Integrated security: The Supervisor Engine 32 PISA helps mitigate damage from denial-of-service (DoS) attacks using Control Plane Policing, hardware-based MAC learning, and user-based rate limiting.Additionally, the architecture integrates a high-performance hardware-based AES encryption engine to potentially next-generation Layer 2 through 7 services requiring multigigabit encryption services in the future. As new techniques for network intrusion or application compromise are created, the programmable nature of the Supervisor Engine 32 PISA ensures that the network administrator has the ability to quickly react to the changing environment.
Based on the classification result, actions such as drop or log can be taken on the classified traffic. The user can specify classification criteria based on any protocol and any field of the traffic's protocol stack. FPM provides a flexible Layer 2 through Layer 7 stateless classification mechanism. FPM provides the means to inspect packets for characteristics of an attack, and to take appropriate actions (log, drop). These features include the ability to guarantee bandwidth to critical applications, limit bandwidth to other applications, drop selective packets to avoid congestion, and mark packets appropriately so that the network and the service provider's network can provide QoS from end to end. NBAR works with quality-of-service (QoS) features to help ensure that the network bandwidth is best used to fulfill the company's objectives. After the application is recognized, the network can invoke specific services for that particular application. NBAR is a classification engine that can recognize a wide variety of applications, including Web-based applications and client/server applications that dynamically assign TCP or User Datagram Protocol (UDP) port numbers. Deep Packet Inspection and Application Awareness: Support for hardware acceleration of intelligent services like NBAR and FPM at multigigabit speeds and inspection 4096 bytes into the packet.
0 kommentar(er)
