HP HP2-N29 - Questions & Answers

The Advanced DDoS system provides the following types of protection: SYN Proxy -- Protects against SYN floods of the system. An attacker floods a server with malicious connection requests (TCP SYNs) with spoofed source IP addresses, preventing legitimate clients from accessing the server.
References:
http://h20000.www2.hp.com/bc/docs/support/SupportManual/c02586208/c02586208.pdf?jumpid=reg_R1002_USEN(page235)

A physical segment comprises a group of hosts protected by IPS through a pair of physical ports on an IPS device. You can configure traffic management and DDoS filters using physical segments.
References:
http://www.nfwest.com/tp/docs/techd293-tos3-1_ug.pdf
(page 165)d

SMS stands for the Security Management System, which is a central management point for managing different TippingPoint appliances, monitoring events and scheduling reports.
References:
http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp1545.pdf

Digital Vaccine filters
Using HP TippingPoint's Threat Management Center (TMC), the DVLabs team continually searches for emerging vulnerabilities and develops new attack filters to block network attacks. Filter updates provide rapid inoculation against emerging threats. Digital Vaccine filters are delivered at least once per week or on a prioritized basis as critical vulnerabilities are identified; filters can be deployed automatically with no
user interaction required.
References:
http://www.ndm.net/ips/pdf/hptippingpoint/4AA3-3612ENW.pdf
(Digital Vaccine filters)