP 1000 MTP/MPO or LC or SC

100/40 Gb
Series Fiber
10/1 Gb ✔ 1 2 50/50 or 70/30 split ratio N
50 Micron and 9 Micron

LC
FTP 2000
Series
Fiber 10/1 Gb ✔ 2 2 50/50 or 70/30 split ratio N
50 Micron and 9 Micron

LC
FTP 4000
Series
Fiber 10/1 Gb ✔ 4 4 50/50 or 70/30 split ratio N
50 Micron and 9 Micron

FTP 8000 LC
Series Fiber 10/1 Gb ✔ 8 8 50/50 or 70/30 split ratio N
50 Micron and 9 Micron

FTP 9000 LC
Series Fiber 10/1 Gb ✔ 24 24 50/50 or 70/30 split ratio N
50 Micron and 9 Micron

Copper
10/100/ 10/100/1000 Network Tap
SS1204BT-BT-S Input
Copper
1000 Full ✔ 1 2 (RJ45). RJ45 Management. Se- Y
Duplex rial (rear) DB9F
Output
10/100/1000 Network
Copper
10/100/ Tap (RJ45). 2 Monitoring
Input.
SS1204BT-
SFP Out-
1000 Full ✔ 1 2 10/100/1000 Any-to-Any. Man- Y
SFP-S Duplex agement RJ45 at 100 Mbps Full
put
Duplex. Serial (rear) DB9F
Fiber
SX Network Tap. 2 Any to Any
SS1204SX-BT-S Input. 1 Gb Full
Copper Duplex ✔ 1 2 Management Ports RJ45 at 100 Y
100 Mbps Full Duplex
output
2 x 10/100/1000 Network
Copper
10/100/ Taps (RJ45). 2 Monitoring
Input
SS2206BT-BT-S
Copper
1000 Full ✔ 2 2 10/100/1000 Any-to-Any. Man- Y
Duplex agement RJ45 at 100 Mbps Full
Output
Duplex. Serial (rear) DB9F
2X SX Network Taps. 2X SFP
Fiber
1Gb Full Any-to-Any Monitoring Ports.
SS2206SX-SFP
Input. SFP
Duplex ✔ 2 2
Management RJ45 at 100 Mbps
Y
Output
Full Duplex.
Copper 2 x 10/100/1000 Network
10/100/
Input, Taps (RJ45). 4 RJ45 and 2 SFP
1000 or
SS2210BT-BT/ SFP or
1 Gb Full ✔ 2 6 Any-to-Any Monitoring Ports. Y
SFP-S Copper Management RJ45 at 100 Mbps
Duplex
Output Full Duplex. Serial (rear) DB9F
Copper 10/100/ 4 x 10/100/1000 Network Taps
SS4210BT- Input 1000 or (RJ45) and 2 SFP Any-to-Any
SFP-S SFP Out- 1 Gb Full ✔ 4 2
Monitoring Ports.. Management
Y
put Duplex port RJ45. Console port DB9.

*Note: A Network (TAP) port shown on this page will tap one network link, 2 ports will tap 2 links, etc... Refer to product FASTstart guides for details on installation.
**Note: See datasheets for specific fiber, connector and split ratios available. Split ratios 50/50 and 70/30 are commonly used, other variations are available.
Network Taps from Datacom Systems
Network
Media Monitor
Product Photograph Speed Inline (TAP) Port Types** Aggregation
Type Ports
Ports*
Fiber
LC
TS-1404 Input/
Copper
10G/1G ✔ 1 2 50/50 or 70/30 split ratio
50 Micron and 9 Micron. Out-
Y
Output put: SFP+/SFP

Fiber LC
Input/ 50/50 or 70/30 split ratio
TS-1406
Copper
10G/1G ✔ 1 2
50 Micron and 9 Micron. Out-
Y
Output put: SFP+/SFP

Fiber LC
TS-2408 Input/ 50/50 or 70/30 split ratio
Copper
10G/1G ✔ 2 2
50 Micron and 9 Micron. Out-
Y
Output put: SFP+/SFP

*Note: A Network (TAP) port shown on this page will tap one network link, 2 ports will tap 2 links, etc... Refer to product FASTstart guides for details on installation.
**Note: See datasheets for specific fiber, connector and split ratios available. Split ratios 50/50 and 70/30 are commonly used, other variations are available.