Check Point DDoS Protector Appliances

• Non-vulnerability-based attacks that misuse server resources, such as
  • Application DoS – HTTP , SIP, and other flood attacks
• DoS/DDoS flood attacks that misuse network bandwidth resources
• Rapid response and real-time update of custom filters to protect against emerging attacks

• Real-time signatures are generated for each attack pattern, using up to 20 different parameters
• Block attacks without blocking legitimate user traffic
• Intelligent flash traffic detection sees the difference between legitimate spikes in traffic and attacks

The DDoS Protector has the ability to differentiate between a sudden flash traffic and a real DDoS attack, and uses a real-time behavioral signature created on-the-fly to mitigate DDoS attacks. The DDoS Protector allows legitimate spikes in traffic that simpler rate-based technologies would block.

With seven models to choose from, Check Point DDoS Protectors are ready to protect network of all sizes in minutes and can be installed inline locally, through an ISP, or both.

Effectively identify and stop brute-force flood attacks at the network level. 

Overwhelming the network resources with a large-scale botnet to shut down its normal services is an old, yet still effective method for launching network flood attacks. The Check Point DDoS Protector can quickly identify and mitigate these types of network flood attacks.

Check Point's unified security management solution includes:

SmartEvent

Unified security and analysis solution that delivers real-time threat management information to instantly stop threates and block attacks with on-the-fly protections. Move from business view to forensics in just three clicks.

SmartLog

Advanced log analyzer that delivers proactive security intelligence with split-second search results from any log field for instant visibility into billions of log records over multiple time periods and domains.

SmartView Tracker

Comprehensive auditing solution to troubleshoot system and security issues, gather information for legal or audit purposes, and generate reports to analyze network traffic patterns. In the case of an attack or other suspicious network activity, use SmartView Tracker to temporarily or permanently terminate connections from specific IP addresses.

¹ Actual performance figures may change per network configuration, traffic type, etc.
² Capacity is measured as maximum traffic forwarding when no security profiles are configured.
³ Throughput is measured with behavioral IPS protections and signature IPS protections using eCommerce protection profile.
⁴External fiber fail-open switch with SFP ports is available at additional cost.
⁵External fiber fail-open switches with SFP or XFP ports are available at additional cost.