DDoS Gateway Protection

Distributed Denial of Service attacks are getting bigger and more sophisticated. Notorious for having crippled several government and business networks, DDoS attacks can cost large enterprises $10,000 to $100,000 per hour. These massive losses can be due to:

• Unavailability of business-critical data
• Disruption of business processes
• Lost opportunities
• Penalties for failure to meet SLAs
• Damaged reputation
• Aside from the sheer size of a single Distributed Denial of Service attack, what makes this threat now harder to mitigate are the different types and methods used during the attacks.

From the traditional ICMP and SYN floods, to application-level floods and slow read attacks, to the recent Distributed Reflector (DRDoS) attacks with over a dozen varieties of attacks aimed at different layers (mostly Layer 3 to Layer 7) of the protocol stack, it can be quite a challenge to establish some form of DDoS protection.

There are a few effective DDoS mitigation techniques. These defensive methods require a combination of 1) the right tools and 2) IT security experts who know how to protect against and respond to DDoS.

One of these tools is F5’s highly advanced on-premise and cloud service hybrid DDoS attack protection solution. F5’s on-premise solution can carry out DDoS detection and mitigation on mid-volume, SSL, or application-targeted attacks, while its cloud-based Silverline DDoS service can stop volumetric attacks before they can get to your networks.

F5 Silverline is backed by fully redundant and globally distributed data centers and scrubbing centers that are built to stop DDoS attacks in their tracks. Silverline has an attack mitigation bandwidth capacity of over 1.0 Tbps and a scrubbing capacity of 2.0 Tbps. That’s more than enough to defend against the largest known DDoS attacks, which were about 300 to 400 Gbps.

The information security systems professionals and solution architects at Adapture are not only skilled in DDoS protection solution. Decades of experience in IT security have taught us how to protect IT infrastructure from various types of DDoS attacks.

We can:

• Look into your existing network (including firewalls, switches, routers, and IPS) and architect them to be more resilient against DDoS attacks.
• Install, configure, and administer (or train in-house staff to administer) F5 on-premise solutions and Silverline.
• Perform incident response or formulate an incident response plan.
• Train in-house IT staff to detect and respond to an attack.