Welcome to Wanguard 8.0 User Guide!

Contents

• Copyright & Trademark Notices
• Traffic Monitoring and DDoS Mitigation with Wanguard
  • Key Features & Benefits
  • Software Components
• Choosing a Method of Traffic Monitoring and DDoS Detection
  • Comparison between Packet Sniffing, Flow Monitoring, and SNMP Polling
• Choosing a Method of DDoS Mitigation
  • DDoS Mitigation with Wanguard Filter
  • Technologies used by Wanguard Filter for DDoS mitigation
  • Packet Filter Deployment Scenarios
• System Requirements and Software Installation
  • System Requirements
  • Software Installation
  • Opening the Console
  • Licensing Procedure
  • Quick Configuration Steps
• Basic Concepts of Wanguard Console
  • Side Region
  • Central Region
  • South Region
  • Upper Menus
• Configuration » General Settings » Graphs & Storage
  • Sensor and Applications Graph Troubleshooting
  • IP/Subnet and Profiling Graph Troubleshooting
  • AS and Country Graph Troubleshooting
• Configuration » General Settings » Custom Decoders
• Configuration » General Settings » Anomaly Detection
• Configuration » General Settings » Anomaly Mitigation
• Configuration » Network & Policy » Response
  • Extending the Built-in Actions
• Configuration » Network & Policy » IP Zone
• Configuration » Servers
  • Distributing the Software over Multiple Servers
  • Server Troubleshooting
• Configuration » Components » Packet Sensor
  • Packet Sensor Troubleshooting
  • Packet Sensor Optimization Steps for Intel 82599
• Configuration » Components » Flow Sensor
  • Flow Sensor Troubleshooting
• Configuration » Components » SNMP Sensor
  • SNMP Sensor Troubleshooting
• Configuration » Components » Sensor Cluster
• Configuration » Components » BGP Connector
  • BGP Connector for Quagga
  • BGP Connector for ExaBGP
  • BGP Connector Troubleshooting
• Configuration » Components » Packet Filter
  • Packet Filter Troubleshooting
• Configuration » Components » Flow Filter
• Configuration » Components » Filter Cluster
• Configuration » Schedulers » Scheduled Reports
• Configuration » Schedulers » Event Reporting
• Configuration » General Settings » Outgoing Email
• Configuration » General Settings » User Management
• Configuration » General Settings » User Authentication
• Reports » Tools » Anomalies
  • Active Anomalies
  • Anomaly Archive
  • Anomaly Overview
  • Anomaly Distribution
• Reports » Tools » Firewall
  • Active Firewall Rules
  • Filtering Rule Archive
  • Filtering Rule Distribution
• Reports » Tools » Routing
  • Active BGP Announcements
  • BGP Announcement Archive
  • BGP Connector Events
• Reports » Tools » Flows
  • Flow Records
  • Flow Tops
• Reports » Tools » Packets
  • Active Packet Dumps
  • Packet Dump Archive
• Reports » Devices » Overview
• Reports » Devices » Sensors
  • Sensor Dashboard
  • Sensor Graphs
  • Sensor Tops
  • Sensor Events
  • Anomaly Overview
  • AS Graphs
  • Country Graphs
  • Flow Records
  • Flow Tops
• Reports » Devices » Filters
  • Filter Dashboard
  • Filter Graphs
  • Filter Events
  • Filter Instances
  • Filtering Rules Archive
  • Filtering Rules Distribution
• Reports » Dashboards
• Reports » IP Addresses & Groups
  • IP Dashboard
  • IP Graphs
  • IP Accounting
  • Anomaly Overview
  • Profile Graphs
  • Flow Records
  • Flow Tops
• Reports » Servers
  • Console / Server Dashboard
  • Console / Server Graphs
  • Console Events
  • Server Events
  • Server Commands
• Appendix 1 – DPDK Configuration
  • Application Workflow
  • DPDK Capture Engine Options
  • DPDK Configuration Example
• Appendix 2 – Configuring NetFlow Data Export
  • Configuring NDE on older IOS Devices
  • Configuring NDE on a CatOS Device
  • Configuring NDE on a Native IOS Device
  • Configuring NDE on a 4000 Series Switch
  • Configuring NDE on IOS XE
  • Configuring NDE on IOS XR
  • Configuring NDE on IOS-XE Everest
  • Configuring NDE on a Juniper Router (non-MX)
• Appendix 3 – BGP Black Hole Guideline for Wanguard Sensor
  • Understanding of RTBH using Wanguard
  • Black-holing on upstream
  • Interaction with traffic diversion / Wanguard Filter
• Appendix 4 – Network Integration Guideline for Wanguard Filter
  • Understanding the Traffic Diversion Method
  • Understanding the Traffic Forwarding Methods
• Appendix 5 – Conditional Parameters & Dynamic Parameters
  • Anomaly Parameters
  • Time Parameters
  • Overall Traffic Parameters
  • Filter Parameters
  • Filtering Rule Parameters