FortiDDos DDoS Attack Mitigation Guide - Fortinet

Deploying a Solution
Introduction
A very simple deployment
DDoS attacks pose a huge risk to a company's Internet connectivity and their
prevention can save companies millions of dollars a year, especially for companies that
depend on the Internet as a business platform and for those who the Internet is an
element of their core IT infrastructure.
How do IT managers ensure that their web infrastructure is safe from DDoS attacks?
How do they ensure that they don't get a call from their key customers in the middle of
the night? How do they ensure that they don't have to search through logs to figure out
the attack type and sources and change the router and switch configuration?
The FortiDDoS device is a solution for this, using hardware logic based appliances.
In the sections below, we describe a few typical configurations.
Following diagram shows a simple deployment. In this deployment with a set of
dedicated servers in a co-location environment, a single FortiDDoS appliance is
required. To ensure that there is no connectivity failure under critical failure of the
appliance or power failure, there is a bypass switch. The bypass switch is inline with
the traffic and passes traffic through the FortiDDoS unless there is a failure there.
FortiDDoS DDoS Attack Mitigation Guide
28-100-167076-20120501 18
http://docs.fortinet.com/ • Feedback