DoS To FTD

[dcanady55]

Hello,

FTD 2110s 7.4.2.4

I'm looking for suggestions on two topics. 

1. What's the best way to help prevent Dos attacks to the FTD itself. Is flex config the only way and does anyone have a proven config. for that they could share?

2. What upstream service could you suggest if the ISP doesn't offer one?

Thanks

[ahollifield · Accepted solution]

1. Use some upstream cloud-based provider (Cloudflare, Imperva, etc.). Modern DDoS attacks will crush most on-prem things which cannot automatically scale to stop it. Or you need to get your ISP involved. If you want a Cisco option: https://www.cisco.com/c/en/us/products/collateral/security/secure-ddos-protection-aag.html
2. Radware, but again better go with a SaaS solution for this.

[dcanady55]

Thanks for your input!