Protecting against DDOS- Access Lists vs. TCP Intercept

[bhogbin]

What is the consensus for protecting against Distributed Denial of Service attacks? Does TCP Intercept offer any protection against Trinoo, Stacheldraht, etc?

Are there any positives and/or negatives to using TCP Intercept over Access Lists?

Thanks,

Brian O. Hogbin

brian_hogbin@hotmail.com

[jmia]

Hi Brian,

For your answers please download the following document for NSA: http://www.nsa.gov/snac/index.html

under cisco security recomendation.

Thanks - Jay, PS. It is a big PDF file 200+ pages (pdf file).