The vSAP Smart Collector is a cost effective, distributed solution that offers a network-wide view of all connected devices and all network traffic, for threat detection at a central site.
AGGREGATION AND TUNNELING
Aggregation and tunneling of monitored network traffic to the iSID Threat Detection System for analysis
THREE 1GBit SECURE
Passive and non-interfering Ethernet ports for incoming traffic
UNIDIRECTIONAL TRANSMISSION
One-way transmission of network traffic for increased protection
DATA COMPRESSION & FILTERING
Up to 1:10 compression of traffic and filtering out irrelevant data
ENCRYPTED TUNNELING
Mirrored OT traffic is sent using encrypted tunnel over transport network
FIELD-READY
Designed to meet the challenging environmental conditions at remote sites and substations
The vSAP Smart Collector is a cost-effective, distributed solution that offers a network-wide view of all connected devices and all network traffic, enabling threat detection at a central site.
Increasing network coverage by passing traffic from remote networks to a central IDS may create network overload problems due to the large volumes of data sent to the central IDS. Radiflow’s vSAP Smart Collector solves this problem. Installed at each remote site, it receives all LAN traffic from the local switch (using port mirroring), and filters out much of the irrelevant traffic data, leaving intact the SCADA traffic (e.g., ModBus data).
vSAP helps reduce costs by requiring only one vSAP device for each remote network site. Each vSAP securely connects to a centrally located iSID Threat Detection server, where corporate-wide network and device activity is analyzed.
To further reduce bandwidth consumption, the vSAP SmartCollector uses Radiflow’s patented compression algorithmreaching ratios of up to 1:10.
Once received at the central location, the iSID server can decompress the sent data packets with no loss of information. The user is able to set the amount of compression applied, if at all, to different data classes.
Radiflow vSAP is a versatile tool that can be deployed in any site, large and small, allowing for completely passive network coverage without modification of your existing infrastructure.
The vSAP Smart Collector is used in conjunction with Radiflow’s iSID Industrial Threat Detection System
Deployment of a central iSID Industrial Threat Detection System using vSAP Smart Collectors at remote sites.
