[c-nsp] Any good Cisco (or other vendor) appliances for application server DDoS prevention?

[Tony Varriale]

You didn't point out anything, didn't mention capability and didn't mention 
target market.

tv
----- Original Message ----- 
From: "Artur" <arturnrm at gmail.com>
To: <cisco-nsp at puck.nether.net>
Sent: Monday, December 21, 2009 4:05 PM
Subject: Re: [c-nsp] Any good Cisco (or other vendor) appliances for 
application server DDoS prevention?


> As far as I know Arbor does great stuff again's DDoS but for SP 
> environments, and as I did pointed out, are the only one really capable to 
> mitigate a DDoS attack.
> For enterprise the only way to do it is with good design.
>
> On 12/21/2009 7:15 PM, Tony Varriale wrote:
>> You may want to contact Arbor since they have a business model based on 
>> what you claim doesn't exist.
>>
>> tv
>>
>>
>> ----- Original Message ----- From: "Artur" <arturnrm at gmail.com>
>> To: <cisco-nsp at puck.nether.net>
>> Sent: Monday, December 21, 2009 3:05 PM
>> Subject: Re: [c-nsp] Any good Cisco (or other vendor) appliances for 
>> application server DDoS prevention?
>>
>>
>>> Hello Drew,
>>>
>>> Unfortunately there isn't a efficient DDoS mitigation appliance. Simply 
>>> because, to my knowledge there ins't an appliance able to handle the 
>>> huge amount of traffic sent by a DDoS attack.
>>> Only your SP could prevent this from reaching you.
>>> The only things you could do would be get some redundancy.
>>>
>>> cheers
>>> Artur
>>>
>>> On 12/21/2009 5:39 PM, Drew Weaver wrote:
>>>> Hello,
>>>>
>>>> I'm currently searching for a firewall appliance which can also handle 
>>>> application server DDoS mitigation on a small scale (not network wide).
>>>>
>>>> Does anyone know of anything like this from Cisco or any other vendor?
>>>>
>>>> I'm aware of the 'huge' network wide products such as CiscoGuard, 
>>>> Arbor, etc but I am looking for something smaller scale, I just need to 
>>>> be able to put something in-line between the WAN and a group of servers 
>>>> that will look for things like 20 hosts on the net opening 1000s 
>>>> requests to the same URL.. etc
>>>>
>>>> Any advice is appreciated.
>>>>
>>>> thanks,
>>>> -Drew
>>>>
>>>> _______________________________________________
>>>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>>>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>>>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>>>
>>>
>>> _______________________________________________
>>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/