Check Point DDoS Protector

Transcription

1 Check Point DDoS Protector June Check Point Software Technologies Ltd. [PROTECTED] All rights reserved Check Point Software Technologies Ltd. [PROTECTED] All rights reserved.

2 Cybercrime Trends for % 35% 33% 32% SQL Injections APTs Botnet DDoS 65% Businesses Experienced Attacks Average $214,000 of Damage Per Attack Ponemon Institute, May

3 Victims of Recent DDoS Attacks Amazon.com claims its widely publicized DDoS attack resulted in a loss of $600,000 during the 10 hours it was down Amazon.com 3

4 Today s Attacks Are More Sophisticated More DDoS attacks today than ever before More damage with application attacks No need to flood network bandwidth 4

5 DDoS Attacks by Type Application Layer Attacks TCP SYN Flood Network Layer Attacks More attacks are targeted at the Application Layer Radware

6 Application Layer DDoS Attacks New Application Attacks Are Stealthier Exploit application weakness with Low&Slow attacks Utilize relatively low volume and fewer connections Used in conjunction with volume-based attacks Undetectable by threshold- or volume-based solutions 6

7 DDoS Protection The Right DDoS Solution Should Have Network Layer Protection Adaptable Application Layer Protections Fast Response Time 7

8 Introducing Check Point DDoS Protector Block Denial of Service Attacks Within Seconds! 8

9 Check Point DDoS Protector Customized multi-layered DDoS protection Protects against attacks within seconds Integrated security management and expert support 9

10 Multi-Vectored DDoS Attacks Network Flood Server Flood Application Low & Slow Attacks High volume of packets High rate of new sessions Web / DNS connectionbased attacks Advanced attack techniques 10

11 Multi-Layered Protections Network Flood Server Flood Application Low & Slow Attacks Behavioral High volume of network packets analysis Automatic and High rate of pre-defined new sessions signatures Web Behavioral / DNS connectionbased DNS HTTP and attacks Advanced Granular attack custom filters techniques Stateless and behavioral engines Protections against misuse of resources Challenge / response mitigation methods Create filters that block attacks and allow users 11

12 DDoS Protector Product Line Enterprise Grade Up to 3 Gbps throughput 2M concurrent sessions 1 Mpps max. DDoS flood attack rate Datacenter Grade Up to 12 Gbps throughput 4M concurrent sessions 10 Mpps max. DDoS flood attack rate 7 models to choose from 1GbE copper and 10GbE fiber connections Low latency 12

13 Where to Protect Against DDoS Scenarios: On-Premise Deployment DDoS Protector Appliance + Off-Site Deployment DDoS Protector Appliance 13

14 Appliance Specifications Model DP 506 DP 1006 DP 2006 DP 3006 DP 4412 DP 8412 DP Capacity 0.5Gbps 1Gbps 2Gbps 3Gbps 4GBps 8Gbps 12Gbps Max Concurrent Sessions Max DDoS Flood Attack Protection Rate Latency 2 Million 4 Million 1 Million packets per second 10 Million packets per second <60 micro seconds Real-Time Signatures Detect and protect against attacks in less than 18 seconds 14

15 Integrated Security Management Unified Logs and Monitoring and Unified Reporting Leverage SmartView Tracker, SmartLog and SmartEvent for historic and realtime security status 15

16 Flexible Deployment Options Ready to Protect in Minutes Fits to Existing Network Topology Optional Learning Mode Deployment Low Maintenance and Support 16

17 Emergency Response and Support Emergency Response Team Help from security experts when under DoS attacks Leverage experience gathered from real-life attacks Check Point customer support World-class support infrastructure Always-on support 7x24 Flexible service options 17

18 Summary Blocks DDoS Attacks Within Seconds Customized multi-layered DDoS protection Ready to protect in minutes Integrated with Check Point Security Management 18

19 Thank You 2012 Check Point Software Technologies Ltd. [PROTECTED] All rights reserved Check Point Software Technologies Ltd. [PROTECTED] All rights reserved.