Can Cisco FTD block DDoS attack?

[King_1988]

Hi Good People

We have cisco 2100 ftd managed by FMC. Can this block DDoS attack or any model of ftd or do we need any license? 

[marce1000]

 - Review this thread : https://community.cisco.com/t5/network-security/ftd2100-ddos-protection/td-p/4143697

 M.

[King_1988]

Thanks. But it would be better if you can reply in just summary of this. Whether it blocks DDos or not? And which license/feature needed to block DDos?

[Georg Pauwen]

Hello,

as far as I recall, the FTD 4100 does support advanced DDoS protection.

https://www.cisco.com/c/en/us/products/security/secure-ddos-protection/index.html#~products

[King_1988]

Can you please confirm? I need the correct info. FTD2100 supports DDoS blocking?

[Marvin Rhoads · Accepted solution]

Only in the most basic sense (protect against syn floods, scanners etc.).

True DDoS protection (for instance from volumetric attacks) requires an external service like the Radware service. It is available as an optional add-on for 4100, 4200 and 9300 series (or as separate appliances or cloud-delivered as a service).

(EDIT 12-25-2024: not offered on 4200 series.)

[King_1988]

Thanks a lot Marvin for the specific answer.

[kaiminchu]

Dear Sir

Is there any documentation to prove that 4200 supports Radware’s DDoS protection?

[Marvin Rhoads]

Sorry, I wrote incorrectly earlier. The Radware vDP option is only available on 9300 and 4100 series firewalls.

See Table 9 here for confirmation:

https://www.cisco.com/c/en/us/products/collateral/security/secure-firewall/guide-c07-737902.html