Our company provide services to government organizations, banks, and local police. Approximately two weeks ago, our customer experienced an attack with a volume of about 20 gigabits. Despite the attack, the website remained available and working perfectly.

We use these solutions to provide services to our customers. Customers purchase DDoS protection solutions. We have DefenseFlow Pro installed at our facility. The customers' traffic passes through this DefenseFlow, allowing us to provide enterprise services to our clients.

We are very satisfied with the solution. Recently, our company has been facing difficulties due to attacks originating from the Russian Federation. DefenseFlow has proven to be a highly effective solution in protecting our customers.

Signature protection is enabled because it uses profiles stored in the device. When configuring protection for a customer, one can select from various profiles. Migration protection is the most crucial, and we offer subscriptions with Radware.

Another effective feature of Radware DefenseFlow is the behavior mechanism, implemented for protection. This mechanism monitors the customer's traffic and typically requires one day to learn the customer's traffic patterns, establishing baselines. If significant deviations from these baselines occur, the behavior protection is triggered to safeguard the customer's traffic.

Its documentation is not 100% clear, making it the weakest aspect of Radware. We have encountered some difficulties in understanding how to configure it correctly.

I have been using Radware DefenseFlow for three years.

The product’s stability is quite good.

Radware bugs can pass through a certain amount of traffic. They say this is clean or legitimate traffic. The box itself can test through 40 megabits per second of plain traffic, but you need to buy a license. The license can accommodate 10 gigabits per second. It's the same box, but you just buy a license to accommodate the traffic. Scalability is sort of purchasing a new license.

We, a team of four people were using this solution. There are some alerts configured on the box. We'll be monitoring the health of the device to see what situation.

We had some issues. When we opened a ticket, they responded immediately.

We're using a different solution from Juniper.

We have router, which connects to other routers functioning as SDR routers that have BGP sessions with our upstream providers. We installed DefenseFlow on the device and configured it according to our customers' needs. This setup allows traffic to pass through the DefenseFlow and then proceed to the customer's location.

Sometimes it blocks traffic, and it's challenging to identify the reason why it's blocking the traffic. We can clearly see that traffic is being dropped because when we configure the whitelist to bypass anything inside the box, the traffic begins to flow, indicating that the traffic was previously dropped. However, there are no traces of this in the logs. This doesn't happen very often, but there have been a couple of instances where we've encountered this situation. It took us few days to properly configure it.

The solution brings customers.

The solution is easy to use with extensive troubleshooting. Also, it is easy to integrate, simply connect to the switch and configure ethernet ports until you are ready to go.

Overall, I rate the solution a ten out of ten.

It helps us a lot in terms of attacks, volumetric attacks, DDoS attacks, etc. It is very useful in that it also anticipates potential attackers. In addition, it helps us to automate, so we do not always have to be aware of alerts. It automatically blocks the types of attacks that occur on a daily basis.

It gives us peace of mind with its automation because DefensePro already has attacks in its knowledge base. It stops attacks and anticipates other attacks.

DefensePro is very important because the availability of our services is crucial. With the prevalence of denial-of-service attacks, volumetric attacks, it's vital for us to count on DefensePro to prevent them. It ensures we have a robust response to the many threats and attacks that arise on a daily basis. We have the availability of services that our clients need when they need them. That is the greatest benefit for us.

Since we started using DefensePro, we have not had problems with the availability of our service. It has helped mitigate the attacks that have been attempted. So far, we have not had an incident associated with denial of service issues.

Also, in the investigations we have done into verifying reports, we have seen that they are generally real denial-of-service attacks. The false-positive rate is not high. It has reduced false positives by more than 90 percent.

We realized these benefits almost immediately. As soon as we installed DefensePro, it began to deflect all the attacks that were occurring. We started seeing alerts, especially for DDoS attacks.

The platform for administration and review of attacks that are occurring or have occurred is very dynamic and easy to use and administer.

As a service provider, we use the SecOps dashboard feature. That's where we check the time of attacks to see if an attack is happening at the moment or if it has already happened, and we gather information such as how long the attack took. It is very dynamic and helps us know when an attack occurred, how long it lasted, and what type of attack it was. With this functionality, we have the information we need at hand. We know what is happening in real time and what has happened during the day. We review the dashboard for control issues, and we generate and maintain controls with antivirus attack themes.

