Arbor DDoS Protection Products

Intelligently Automated DDoS Protection

Arbor Cloud DDoS Protection Services

Off-premise mitigation for high volume attack traffic.

Arbor Managed Services

Augment constrained resources with security expertise from the Arbor SOC

Proven DDoS Attack Protection

NETSCOUT provides the industry's most comprehensive suite of DDoS attack protection products and services for the Enterprise, Cloud / Hosting, and Service Provider markets.

Whether it is fully managed DDoS protection services; virtual, in-cloud or on-premise DDoS mitigation appliances; or embedded DDoS solutions within existing Cisco ASR 9000 routers, Arbor has the deployment model, scalability, and pricing flexibility to meet the DDoS protection needs of any organization operating online today.

DDoS Script for attack detection

What Enterprise IT Teams Need for DDoS Protection

Businesses have never been more connected and dependent on the availability of websites and online services.

At a time when availability has never been more important, a DDoS attack has never been more innovative, dynamic or consequential. It won’t come as any surprise to security professionals that the modern DDoS attack is increasing in sophistication, scale, and frequency.

So what changed? We’ve seen a renaissance in DDoS attack tools and techniques that has led to tremendous innovation. The barrier to entry has been obliterated by new tools that enable anyone with an Internet connection and a grievance to launch a DDoS attack. This is a true game changer in terms of the threat landscape and what businesses should consider themselves a potential target of attack. It used to be certain verticals would be likely targets for a DDoS attack; finance, gaming, and e-commerce at the top of the list. Today, any business, for any reason, any real or perceived offense or affiliation, can become a target of a DDoS attack.

Beyond the democratization of DDoS are the advancements in attack techniques and targets. A DDoS attack today is in fact a series of attacks that target not just connection bandwidth, but multiple devices that make up your existing security infrastructure, such as Firewall/IPS devices, as well as a wide variety of applications that the business relies on, like HTTP, HTTPS, VoIP, DNS and SMTP.

DDoS attacks will generally fall into one of three categories:

Volumetric DDoS Attacks

This type of DDoS attack is an attempt to consume the bandwidth either within the target network/service, or between the target network/service and the rest of the Internet.

TCP State-Exhaustion DDoS Attacks

This type of DDoS attack attempts to consume the connection state tables which are present in many infrastructure components such as load-balancers, firewalls, and the application servers themselves.

Application Layer DDoS Attacks

This is the most deadly kind of DDoS attack. It can be very effective with as few as one attacking machine generating a low traffic rate (this makes these attacks very difficult to proactively detect and mitigate).



  • Data Sheet
  • Case Study
  • Blog Post
  • Solution Brief
  • White Paper

NETSCOUT Arbor Edge Defense

Arbor Edge Defense is an inline security appliance deployed at the network perimeter that can automatically detect and block inbound threats and outbound malicious communication using highly scalable, stateless technology and unique, global threat intelligence.

Download PDF

Implementation Services for Sightline / Threat Mitigation System (TMS)

NETSCOUT is committed to providing its customers with quality implementation services delivered by a team of skilled industry professionals.

Download PDF

Implementation Services for Arbor Edge Defense (AED)

NETSCOUT can provide its customers with quality implementation services delivered by a team of skilled industry professionals.

Download PDF

Arbor Cloud DDoS Protection for Enterprises

Arbor Cloud combines on-premise AED DDoS defense with global cloud-based traffic scrubbing services for best-of-breed, hybrid, DDoS attack protection.

Download PDF

High-Flying Agency Assures Critical Aviation R&D with NETSCOUT

All-Inclusive Service Assurance and Cybersecurity Platform Improves Visibility, Meets Government Budget

Read More

SaaS Provider of Payment Processing Solutions Protects Business from DDoS Attacks with Arbor Edge Defense

Global SaaS provider with almost a dozen data centers around the world turned to Arbor Edge Defense for increased visibility into both inbound and outbound DDoS attacks.

Read More

SaaS Gains Essential Visibility for Service Assurance and Security of Customer-Facing Network

With a deployment of InfiniStreamNG appliances, nGenius Packet Flow Switches, and Arbor Edge Defense with Arbor Cloud Connect, this organization has gained critical visibility to provide both Service Assurance and Security for their customers.

Read More

U.S. University Mitigates DDoS Attacks with Arbor Solution

University Benefits from Multi-Level DDoS Protection with Cloud and On-Premises Solution

Read More

Xtel Communications

With Arbor Sightline and Arbor Threat Mitigation System in Xtel’ s environment, the network operation center is able to respond to events in less time with greater precision.

Read More

DDoS Mitigation Case Study - the Extra Mile

Read More

Keeping Elections Safe from Cyberattack

Safeguarding elections infrastructure falls to local jurisdictions—here’s what to watch out for.

Read More

Arbor DDoS Attack Protection Solutions

Intelligently Automated, Hybrid DDoS Protection, Backed by Global Visibility and Threat Intelligence. Industry best practice for DDoS defense is a multi-layer, or hybrid approach that takes into account the different types and targets of DDoS attacks. High volume flood attacks that target internet connectivity must be mitigated in the cloud, away from the intended target before they overwhelm local protection. Application-layer and state-exhaustion attacks need to be detected and mitigated on-premise close to where the applications or services reside.

Download PDF

Arbor Managed DDoS Protection Services for Enterprises

Not only do we produce the world’s best DDoS attack protection products; we also use them to deliver high quality, managed DDoS attack protection services on a worldwide basis. These fully managed, industry recognized services can include an intelligently automated combination of in-cloud and on-premise protection; backed 24x7 by worldwide DDoS attack mitigation experts and continuous threat intelligence.

Download PDF

DDoS Attack Protection Solutions

To stop modern-day DDoS attacks, NETSCOUT offers a comprehensive portfolio of fully integrated, incloud and on-premise DDoS protection products and services; all backed by continuous global threat intelligence.

Download PDF

How to Analyze and Reduce the Risk of DDoS Attacks

Using risk methodology called FAIR (Factor Analysis of Information Risk) and a fictitious $50M/year e-commerce scenario, this paper is designed to help you re-assess your risk of the modern-day DDoS attack.

Download PDF