FortiDDos DDoS Attack Mitigation Guide - Fortinet

Can you do the same processing in CPU based systems?
Can you do the same processing in
CPU based systems?
CPU based systems get overwhelmed under pressure of botnet
attacks. They cannot handle the amount of onslaught that botnets
create. A hardware logic based system is designed from ground-up
to process every packet without losing steam. The logic processes
packets in a massively parallel architecture ensuring that all blocks
work together to deliver the allow/deny result quickly.
Blocking botnet attack packets using
FortiDDoS appliances
FortiDDoS appliances are implemented using hardware logic and
therefore can process all packets at line rate. They have visibility and
control at layer 7 HTTP headers and can process many parameters
simultaneously without slowing down. The hardware logic can
monitor millions of continuously varying parameters per VID and
there can be up to 8 VIDs in a system.
The monitoring is associated with adaptive thresholds which are set
based on your traffic and therefore if the thresholds exceed, the
botnet is caught easily and blocked for a period of time configured by
you.
Conclusion
Designing a security strategy for networked assets can be a daunting
task. New threats demand new types of security elements.
Traditional firewalls and content filters play an essential role in any
network strategy, but neither can adequately defend against ratebased
attacks such as those that are created using botnets. These
systems are now available and extremely affordable, putting true
zero-hour prevention within the reach of all network budgets.
FortiDDoS DDoS Attack Mitigation Guide
28-100-167076-20120501 17
http://docs.fortinet.com/ • Feedback