Radware and Lancope partner

Radware® and Lancope, Inc. have partnered in order to offer service providers and enterprises an enhanced attack detection and mitigation solution against Distributed Denial of Service (DDoS) attacks.

By deploying Lancope’s StealthWatch System with Radware’s Attack Mitigation Network (AMN) distributed detection layer, Radware’s customers enhance their already robust coverage with NetFlow-based traffic statistics and detection. The combined solution will enable service providers and enterprises to detect DDoS attacks in a non-intrusive manner and divert suspicious traffic only to scrubbing centers for attack cleansing.

Radware’s AMN combines distributed detection and mitigation elements, which are maintained synchronised with legitimate traffic baselines and attack information in real-time. AMN expands the detection coverage across all enterprise resources and automates the mitigation by selecting the most effective tools and locations – in the data center, at the perimeter or in the cloud.

This detection and mitigation solution features stronger investigative workflows than other flow solutions, providing a much more in-depth network picture.

“The best-of-breed combination of Radware’s AMN with Lancope’s StealthWatch System provides a granular view of the network based on flow statistics, which contain both traffic engineering and security analysis, to look for anomalies that carry the characteristics of a DDoS attack,” says Amir Peles, vice president of technologies for Radware. “By selectively diverting the anomalous flows through Radware’s attack mitigation engine, attacks can be blocked with no interruption to legitimate traffic. Feeding ‘peacetime’ traffic baselines into Radware’s patented Network Behavioral Analysis enables accurate detection and blocking of L3-L7 attack vectors.”

“DDoS attacks have been around for a long time, but they continue to evolve as new techniques are introduced, so companies are in search of a comprehensive detection and mitigation defense,” said Jim Davis, Senior Analyst with 451 Research. “Organisations need to not only detect and respond to DDoS attacks, but they also need an elegant and scalable means of remediation. Enterprises don’t always have enough expertise at hand to respond to attacks. The coupling of deep network visibility and real-time detection with robust mitigation capabilities enables customers to quickly respond with the limited resources they have.”

“With our combined efforts, we are able to monitor large network behavior on a continuous basis to detect network anomalies, and effectively isolate attacks in order to neutralise them on the network edge,” says Tim “TK” Keanini, chief technology officer at Lancope. “This scalable solution goes beyond traditional network security solutions as it uses behavioral technology to identify and block both known and unknown attacks with minimal user intervention.”