The First and Last Line of Smart, Automated, Edge Defense

Omnis AED is an inline security appliance deployed at the network perimeter (i.e. between the internet router and network firewall) to provide security and defense.

AED’s unique position on the network edge, its stateless packet processing engine and the continuous reputation-based threat intelligence it receives from NETSCOUT's Omnis ATLAS Intelligence Feed enable it to automatically detect and stop both inbound threats and outbound communication from internal compromised hosts – essentially acting as the first and last line of defense for organizations.

Network Perimeter Security Benefits

Be a First Line of Defense

by blocking inbound DDoS attacks to protect the availability of your network, services or stateful security devices (e.g. firewall).

Be a Last Line of Defense

by blocking outbound communication from compromised internal devices to attacker command and control (C2) infrastructure to stop the proliferation of attacker and malware within your organizations and ultimately avoid a data breach.

Integrate

Omnis AED’s use of standards such as STIX/TAXII, SYSLOG (CEF, LEEF), a REST API and its ability to provide more context to blocked IoCs via the Omnis ATLAS Intelligence Feed enable it to become a fully integrated component of your existing security stack and process.

Defense at the Network Edge

Deployed in between the firewall and internet router, and using highly scalable stateless packet processing technology, Omnis AED acts as a network edge threat intelligence enforcement point where it blocks in bulk, inbound cyber threats (e.g. DDoS attacks, IOCs) and outbound malicious communication - essentially acting as the first and last line of network perimeter defense for an organization.

Video

How to Block Ransomware from Your Network

Arbor Edge Defense can do more than DDoS mitigation. It can detect and block outbound indicators of compromise (IOCs) that go undetected by other tools in your security stack. For example, AED can detect and block malware known to seed ransomware before the decryption occurs.

Watch Now

Arbor Edge Defense can do more than DDoS mitigation

94% of surveyed IT organizations who selected effectively stopping complex DDoS attacks or effectively stopping state-exhaustion DDoS attacks agree that NETSCOUT Arbor Edge Defense and Arbor Cloud DDoS Protection helps solve cybersecurity challenges by detecting and blocking both inbound and outbound IoCs as well as other cyber threats.

- TechValidate survey of 35 users of NETSCOUT Arbor Edge Defense and/or Arbor Cloud

Features

Stateless, On-premise, DDoS Protection

Omnis AED offers best in class DDoS protection. Omnis AED can stop DDoS attacks as large as 40 Gbps and due to its stateless packet processing technology, Omnis AED can stop TCP-state exhaustion attacks that target and impact stateful devices such as NGFWs.
Intelligently Automated, Hybrid DDoS Protection

Omnis AED's Cloud Signaling can automatically route large DDoS attacks to one of NETSCOUT’s Arbor Cloud global scrubbing centers for mitigation – offering the industry best practice of hybrid DDoS protection.
Edge Enforcement of Your Threat Intelligence

Armed with potentially millions of IoCs from NETSCOUT’s ATLAS Intelligence Feed or 3rd parties, Omnis AED can enforce your threat intelligence at the network edge to stop inbound DDoS attacks and outbound communication to known bad sites. Get robust network perimeter security and defense now with Omnis AED.
Integration with Existing Security Stack and Process

Omnis AED's REST API, support for Syslog (CEF, LEEF) and STIX/TAXII, enable Omnis AED to be a fully integrated component of an organization’s existing security stack and process.

Because Omnis AED can stop all types of DDoS attacks, it should be deployed in front of your firewalls to protect them and the services behind them from DDoS attacks.

Stateless, On-premise, DDoS Protection

Omnis AED offers best in class DDoS protection. Omnis AED can stop DDoS attacks as large as 40 Gbps and due to its stateless packet processing technology, Omnis AED can stop TCP-state exhaustion attacks that target and impact stateful devices such as NGFWs.

When DDoS attacks are larger than the internet circuit, Omnis AED’s Cloud Signaling will automatically route traffic to a cloud-based scrubbing center such as Arbor Cloud for attack mitigation.

Intelligently Automated, Hybrid DDoS Protection

Omnis AED's Cloud Signaling can automatically route large DDoS attacks to one of NETSCOUT’s Arbor Cloud global scrubbing centers for mitigation – offering the industry best practice of hybrid DDoS protection.

Armed with threat intelligence from NETSCOUT’s ATLAS or 3rd parties, Omnis AED can act as a “last line of defense” to stop outbound IoCs from compromised internal devices before the data breach occurs.

Edge Enforcement of Your Threat Intelligence

Armed with potentially millions of IoCs from NETSCOUT’s ATLAS Intelligence Feed or 3rd parties, Omnis AED can enforce your threat intelligence at the network edge to stop inbound DDoS attacks and outbound communication to known bad sites. Get robust network perimeter security and defense now with Omnis AED.

Omnis AED’s support for common protocols and APIs enable it to easily become part of your security stack and process.

Integration with Existing Security Stack and Process

Omnis AED's REST API, support for Syslog (CEF, LEEF) and STIX/TAXII, enable Omnis AED to be a fully integrated component of an organization’s existing security stack and process.

Case Study

SaaS Provider of Payment Processing Solutions Protects Business from DDoS Attacks with Arbor Edge Defense

Global SaaS provider with almost a dozen data centers around the world turned to Arbor Edge Defense for increased visibility into both inbound and outbound DDoS attacks.

Download PDF