Cisco-Anti-DDOS安全服务解决方案教案分析.ppt

CNC040401BJ(GB)-StrategyClarficationDoc-v9 * CNC040401BJ(GB)-StrategyClarficationDoc-v9 * Positioning of Guard: Close to edge Upstream of firewall, IDS, CSS/CSM Currently activation via VMS scripting Direct activation from IPS sensor for 5.x time frame CNC040401BJ(GB)-StrategyClarficationDoc-v9 * This slide illustrates interoperability with third-party monitoring, such as an Arbor NetFlow-based system. Centralized into one or more scrubbing centers Provides more flexibility for both dedicated and shared services. As mentioned earlier, can interoperate with other detection systems. A NetFlow-based system such as Arbor works well in a distributed environment for provider. Customer may still deploy CPE for self-monitoring and auditing. Arbor: External script currently Controller will be scripted to activate Guard – DoS 2.5 in October 2004. Peakflow 3.x in 1Q05 for reporting on Guard data via SNMP and XML export. CNC040401BJ(GB)-StrategyClarficationDoc-v9 * Silver 3 acl changes per month Share fingerprint CNC040401BJ(GB)-StrategyClarficationDoc-v9 * CNC040401BJ(GB)-StrategyClarficationDoc-v9 * CNC040401BJ(GB)-StrategyClarficationDoc-v9 * CNC040401BJ(GB)-StrategyClarficationDoc-v9 * CNC040401BJ(GB)-StrategyClarficationDoc-v9 * CNC040401BJ(GB)-StrategyClarficationDoc-v9 * * 中国电信 DDOS 部署 – 截至 2007.5 （2006-2007） 　 客户名称 部署规模简介 实施时间 1 电信集团 2 套AGM/ADM,2G 扩至 6G (C节点,国际) 2007Q3 2 汕头电信IDC 1 套AGM,防护IDC业务 1G 2007Q3 3 深圳电信MAN 2 套 Cisco7609/AGM 模块,防护城域网安全 6G 2007Q3 4 深圳电信IDC 1 套 Guard 在线DDOS防护银行重点客户 2006Q2 5 湛江电信 1 套 Guard 防护IDC 网站 2006Q1 6 北京电信 1 套 Guard 防护IDC 网站 2007Q1 7 广东电信IDC 1 套Guard / 6*Detector，防护城域网骨干 2007Q1 8 广东电信MAN 2 套 AGM 3G ，防护城域网骨干 2007Q3 9 江苏电信 1 套Guard/ Detector,防护IDC业务 2006Q2 10 陕西电信 1 Guard 保护IDC 网络 2006Q4 11 福建电信 1 套 Cisco7609 /AGM 模块,防护DNS认证等重要服务 2007Q1 12 上海电信 1套 AGM /ADM 防护IDC DDOS攻击, 2007Q3 13 云南电信 2 套 AGM 防护 DCN / DNS攻击 2006Q1 14 湖南电信163 1 套Guard 防护 城域网 2006Q3 15 重庆电信 3 套Guard XT / 2 * Detector 骨干网部署防护 网吧 2006Q1 16 新疆电信MAN 2 套 3G AGM 防护城域网 200