Fortinet FortiDDoS FDD-1500F Network Security/Firewall Appliance

Unlike intrusion and malware attacks, DDoS attackers have learned that they don’t need to attack only end-point servers to shut you down. They attack any IP address that routes to your network: unused IP addresses, Inter-router-link public IP addresses, or Firewall/Proxy/WiFi Gateway public IP addresses.

Cloud-based CDN and DNS-based cloud mitigation cannot protect you from these attacks. What is the impact to your business if your users cannot reach cloud services because your firewall or demarc router public IP is being DDoSed? Your CDN-based web servers may be up but your business is down!

Sophisticated multi-vector and multi-layer DDoS attacks use direct and reflected packets where the spoofed, randomized source IP addresses are impossible to ACL. These attacks are increasingly common as Mirai-style code has morphed into many variants and has been commercialized by providers of “stresser” sites. Anyone can call down large attacks for a few dollars.

To combat these attacks, you need a solution that dynamically protects a large attack surface.

A Different and Better Approach to DDoS Attack Mitigation

FortiDDoS massively parallel machine-learning architecture delivers the most advanced and lowest-latency DDoS attack mitigation on the market today, without the performance compromises normally associated with CPU-based systems. FortiDDoS inspects 100% of both inbound and outbound Layer 3, 4, and 7 packets, to the smallest packet sizes, resulting in the fastest and most accurate detection and mitigation in the industry.

In place of pre-defined or subscription-based signatures to identify attack patterns, FortiDDoS uses autonomous machine learning to build an adaptive baseline of normal activity from hundreds-of-thousands of parameters and then monitors traffic patterns against those baselines. Should an attack begin, FortiDDoS sees the deviation and immediately takes action to mitigate it, often from the first packet.

HIGHLIGHTS | Powerful Parallel Architecture = Flexible, Autonomous Defenses

FortiDDoS protects you from known and “zero-day” attacks without creating local or downloading subscription signatures for mitigation. Other vendors try to conserve CPU real-time by inspecting a relatively small number of parameters at a low sample rate, unless and until an explicit signature is created. FortiDDoS’ massively parallel architecture samples 100% of even the smallest packets, for over 230,000 parameters for each Protection Profile. This method allows FortiDDoS to operate completely autonomously, finding some attacks on the FIRST packet and all attacks within two seconds – broader and faster mitigation than any other vendor or method. There is no need to adjust settings, read pcaps, or add regex-style manual signatures or ACLs in the middle of attacks. While attacks are being mitigated, FortiDDoS continues to monitor all other parameters to instantly react to added or changed vectors.
Product Type: Network Security/Firewall Appliance
Technical Information
Firewall Protection Supported:

• Packet Inspection
• Distributed Denial of Service (DDoS)
• Threat Protection
• Zero Day Event
• Botnet Detection
• DNS Security

Interfaces/Ports
USB: Yes
Network & Communication
Ethernet Technology: 10 Gigabit Ethernet
Network Standard:

• 1000Base-X
• 10GBase-X

Wireless Specifications
Wireless LAN: No
I/O Expansions
Number of Total Expansion Slots: 8
Expansion Slot Type:

• SFP
• SFP+

Management & Protocols
Manageable: Yes
Physical Characteristics
Compatible Rack Unit: 2U
Form Factor: Rack-mountable
Height: 3.5″
Width: 17.2″
Depth: 22.8″
Weight (Approximate): 19.80 lb
Miscellaneous
Country of Origin: Taiwan
Warranty
Limited Warranty: 1 Year