Tech Guide

How to Buy Inquiry

Cloud Security Switch: What is the Cloud?

2020-06-18
게시물 보기

 

"A service where software and content are stored on massive, high-performance computers (data centers) connected to the Internet, allowing users to access (retrieve) them whenever needed." 

Then, what does "Cloud Service" mean in the context of a Cloud Security Switch?
First, since a Cloud Security Switch is a switch operating within a network, the "service" would be best described as a cloud service for the network where the switch operates. 

By narrowing the scope of "content" to "network," we can redefine it as: "A service where network content is stored on massive, high-performance computers connected to the Internet and accessed whenever needed." 

Based on this definition, the necessary conditions for the cloud can be summarized as follows: 

  1. High-performance computers capable of integrated content storage are required.
  2. Internet operation allowing connection to content from anywhere is required.
  3. Since it connects via the Internet, encryption for the connection is essential.
  4. Independent content management for each user is required.
  5. Content operation services must be provided to the user. (Since it involves delivering network content to the user)

Conditions 1, 2, 3, and 4 are the minimum requirements for providing a cloud service, while condition 5 can be seen as a differentiation point between cloud system providers. I believe the market winner will be determined by which company appeals to users most effectively with this differentiation point. 

From the perspective of these conditions, let's look at the structure and operational form of the Cloud Security Switch. 

 

1. High-performance computers capable of integrated content storage are required.

2. Internet operation allowing connection to content from anywhere is required.

3. Since it connects via the Internet, encryption for the connection is essential.

The Cloud Security Switch consists of the switch, which handles network switching functions, and the TiController, which integrates and manages these switches. 

The TiController is located on the Internet as a high-performance computer that integrates, stores, and manages network content. The switches operating in the user's network collect network information and store it as content in the TiController. Users receive their network information through the content stored in the TiController via a web browser. 

Additionally, to fit the open Internet environment, the Cloud Security Switch connects to the TiController via an encrypted web communication channel, and users connect to the TiController via HTTP(S). 

 

4. Independent content management for each user is required.

Users have their own operational management accounts on the TiController. Through this account, they can build their own network operation environment within the TiController. Users log in to their User Account (Tenant) on the TiController, configure an Organization and Network within their own space (Tenancy), and register and operate switches on that network. 

Furthermore, as the Cloud Security Switches applied to the network operate within the user's network, they transmit various status information occurring in the network to the TiController, providing content accessible to the user. 

 

5. Content operation services must be provided to the user.

Through the Cloud Security Switches applied to the network, various information generated in the network is aggregated into the TiController. The content aggregated in the TiController includes: 

  • Network operation switch status
  • Network Topology
  • Network traffic flow and volume
  • Environment and traffic usage of PCs and various hosts connected to the network (TiNDM)
  • Abnormal traffic status in the network (TiMatrix), etc.

Based on this content, the TiController provides various network services to the user. Representative services include:

  • - Managed switch configuration functions

  • - Visibility into each network content

  •  

  • - Integrated view via network content dashboard

  •  

  • - Alarm system and Live Tools to identify network issues and causes

  •  

    • - Reporting functions to report network status, etc.

     

Additionally, it provides RESTful Open APIs to allow integration with manager systems operated independently by the user.

 

In conclusion, while a traditional security switch provided security and L2/L3 switching functions as a standalone device, a Cloud Security Switch can be defined as an extended cloud network operation platform. It retains the functions of a security switch but stores network content in a cloud manager (TiController) via the Internet space, thereby providing network services to the user.