FortiDDos DDoS Attack Mitigation Guide - Fortinet

More documents

Recommendations

Info

A sample matrix for solution comparison Table 1: Feature matrix for DDoS solution comparison (Continued) Layer 3 Floods Handled Layer 4 Floods Handled Layer 7 Floods Handled Realtime diagnostics Visibility, ACLs, Bandwidth Controls Traffic and Event Analysis Reconnaissance and Header and State Anomaly Prevention No. of Virtual Partitions No. of Networks/ Partition Aggregate Throughput Simultaneous Connections Session Setup/Teardown Rate SYN Flood Handling capacity Latency DDoS Attack Mitigation Response Time Physical Interfaces (number and types) Redundancy Propgate Link State Change (PLSC)/ Link Down Synchronization Chassis Field Upgradability Management Centralized Event Reporting Audit and Access Trails Links Protected Power Supply Hard Disk Space (GB) Interface speed Mbps Packets per second handling capability under attack Attack Mitigation Time Dark Address Subnets (for blocking continents, countries, subnets) Non-tracked Subnets (for whitelisting networks) No. of Sources monitored No. of Destinations monitored No. of Concurrent Connections monitored No. of concurrent three-way handshakes monitored No. of TCP/UDP ports, ICMP type/code combinations monitored No. of HTTP URLs, cookies, user-agents, hostnames and referers tracked FortiDDoS DDoS Attack Mitigation Guide 28-100-167076-20120501 38 http://docs.fortinet.com/ • Feedback
Conclusion Conclusion Buying a DDoS attack mitigation solution for your data center can be a daunting task, but it is made easier by being properly prepared. That means taking future growth and features into account. There are many decisions to make when you start to evaluate the solutions. In this chapter, I have discussed just a few of the items you should consider. There is no single perfect DDoS attack mitigation appliance. Each product has strengths and weaknesses, and after you’ve evaluated your needs and decided which features are most important for your organization, you should carefully compare the technical specs and data-sheets of different products to determine which meet your own needs and budget the best. FortiDDoS DDoS Attack Mitigation Guide 28-100-167076-20120501 39 http://docs.fortinet.com/ • Feedback
Page 1 and 2: FortiDDoS DDoS Attack Mitigation Gu
Page 3 and 4: Table of Contents Introduction.....
Page 5 and 6: independent devices ...............
Page 7 and 8: Introduction Defining DDoS attacks
Page 9 and 10: Virus infections, botnets and distr
Page 11 and 12: Myths and realities about DDoS atta
Page 13 and 14: Anti-DDoS appliances Anti-DDoS appl
Page 15 and 16: Things to look for in Anti-DDoS equ
Page 17 and 18: Support for IPv6 will become import
Page 19 and 20: Source rate limiting Source rate li
Page 21 and 22: Botnet Attack Mitigation Overview o
Page 23 and 24: Can you do the same processing in C
Page 25 and 26: A very simple deployment Figure 4:
Page 27 and 28: Typical deployment for an internet
Page 29 and 30: DDoS and SaaS Model for E-Commerce
Page 31 and 32: Testing a Mitigation System Introdu
Page 33 and 34: Attacks to test functionality and p
Page 39 and 40: Conclusion Conclusion Spoofed ICMP
Page 41 and 42: Virtual partitioning and multiple p
Page 43: Role based management and audit tra

FortiDDos DDoS Attack Mitigation Guide - Fortinet

Create successful ePaper yourself

Delete template?

Save as template?