Sip Denial Of Service (Dos) Attack Prevention - Cisco ASR 5000 series Product Overview

Hide thumbs Also See for ASR 5000 series:

Table of Contents

▀ Features and Functionality - Base Software

SIP Denial of Service (DoS) Attack Prevention

The A-BG provides a scalable proxy network and a distributed Network Address Translation (NAT) network which

effectively mitigates DoS attacks.

Prevents a variety of DoS attacks specific to CSCF and SIP technology.

SIP Intelligence at the Core

The SCM provides operators with an easy on-ramp for deploying SIP-based subscriber services while supporting

various network control operations that provide the necessary intelligent control to insure a robust, carrier-class

subscriber experience is achieved in this always changing multimedia environment.

When integrated into Cisco's session-aware Home Agent or GGSN platform, the SCM becomes the first SIP hop in the

network, allowing operators to monitor and control all SIP-based sessions and execute additional value-added functions.

As the logical anchor point within the packet core, the SCM improves the user experience with device and location

independence, and enhances subscriber control and policy enforcement with faster, more intelligent decisions for

multimedia services.

Furthermore, as Fixed Mobile Convergence takes hold, it will be especially important to incorporate the SCM in the

packet core in order to achieve mobility and voice continuity between multiple access networks (3G, WiFi, WiMAX,

Figure 148. Cisco Integrated Session Control Manager

SIP Large Message Support

Large notify contains information about multiple users in one message, which reduces the number of SIP messages in

the network. Large SIP messages can be sent on UDP if the endpoint can support fragmentation; otherwise, UDP to

TCP switching can be used to transport large messages intact.

▄ Cisco ASR 5000 Series Product Overview

Session Control Manager

Session Control Manager Overview