Cloudshield-DNS_Defender-Data-Sheet
0 likes358 views
CloudShield DNS Defender is a DNS security solution that protects against DNS attacks like DDoS. It examines every DNS packet at line speed to identify malicious content before attackers can impair or take down the network. It provides seven layers of security, fast performance to handle high traffic, and insights into DNS traffic and threats through analytics.
Cloudshield-DNS_Defender-Data-Sheet
- 1. PROTECT YOUR BUSINESS FROM DNS ATTACKS CloudShield DNS Defender Stop DNS Attacks CloudShield DNS Defender速 is a carrier and enterprise-grade DNS (Domain Name Services) security solution that protects against DNS attacks, enhances overall DNS performance, provides insights in DNS traffic, and delivers the flexibility you need to protect your DNS infrastructure from evolving threat actors. Without DNS, Business is Paralyzed Organizations spend heavily on cybersecurity, while leaving the most vulnerable infrastructure, DNS, unprotected. Without DNS, users and business are paralyzed. DNS protocols and infrastructure were not architected for security, and threat actors take full advantage of DNS vulnerabilities. Every year, ISPs, financial institutions, and high-profile enterprises report more frequent and higher bandwidth DNS attacks. They include DNS-specific distributed denial of service (DDoS) threats such as floods, amplification, and reflection assaults, and protocol-specific attacks such as cache poisoning, source spoofing, no-recursion, and more. For DNS, the Firewall and IPS Fall Short Firewalls and IPSs have their role in network security, but fall short for protecting DNS. The general-purpose firewall must keep port 53 open and cannot track state for UDP-based protocols like DNS. DNS-based DDoS or advanced persistent threats against DNS servers require DNS Defender. Unmatched Seven-Layer DNS Security DNS Defender is the first dedicated DNS firewall designed specifically to safeguard DNS systems. It can intercept, block, and counter DNS attacks with sophisticated measures that leverage the power of CloudShield Deep Packet Processing technology. DNS Defender examines fully every DNS packet, including payloads, to identify malicious content and respond at line speed before attackers can impair or take down the network. Key Benefits SEVEN-LAYER SECURITY Seven layers of security from DNS Defender can deliver rapid return on investment by stopping attacks that could damage your business. FAST PERFOMANCE You can postpone DNS infrastructure upgrades with DNS Defender performance acceleration from a fast cache that answers up to 250,000 DNS queries per second. RICH INSIGHT DNS Defender includes DNS Defender Management Analytics, or DMA. DMA enables a new pane for your SOC or NOC along with analytics to help you understand both DNS traffic and threats. CUSTOM FLEXIBILITY Only DNS Defender allows you to add custom security countermeasuresas needed, enabling rapid defenses against new cyber assaults. CYBERSECURITY a Leidos company 1 3 2 6 5 4 Transaction Tracking Filter: Prevents amplification attacks like DDoS and cache poisoning. Validation Filter: Prevents buffer, fragmentation, covert channels, malformed names, and flag issues. Source/Destination Filter: Prevents late binding, cache poisoning, and address attacks. Helps policy enforcement. Drops spoofed IPs. DNS Type Filter: Prevents cache poisoning and poison pill attacks while helping with policy enforcement. 7 DNS Flow Optimizer: Prevents collateral damage from botnet attacks on DNS. Attack Filter: Blocks known threats like the Christmas Tree attack. Protocol Filter: Blocks non-DNS traffic and helps with policy enforcement.
- 2. 息Leidos. All rights reserved. CloudShield and the CloudShield logo are registered trademarks of CloudShield, a Leidos company in the U.S. and/or other countries. IBM and BladeCenter are trademarks or registered trademarks of IBM Corporation in the United States, other countries or both. FORTUNE 500 is a registered trademark of Time Inc. in the United States and/or other countries. IBM is a registered trademark of International Business Machines Corporation, registered in many jurisdictions worldwide. 15-0309|LeidosCreative a Leidos company The Internet of Things Will Only Increase DNS Traffic Each year smartphones, tablets, CCTV, VoIP, and many additional new endpoint types create hundreds of millions of new DNS requests. IPv6 will increase risk to your DNS infrastructure. Can you handle the increasing traffic without compromising security? Handle Growth with Fast DNS Performance DNS Defender can help defer upgrades to your DNS infrastructure by offloading DNS servers and accelerating DNS performance, answering approximately 80 percent of queries from its hardware cache with latency under 0.2 milliseconds. The Insight You Need to Manage Mission-Critical DNS DNS Defender Management Analytics, known as DMA, offers information and analysis tools to aid network and security technicians in identifying DNS network issues such as attacks or dramatically increased traffic. DNS experts can take steps to address DNS anomalies before network disruption. DNS Information DNS Analysis Add Defense Measures When Needed DNS Defender helps mitigate risk, enabling you to identify and understand new threats, and add new custom defenses with a simple-to-use development environment. DNS Optimization on Every CloudShield Platform DNS Defender gives you security, performance, insight, and flexibility based on CloudShield deep packet processing (DPP) technology, available on every CloudShield platform, depicted at right. About CloudShield We engineer cybersecurity solutions, built on a patented technology called deep packet processing (DPP), designed to make networks fast and impenetrable. Since 2000, weve helped large enterprises, government entities, and carriers fortify their security infrastructures. About Leidos Leidos, a FORTUNE 500速 science and technology solutions leader, addresses some of the worlds toughest challenges in national security, health and engineering. Leidos supports vital missions for government and commercial sectors, develops innovative solutions for better outcomes and defends our Nations digital and physical infrastructure from new world threats. CLOUDSHIELD CS-4000 Trusted Network Security Platform CLOUDSHIELD PN41 BLADE Deep Packet Processing Module for IBM速 BladeCenter速 CLOUDSHIELD CS-2000 Content Processing Platform Visit us online: cloudshield.com/dnsdefender