Chapter 4 Zone Configuration

Zone Detection

Note that the Detector enables the use of an asterisk (*) as a wildcard denoting either of the following options:

–All of the Detector’s zones. Issuing detect * means beginning detection for all of the Detector’s zones.

–A wildcard denoting zone names (i.e. OBL*).

2.Choose ENTER.

Guard-Protection Activation Forms

The Detector enables the user to apply different Guard-protection forms designed to save Guard-protection resources and better focus on the zone detection and protection requirements. Those protection forms range from assuming protection over a particular zone (i.e. a specific server) that is a part of an overall zone (i.e. a protected network environment) to assuming protection over all of the zones of the overall zone. The Detector’s Guard-protection activation forms are the following:

•Τhe Detector activates the Guard to assume protection over the overall zone whenever a traffic abnormality is detected. This strategy is recommended when the overall zone consists of intra-related zones that cannot be risked.

•Τhe Detector activates the Guard protection over a particular zone once a traffic abnormality is traced as destined to that particular zone. This is recommended when the overall zone consists of unrelated particular zones. This is since the user may want to assume protection per an attacked zone and not spend valuable protection resources over the overall zone.

•Τhe Detector activates the Guard protection over a specific zone once a traffic abnormality is traced as destined to that specific zone. The Detector would also activate the Guard protection over the overall zone once the detected abnormality cannot be associated with a particular zone. This strategy is recommended when the overall zone consists of highly related particular zones. This is since the user may want to avoid a situation in which a targeted zone may inflict damage on the overall zone.

To activate the Guard-protection forms perform the following:

1.From the following sample Zone command group level type the following:

admin@DETECTOR-conf-zone-<zone-name># protect-ip-state{all-zone

only-dest-ip policy-type}

 

Cisco Traffic Anomaly Detector User Guide

4-20

OL-6109-01

Page 19 Page 21
Page 20
Image 20
Cisco Systems OL-6109-01 manual Guard-Protection Activation Forms
Page 19 Page 21

OL-6109-01 specifications

Cisco Systems OL-6109-01 is a versatile online training course designed to equip IT professionals with the knowledge and skills to prepare for the Cisco Certified Network Associate (CCNA) certification. This specialized program introduces participants to a wide array of networking concepts, addressing critical areas that are foundational for careers in networking and IT.

One of the main features of the OL-6109-01 course is its comprehensive curriculum that covers essential networking topics. Participants engage with content focused on building and configuring network systems, including foundational principles of routing, switching, and WAN technologies. This ensures that learners gain both practical skills and theoretical knowledge, making them proficient in handling diverse networking scenarios.

The course also delves into the latest industry-relevant technologies. Cisco's emphasis on the Internet of Things (IoT), cloud computing, and network security is reflected in the training modules. With the ever-increasing demand for network security, OL-6109-01 emphasizes cybersecurity fundamentals, enabling learners to understand potential threats and learn best practices for securing network infrastructures.

An essential characteristic of the OL-6109-01 course is its interactive learning experience. Using a mix of video lectures, hands-on labs, and quizzes, the course fosters an engaging environment for learners. Practical lab exercises allow participants to simulate real-world networking tasks, which enables them to enhance their troubleshooting and problem-solving skills.

Furthermore, Cisco Systems ensures that the OL-6109-01 course aligns with the latest networking trends and technologies. Regular updates to the course content make sure that learners are equipped with current knowledge, preparing them for future developments in the networking field.

In addition to delivering foundational knowledge, the OL-6109-01 course also features preparation tools for the CCNA exam. Practice tests and evaluation metrics help participants assess their readiness, providing a pathway to achieve Cisco certification. Overall, the OL-6109-01 course represents a substantial investment in professional development for anyone looking to advance in the networking domain. Its blend of essential content, modern technologies, and practical practice positions learners for success in a competitive industry.
Top Page Image Contents