ArborPeakflowSP网络流量清洗产品重点详解.ppt

* * * * - Peakflow CP was engineered and priced for peering edges and backbones. - As you get closer to customer edge, the number of routers and interfaces increase exponentially. - Peakflow FS is designed and priced for customer edge deployments. * Mitigation Workflow Improvements Peakflow SP is designed to cover all phases of security workflow including a growing emphasis on the mitigation workflow. SP 3.6 now includes new real-time and historical tracking and reporting of mitigation actions. IntroductionMost Internet providers struggle to provide managed security services and timely response to customer attacks. While Peakflow has significantly advanced providers ability to offer DDoS/worm detection services, responding and mitigating attacks remains a manual and time-consuming process. Often a given anomaly may require multiple mitigation mechanisms ranging from BGP offramps to PE ACLs or diversion to third-party firewalls like Cisco Guard or Juniper NetScreen. Most providers rely on senior engineers and some combination of internal databases and home-brewed scripts to provision and managed the response to customer incidents. Increasingly, Arbors product focus has expanded from our DDoS detection roots to cover all phases of security workflow including a growing emphasis on mitigation. This mitigation focus includes both specific new technologies (e.g., provider IPS/scrubber, flowspec, fingerprint sharing improvements) as well as an equally important support for integrated, network-wide security workflows. As providers roll out managed security services, security workflow and audit trail become more important. * * * * * * * * * * First step upstream from the local data center Protects the link as well Means incremental deployment only as customers sign up for service * * * * * * * * * * * * Sales have more than doubled each year Exiting FY04 cash flow positive Recognized as category leader by market and financial analysts * * * * * * * * * * * * *