For monitoring and reporting metrics, the dashboards are very useful. We generate controls for DDoS attacks monthly, and it makes that very easy. In addition, it helps us understand what happened. It's so easy to see what is happening, both in real time and at the time the reports or alerts are generated.

In our organization, the SecOps dashboards are managed by technical staff only. Other people in the company do not have access to it. But if they were shown to a person who is more administrative or managerial, they would understand them because they are easy to understand. I have shown certain screenshots to senior staff, and they were easily able to comprehend them. With this tool, you can express yourself in front of a person who is not involved in IT.

Its ability to detect attacks in real time is very effective. It features comprehensive automation because the signatures update themselves automatically. Plus, it can detect Zero-day attacks and possible attacks that are not yet known. That has also been of great value to us.

Right now, we have DefensePro 6. The only complaint I have is that SSL inspection, when activated, consumes a lot of resources on the machine. We are currently reviewing a possible change to DefensePro X, the new version, which has a separate module with its processors. It only consumes the performance of that card, not the rest of the machine. But SSL inspection resource consumption in DefensePro is the only thing I would say can be improved in our current version.

I have been using Radware DefensePro for six years.

It is very stable. We have not had any type of inconvenience or anomaly. It always works on top, without hardware problems. In all this time, it has been active, and we have not had any issues.

The scalability is very good. We can always add another team in our other data center. We plan to renew DefensePro and increase our use of it to solve the SSL traffic.

Their technical support is excellent. Radware always responds with what is necessary.

We started our DDoS protection with DefensePro.

The initial deployment of Radware's solution was simple. Radware typically sends its team to assist with the setup. Our implementation strategy involved a day for configuration, another for installation, and a third day dedicated to monitoring the solution. This three-day strategy is our go-to when implementing any Radware platform. It took us three days to get everything up and running.

As for staffing during the deployment, one person from Radware was present, along with two members of our IT team.

There is no maintenance required from us.

The return on investment for us is knowing that our services are available. That means we do not suffer financial losses or losses to our reputation. Those are great benefits.

We generally sign on for three-year contracts, which generates good discounts for us.

To someone who wants to go with the cheapest solution, I would say that "cheap" often ends up being expensive. With Radware, we have the support of a company that specializes in these issues and provides efficient implementation and support. My advice would be to not hesitate to pick a company or a product that has excellent capabilities, like Radware, and has automatic threat detection and mitigation.

You have the full support of Radware for everything related to implementation and support. They are always very attentive to their clients and to all the updates. They have great support. Don't think it over so much; just get it.

DefensePro is a very dynamic platform, very easy to manage, and very intuitive. It has always kept our services up, mitigating all the denial-of-service attacks we've had. We have not had any incidents. It is an excellent product.

We use the product to protect our centers from DDoS attacks. We deploy the tool across multiple offices across the Middle and Far East.

The solution provides us with data security and better protection against DDoS attacks. It also gives monthly analysis reports, which are beneficial.

DDoS Protection Service provides excellent defense in the cloud, and the implementation and migration are very straightforward.

The solution provides good real-time protection against threats.

We use the Cloud DDoS Management System, and it provides good visibility into incidents. We can centrally manage incidents according to our defense flows.

The Management System is very easy to use.

The Cloud DDoS Management System provides many cloud-based tools for analyzing and managing attacks on our organization, including alerts and reporting. There's a dashboard that allows us to monitor alerts, and we can configure reports to receive them daily and monthly.

The Cloud DDoS Management System mitigates attacks depending on their priority, but it takes less than 30 minutes to mitigate high-priority attacks, and the response begins immediately.

The product's mean time to detect an incident is ten to fifteen seconds.

There is room for improvement in the pricing; the product could be more affordable.

Improvements to the support and protection are always welcome, though they are in a good place.

We've been using the solution for ten years.

The product is stable.

The solution is scalable. We currently have 1,000 end users.

The customer support is good; I rate it eight out of ten.

The initial deployment was straightforward; it took around a month, and 30-40 staff were involved in the setup. The solution requires some maintenance.

The product gives us an ROI of around 20%.

Radware Cloud DDoS is very expensive.

I rate the solution ten out of ten.

To someone looking for a DDoS Protection product but who wants to go with the cheapest option on the market, it depends on your support and how capable you are of integrating the tool with your customers.