[c-nsp] Any good Cisco (or other vendor) appliances for application server DDoS prevention?

[Scott Granados]

I think the fine folks at Arbor would disagree with this statement.;)

They make some great detection gear. Cisco should be able to help here as 
well although I haven't used their products for this requirement.


----- Original Message ----- 
From: "Artur" <arturnrm at gmail.com>
To: <cisco-nsp at puck.nether.net>
Sent: Monday, December 21, 2009 1:05 PM
Subject: Re: [c-nsp] Any good Cisco (or other vendor) appliances for 
application server DDoS prevention?


> Hello Drew,
>
> Unfortunately there isn't a efficient DDoS mitigation appliance. Simply 
> because, to my knowledge there ins't an appliance able to handle the huge 
> amount of traffic sent by a DDoS attack.
> Only your SP could prevent this from reaching you.
> The only things you could do would be get some redundancy.
>
> cheers
> Artur
>
> On 12/21/2009 5:39 PM, Drew Weaver wrote:
>> Hello,
>>
>> I'm currently searching for a firewall appliance which can also handle 
>> application server DDoS mitigation on a small scale (not network wide).
>>
>> Does anyone know of anything like this from Cisco or any other vendor?
>>
>> I'm aware of the 'huge' network wide products such as CiscoGuard, Arbor, 
>> etc but I am looking for something smaller scale, I just need to be able 
>> to put something in-line between the WAN and a group of servers that will 
>> look for things like 20 hosts on the net opening 1000s requests to the 
>> same URL.. etc
>>
>> Any advice is appreciated.
>>
>> thanks,
>> -Drew
>>
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/