• ByPass Switches

    Protect your network from interruption, An Inline Lifeline for Growing Networks

    ByPass Switches

    Problem: Inline Tool Risk

    Neworks face a continualusly evolving barrage of security threats. By deploying inline security tools you create a line of defense, but these tools can also result in single points of failure. In the event that your inline tool becomes unavailable due to a failure, reboot or maintenance it can bring down the network link, compromising network uptime and business continuity.

    Solution ByPass Switch:

    A Bypass Tap is designed to avoid the "single point of failure". with your inline security tools.  The bypass switch is deployed in front of your IPS or next generation firewall (NGFW) and in the event that an active tool fails, either due to a hardware malfunction, power loss, or software problem, a Bypass TAP will keep the link flowing, while a redundant path can be activated. This way it acts as a fail-safe link point of access, for inline network monitoring.

    Advantages of Using an External Bypass Switch:

    • Keeps network traffic flowing when the inline appliance fails.
    • Allows the in-line appliance to be removed or serviced without impacting network fraffic. For example, an IPS can be take offline for upgrades, maintenance or troubleshooting.
    • In-line appliance can be moved from one network segment to another without impacting network traffic.


    A ByPass Switch or TAP monitors the health of the active, in-line appliance by sending heartbeats to the in-line security appliances. As long as the in-band security appliane is on-line, the heartbeat packets will be returned to the switch/TAP, and the link traffic will continue to flow through the in-line security appliance.

    If the heartbeat packets are not returned to the TAP (indicating that the in-line security appliance has gone off-line), the TAP will automatically bypass the in-band security appliance and keep the link traffic flowing. The TAP also removes the heartbeat packets before sending the network traffic back onto the critical link.

    How a ByPass Switch Works

    How a ByPass Switch Works. 


  • Ixia Vision Edge 100

    Vision 100 Network Visibility Cost-effective rack-level for any size data center


    • Easy-to-use web-interface with point-and-click functionality. No command-line needed!
    • Can be deployed in both inline and out-of-band monitoring modes simultaneously
    • NetStack features built-in
    • Max 32 ports of 40/100GE | Max 128 ports of 10/25GE | Max 64 ports of 50GE
    • Supports Ixia Fabric Controller (IFC) - a highly resilient and extremely easy to use SDN controller providing visibility management through a single pane of glass
    • 1RU


    Data center design is evolving with the advent of software defined networking (SDN) which allows for completely software defined data centers (SDDC). We are seeing the rise of hyperscale, microscale and other high-density variations of data-centers emerging all at the same time. These technologies are barely defined, yet their growth over the next few years is predicted to be many multiples!

    Though each serves a different purpose, a core component of these modern data centers is a building block, sometimes as small as a single rack, that includes the compute, storage and networking required to operate on its own - a containerized, independent unit. These individual blocks are great because one can be used on its own as the smallest microscale data center or thousands can be used together to create a hyperscale data center - and everything in between. Software plus hardware tailored for redundancy makes this both possible and cost-effective. Ixia Vision Edge Visibility

    But, as data centers grow, the ability to see what is happening in the network diminishes. You need a cost-effective solution that operates like the building blocks, both capable of providing top-of-the rack visibility for a single unit and capable of scaling to thousands of racks with software defined visibility. Ixia's Vision Edge™ 40 (E40) and Vision Edge 100 (E100) are best-in-class, fully-featured network packet brokers that are ideal for the ANY size modern data center.  



    Ixia's Vision E40 and Vision E100, part of the Vision portfolio of network packet brokers, have the right features to handle the visibility requirements of a single rack, as well as that of a massive data center.

    Ixia Network Packet Broker Diagram for Data Center Network


    Vision E40 and E100 

    • Are cost-effective and can integrate seamlessly with into your existing environment - ideal for scale
    • Can be deployed rapidly and modified quickly with Ixia’s easy-to-use web-interface, which makes configuration and re-configuration simple and hitless
    • Are ideal for expansion as they can be used standalone or with Ixia’s turnkey Vision One or Vision 7300, as part of a Security Fabric
    • Are great for continuous modification because they can be deployed inline or out-of-band – and even both simultaneously. Plus, they are multi-speed capable, to support evolving speeds!




    • Overview

    • In a Security Fabric

    • Inline & Out-of-Band

    • Fan-Out

    • Resources


    Physical Specifications:Ixia Vision Edge 100

    • Capable of multi-speed - 10G, 40G, and 100G networks
    • Each port is capable of any of the speeds, set independently
    • (32) QSFP28 front panel ports
    • Supports QSFP28 (for 100G) or QSFP+ (for 40G) transceivers
    • Massive density with (128) 10G ports in 1U size
    • Hot swap redundant power supplies and fans
    • Available in AC and DC mode


    Ixia Network Security Fabric

    In a Security Fabric

    Vision E100 can be is versatile because it can used standalone or as a software defined visibility solution in a software defined network (SDN ) as part of a Security Fabric. With Ixia Fabric Controller (IFC), multiple Vision E100 and/or other Vision network packet brokers can be managed in a single pane of glass in the topology you need to, optimize your tool deployment. With IFC, you get unified management of distributed architectures, role-based access and controls, and you can see and all ports from all Vision network packet brokers at once. Allowing you configure an efficient, scalable visibility solution.

    As part of a Security Fabric, Vision E100 also provides the ability to leverage Ixia's turnkey Vision ONE and massively scalable Vision 7300,  when your deployment is ready. With these network packet brokers, the visibility intelligence capabilities of PacketStack, SecureStack and AppStack to be able to manipulate and mold traffic, so your tools always get the right data.With Vision ONE, you can also monitor virtual traffic with Ixia's CloudLens platform for public, private and hybrid cloud visibility.


    Inline & Out-of-Band

    Deploy both inline, out-of-band, or both simultaneously based on your security and monitoring needs.


    Robust inline tool deployment enables users to deploy intrusion prevention systems (IPS), data loss prevention (DLP), and similar tools while assuring high service availability, even when parts of the system fail or become overloaded. Data from the network passes through a Vision E100 network packet broker via a bypass switch for resilience. Vision E100 sends the data to the IPS, DLP and other tools, which process the data and send back safe information via the Vision E40 and bypass switch back into the network.


    Process and monitor packet data with a variety of tools without affecting the network with an Out-of-Band (OOB) deployment. Data is passively copied from the network with Ixia Tapsand sent to Vision E100 and other network packet brokers for filtering and processing. Relevant data is then sent to tools, at appropriate speeds, so the tools can operate efficiently. With only the right data being sent, false-positives are minimized and your team has improved relevance of alerts, for a quicker response to incidents.

    Inline and Out-of-Band NPB




    Fan Out span or tap

    The Vision E100 has a space-efficient 1RU design. To get the most out of the rack space used and to optimize data speeds for tools, Ixia offers a Fan-Out capability on Vision E100. With fan-out, a 40G port can be used with a break-out to operate as 4, 10G ports or a 100G port, can be used with a break-out to operate as 4, 25G ports - this capability is ideal for tools that may have have a lower throughput capacity. Combined with the load-balancing capability, you can ensure your tools are not overloaded and are operating at the optimal capacity.


  • Vision E10S

  • Vision E1S

  • Vision Edge OS

Contact Us


Telnet Networks Inc.
1324 Andersen Drive
Kingston, ON  K7P 0C6


(800) 561-4019



For More Information about Telnet Networks, our products, or our services, or to request a quote please feel free to contact us directly.