Radware DefensePro

What is Radware DefensePro?

Radware DefensePro is a dedicated DDoS attack protection solution - hardware or virtual appliance that detects and blocks volumetric, protocol, and application attacks in real-time. Without impacting legitimate traffic.

Key features:

• Behavioral Detection - signature-less attack detection (ML)
• Multi-vector Protection - L3/L4 volumetric + L7 application
• Bot Manager - protection against malicious bots
• SSL Attack Protection - encrypted traffic inspection

What problem does it solve?

flowchart LR
    subgraph Without DDoS protection
        A[DDoS Attack] --> B[Link Overload]
        B --> C[Application Down]
        C --> D[Business Losses]
    end

    subgraph With DefensePro
        E[DDoS Attack] --> F[DefensePro]
        F --> G[Behavioral detection]
        G --> H[Mitigation in seconds]
        H --> I[Application Running]
    end

    style A fill:#dc2626,stroke:#b91c1c,color:#fff
    style B fill:#dc2626,stroke:#b91c1c,color:#fff
    style C fill:#dc2626,stroke:#b91c1c,color:#fff
    style D fill:#dc2626,stroke:#b91c1c,color:#fff
    style E fill:#dc2626,stroke:#b91c1c,color:#fff
    style F fill:#f59e0b,stroke:#d97706,color:#fff
    style G fill:#8b5cf6,stroke:#7c3aed,color:#fff
    style H fill:#22c55e,stroke:#16a34a,color:#fff
    style I fill:#22c55e,stroke:#16a34a,color:#fff

Common problems:

• DDoS attacks cause application outages
• Firewall/IPS cannot handle volumetric attacks
• SSL/encrypted traffic attacks bypass traditional security
• Bots scrape content and perform credential stuffing
• Cloud-only DDoS protection has too much latency

How does DefensePro work?

flowchart TD
    A[Incoming Traffic] --> B[DefensePro]
    B --> C{Behavioral Analysis}
    C --> D[Baseline Learning]
    D --> E{Anomaly?}
    E -->|No| F[Pass to Server]
    E -->|Yes| G[Challenge/Block]
    G --> H{Legitimate?}
    H -->|Yes| F
    H -->|No| I[Drop]

    style A fill:#6366f1,stroke:#4f46e5,color:#fff
    style B fill:#f59e0b,stroke:#d97706,color:#fff
    style C fill:#8b5cf6,stroke:#7c3aed,color:#fff
    style E fill:#f59e0b,stroke:#d97706,color:#fff
    style F fill:#22c55e,stroke:#16a34a,color:#fff
    style I fill:#dc2626,stroke:#b91c1c,color:#fff

DDoS Attack Types

DefensePro protects against all vectors:

Key Technologies

Deployment Architecture

flowchart TD
    subgraph Internet
        A[Attackers]
        B[Legitimate Users]
    end

    subgraph Cloud Scrubbing
        C[Radware Cloud]
    end

    subgraph Customer DC
        D[DefensePro]
        E[Firewall]
        F[Load Balancer]
        G[Servers]
    end

    A --> C
    B --> C
    C -->|Clean Traffic| D
    D --> E
    E --> F
    F --> G

    style A fill:#dc2626,stroke:#b91c1c,color:#fff
    style B fill:#22c55e,stroke:#16a34a,color:#fff
    style C fill:#8b5cf6,stroke:#7c3aed,color:#fff
    style D fill:#f59e0b,stroke:#d97706,color:#fff

Who is it for?

DefensePro vs Competition

Aspect	DefensePro	Arbor	F5	Cloudflare
Deployment	On-prem + Cloud	On-prem + Cloud	On-prem	Cloud-only
Behavioral ML	Yes	Yes	Limited	Yes
SSL inspection	Hardware accel	Yes	Yes	Yes
Bot management	Integrated	Separate	Separate	Integrated
Latency	<1ms	Low	Low	Variable
Price	Mid-Premium	Premium	Mid	Competitive

DefensePro advantages:

• Behavioral detection without signatures (zero-day)
• Hardware acceleration for SSL
• Integrated bot management
• Hybrid cloud architecture
• Emergency Response Team (ERT)

Specifications

Parameter	Value
Throughput	1 Gbps - 400 Gbps
Latency	< 60 microseconds
Form factor	Hardware appliance, Virtual
Deployment	Inline, Out-of-path, TAP
Management	APSolute Vision
Cloud	Radware Cloud DDoS Protection
Standards	OWASP, PCI DSS

FAQ

How is it different from a firewall? Firewall filters based on rules (IP, port). DefensePro uses behavioral analysis to detect traffic anomalies - without rules, automatically.

Inline or out-of-path? Inline for full protection (L3-L7). Out-of-path for volumetric only - traffic redirected during attack.

What about cloud DDoS? DefensePro integrates with Radware Cloud. Volumetric attacks scrubbed in cloud, L7 attacks handled on-prem.

How quickly does it detect attacks? Behavioral detection in seconds. Automatic mitigation without administrator intervention.

What is ERT? Emergency Response Team - Radware experts available 24/7 during attacks. Help with custom mitigations.

Does nFlo deploy DefensePro? Yes. On-prem and hybrid deployments, behavioral policies configuration, SIEM integration, tuning.