Explore Cisco
How to Buy

Have an account?

  •   Personalized content
  •   Your products and support

Need an account?

Create an account

Cisco ASR 9000 vDDoS Protection Solution At-a-Glance

At a Glance

Available Languages

Download Options

  • PDF
    (88.2 KB)
    View with Adobe Reader on a variety of devices
Updated:March 11, 2020

Available Languages

Download Options

  • PDF
    (88.2 KB)
    View with Adobe Reader on a variety of devices
Updated:March 11, 2020

Table of Contents



DDoS Mitigation for you; Security services for your customers

Network traffic surges. Links saturate. Systems overload. Customer complaints flood the call centers. What’s going on? One possibility is a Distributed Denial-of- Service (DDoS) attack. You can avoid this situation with automatic detection and mitigation of DDoS attacks.

Using the Cisco ASR 9000 vDDoS Protection Solution with Netscout Networks Peakflow SP, you can do just that. The DDoS detection technology from Netscout monitors traffic flow in Cisco ASR 9000 Aggregation Services Routers (ASRs), and within seconds of noticing an anomaly, mitigates attacks for terabytes of traffic across multiple points in your network infrastructure.

And you can also use the capability to provide DDoS mitigation services to your customers to increase your revenue and retain customers. The ASR 9000 powers a virtual Peakflow Threat Management System on its Virtualized Services Module (VSM), so you can deliver DDoS mitigation services to market fast.


     Add Distributed Denial of Service (DDoS) protection to Cisco® ASR 9000 deployments with no extra rack space, power, or cooling requirements

     Combine existing Netscout Threat Management System appliances with comprehensive vDDoS protection

     Distribute DDoS protection to the network edge to avoid backhauling traffic across backbones to regional scrubbing centers

     Deliver DDoS mitigation services faster on the ASR’s Virtualized Service Module (VSM)

     Mitigate attacks using Peakflow workflows to protect your availability and manage your Peakflow and vDDoS protection deployments


Detection at the edge

The ASR 9000 vDDoS protection solution unleashes the power of the Cisco ASR 9000 to stop DDoS attacks at the network edge: before attacks can pass into your network consuming critical bandwidth and causing collateral damage to your customers. This approach allows normal traffic to pass uninterrupted and eliminated the need to route attack traffic across your backbone to centralized scrubbing centers for remediation.

Unlike other DDoS mitigation solutions, Cisco ASR 9000 vDDoS protection is a virtualized, network-embedded DDoS mitigation solution. Detection and centralized management take place through the Netscout Peakflow GUI and its workflows.

Increase the ROI of your existing Cisco ASR 9000 router deployments with virtual DDoS protection – of your own network and that of your customers in the form of new services – without needing any additional rack space, power, or cooling.

Next steps

For additional information on ASR 9000, visit Cisco ASR 9000 Series Aggregation Services Router page.

For additional information on the ASR’s DDoS mitigation offering click here.

Our experts recommend

Learn more