Banner - Hardened Copper/RJ45 & Fiber Network-TAPs - IEC62443 + CRITIS Approved

NEOXPacketRaven Product Family - Copper/RJ45, SFP and Fiber Network TAPs

The term TAP is an abbreviation and stands for Test Access Port. A Network TAP, also known as an Ethernet TAP, provides a passive access point to an optical or copper-based network connection, enabling the data signals transmitted over the cable to be read and evaluated securely and reliably for analysis purposes.

These TAPs are looped into the network line to be monitored and forward all data traffic while maintaining data integrity, without interruption and without packet loss.

Once installed, a TAP can be used to transparently deliver all traffic to various monitoring applications quickly, easily, and without affecting the active network line.

In contrast to data tapping via a SPAN port, you get a much more accurate measurement result when using a TAP and can thus identify network and application errors even faster and more precisely. This saves you valuable time when troubleshooting network errors and problems.

Instead of the time-consuming configuration of SPAN ports, Network TAPs can be installed and commissioned plug-n-play, without any prior technical knowledge, in a very short time. For good reason, Cisco, the world’s leading network equipment manufacturer, therefore deliberately advises against the use of such SPAN ports for network analysis.

Network TAPs have another decisive advantage due to the way they work: they fully route bi-directional data traffic. This means that you receive the send and receive directions of a full duplex line separately and can therefore, for example, analyze a 1G line loss-free even with a maximum load of 2Gbps. As a result, you need two network interfaces on the analyzer to record the network data.

Using this method, the sending and receiving directions can be easily differentiated from one another, which eliminates another source of error. SPAN ports, on the other hand, must aggregate this data in memory before it is passed on to the SPAN port, but this is not one of the primary tasks of a switch and thus has a significant negative impact on the quality of the analysis result.

Furthermore, due to the use of mirror ports, the switch processor is more highly utilized, which can cause data loss on the SPAN port.

This line of our PacketRaven Network TAPs are designed as portable TAPs, but can also be installed in a 19″ mounting frame in data centers using a mounting kit, and support network speeds of 10/100/1000Mbps (10/100/1000Base-T), 100Mbps (100Base-FX), or 1000Mbps/1Gbps (1000Base-LX, 1000Base-ZX, 1000Base-SX).

You can find out more about our Network TAPs, the available operating modes, split ratios and much more here: NEOXPacketRaven Portable Copper, SFP and Fiber Network TAPs

Our Network TAPs - a rock in the attack storm

A PacketRaven Network TAP operates on OSI Layer 1 and has no MAC address. It is therefore invisible in the network and cannot be detected by any attacker. This is essential, especially in network forensics and security, as otherwise criminals might be suspicious of the presence of the TAP.

Furthermore, our Network TAPs behave passively on the network side, which means that there is no interruption of network traffic in the event of a power failure (the only exception is our SFP TAP).

In order to ensure the highest possible reliability on the monitoring side, these TAPs have redundant power supplies, but can also be additionally operated or fused with 12-48V DC voltage. With our copper TAP, power supply via PoE is even possible in addition.

Furthermore, all our TAPs with active monitoring output (RJ45 and SFP) work like a data diode. This means that the monitoring ports are physically isolated from the network ports and, for security reasons, access to the network via the monitoring ports is prevented on the hardware side.

Thus, by adding this additional security layer, it is not possible to compromise the network connection and the production network.

Hardened TAPs - here, attackers really bite the dust

PacketRaven Network TAPs are therefore already in the standard version among the network components via which an attack vector is excluded.

CRITIS Nuclear-Power - by Patrick Federi via Unsplash

For high-security areas according to IEC 62443 and critical infrastructures (CRITIS), however, even this is sometimes not sufficient, which is why NEOX NETWORKS now also offers a specially hardened version of its TAPs.

These TAPs can be delivered pre-configured, if desired, and then do not allow any subsequent configuration changes.

In addition, they are secured against unwanted or unnoticed opening by special screws and security seals.

And to top it all off, these TAPs also have specially secured and encrypted firmware. Secureboot checks each time the TAP is started whether the firmware to be executed has a valid signature and an authorized public key.

If this is not the case, the TAP cannot be put into operation.


  • Safe, rock-solid FPGA-based design
  • Supported network speeds: 10M, 100M and 1G
  • Alternative to SPAN ports – mirrors 100% of traffic including FCS/CRC errored packets that may be dropped by SPANs
  • Invisible in the network, no IP address, no MAC address, cannot be hacked
  • Power supply via redundant AC/DC power supplies (5V) and/or 12-48V DC voltage and/or PoE*.
  • Guaranteed no packet loss
  • 100% reaction-free due to galvanic isolation (Data Diode Function)
  • Plug & play – operating mode change via DIP switch
  • Support Breakout, Aggregation and Regeneration modes
  • Does not cause additional latency
  • Support 16k Jumbo Frames
  • Split ratios of 50:50, 60:40, 70:30, 80:20 and 90:10 are supported**.
  • Color-coded connectors for quick identification of the appropriate fiber type**.
  • Designed, assembled, certified and tested in Germany


  • Optionally preconfigured – do not allow subsequent configuration changes
  • Secureboot Firmware – at every start of the TAP it is checked if the firmware to be executed has a valid signature and an authorized public key “Key”.
  • Security seals – cannot be removed unnoticed
  • Safety screws – special tool required
  • IEC 62443 and CRITIS approved

* Only available for copper TAPs       ** Only available for Fiber TAPs

Standard Features

Up to 400G network speed
10 Mbps – 1 Gbps
Volle Netzwerktransparenz
Full Network
No Impairment
No impairment
of Data Traffic
100% Data
Network Data
for Attackers
No Access
No Network Access
via Monitoring Port
Power Loss
Failure Protection
on Power Loss
PoE+ - Power over Ethernet
Power over Ethernet
Redundant Power Supply
Power Supply
Split Ratios
Fast & Precise
Fast and
Jumbo Frames
Jumbo Frames
Made in Germany
Made in

Hardened Features

Fix preconfigured
Secure-Boot Firmware
Secured and encrypted firmware
Security seal
against unnoticed opening
Safety screws
against unwanted opening

Models, Technical Specifications, Accessories & Downloads

PacketRaven Hardened Copper TAP MODELS
Item No.Media TypeNetworkConnector NET.Connector MON.
* Breakout mode only available
PacketRaven Hardened Singlemode FIBER TAP MODELS
Item No.Media TypeNetworkFiber TypeWavelengthSplit RatioConnector NETWORKConnector MONITOR.
PRP-OS2-SLC-50-SEC1000Base-LX1GOS2*1310 nm50:50LC Singlemode RJ45
PRP-OS2-SLC-60-SEC1000Base-LX1GOS2*1310 nm60:40LC Singlemode RJ45
PRP-OS2-SLC-70-SEC1000Base-LX1GOS2*1310 nm70:30LC Singlemode RJ45
PRP-OS2-SLZC-50-SEC1000Base-ZX1GOS2*1550 nm50:50LC Singlemode RJ45
PRP-OS2-SLZC-60-SEC1000Base-ZX1GOS2*1550 nm60:40LC Singlemode RJ45
PRP-OS2-SLZC-70-SEC1000Base-ZX1GOS2*1550 nm70:30LC Singlemode RJ45
* OS1 compatible
PacketRaven Hardened Multimode FIBER TAP MODELS
Item No.Media TypeNetworkFiber TypeWavelengthSplit RatioConnector NETWORKConnector MONITOR.
PRP-OM3FX-SLC-50-SEC100Base-FX100MOM31310 nm50:50LC MultimodeRJ45
PRP-OM3FX-SLC-60-SEC100Base-FX100MOM31310 nm60:40LC MultimodeRJ45
PRP-OM3FX-SLC-70-SEC100Base-FX100MOM31310 nm70:30LC MultimodeRJ45
PRP-OM4FX-SLC-50-SEC100Base-FX100MOM4*1310 nm50:50LC MultimodeRJ45
PRP-OM4FX-SLC-60-SEC100Base-FX100MOM4*1310 nm60:40LC MultimodeRJ45
PRP-OM4FX-SLC-70-SEC100Base-FX100MOM4*1310 nm70:30LC MultimodeRJ45
PRP-OM4-SLC-50-SEC1000Base-SX1GOM4*850 nm50:50LC MultimodeRJ45
PRP-OM4-SLC-60-SEC1000Base-SX1GOM4*850 nm60:40LC MultimodeRJ45
PRP-OM4-SLC-70-SEC1000Base-SX1GOM4*850 nm70:30LC MultimodeRJ45
PRP-OM5-SLC-50-SEC1000Base-SX1GOM5850 nm - 950 nm50:50LC MultimodeRJ45
PRP-OM5-SLC-60-SEC1000Base-SX1GOM5850 nm - 950 nm60:40LC MultimodeRJ45
PRP-OM5-SLC-70-SEC1000Base-SX1GOM5850 nm - 950 nm70:30LC MultimodeRJ45
* OM3 compatible
10.60 cm x 3.50 cm x 16.40 cm / ca. 0.5 kgCE, FCC, RoHS, WEEE, EN55032 KL. A/B, EN55035, EN61000-3-2,
EN61000-3-3, EN61000-6-2
PRP-1U3Server rack mounting frame for 3 portable TAPs
PRP-1U3-BPBlank plate for mounting frame (see center in photo)
PRP-PS-INTPower supply with EU, UK, and US plug head
PRP-PS-EUPower supply with EU plug (head)
PRP-PS-UKPower supply with UK plug (head)
PRP-PS-USPower supply with US plug (head)
PRP-PS-*-APlug head *EU, *UK or *US
Mounting Frame for 3 Portable PacketRaven Network TAPs w/ Blind Plate in the centre
Serverschrank-Einbaurahmen PRP-1U3 mit 2 Netzwerk-TAPs und 1 Blindplatte (mitte)
TAP power supplies with different plug heads

Customers who viewed this product were also interested in the following products:

PacketRaven Portable

Network TAPs

PacketRaven - Portable Ntwork TAP Family

PacketRaven Modular

Network TAPs

PacketRaven Virtual

Network TAP

PacketRavenVirtual - Virtual Network TAP - vTAP

PacketRaven Y-Cable

for Fiber Network TAPs

Y-cable for fibre/fiber network TAPs

We will be happy to consult you and look forward to hearing from you!