The Planet monitors all traffic entering the network, except MatriXtreme, for possible network
floods or Distributed Denial of Service (DDoS) with Arbor Peakflow DDoS Detection. Arbor
Peakflow, a standard service available at no additional cost to the client, is used in conjunction with
Cisco® Guard XT 5650 DDoS Mitigation Appliance and the TippingPoint IPS
system.
Arbor collects information from Internet routers and develops a baseline and color graph of normal
traffic. An abnormal volume of traffic, or other deviation from normal, generates an event record.
The graph depicting traffic patterns is used by NOC/SOC to confirm the attack and DDoS mitigation
is begun.
Firewall Protection
Our firewall administration option allows our administrators, experts in Cisco Pix, Watchguard, and
Checkpoint and Cyberguard firewall appliances, to manage a customer’s firewall over a secure
console connection within the datacenter. Our security experts keep the firewall up to date, make
routine or emergency changes, or assist in developing security policies.
We currently offer the following firewall protection from Cyberguard and Cisco:
C Cyberguard SG 630 (PCI)
C Cyberguard SG 550
C Cyberguard SG 575
C Cisco PIX 501 – UR
C Cisco PIX 506E
C Cisco PIX 515E-R
C Cisco PIX 515E-UR
C Cisco PIX 525-R
C Cisco PIX 525-UR
C Cisco PIX 535-R
C Cisco PIX 535-UR
The Cyberguard SG 630 is a cost-effective firewall/VPN solution packaged on a PCI card. By
offloading all firewall and VPN processing from the host computer, the SG630 ensures high
performance and throughput with the convenience of remote management and simplified
installation. Unlike “co-processing” products, the SG630 is an advanced, self-contained multitasking
stateful firewall and VPN appliance. It includes a RISC processor, encryption accelerator for IPsec
VPN traffic and two Ethernet interfaces for host and LAN communications. The SG630 packs the
power of an SG firewall/VPN solution while eliminating the cabling, space and power requirements
of an external firewall appliance.
The Cyberguard SG 550 Security Appliance is a feature-rich, compact, network security device,
that is well suited to protecting small branch offices of medium sized enterprises. The SG550
enables remote office networks to easily connect their PCs and servers to the Internet via broadband
(ADSL, cable, SHDSL, T-1 and T-2 circuits, etc.) or narrow-band (modem or ISDN). Should the
broadband connection fail the SG550 can fail over to the narrow band backup connection, ensuring
uptime. A powerful stateful-inspection firewall, service-based intrusion detection blocking and
advanced Internet connection sharing protect the branch office network from the Internet.
13
MC Software Security and Hosting
Comentários a estes Manuais