IntruGuard Ups the Ante on Hardware-Based DDoS Mitigation

April 26, 2008 - PRLog -- IntruGuard Devices, Inc., the leading DDoS solution provider, introduced its newest DDoS mitigation firmware release and it is hard not to notice some of the features the company has added to thwart BotNet attacks that are becoming more difficult to stop using conventional firewalls, Intrusion Prevention Systems (IPS), and software based DDoS mitigation systems..

BotNet attacks have grown significantly in the past months. While earlier it was very popular to use attacks such as SYN flood, port floods, ICMP floods etc, the hackers have graduated to more sophisticated forms of attacks, says Hemant Jain, Co-founder and CTO of IntruGuard. “Common DDoS attacks now include Get Flood, CC attack, HTTP GET Nothing, CQ Game Attack, Smart Auto Attack , combined attacks using SYN and UDP Flood, ICMP and TCP Flood, UDP, and TCP-connect Attacks,” he says.

While the hackers are coming up with easy tools for generating massive attacks and renting out BotNets to launch attacks on websites, existing solutions are failing to stop such attacks.

New Features in IntruGuard Keeping Up with the Attacks

The IG2000, as the only true VLSI-based DDoS mitigation product, recently added new features to thwart these attacks automatically using a massively-parallel hardware logic that is difficult to emulate using software based solutions.

The new features include ability to limit the concurrent connections per BotNet PC, concurrent connections per protected servers, rate limiting of TCP SYN packets per source during attacks. Many a times the BotNet armies open legitimate connections and leave them idle. Aggressive aging of idle connections is another feature that has been added to tackle such behavior. The connections are reset within the connection table of the appliance as well on the destination server to ease the overload.

The solution also includes features to support asymmetric links. In addition, a single appliance can now support two independent ISP links.

List Prices and Availability
IntruGuard DDoS mitigation solution is immediately available. The solution price starts at USD 6,995. Please contact IntruGuard for additional details.

# # #

About IntruGuard
IntruGuard is a leading supplier of Network Behavior Analysis (NBA) Systems for e-tailers, social networking companies, Software as a Service (SaaS) providers, Online commerce companies, Internet Gaming companies, Web Hosting Service Providers, Internet Service Providers (ISPs), Internet Data Centers (IDC) and Enterprise Data Centers. These NBA systems provide granular real time network traffic visibility and provide automatic protection against targeted Distributed Denial of Service (DDoS) attacks. These systems are vital in network security infrastructure of any service provider or data center network to ensure smooth network operation, full legitimate use of bandwidth and improve network utilization. IntruGuard is a privately held company headquartered in Silicon Valley. Please visit http://www.intruguard.com for more information.