© 2007 Cisco Systems, Inc. All rights reserved.SNRS v2.03-1 Cisco Network Foundation Protection Introducing Cisco NFP. - презентация

1 © 2007 Cisco Systems, Inc. All rights reserved.SNRS v Cisco Network Foundation Protection Introducing Cisco NFP

2 © 2007 Cisco Systems, Inc. All rights reserved.SNRS v Secure Network Foundation Secure Access for Management; Management Plane Protection Lock Down Services and Routing Protocols; Control Plane Protection Data Forwarding Protection; Data Plane Protection

3 © 2007 Cisco Systems, Inc. All rights reserved.SNRS v Tools CPPr Protects the control plane traffic responsible for traffic forwarding: Cisco AutoSecure with rollback functionality Control Plane Protection CPU / memory threshold MPP Protects the management plane from unauthorized management access and polling: MPP 12.4(6)TCisco IOS Release SSH-only access Vty access control list (ACL) Cisco IOS Software login enhancement Role-Based (command-line interface) views Data Plane Protection Protects the data plane from malicious traffic: ACLsFPM Unicast RPF for antispoofing (uRPF) CPP for data traffic QoS

4 © 2007 Cisco Systems, Inc. All rights reserved.SNRS v Summary Cisco NFP protects the network infrastructure. There are several tools used to secure the infrastructure.

5 © 2007 Cisco Systems, Inc. All rights reserved.SNRS v2.03-5