With the network development, major carriers, as well as IDC company not only needs network security protection, but also requires the stability of security protection. The concept of traffic flow diversion was proposed very early, but due to the various means of attack, the products we see are often less satisfactory products.Kingdon has more than six years of in-depth research on DDOS attacks, analysed of the weakness of industry's handling in the traffic analysis, and build the abnormal flow detector System JD-Detector.
Kingdon can implement the protective bypass mode on the basis of scalable aggregation firewall cluster, Adding the Kingdon flow Analyzer (Detector) over the original cluster can achieve bypass protection, so as to avoid stability of safety equipment's side effect to the entire network.
JD-Detector can perform real-time relational analysis of traffic flows on different network nodes, after locating the abnormal flow it can notice JDFW to divert and filter, thus decontaminate the abnormal flow, thereby eliminating the anomalies caused by abnormal network traffic
Product features:
- supports a wide range of data collection mode, such as mirror, SPAN, sFlow, NetFlow etc.
- accurate attack detection, dozens of attack detection algorithm to effectively identify a variety of attacks
- complete log , as small as the IP-logging, can also issue analysis reports
- can be linked with the firewall. Linkage to JDFW can effective clean-up abnormal flow.
Methods of deployment can be refered to: the deployment of Kingdon firewall protection bypass scheme
