0

In our office we're running a Cisco ASA 5510 firewall. Is this device enough if we want to protect against DDoS attacks?

What devices (like cisco guard, etc) do you recommend and what's the user experience that you have with those devices?

Regards,

3 Answers 3

1

That depends on how sophisticated the DDoS is and how large your pipe to the internet is. That device is probably not going to give you any real protection to a true DDoS attack and you won't find a device that will. The main way to survive a DDoS is to get behind someone who filters the internet traffic coming to you and who has a massive amount of bandwidth. Companies like Akamai offer such services.

3
  • What about Cisco Guard? they claim to give a DDoS protection
    – Andre
    Feb 21, 2011 at 14:36
  • @Andre That is why I said it depends on how large your connection to the internet is. Unless you have a deal with your internet provider the DDoS traffic is still going to come over your connection to the Cisco box. If the DDoS is exploiting a slow part of your system then the box will help, if it is just filling your internet connection with too much traffic it won't help. Most real DDoS attacks these days use bot farms that just fill your pipe with traffic.
    – carson
    Feb 21, 2011 at 15:39
  • What do you recommend for a "basic" level of protection?
    – Andre
    Feb 21, 2011 at 20:07
2

Anti-DDoS hardware helps. But if the attack is large enough it will take down neighboring routers. When Microsoft was having trouble keeping their site up, they used Akamai.

-1

That depends on the type of attack you are getting.According to my experiences a Fortinet FortGuard 310B
proves good enough for me.It mitigates attacks upto 8Gbps and requests upto 30K.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .