Threat Defense Solution and Managed Services

Threat Defense Solution and Managed Services, delivered in Enterprise Class Teleworker (ECT) Solution addresses the ongoing network monitoring, threat detection and classification, threat information distribution controllers, and rules engine and threat mitigation action and services provided to the impacted nodes in the network. This solution maintains constant network security, recognizes internal and external threats, and responds to any threats without alerting users to the issues. Tools such as Cisco Security Monitoring, Analysis and Response System (CS-MARS), and Cisco Guard/Detector (or Peakflow X/SP) facilitate the monitoring, detection and classification of threats. Threat Information Distribution Protocol (TIDP) controllers and TIDP Mitigation Services (TMS) consumers are the work together to provide the transport and rules distribution mechanism for threat mitigation services using Dynamic Access Control Lists, Intrusion Prevention System, and Optimized Edge Routing( direct services.

The ECT-enabled CPE (ie: the remote router) can be configured to upload syslog messages and NetFlow entries to CS-MARS. CS-MARS / TIDP controllers can poll ECT enabled CPE to detect any triggered IPS signatures and provide Threat Mitigation by pushing these IPS signatures dynamically onto other routers within the network to prevent further attacks on the network.

Cisco Enterprise Class Teleworker Solution Overview