Business Challenge

The demand for Dedicated Internet Access of MAN terminal ordinary business clients (e.g. medium-small enterprises, netbars) and VIP clients (e.g. large enterprises, financial and network service providers) has been keeping a continuous and rapid increase in recent years. With the deepening of competition among operators, access users have an increasingly higher demand for Service Level Agreement (SLA). The increasing development of DDoS utilities makes DDoS attacks easy to launch. Many attacks aiming at illegal commercial benefits, whose targets are primarily hit to commercial access clients of MAN present. Its hazards include: Core businesses servers such as e-commerce websites are prone to DDoS attacks Link bandwidth resources of access clients are seriously occupied by DDoS and other spam traffic. Overload of access devices results in unavailability of other access users

Solutions
NSFOCUS has been focusing on how to defend DDoS traffic flow in the MAN environment all the time. Taking advantage of the COLLAPSAR Anti-DoS system, which enjoys favorable fame in the security industry, NSFOCUS has implemented the solution of NC²M, NSFOCUS Collapsar CleanMatrix. The NC solution could guarantee the smooth operation of a core network by adopting multi-layered attack flow detection, protection and sanitization mechanism, with which COLLAPSAR could detect all varieties of attack flow in the background flows timely, and sanitize malicious flow from the network by means of the traffic diversion technique in a bypass deployment.

In a netbar and DIA protection solution, a 1000M Collapsr will be deployed in a bypass mode at each aggregation node within the protected zone to implement DoS protection for its subordinated zones. As the network status of different nodes in MAN is varied, the Collapsar device must be deployed according to the specific circumstances of clients. Collapsar Defender and Probe can be deployed flexibly to fit for different network typology status as long as they are deployed at the aggregation switch, core switch and router.

Fig. NSFOCUS Collapsar CleanMatrix: SP Netbar Access Traffic Sanitization

Advantages
NC²M (NSFOCUS Collapsar CleanMatrix) has the following advantages for the traffic sanitization in a MAN core network.

• Protection from special anti-DDoS device: Wide range of customers and complicated businesses of MAN access clients, commercial competition and other factors make multiple kinds of large traffic DDoS attack easy to launch. NSFOCUS Collapsar Anti-DoS System could fully protect against the attacks.
• Protection oriented to operators: The problem of link being occupied by DDoS traffic cannot be solved simply by deploying a anti-DoS device at the access device of a MAN client. To protect the bandwidth of access clients in a real sense and increase its utilization, the anti-DoS device must be deployed at the access layer of the SP MAN.
• Share or hire: A single medium-small company or netbar is not likely to buy a Collapsar device. However, it may share or hire the anti-DDoS service provided by an SP.

Why Choose NSFOCUS
Founded in April 2000, NSFOCUS Information Technology Co., Ltd.(NSFOCUS) is one of the earliest hi-tech enterprises in China that is dedicated to network security.

Powered by its years of security vulnerability research and security product development capacity, NSFOCUS provides security research reports for those internationally well-known vendors including Microsoft, Sun, Cisco, HP, etc., as well as top-level security products and comprehensive security solutions for government agencies, telecom, financial, energy and other industries, in an attempt to help the customers build a reliable and peaceful network environment. NSFOCUS has powerful security service capability and develops abundant long term customers.

We have put forward the NSPS security service system early in 2000, and taken the lead in passing the ISO 9001 certifications in the network security industry.

The security products and solutions of NSFOCUS cover Network Intrusion Detection/Prevention System, Remote Security Assessment System, Anti-DoS System, Security Audit System, Intranet Security Management System, Network Behavior Anomaly Detection System, and security solutions for various applications in the government, army and enterprises network, as well as in MAN telecom network.