Solution to Prevent the D-DOS Attack

[ray_stone]

Hello Experts,

We have our Production Servers placed at ISP DC where we are using Cisco ASA firewall model 5505 and all the servers placed behind the firewall.The bandwidth we have 100 MBPS and there is no IPS device in between.

Since long time, we have been experiencing some network issues and recently we detected the D-DOS attack affecting our Prod Services and now we are looking to have a solution to mitigate the attack.

Can somebody please suggest the solution which must be cheapest in the terms of COST to get this attack stopped?

We contacted to Radware on this but the solution that they are recommending is too expensive.

Can we achieve the solution by implementing the Cisco IPS module/appliance and will it work to prevent the D-DOS attack?

Whatever best solution you can recommend then please suggest and an early response on this would be highly appreciated as we need to have a quick solution.

Thanks.

[turnera]

Ray,

The only real option you have with the 5505 is the Cisco ASA AIP SSC-5 module. It should also help with the DDOS problem you find yourself with. You do need to understand that the 5505's and the AIP SSC-5 are EOL now.

You probably need to consider budgeting for upgrading this equipment in the near future....