TPS Clusters & Devices

Thunder TPS devices can be registered either as detectors or mitigators. To register the TPS devices, they must be added to the clusters, TPS Detector Group and TPS Mitigator Group. Only the registered devices will be part of detection or mitigation process and are added to the dashboard.

When a detector group is associated to a zone, all the detectors within the group receive xFlow (sFlow or NetFlow) traffic from the edge router for traffic monitoring. If any of the detectors within the group detects an attack or an increase in the configured threshold, it sends an escalation notification to ADO App to find mitigation measures.

The following topics are covered: