Floodgate-SNMP™
Overview
Floodgate-SNMP™ the industry’s first SNMP burst management solution, provides threhold-based filtering to protect your SNMP manager from a flood of SNMP traps. Floodgate-SNMP applies user defined thresholds to detect and block a flood of SNMP packets. Floodgate-SNMP is available as a network appliance or as a server application for Linux, BSD or Solaris.
Protection from SNMP Trap Floods
SNMP flood conditions can result from a single or multiple network element flooding the network with traps, a network outage affecting many network elements, or cascading failures. SNMP trap floods can result queue overflows, log file overflows, dropped traps or processing delays as the SNMP manager processes through the flood of (often redundant) SNMP traps.
With Floodgate-SNMP traffic from any network element that begins flooding the network with traps is automatically blocked until the traffic from that network element no longer exceeds the low water threshold. Traffic from all other network elements is not blocked.
Floodgate-SNMP provides:
• User defined thresholds for enabling and disabling filtering.
• Event logging – all threshold crossings are logged to file.
• Web interface for configuration and reporting.
• Real-time filtering – enables and disables filtering in real time based on network traffic.
• IP address based filtering. Blocks packets only from those IP addresses that are flooding the SNMP manager with packets.
Features
• onfigurable high-water and low-water thresholds.
• Configurable interval length.
• All threshold crossings are logged.
• Available as a network appliance or server application for Linux, BSD or Solaris.
• Drops traps from any IP that exceeds high water threshold.
• Forwarding re-enabled when the number of packets per interval drops below the low water threshold.
• Supports SNMP v1, v2 and v3.
• Transparent forwarding. The Source IP in the forwarded trap is the IP address of the network element that generated the trap, not of the machine on which Floodgate-SNMP is running.
Threshold-based Filtering
Floodgate-SNMP provides protection from SNMP trap floods without having to reconfigure your firewall settings or take manual action to block the traffic. Only traffic from the offending IP addresses is block allowing valid network traffic to be processed without interruption.