 |
LANShield™ Intelligent Switch Family
Integrated Intelligent Switching
ConSentry Networks delivers intelligent control, making it easy for IT to control users and applications on the LAN. The ConSentry LANShield platforms — the LANShield Switch and LANShield Controller — tie together user, device, role, application, and destination to provide a level of business context not possible with legacy switch architectures. With this context, IT can more easily boost employee productivity, protect assets, and simplify operations.
Legacy Switch vs. Intelligent Switch
| |
Legacy Architecture |
Intelligent Architecture |
Performance |
Wire speed |
Wire speed |
Latency |
Microseconds |
Microseconds |
Hardware |
Fixed |
Programmable |
Processing |
Packet-based |
Flow-based |
User context |
IP addresses |
Identity, device, role |
Application Details |
Limited to Layer 4 |
Rich Layer 7+ detail |
Access Policies |
Complex - ACLs/VLANs |
Dynamic - by user/role/app |
Security |
Overlay, external apps |
Embedded |
Audit/troubleshoot |
Sampled Layer 4 data |
Full user/app/resource data |
| Bottom Line: The legacy switch architecture cannot support intelligent switching . |
ConSentry LANShield Switches are enterprise-class 24- and 48-port intelligent switches that make it easy for IT to embed user and application control directly into the edge of the LAN infrastructure. Intelligent switching provides the user and application control needed to easily segment users on the LAN and protect critical assets and applications, dramatically lowering the cost of operations compared to deploying and maintaining VLANs and ACLs.
The LANShield Switches combine ConSentry’s custom LANShield silicon and intelligent switching software with standard switching silicon to provide total user and application control without sacrificing performance. The ConSentry custom hardware includes a multi-core processor and programmable ASICs that perform packet processing for monitoring, control, and switching at 10 Gbps. The programmability of the hardware enables ConSentry to keep pace with changes in applications and security requirements.
The LANShield intelligent switching architecture enables enterprises to monitor and control all user traffic with minimal impact on the existing infrastructure. ConSentry leverages existing OS authentication mechanisms, such as the Windows login. The LANShield Switches enforce policy directly, without the need for new VLANs or ACLs in the network or new supplicants or agents on the clients.
An Integrated Approach
The LANShield Switch sits in the wiring closet, connecting user machines into the core or distribution layer of the LAN. Because the switch hosts users directly, it sits in the optimal location for controlling user activities on the LAN.
| |
 |
The LANShield Switches are gigabit Ethernet wiring closet intelligent switches offering user and application control.
|
| |
The LANShield Switch provides integrated intelligence without compromising on switch functionality. The LANShield CS4048X supports 44 copper-based gigabit ports, four SFP gigabit ports, and two 10 Gbps ports. The LANShield CS4024 supports 24 copper-based gigabit ports and two SFP gigabit ports. Redundant fans and hot-swappable power supplies combined with network resiliency features such as link aggregation and rapid spanning tree ensure high availability at the edge. Optional 802.1af Power over Ethernet provides up to 15.4W of power for all ports.
Deployment Options and IT Initiatives
The LANShield Switch provides integrated intelligent switching for the wiring closet. IT can leverage the LANShield Switch to:
-
troubleshoot user and application issues more quickly
-
support non-user devices such as robotics and IP phones
-
limit access to resources
-
track all user activity for auditing
-
support a more dynamic and diverse workforce
-
more easily roll out new applications, systems, and business locations
Ordering Information
Part No. |
Description |
| CS4024 |
Intelligent Ethernet switch with 24 10/100/1000 copper ports and two shared SFP combo ports and single AC PSU. It supports 100 authenticated users. |
| CS4024 POE |
Intelligent Ethernet switch with 24 10/100/1000 copper ports, two shared SFP combo ports, PoE, and single AC PSU. It supports 100 authenticated users. |
| CS4048X |
Intelligent Ethernet switch with 44 10/100/1000 + 4 unpopulated 1 Gbps SFP cages + 2 unpopulated 10 Gbps XFP uplink cages, and 2 hot-swappable AC PSUs. It supports 200 authenticated users. |
| CS4048X POE |
Intelligent Ethernet switch with 44 10/100/1000 + 4 unpopulated 1 Gbps SFP cages + 2 unpopulated 10 Gbps XFP uplink cages, PoE, AC PSU
and one DC port that can be used with optional DC PSU for additional power for PoE
. It supports 200 authenticated users. |
| CS-PWR-4048X |
Optional — Spare hot-swappable PSU for CS4048X (not applicable to PoE version) |
| CS-PWR-470 |
Optional — External 470W PoE power shelf for CS4048X-PoE redundancy (applicable only to PoE version) |
|
 |