Can the IG200/2000 protect if the entire Internet connection link is swamped with DoS traffic?
If the entire Internet connection link is swamped with DoS traffic, then there is little you can do from your own network perimeter to affect it. No perimeter solution will work. In that case, you need to involve the upstream service providers and/or law-enforcement. The best approach is to work with your upstream providers, and get them to work with their peers to identify the routes used by the DoS traffic, and attempt to narrow it down to a given area, and if it’s a truly distributed attack, there may be little they can do too. If each one of them uses an IntruGuard solution, the situation will be in control as the attacker will be caught at the source – but that will be an ideal world. In most cases, ISPs rarely co-operate to resolve such issues. Therefore there is a need to have additional perimeter protection with IG200/IG2000 in your network which will keep your services going even under attack. We have seen several targeted DDoS attacks, and none of them was successful in using
