Comprehensive DDoS threat coverage in a simple, dedicated appliance with native, cloud—based scrubbing services. More sophisticated attacks demand more sophisticated protection. Today’s DDoS attacks are rapidly becoming more severe, more sophisticated, and more complex. Now, an attack will likely blend different attack vectors that are run simultaneously, designed to find the weakest link in your infrastructure—whether it’s your network devices, your applications, or your network bandwidth—and then exploit it. Different types of attacks are best handled different ways. And, because you can’t be sure what type of attack will be leveled at your business, you have to protect against all of them or leave your apps and data vulnerable. Many DDoS attacks aim to render a service unavailable by overwhelming it using multiple sources. All connections look OK. It’s only getting easier  to launch an attack (people can get paid for participating in an attack, IoT devices can become attack bots, etc.) Attacks are more sophisticated and targeted: For example, multi—vector attacks leveraging Transport Layer Security connections and malware planted in IoT and other devices to create botnets.

It’s essential to defend against multiple attack types that target the weakest link, whether that’s your network, WAN bandwidth, or applications. Multiple vulnerability vectors have spawned multiple point solutions. Network layer (or flood) attacks are best handled at the edge of the network, protecting the assets that are behind the firewall. But the usual defense of black holing or rate limiting can cripple the connections of legitimate users. Application layer attacks, which are more sophisticated and targeted, require SSL decryption in front of app servers inside the network. Typical solutions are blind to SSL traffic and dependent on their placement in the network. WAN bandwidth saturation shuts down your connection to the Internet. So any on—premises defense is useless against it. Simply put, traditional point DDoS solutions are only partially effective because they focus solely on one type of attack. DDoS Hybrid Defender is the only multi—layered defense that protects against blended network attacks and application attacks, while enabling SSL decryption, anti—bot, and detection methods. It delivers the highest performance with line rate capabilities and without impacting legitimate traffic.

F5 Networks DDoS Hybrid Defender

In contrast with competing products, DDoS Hybrid Defender™ provides comprehensive protection for both the data center and the application. Here are a few reasons why it’s more effective than the competition. Out—of—band monitoring was fine when DDoS attacks weren’t so sophisticated, but now it’s too little, too late, especially when trying to protect against Layer 7 attacks. Sophisticated attacks require a lot of processing. Other solutions don’t have the performance to simultaneously decrypt SSL, process traffic, and mitigate attacks in—line. DDoS Hybrid Defender™ delivers a multi—layered defense with a dual—mode appliance that supports both out—of—band and inline mitigation. Identifies good vs. bad traffic using behavioral attack detection with the ability to sustain DDoS under high connect rates and volume. Enables a faster response to volumetric and blended attacks with a dedicated solution that stops attacks on your data center immediately and integrates with Silverline™ cloud services for sub—second off—loading. It also features unique Layer 7 application coverage that stops threats hidden behind DDoS attacks without impacting legitimate traffic.

Sophisticated DDoS Protection

Multiple vulnerability vectors have spawned multiple point solutions. Network layer (or flood) attacks are best handled at the edge of the network, protecting the assets that are behind the firewall. Application layer attacks, which are more sophisticated and targeted, require SSL decryption in front of app servers inside the network. Typical solutions are blind to SSL traffic and dependent on their placement in the network. WAN bandwidth saturation shuts down your connection to the Internet. So any on—premises defense is useless against it.  In contrast with competing products, F5 Networks DDoS Hybrid Defender™ provides comprehensive protection for both the data center and the application. Out—of—band monitoring was fine when DDoS attacks weren’t so sophisticated, but now it’s too little, too late, especially when trying to protect against Layer 7 attacks. Sophisticated attacks require a lot of processing. Other solutions don’t have the performance to simultaneously decrypt SSL, process traffic, and mitigate attacks in—line. DDoS Hybrid Defender™ delivers a true multi—layered defense with a dual—mode appliance that supports both out-of-band processing and inline mitigation.

A New Depth Of Defense

F5 Networks DDoS Hybrid Defender™ is the only multi—layered defense that protects against blended network attacks and sophisticated application attacks, while enabling full SSL decryption, anti—bot capabilities, and advanced detection methods—all in one appliance. It also delivers the highest performance with line rate capabilities and without impacting legitimate traffic. Detect and protect against simultaneous attacks from layer 3 through Layer 7. Integrated on—premises device with F5 Networks Silverline™ cloud—scrubbing service, protecting against WAN bandwidth saturation attacks. Protection against even the largest DDoS attacks at line rate. Sub—second attack detection, threshold based—packets per second, transactions per second, requests per second—and behavioral and signatures—based attack detection. Baseline the traffic to automatically size the configuration. SHUN, RTBH, BGP steer, and F5 Networks Silverline™ cloud—based services. Deployment options include inline, out—of—band, TAP, and bump—in—wire. Immediate protection—at line rate—against known bad actors and sharing that intelligence between on—premises deployments and the cloud.

Features And Benefits

Designed to integrate with the F5 Networks Silverline™ DDoS Protection cloud—based service, F5 Networks Herculon DDoS Hybrid Defender™ ensures fast activation of on—demand, cloud—based scrubbing to mitigate bandwidth saturation attacks. Unlike other hybrid DDoS approaches, the F5 Networks™ solution is seamless, transparent, and managed to reduce errors and IT overhead. It enables a smooth and immediate transition back to on—premises protection once attack traffic has subsided to normal levels. F5 Networks Herculon DDoS Hybrid Defender™ prevents saturation of inbound pipes by redirecting volumetric attack traffic to Silverline cloud services. In addition, information from all DDoS attacks discovered and mitigated by on—premises devices can be automatically communicated to F5 Networks Security Operations Centers™ for expert research and global threat analysis. This information drives standard signature updates and security enhancements, while enabling accurate discovery of future threats based on trend analysis. F5 Networks Herculon DDoS Hybrid Defender™ eliminates concerns with deployment, where network architectures are more complex.