2020-01-12T18:33:00Z
LB
Technical Manager with 10,001+ employees
  • 7
  • 383

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?

I have around ten years of experience working as a technical manager for a Telecom company with more than 10,000+ employees. 

We are currently researching DDoS protection solutions. Which is the best DDoS protection solution for a big ISP with more than 1.5 terabytes for monitoring and mitigating? 

Thanks! I appreciate the help.

7
PeerSpot user
7 Answers
JS
Senior Systems Engineer - Channel Manager at Exclusive GRP
Real User
2020-01-15T08:53:13Z
Jan 15, 2020

I would say if it’s an ISP that will build a scrubbing center, Netscout/Arbor is a good solution. In all other solutions, Imperva is a great choice.

Search for a product comparison in Distributed Denial of Service (DDOS) Protection
TB
Security Advisor at https://globalqart,com
Real User
2020-01-15T07:15:58Z
Jan 15, 2020

Arbor would be the best bid, apart from Arbor, Palo Alto and Fortinet have good solutions. As this is an ISP, I would prefer Arbor.

CH
Technical Solutions Architect II - Application Modernization and Security at a tech services company with 5,001-10,000 employees
Real User
2020-01-13T13:01:58Z
Jan 13, 2020

What type of DDoS protection are you looking for? There are many types of attacks, which vary from volumetric (L3/L4), protocol attacks, and application-layer attacks.

There are also in-band solutions, out-of-band solutions, and hybrid solutions.

I would be happy to discuss in more detail, but I can't suggest a specific vendor/solution without knowing more about the specific customer needs.

Darryl Theron - PeerSpot reviewer
Director at Trace Network Operations
Real User
Top 5
2020-01-13T12:37:27Z
Jan 13, 2020

I would recommend A10 Networks due that it delivers high performance in a small form factor to reduce OPEX with significantly lower power usage, rack space, and cooling requirements compared to other vendors.

I am a gold partner for A10 Networks. Should you have any queries please do not hesitate to contact me on d.theron@tracenetops.net.

ÖS
Senior Network & Security administrator at a hospitality company with 201-500 employees
Real User
2020-04-14T11:29:47Z
Apr 14, 2020

Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GRE tunnels. We have decreased site load times on Mobile 3G from 8 to 1,6 seconds by moving to Cloudflare and don't have to care about tuning our own WAF and DDOS protection.

SA
Manager - IT Security at a tech services company with 11-50 employees
Reseller
2020-04-02T13:12:05Z
Apr 2, 2020

My recommendation is Imperva.

Learn what your peers think about Arbor DDoS. Get advice and tips from experienced pros sharing their opinions. Updated: January 2023.
670,523 professionals have used our research since 2012.
AA
Product Manager (Zscaler) at a tech services company with 201-500 employees
Real User
2020-03-12T18:01:39Z
Mar 12, 2020

I believe you should look at F5 DDOS solution. Check the URL below
https://www.f5.com/solutions/application-security/ddos-protection##

