Identify and Block Malicious Traffic

Block malicious traffic without compromising your mission-critical and revenue-bearing operations with Cisco Anomaly Guard Module. Residing in Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, the module delivers a powerful, multigigabit integrated solution for defending online applications and businesses, data centers, and the overall network infrastructure against increasingly complex and elusive distributed denial of service (DDoS) attacks.

The Cisco Anomaly Guard Module uses complex antispoofing, anomaly recognition, antizombie, and dynamic filtering algorithms to differentiate between legitimate traffic and attack traffic, at multigigabit speeds to stop the broadest range of DDoS attacks.

Capable of processing attack traffic at 3 Gbps line rates, the Cisco Anomaly Guard Services Module's anomaly recognition engine identifies and mitigates all types and sizes of DDoS attacks, including:

• TCP-based attacks
• UDP-based attacks
• HTTP attacks
• DNS attacks
• SIP (VoIP) attacks
• Botnet and zombie attacks

Up to four guard modules can be combined in one chassis to protect against attack sizes of 10Gbps or more.

The module can be deployed in a powerful "on-demand" scrubbing mode, selectively diverting and processing only the traffic that is destined for the targeted resources under attack, after receiving an alert about the attack.