Distributed Denial of Service (DDoS) attacks continue to remain a top threat to IT security and have evolved in almost every way to do what they do best: shut down your vital online services. Never has a problem been so dynamic and broad-based without being tied to one particular technology.
You’re protected from known attacks and from the unknown “zero-day” attacks as FortiDDoS doesn’t need to wait for updated signature files. FortiDDoS also handles attack mitigation differently than other solutions. In other DDoS attack mitigation appliances, once an attack starts, it’s 100% blocked or traffic is rate-limited to the destination IP which has the negative affect of also rate-limiting “good” traffic, until the threat is over.
If an event is mistakenly matched to a signature creating a “false positive”, then all traffic is affected, requiring intervention. FortiDDoS uses a more surgical approach, by monitoring normal traffic and then using a reputation penalty scoring system, to rate Source IP addresses that are “good” and others that are causing the problem. FortiDDoS blocks the offending Source IP addresses, then repeatedly reevaluates the attack at user defined intervals.
If the offending Source IP addresses continue to be a persistent threat for each of these reevaluation periods, their reputation penalty score will increase and the blocking period extended until the attack subsides. Destination IPs are seldom rate-limited and valid Source IPs are always allowed.
8 pairs x 10 GE SFP+ DDoS Defense Ports (can also support GE SFPs), 2x GE RJ45 Management Ports, Dual AC Power Supplies. Includes 480 GB SSD storage and 2x 10 GE SR SFP+. 18 Gbps throughput. Supports Advanced DNS Mitigation
