For optimal and secure IT service delivery, IT security teams must have permanent access to detailed traffic analysis. Network forensics provides this essential access and insight that security analysts need.

Our PacketFalcon products are powerful recorders for all types of network speeds, enabling IT organisations to analyse, monitor and accurately record traffic without compromise.

The PacketFalcon Mini X provides permanent 24 x 7 access to 1G, 10G and 25G networks for detailed analysis, including forensic analysis of past events.
PacketFalcon assists security teams with analysis by recording data at key network points while minimising the traffic this data collection can generate.

By indexing the data and providing simple and complex filters (Berkeley Packet Filter), PacketFalcon enables security teams to quickly investigate and thus stop attacks.

Linux is used as the operating system and a special network forensics software is used for analysis and evaluation. This makes it possible to analyse network traffic remotely from any location and quickly find errors, which drastically reduces MTTR time.

With its robust and compact design, optional 8TB, 16TB or 32TB disk storage and a 1G/10G or 1G/10G/25G high-performance Gigabit capture adapter, it is the ideal companion for the mobile network analysis and forensics specialist.

A PacketRaven Network TAP operates on OSI Layer 1 and has no MAC address. It is therefore invisible in the network and cannot be detected by any attacker. This is essential, especially in network forensics and security, as otherwise criminals might be suspicious of the presence of the TAP.

Furthermore, our Network TAPs behave passively on the network side, which means that there is no interruption of network traffic in the event of a power failure (the only exception is our SFP TAP).

In order to ensure the highest possible reliability on the monitoring side, these TAPs have redundant power supplies, but can also be additionally operated or fused with 12-48V DC voltage. With our copper TAP, power supply via PoE is even possible in addition.

Furthermore, all our TAPs with active monitoring output (RJ45 and SFP) work like a data diode. This means that the monitoring ports are physically isolated from the network ports and, for security reasons, access to the network via the monitoring ports is prevented on the hardware side.

Thus, by adding this additional security layer, it is not possible to compromise the network connection and the production network.

Secure Fiber TAPs have both an additional optical isolator (Data Diode functionality) and an optical filter to ensure that unwanted incoming light signals are blocked at the monitoring port to protect the network from compromise. It thus provides another security layer that offers increased protection against attackers and faulty configurations.

Our optical TAPs do not require power, they are purely passive components and therefore cannot be detected in the network without expensive measuring equipment. Hackers and other attackers thus have no chance, and since the integrity of the outgoing data remains unaltered due to this tapping method, Network TAPs are increasingly used in the areas of network forensics, security and monitoring.

PacketRaven Fiber TAPs are designed for data centres and allow you to fit up to 30 network segments with TAPs using our innovative, modular 1U chassis. They support network speeds from 100Mbps up to 400Gbps. Without risk you get permanent network access and provide your monitoring and security tools with 100% reliable network data without introducing a single point of failure.