Do I have to use a security switch? What would be good to have?

Internal security is becoming increasingly important as attacks on access networks (ARP Spoofing, zombie PCs, Floating, external C&C communications attempts, etc.) and internal endpoints have recently increased.
This is not easy even with an Outgoing policy (internal → external) to detect/block from network security equipment designed to defend incoming attack traffic (UTM, IPS, WAF, etc.).
Today we are posting about security switches that can manage internal attack points such as ransomware, phishing, viruses, SSL control, application control, smart devices or randomly installed sharing devices by internal staff.

 

What's a security switch?
An access switch that provides L2 or L3 switching and security at the same time, enabling secure management of the internal network.

 

Manufacturer
Handreamnet SG2100, Piolink TiFRONT Security Switch, Dasan Networks, Pumpkin, Alteon, etc.

Recommendation
Companies, offices, churches, hospitals, schools, hotels, public institutions, libraries, etc. that require endpoint management but are difficult to install client (PC, mobile, AP, etc.) agents.
It is effective in many places where there are currently many non-specific internal terminals that serve the outside world via Free Wi-Fi.

representative function
1. Block ARP/IP Spoofing, Hijacking
Prevent sensitive information and call and privacy exposure that can be leaked to PCs, VoIP phones, CCTVs, etc., and distinguish between attackers and modulated MAC victims, blocking only attackers from the network

2. QoS Support
Prioritize traffic and support a variety of QoS features to prevent excessive traffic flow

3. Selective blockage and prevention of spread of hazardous traffic
Provides continuity of service by allowing normal packets and selectively blocking only abnormal packets
Prevent internal spread of abnormal traffic by blocking harmful traffic from each port

4. Network Monitoring Functions
Manage widely distributed network switches from one screen to another

 

" The beginning and end of security is Endpoint.
It's easy to miss the most important parts, or it's possible for the internal network to go down due to human errors or administrative problems.
A security switch is the most effective solution for internal enemies without client installation. "