Related Questions
ST
Head of IP Infrastructure Operations Department | MPLS | ISP | DWDM | FTTX | SECURITY at Partner Communications ltd
Dec 5, 2022
Hi community,  I am the Head of IP Infrastructure Operations Department at a large comms service provider. I am currently researching DDOS solutions. Which DDOS solution is the best for internet service providers? Thank you for your help.
See 1 answer
reviewer1662357 - PeerSpot reviewer
User at Ally Financial Inc.
Dec 5, 2022
For L3 /4, I'd look to Akamai Prolexic or Equinix.For L7, I'd need more information to give a proper recommendation.
NC
Content Manager at PeerSpot (formerly IT Central Station)
Mar 16, 2022
What are the best solutions that protect from DDoS attacks? Why do you suggest this particular one?
See 1 answer
Janet Staver - PeerSpot reviewer
Tech Blogger
Mar 16, 2022
While there are many DDOS protection solutions available, some of them clearly take the industry lead. In my opinion, some of the best DDOS protection products include the following: Arbor DDoS: Arbor’s suite of visibility, DDoS protection, and advanced threat solutions provide customers with a micro view of their network enhanced by a macro view of global internet traffic and emerging threats through their ATLAS infrastructure. Arbor DDoS is easy to use, provides effective blocking of DDoS attacks, and can be used for DNS, web, and main servers. Additionally, this solution is far easier to operate than other solutions, such as Fortinet DDoS. Arbor DDoS can also be used for traffic analysis and capacity planning as well. I think the biggest advantage that this solution offers is that you can automatically identify and stop all types of DDoS attacks and other cyber threats before they impact the availability of business-critical services, which is crucial for any organization. Imperva Incapsula: I think Imperva Incapsula is a close second to Arbor DDoS. For starters, it protects websites and safeguards web applications and their data from attacks and improves their performance by enhancing user experience. What makes it powerful is that it includes a security platform with a web application firewall, DDoS mitigation, content delivery network, and global load balancer to maximize performance. Some of its most useful features are that it protects against broken authentication and it has remote execution of code. In addition, there is no need to have an appliance in house for the services because it is on the cloud. It also has a unique interface for managing security performance. Furthermore, It is stable, scalable, quick, and easy to use. CloudFlare: CloudFlare is also a really good DDoS protection option. It is different from the alternatives listed above because it protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare have all web traffic routed through its intelligent global network, which gets smarter with each new site added. As a result, performance improves and the number of spam and other attacks rapidly decreases. CloudFlare is robust, secure, and innovative. It is also easy to manage, with a good web application firewall. In my opinion, CloudFlare is an intuitive solution that's great for small businesses. Another thing I like about CloudFlare is that you can choose to activate the 'I'm under attack' mode, which can protect against even the most sophisticated of DDoS attacks by presenting a Javascript challenge. Radware DefensePro: Last but not least, I would say Radware DefensePro is also a good choice. Specifically, it defends against IoT-based, Burst, DNS and TLS/SSL attacks to secure organizations against emerging network multivector attacks, ransom DDoS campaigns, IoT botnets, phantom floods, and other types of cyberattacks. It does so by leveraging patented behavior-based detection technology that enables organizations to detect attacks in real-time, and also helps minimize false positives. Moreover, the solution has attack signatures that can be generated automatically to accurately protect from zero-day and unknown attacks. Some of the best features it offers include verbose and descriptive reporting, good scalability, and great reliability. In addition, Radware DefensePro offers granular control, and also has a hybrid model approach for those that prefer it.
Related Articles
NC
Content Manager at PeerSpot (formerly IT Central Station)
Apr 25, 2022
PeerSpot’s crowdsourced user review platform helps technology decision-makers around the world to better connect with peers and other independent experts who provide advice without vendor bias. Our users have ranked these solutions according to their valuable features, and discuss which features they like most and why. You can read user reviews for the Top 8 Distributed Denial of Service (DDO...
EB
Director of Community at PeerSpot (formerly IT Central Station)
Mar 18, 2022
Hi community members, Here we go with a new Community Spotlight. We publish it to help YOU catch up on recent contributions by community members. Trending What open-source HCI solution do you recommend? How much time does SSO save? What are the main technical differences between Microsoft Power Automate and Blue Prism? Articles Top HCI in 2022 What is Web Design? The Ultima...
Moderator
DS
Owner at David Strom Inc.
Related Articles
NC
Content Manager at PeerSpot (formerly IT Central Station)
Apr 25, 2022
Top 8 Distributed Denial of Service (DDOS) Protection Tools 2022
PeerSpot’s crowdsourced user review platform helps technology decision-makers around the world to...
EB
Director of Community at PeerSpot (formerly IT Central Station)
Mar 18, 2022
Community Spotlight #10
Hi community members, Here we go with a new Community Spotlight. We publish it to help YOU catch...
Download Free Report
Download our free Arbor DDoS Report and get advice and tips from experienced pros sharing their opinions. Updated: January 2023.
DOWNLOAD NOW
670,523 professionals have used our research since 2012.