question 2 firewall + ddos

Discussion in 'other firewalls' started by evgeni22, Jun 28, 2012.

Thread Status:
Not open for further replies.
  1. evgeni22

    evgeni22 Registered Member

    Jun 28, 2012
    i little company and have fortigae firewall
    in same days i have ddos and the firewall fall after ddos, it cant handle it
    even it have protection ddos (ips) if i will buy another firewall with ips
    it be double protection? or it not working like double and
    all data come to first firewall and crash again?
  2. alexandrud

    alexandrud Developer

    Apr 14, 2011
    When a DDOS attack is pummeling your server, there are very few ways of successfully mitigating the attack as the attackers will often have a vast amount of machines, and associated IP's that they can work from with a large quantity of bandwidth.

    Having a software firewall although might provide a minimum amount of protection with barring certain individuals from using services on your server. A software firewall still accepts the connection directly to the server, therefore flooding the port, increasing loading times or even flatlining the port and not really protecting from a DDOS attack.

    A hardware firewall however can help towards mitigating an attack. Many firewalls now come inbuilt with load balancers, and have the ability to withstand hundreds of thousands of connections. The firewalls if configured properly can also attempt to mitigate an on going DDOS attack. However, the bandwidth that the firewall can take is still limited by its hardware. So is still not guaranteed to successfully block a DDOS attack.

    To this day there is no way of guaranteeing 100% that you are protected from a large DDOS attack which takes up the bandwidth of the incoming pipe, the only thing we can do take is to take as many precautions as practically and financially viable to help avoid a complete blackout.

  3. mack_guy911

    mack_guy911 Registered Member

    Mar 21, 2007
    it should block you can try astaro or untangle free or demo maybe they help
Thread Status:
Not open for further replies.