Check Point Software Technologies Ltd. today announced its first line of products to fight distributed denial-of-service attacks (DDoS).
Check Point's DDoS Protector line of appliances, developed in conjunction with Radware, are intended for use in the enterprise networks, and would typically be placed in front of the firewall at the Internet access point, says Fred Kost, head of product marketing at Check Point. The new Check Point anti-DDoS line is being offered as seven different appliances in two basic form factors, a two-rack unit and a one-rack unit. These appliances all have similar functionality in terms of DDoS defense and are differentiated in performance areas such as speed, starting at 500Mbps and topping out at 12Gbps.
The two-rack unit supports 4 million concurrent sessions, while the one-rack unit supports 2 million concurrent sessions, says Kost. The purpose of the appliances is not only to detect and mitigate against mammoth denial-of-service attacks that may flood network pipes, but also to defend against DDoS attacks that target application servers, especially Web-based applications.
Check Point is known for its firewalls, and the decision to enter the DDoS defense area was made because these types of attacks are on the rise, says Kost. "DDoS has become an effective way to disrupt organizations." The Check Point line of appliances relies on technology licensed from Radware under a strategic partnership.
The DDoS Protector appliances, available now, start at $19,000.
Ellen Messmer is senior editor at Network World, an IDG publication and website, where she covers news and technology trends related to information security.