[c-nsp] PIX-525 attack performance

[Roland Dobbins]

On Nov 18, 2007, at 4:30 PM, Joel M Snyder wrote:

> There are lots of parts there, but you can probably figure out  
> which ones are
> important to you.

It's important to note that firewalls are policy-enforcement devices,  
not DDoS-mitigation devices; to mitigate the effects of  DDoS, it's  
recommended that one make use of reaction techniques such as S/RTBH  
and QPPB, and/or dedicated DDoS mitigation devices such as the Guard.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at cisco.com> // 408.527.6376 voice

	Culture eats strategy for breakfast.

            -- Ford Motor Company