Solutions DDoS Protection Use Cases Automated DDoS Protection for ISPs

Automated DDoS Protection for ISPs

In the world of application-driven business, DDoS attacks have become an especially worrisome tool of cybercriminals. When anyone can launch DDoS for a few bucks, it is not surprising that they are growing in numbers, frequency and scale rapidly. How to keep important systems always available for business? By using modern flow monitoring technology and fighting DDoS as close to the attack source as possible. In the backbones.

Whitepaper

Flow-based DDoS detection and mitigation for ISPs and datacentres

Many new threats have appeared during the past few years. But the number one concern for companies all around the world has prevailed – brute-force volumetric attacks. Attacks are still increasing in magnitude leaving organisations unarmed and seeking help. How to face a 100G size attack when no organisation has the capacity to absorb that? What should be done?

The most effective answer to this challenge is to stop DDoS before it reaches its goal and overloads the target application. Therefore Internet Service Providers strengthen their networks by advanced DDoS detection and mitigation capabilities.

Such solutions are based on the utilization of network traffic statistics and absolute network visibility that deliver:

fast, efficient and an easy-to-use way of attack detection,
appropriate attack characteristics to mitigate an ongoing attack,
advanced utilization of always true network flow-data statistics (NetFlow, IPFIX) from routers or dedicated network probes,
enough information to decrease the impact of DDoS, avoid damaging reputation and financial losses.

Flowmon DDoS Defender for providing DDoS Protection as a Service

Flowmon DDoS Defender is a scalable flow-based DDoS detection and mitigation solution for internet service providers and datacentre operators. With capabilities such as fast and automatic detection, support for high-speed networks (even 100G), several deployment scenarios and universal traffic diversion capabilities, the Defender fits the needs of large demanding networks. With full support for multi-tenant environments to protect various customers, network segments, services, etc. it is also ideal for ISPs and Telcos who offer DDoS protection as a service to their customers (MSP).

Flow-based anti-DDoS intelligence

Observe your network and immediately detect/mitigate volumetric attacks with powerful flow monitoring technology. Use flow data from any source, define the rules, predict the traffic volume with dynamic baselines, utilize artificial intelligence of adaptive thresholds and detailed reporting to protection.

Universal deployment scenarios

Deploy DDoS Defender as a standalone appliance or together with any of the major mitigation services (Scrubbing centres) or a special out-of-band mitigation device.

Scalability and cost-efficiency

Are you running a large network with multiple partners and bandwidth of tens of gigabits per second? Utilize DDoS Defender with any out-of-band mitigation appliance with such scalability and cost-efficiency that in-line deployments can not provide.

Multi-tenant ready

Protect critical applications of your customers, particular network segments, services, etc.

Quick time-to-value

In a matter of minutes you will have up and running an active DDoS defence. Without any configuration changes, topology changes or any additional investments in the network.

"We want to deliver the best quality services to our customers. DDoS Defender is a reliable solution which helps us a lot in reaching this goal. Thanks to the Defender, DDoS attacks are not a threat to our customers anymore.“

Jiri Stembera, Head of Data & IP Network Department at ČD - Telematika