Bot     Do you have a question?
Contact us
xtel_logo_outlined

DDoS Monitoring and Mitigation

The impact of Distributed Denial-of-Service (DDoS) attacks is wide-ranging:

Network congestion, data loss, botted or compromised hosts, major service outages, advanced persistent network threats, exposed regulated and non-regulated data, web defacement and industrial espionage are among the potentially damaging effects of a DDoS attack at any time.

As the core product of our Network Security solutions, our Xtel Cleanpipe DDoS monitoring mitigation solution is integrated into existing services to scan for and mitigate various types of DDoS attacks proactively. Industries from healthcare to education require comprehensive threat detection to avoid the costly damage of DDoS attacks that are highly prevalent and may occur at any time.

Contact Us
ddos1
ddos2

Enhance Your Defense Against DDoS Attacks

In collaboration with Arbor Networks, the Xtel Cleanpipe is an intelligent and network-inherent multi-layer DDoS monitoring and mitigation service that quickly mitigates attacks, minimizing financial and legal risk. Xtel Cleanpipe will monitor, detect and destroy DDoS attacks before they even have a chance to start.

The Most Common DDoS Attack Targets

  • Data centers
  • Public networks
  • Infrastructure devices (routers, switches and load balancers)
  • Firewalls
  • Intrusion prevention systems
  • Domain name systems
  • Bandwidth capacity
  • Critical applications, including web, eCommerce, voice and video
The Xtel Cleanpipe solution provides the industry’s most comprehensive and adaptive suite of threat detection capabilities, designed to protect diverse resources from complex, blended attacks. The key to effective mitigation is identifying and blocking attack traffic while allowing non-attack traffic to flow through to its intended destination. Large-scale DDoS attacks affect the intended victim and any other unfortunate customers who may be using the same shared network service. To reduce this collateral damage, service providers and hosting providers often shut down all traffic destined for the victim’s site, thus completing the DDoS attack.

Get Xtel Cleanpipe for Your Network

With proactive, surgical mitigation in seconds, the Xtel Cleanpipe isolates and removes attack traffic without affecting other users with quick, effective methods.

Xtel Cleanpipe Mitigation Methods

  • Identifying and blocklisting malicious hosts
  • IP location-based mitigation
  • Protocol anomaly-based filtering
  • Malformed packet removal
  • Rate limiting to manage non-malicious demand spikes

Xtel Cleanpipe Capabilities

  • Anomaly detection
  • Fingerprint matching
  • Profiled anomaly detection
  • Continuous real-time improvements
  • DDoS attack alerts
  • Alerts for unusual demand and service levels
The Xtel Cleanpipe real-time mitigation portal details the source of DDoS alerts and the effectiveness of countermeasures on the attack. The portal delivers full packet capture and decodes of detailed standard and attack packet streams, which are stored for future reference and management reporting—giving operators and managers complete visibility and reporting into attacks on their business operations.

Cleanpipe DDoS Defense Specifications

  • Simultaneous Sessions
  • Not session limited
  • Deployment Modes
  • Inline Active, Inline Monitoring, SPAN port, Diversion/Reinjection
  • Block Actions
  • Source blocking/source suspend, per packet blocking, a combination of source, header, and rate-based blocking
  • Attack Protections
  • Flood Attacks (TCP, UDP, ICMP, DNS, SSDP, NTP, SNMP, SQL RS
  • Chargen Amplification
  • DNS Amplification
  • Microsoft SQL Resolution Service AmplificationNTP Amplification SNMP Amplification, SSDP Amplification)
  • Fragmentation Attacks (Teardrop, Targa3, Jolt2,Nestea)
  • TCP Stack Attacks (SYN, FIN, RST, SYN-ACK, URG-PSH, TCP Flags)
  • Application Attacks (HTTP GET floods, SIP Invite floods, DNS attacks, HTTPS protocol attacks)
  • DNS Cache Poisoning
  • Vulnerability attacks
  • Resource exhaustion attacks (Slowloris, Pyloris, LOIC, etc.)
  • Flash crowd protection
  • IPv4 and IPv6 attacks hidden in SSL-encrypted packets
  • DDoS Countermeasures
  • Volumetric-Only Counter Measures

Complete Set of Countermeasures:

  • Invalid Packets
  • IPv4/IPV6 Address Filter Lists
  • IPv4/IPV6 Black/White Filter Lists
  • Packet Header Filtering
  • IP Location Filter Lists
  • Zombie Detection
  • Per Connection Flood Protection
  • TCP Syn Authentication
  • TCP Connection Limiting
  • TCP Connection Reset
  • Payload Regular Expression Filter
  • Shaping
  • IP Location Policing
  • Inline Filter
  • Blocklist Fingerprints
  • Protocol Baselines
  • HTTP Authentication
  • HTTP Malformed
  • HTTP Scoping
  • HTTP Rate Limiting
  • HTTP/URL Regular Expression
  • DNS Authentication
  • DNS Malformed
  • DNS Scoping
  • DNS Rate Limiting

The Xtel eXperience:

From DDoS attack mitigation to a comprehensive suite of technology solutions, Xtel provides telecommunications, cloud and security services suited to different industries and tailored to address their diverse and ever-changing needs.

Prevent DDoS Attacks