English

Network Security Hisecengine Ddos Defense System Antiddos1908

Samples:

$1000.0/piece | Min. order : 1 piece

Place of Origin:

China

Payments:

L/C,D/A,D/P,T/T,Western Union,MoneyGram,OA

Lead Time:

1-10(pieces):3(days),11-100(pieces):7(days),101-500(pieces):15(days),>500(pieces):To be negotiated(days)

shipping:

Support Sea freight

Customization:

Graphic customization (Min. Order: 10000 sets),Customized logo (Min. Order: 10000 sets),Customized packaging (Min. Order: 10000 sets)

Model Number:

AntiDDoS1908

Brand Name:

Inquiry

Write a Review

Place of Origin

Guangdong, China

Products Description

AntiDDoS1000 DDoS protection system utilizes Big Data analytics technology and supports modeling for 60+ types of network traffic to offer second-level attack response and comprehensive defense against 100+ types of attacks. The AntiDDoS1000 can be deployed on a user network using in-line mode to defend against volumetric and application attacks in real time.

When attack traffic exceeds the bandwidth or defense capability of a local scrubbing device, the AntiDDoS1000 associates with the AntiDDoS device of the upstream carrier or ISP to defend against flood attacks and guarantee service continuity.

Details Images

Network Security Hisecengine Ddos Defense System Antiddos1908 2

Specification

Model	AntiDDoS1905	AntiDDoS1908
Standard interface	8×GE COMBO + 4×GE RJ45 + 4×GE SFP + 6×10GE SFP+	4 x 100G/40G+16 x 25G/10G(25G/100G COMBO)+8 x 10G/GE
Deployment mode	In-line; off-line (static defense); off-line (Dynamic defense)
Function	Options for detecting or cleaning	Options for detecting or cleaning, or both
Height x Width x Depth	43.6 mm × 442 mm × 420 mm (1U)	43.6 mm x 442 mm x 600 mm (1U)
DDoS Defense Specifications	Defense against malformed-packet attacks
		Defense against LAND, Fraggle, Smurf, WinNuke, Ping of Death, Teardrop, and TCP error flag attacks
		Defense against scanning and sniffing attacks
		Defense against port scan and IP sweep attacks, and attacks using Tracert packets and IP options, such as IP source route, IP timestamp, and IP route record options
		Defense against network-layer flood attacks
		Defense against common network-layer flood attacks, such as SYN flood, SYN-ACK flood, ACK flood, FIN flood, RST flood, TCP Fragment flood, TCP Malformed flood, UDP flood, UDP Malformed, UDP Fragment flood, IP flood, ICMP Fragment flood and ICMP flood attacks, sweeping segment flooding, and pulse-wave attacks
		Defense against session-layer attacks
		Defense against common session-layer attacks, such as real-source SYN flood, real-source ACK flood, TCP connection exhaustion, sockstress, and TCP null connection attacks
		Defense against UDP reflection attacks
		Static rules for filtering common UDP amplification attacks, such as NTP, DNS, SSDP, CLDAP, Memcached, Chargen, SNMP and WSD
		Dynamic generation of filtering rules to defend against new UDP amplification attacks
		Defense against TCP reflection attacks
		Static filtering rules that are created based on network-layer characteristics
		TCP reflection attack filtering rules that are dynamically generated
		Defense against TCP replay attacks
		Static filtering rules that are created based on network-layer characteristics
		TCP replay attack filtering rules that are dynamically generated
		Defense against application-layer attacks (HTTP)
		Defense against high-frequency application-layer attacks (HTTP and HTTP CC attacks) based on behavior analysis
		Defense against low-frequency application-layer attacks (HTTP and HTTP CC attacks) based on machine learning
		Defense against slow-rate HTTP attacks based on behavior analysis, including HTTP slow header, HTTP slow post, RUDY, LOIC, HTTP multi-methods, HTTP Range request amplification, and HTTP null connection attacks
		Defense against HTTPS/TLS encrypted application-layer attacks
		Defense against high-frequency HTTPS/TLS encrypted attacks
		Defense against slow-rate incomplete TLS session and null connection attacks
		Defense against application-layer attacks (DNS)
		Defense against DNS Malformed, DNS query flood, NXDomain flood, DNS reply flood, and DNS cache poisoning attacks
		Source-based rate limiting and domain name–based rate limiting
		Defense against application-layer attacks (SIP)
		Defense against SIP flood/SIP methods flood attacks, including Register, Deregistration, Authentication, and Call flood attacks
		Source-based rate limiting
		User-defined filtering rules
		User-defined filtering rules for local software and hardware, as well as BGP FlowSpec rules for remote filtering. The fields can be customized, including source/destination IP address, packet length, IP protocol, IP payload, source/destination port, TCP flag bit, TCP payload, UDP payload, ICMP payload, DNS domain name, HTTP URI, HTTP field user-agent, as well as caller and callee in the SIP protocol.
		Dual-stack defense
		IPv4/IPv6 dual-stack defense against DDoS attacks
		Automatic tuning of defense policies
		Attack traffic snapshot, defense effect evaluation, and automatic tuning of defense policies
		Automatic attack evidence collection
		Baseline learning
		Support for dynamic traffic baseline learning and learning period configuration
		Packet capture-based evidence collection
		Automatic packet capture based on attack events and user-defined ACLs for packet capture
		Online parsing and analysis, source tracing, and local analysis after downloading for captured packets

Company Profile

Network Security Hisecengine Ddos Defense System Antiddos1908 3

Our Advantages

Network Security Hisecengine Ddos Defense System Antiddos1908 4

Network Security Hisecengine Ddos Defense System Antiddos1908 5

Customer Photos

Network Security Hisecengine Ddos Defense System Antiddos1908 6

Network Security Hisecengine Ddos Defense System Antiddos1908 7

Network Security Hisecengine Ddos Defense System Antiddos1908 8

FAQ

Network Security Hisecengine Ddos Defense System Antiddos1908 9

GET IN TOUCH WITH Us

just leave your email or phone number in the contact form so we can send you a free quote for our wide range of designs