Site Protection Profiles
Learn the site protection profiles for ION devices that helps in mitigating
risks.
The
Site Protection Profile (SPP) for ION devices
mitigates risks associated with unchecked network flow generation. This feature allows
you to actively measure and throttle the number of active flows per source IP address to
prevent a single entity from degrading network performance.
The key Site Protection Profiles capabilities are:
- Broad Support: Implement SPP on all hardware and virtual ION devices.
- Automated Incidents: The system generates a
FLOW_LIMIT_PER_SOURCE_EXCEEDED incident when flow counts exceed
your defined threshold (1% to 100%).
- Smart Exemptions: Multicast traffic, scan-app flows, and self-generated ION device
traffic are exempt from throttling to ensure core connectivity.
- Centralized Management: Configure and deploy profiles using Strata™ Cloud
Manager.
