I mandate, and supply, a router/firewall for every customer. It's cheap and versatile. I'm using the Linksys BEFSR11 units which can be had for mid $40's. Broadcast isolation is a plus.

Rk

At 09:04 PM 11/9/2003, you wrote:
One of the problems I seem to be facing frequently these days is that a
single customer can get a virus and generate tremendous amounts of traffic,
which brings the whole network to a crawl. Normally bandwidth shaping at the
NOC will limit the amount the customer can transmit, due to the Transmission
Control Protocol part of TCP/IP. But if it is something like the Nachi.worm
it is ping packets which do not have transmission control and can be spewed
out at tremendous rates that no bandwidth shaper can control. So what's the
solution to stop these slowdowns and outages caused by these viruses?

A) Reduce the customer's functionality by insisting they use a router or
firewall.
B) Have bandwidth shaping at the CPE.

Personally I prefer B.... but that seems to be expensive, usually.
Smartbridges, it might be something you can include in your Nexus product?

Thanks,
Roger

The PART-15.ORG smartBridges Discussion List
To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname>
To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges)
Archives: http://archives.part-15.org


The PART-15.ORG smartBridges Discussion List
To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname>
To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges)
Archives: http://archives.part-15.org

Reply via email to