BIG-IP DDoS Hybrid Defender
Get comprehensive DDoS protection for your network and at the application layer with flexibility and scale for inline, out-of-band, and hybrid deployments.
Under Attack? Call (866) 329-4253 or +1 (206) 272-7969
Sophisticated Attacks Require Sophisticated Solutions
API Gateways need smart DDoS mitigation capabilities that don’t just stop at L3 and L4. For an API Gateway to not fall victim to a DoS attack, an extremely fast L7 Behavioral DoS solution is necessary to detect threats in near real-time, create sophisticated signatures that can be applied to custom firmware to enable hardware-based DDoS mitigation at line-rate, even in environments greater then 100Gbps.
- Behavioral DoS - In addition to standard security signatures, creates dynamic signatures automatically, enabling faster, more accurate threat identification.
- Line-Rate Mitigation - Sub-second attack detection with geo-tracking, intelligent signaling, and hardware assist, inline or in out-of-band mode.
- Advanced Mitigation Techniques - Configurable rate limiting and blocking, in addition to connection limiting source limiting, and more.
SSL Decryption is needed to inspect L7 attacks for effective attack mitigation. With most volumetric attacks being at layer 3 and 4, they can easily be detected and mitigated. But when it comes to L7 attacks over HTTPS, SSL/TLS decrypt is critical. SSL/TLS decryption can be enabled in seconds, providing necessary visibility to make decisions on how to mitigate an attack or attack campaign.
- SSL/TLS Decryption - Enhances SSL traffic visibility, independent of network placement when application layer attacks strike.
- Proactive Bot Defense - Proactive bot defense that discovers malicious bot activity in advance of attacks.
- Purpose-built - Designed to provide integrated L3-7 protection with DoS mitigation and SSL/TLS decryption.
Product Overview
Hybrid deployment with automated signaling
BIG-IP DDoS Hybrid Defender provides a greater depth of defense. It’s the only multi-layered defense that protects against blended network attacks and sophisticated application attacks, while enabling full SSL decryption, anti-bot capabilities, and advanced detection methods—all in one solution. It also delivers the highest performance with line-rate capabilities and without impacting legitimate traffic. BIG-IP DDoS Hybrid Defender can be deployed on the B4450, i15x00, r10000, and coming soon, also on SmartNICs.
Hardware
Purpose-built, powerful hardware.
As a Service
Through F5 Distributed Cloud Services.
Hybrid
Multiple approaches to suit your unique environment.
Core Capabilities
Sophisticated attacks require sophisticated solutions.
Security and scale
Get stateful security with stateless scale while detecting and protecting against layer 3 through 7 attacks.
Resilient design
High-performance hardware can be coupled with cloud-based scrubbing for unmatched performance.
Operational efficiency
Automated systems allow for greater impact with smaller staff.
Self-tuning
Automatically create dynamic signatures to enable fast, accurate threat identification and blocking.
Built-in intelligence
Our global threat feeds and trend analysis protects against current and future threats.
Flexible deployment
Integrate with your existing network architecture, with in-line, out-of-band, cloud-delivered, or hybrid deployment options.
Visibility
Security dashboards with real-time mitigation results let you know it’s working.
Value
Get the most cost-effective security solutions at scale.
Resources
Featured
BIG-IP DDoS Hybrid Defender is a purpose-built hybrid solution that provides comprehensive L3-7 DDoS mitigation, to prevent network, application, and volumetric attacks.