User Guide
APconnections, Inc. // 303.997.1300 // www.netequalizer.com
Page 44 of 96
All rights reserved
Copyright © 2014, 2015 APconnections, Inc.
rev. 20150309
Distributed Denial of Service Attack (DDoS) Tools
A Distributed Denial of Service Attack (DDoS) occurs when a hacker illicitly gains access to a
system, takes it over, and then uses it to command many systems to flood a target network
with traffic. The flood of traffic quickly overwhelms the target network, and causes the
network to become inoperable for its normal purposes. Read more about
DDoS
.
As the NetEqualizer is implemented near the network perimeter, and has visibility to all
incoming and outgoing traffic, we are able to analyze traffic behavior and report on
suspected DDoS attacks. Once identified as suspected DDoS, the NetEqualizer can then be
used to block further traffic as needed.
As of
software update 8.2
, we are offering a new
Distributed Denial of Service
(DDoS)
Monitor. The DDoS Monitor, which comes standard in 8.2,
shows you some basic metrics
on the outside intrusion hit rate into your network
. It can be used to spot anomalies
that would indicate a likely DDoS attack in progress. See our
detailed blog article
on the
subject for how this technology works.
If you decide you need something more proactive to mitigate a DDoS attack, we install our
DDoS Firewall (DFW) feature, and provide consulting to help you configure it to block
standard DDoS attacks. Our new DDoS Firewall tool (DFW) can be purchased as an add-on
module.
The goal of the NetEqualizer DDoS toolset is twofold: 1) to help you identify suspected
DDoS attacks, and 2) to help you identify and block outside IP addresses until you have
regained control over your network.
DDoS Monitor
The DDoS Monitor is used to analyze
unrequested incoming traffic
to look for
inbound traffic that occurs both at high frequency and is repeated a large
number of times, which is behavior typical of a DDoS attack. We then provide
visibility into this traffic to help you monitor your network, through our new
DDoS Monitor.
From the NetEqualizer Dashboard,
Click on -> [
DDoS Monitor
] on the Common Tasks bar.
The
following screen comes up: