AppTrana

How easy is it to setup? is it via proxy or tunnel or within AWS infrastructure like AWS Global Accelerator? How can it protect from advanced Layer 7 attacks?

Hey Product Hunters! We are excited for you to check out AppTrana and its new feature Behavioral DDOS Protection. We envision a world that allows businesses to go digital fearlessly. As part of that vision, we want to make it extremely easy to help businesses to protect their applications. One of the biggest challenges that organisations faces are denial of service attack, where attackers clog applications resources so that requests from real users go unanswered. The two basic and only fundamentals of protecting against such kind of volumetric DDOS attacks are: 1. Ability to observe the volume of requests, as the initial defence against volumetric app DDOS is to scale and observe requests sent to the application without running out of resources. 2. Identify unwanted requests and drop them quickly. These detections are done by identifying unusual spikes and blocking them. The problem is around identifying unwanted requests. Most DDOS attacks do not have malicious request patterns but are voluminous in nature and the only defence against them is volumetric rules but it becomes hard to fine-tune these rules as traffic behaviours keep changing. One needs to understand the traffic pattern and adopt them. This is the ability we provide with our new feature Behavioral DDOS Protection. Customers will have the ability to look at the traffic trend for the last 7 days and set the limits that will change dynamically based on changing application traffic trends. With Behavioral DDOS Protection, customers get to - Behavioural DDOS can be configured to be triggered if behaviour of requests to application changes, which means any normal variance in the request is accounted for and alerts are triggered only when there is an abnormality. - By default, three policies that monitor traffic on the host, IP and session-level are configured. - When an application is onboarded, these policies are configured with generic values that work for most applications. - Within a few days of onboarding the application, based on behaviour observed, appropriate values are derived which provides optimal protection. - Customers can configure additional policies based on their needs. Policies can be configured to take various actions when triggered including blocking the requests outright. As part of our launch, you can sign up for a free trial and give Indusface WAF a spin. We'd love to hear your feedback and thoughts on this.

useful, thankyou