F5 云计算技术交流v5.ppt

Layer 7 DoS Proctection – Block application DoS attacks and increase end-user application performance with accurate triggers and automatic controls. This is based on a detection element and three different prevention methods which are applied one after another for in-depth prevention measures and techniques. Brute Force Protection – Detect and mitigate high volume failed login requests. ASM monitors server responses and when it detects multiple login failures related to a Brute Force Attack, ASM slows the requesting browser down. * Ability to send files to AV server for scanning over ICAP protocol DLP:数据泄露防护 * * * Monitors URIs for Server Latency -?ASM monitors and reports the most requested URIs and every URI for server latency. BIG-IP ASM obtains visibility to slow server scripts and troubleshoots server code that causes latency. We basically monitor top accessed pages for a web application, for last hour, last day and last week. For these pages we provide average TPS and average latency.? In addition for every web application, we also provide a list of top accessing source IP address, with TPS and throughput for every IP address.? These monitoring capabilities allow the admin visibility on how the application is being accessed and how it is behaving. * Customers have demanded that we increase the types of things that we do to traffic. What Every Enterprise is asking How do I make my applications run better without rewriting them, or incurring major infrastructure cost and adding significant management overhead? “I need to be as optimized as I can be with minimal resource impacts and as simply as possible.” -Ken Langston, Director of Infrastructure, ASM可以同时提供WAF及IPS/IDS功能。 激活license就可以提升ssl vpn,ssl加速的处理能力。 Packet filter免费，但FW模块与packet filter区别及FW模块是否有收费还需要再次确认。 Ssl, ssl vpn,经过公安部认证，ISCA认证，CFCA认证。 * * Where does F5 fit in the data centre? * 比如：根据识别用户的终端类型，来源位置， * * Where does F5 fit in the data centre? * Transcript: So I think the main message here is tha