Always On Clean Link Security

DefensePro® lets carriers extend new managed Clean Link services to customers while gaining control over ingress and egress link traffic to control malware/P2P traffic. DefensePro’s zero-minute, zero-touch, zero-false positives behavioral Denial of Service (DoS/DDoS) and intrusion prevention system (IPS) secure subscribers against known and unknown service floods, prevent worm propagation and block low-rate scanning and probing attacks, all the while controlling bandwidth to ensure service level agreements (SLAs). With DefensePro’s multilayer defense and highly virtualized platform, carriers can deliver high-performance, flexible, customized and scalable managed application and network security for value-added service and revenue growth. Radware’s behavioral algorithms, automated creation and removal of security filters greatly simplify managed security implementations, while reducing false positive ratios, thus streamlining the total cost of ownership of outsourced security models.

Radware’s Always On Clean Link managed security solutions can be deployed across enterprise and online business customers in several configurations including

• Managed Clean Link Service Model Provided through Dedicated Scrubbing Centers
  Ingress, downstream customer traffic is routed to the security scrubbing center, then forwarded through in-line detection and mitigation, extending Always On Clean Link Security services to enterprises outsourcing their network-based security. This service model is typically asymmetric.
  
  
• Clean Business Broadband over xDSL
  Utilizing policy-based routing at the broadband remote access server (BRAS) level (or at a higher aggregation layer), paying subscriber traffic is redirected to local scrubbing devices cleaning broadband pipes from network-based attacks. This service model may be symmetric (for upstream and downstream traffic) and different regulation requirements apply in different countries.
  
  
• Clean IPVPN Service for Intranet Traffic
  Our service is based on identifying subscribers at the P-PE level (MPLS aware device) and cleaning the relevant Intranet traffic. Typical implementations utilize the Hub and spoke topology. Large Tier-1 operators often warrant the routing of paying customer VPN traffic to a Security PE to reduce operational complexity.

Always On Clean Link Security solutions include these features and benefits

• Managed multi-Gigabit, Always On Clean Link Security
• Network-based, hybrid signature and behavioral intrusion prevention model for multilayer customer security
• Advanced distributed Denial of Service prevention securing against network floods
• Granular, virtualized policy-based IPS and DoS
• High scalability for CAPEX/OPEX savings
• Managed security SLAs by key performance indicators
• Carrier-grade performance, fault tolerance and network transparency
• Reduced customer churn and improved subscriber service levels