Actu
Arbor Networks 10 Gig Threat Management System Delivers Threat Detection, Surgical Mitigation for Protection of Critical IP Services
June 2008 by Marc Jacob
Arbor Networks, Inc. announced the industry’s first 10 Gig distributed denial of service (DDoS) detection and mitigation system that enables application-layer attack protection.
The Threat Management System 3100 (TMS) delivers deep packet
inspection (DPI) of more than 80 critical IP services and applications
running on the network, such as DNS, HTTP, VoIP, IM and P2P, while also
delivering application-layer attack detection, surgical mitigation and
reporting. This unique combination allows service providers to maintain
availability, reduce support costs and optimise current or future
business services.
By tightly integrating TMS into the Peakflow SP platform ("Peakflow
SP"), Arbor Networks delivers a solution that combines network-wide
anomaly detection and traffic engineering with carrier-class threat
management that automatically detects and surgically removes only attack
traffic while maintaining legitimate business traffic. Additionally, TMS
complements Peakflow SP’s other mitigation techniques, including
fingerprint sharing, Border Gateway Protocol (BGP) black-hole routing,
BGP flow-spec and support for other mitigation technologies.
The Peakflow SP platform offers an industry-unique combination of
macro-level (IP flow) and micro-level (deep packet inspection) analysis
to address all network security threats. Competitive solutions require
operators to log-in to multiple devices to address a single security
threat. This creates a cumbersome and inefficient process at a time when
split-second decision making is paramount. TMS streamlines operations
and speeds reaction time by providing users with a single console and
common user interface for thwarting multiple attacks. In addition, TMS
can reduce operating expenses through simplified provisioning and
uncomplicated ongoing maintenance. As a result, it can provide a much
lower total cost of ownership than competitive solutions.
A Platform for Managed Services
Peakflow SP is a strategic investment that enables service providers to
leverage the same solution used for infrastructure visibility and
security to deliver new, differentiated, revenue-generating managed
services, such as MPLS VPN visibility and DDoS protection. More than
forty of the world’s leading service providers are utilising the
Peakflow SP platform to deploy network-based offerings in an easy and
scalable way to protect their enterprise customers’ networks from DDoS
and other cyber attacks that disrupt corporate networks and business
continuity.
In order to optimise the deployment of these services, a service
provider can choose from several TMS models. There are also multiple
ways that a TMS device can interface with the network, such as: in-line
with fail-safe hardware bypass, BGP off/on ramping, or a SPAN port. In
addition, features such as mitigation templates, auto-mitigation, TMS
grouping and statistics all ease the provisioning and operation of these
managed DDoS services-which ultimately cuts costs and increases
profitability.
