| |
| Duration: |
Description
Mitigating DDoS Using Cisco Guard and Traffic Anomaly Detector
(DDOS) v2.0 is a two day course covering the implementation,
configuration, and management of the Cisco Guard and Cisco Traffic
Anomaly Detector. These devices, when properly deployed in enterprise
or service provider networks, offer protection from distributed denial
of service (DDoS) attacks. Students will discuss the present day issues
associated with the ever more challenging landscape of network security
and the role Cisco Guard and Detector play in the Cisco SAFE
architecture.
DDOS version 2 includes several hands-on lab exercises covering
interface configuration for out-of-band (OOB) management via the CLI or
GUI, zone configuration, zone traffic policy creation and threshold
tuning, automatic zone traffic diversion and injection, and reporting
features of the Cisco Guard and Traffic Anomaly Detector.
Objectives
- Describe how the Cisco DDoS defense solution protects network devices from suspect traffic generated during a DDoS attack
- Describe the concepts of Anti-Spoofing, Per-Source, and
Per-Destination dynamic filters used by the Multi Verification Process
(MVP) architecture
- Discuss the issues faced today as a result of DDOS attacks
and the deficiencies in other security solutions to deal with DDOS
attacks effectively.
- Describe the functions of the Cisco Guard and Cisco Traffic
Anomaly Detector, including zone policy construction and threshold
tuning, zone protection, and the Guard protection cycle
- Configure the Guard and Detector for automatic traffic diversion using BGP when an attack is recognized
- Describe and discuss the various methods for traffic injection and when each is most appropriate for use.
- Configure protection zones in the Guard and Detector using
various templates, policies, and filters based on customer environments
- Configure and monitor the Guard and Detector using both the CLI (command line interface) as well as the GUI
- Discuss the management challenges to large scale deployments
and how they are effectively handled with Cisco DDOS Multidevice
Management System
- Understand the similarities and differences between the
Cisco Guard and Traffic Anomaly Detector appliances vs. the Cisco Guard
and Traffic Anomaly Detector Modules for the Cisco Catalyst 6500 and
Cisco 7600 Router families
Prerequisites
- Interconnecting Cisco Network Devices
- Basic understanding of the BGP routing protocol
- Foundation level knowledge of Cisco security devices and principals
Who Should Attend
- Employee
- Channel Partner / Reseller
- Customer
|
