Internet Service Provider, Canada

cs-wave-line

Long-term Network Protection Against Evolving DDoS Attacks

About the Customer

This customer is a leading service provider in Canada. The company offers internet connectivity and VoIP services to Canadian residential consumers and business customers. It is one of Canada’s most experienced digital phone service (VoIP) providers and it delivers leading-edge Internet and network services, award winning voice services, and cloud-based phone systems (Hosted PBX). 

Challenge

This service provider has been an Allot customer for almost a decade, having deployed Allot security solutions for inbound volumetric DDoS protection. From the start of this relationship, our customer’s primary concern has been to provide security for their network and customers.  Its objective:  protect the network and its processing capacity from volumetric inbound DDoS attacks originating from external sources on the Internet in order to assure resilient service delivery for its customers while maintaining subscriber quality of experience. The customer originally approached Allot following a DDoS attack on their network. Although attack volumes were not as big as seen today, it could foresee the potential risk and made a decision to use DDoS mitigation to ensure that its network and its customers are protected from attacks and to prevent any collateral damage to its users. At the same time, it was important that the implementation of robust security did not adversely affect network performance and the user experience. For the CSP, a significant factor in selecting a security solution is the ability to increase customer retention and minimizing churn.  The CSP required a DDoS protection solutions that maintains a high quality of experience for all subscribers during DDoS attacks.  . So, the challenge was to offer our customer value-added security features that would protect its network from DDoS attacks while assuring network services availability and consistent application quality of experience. Our customer needed a solution that was easy to integrate with its existing offering; one that could quickly identify inbound attacks, automatically mitigate those attacks, and provide protection with precision. And as time progressed, the solution needed to be seamlessly scalable and flexible, responsive to changing circumstances and new threats.  

Solution

Initially, the customer deployed Allot high performance DDoS detection sensors on its own servers, and the Allot Service Gateway Omega (SG-Omega) platform that it implemented for service deployment, delivery and management. SG-Omega was subsequently upgraded to the next-generation Allot Service Gateway Sigma E (SG-Sigma E) platform, on which our customer was able to activate the Allot ServiceProtector (SP) software license. SP provides high-speed real-time detection, reporting and mitigation of DDoS attacks from the Internet. It reinforces service continuity by ensuring that services are uninterrupted and there is no collateral damage to non-targeted users (aka, innocent bystanders). Users are completely unaware of a DDoS attack on the network because there is no degradation to the quality of their service delivery. As our customer anticipated, the challenge from DDoS attacks has become increasingly sophisticated and varied over the years. In order to keep pace with the newest and most sophisticated challenges to network security and optimization, the CSP chose to remain with Allot DDoS mitigation solution that proved to be effective in protecting its network and upgrade the platform to address the natural growth in network service consumption.  Allot was able to seamlessly scale the solution with its latest DPI-based platform, Allot Service Gateway Tera, to expand DDoS protection across the customer’s national network. With Allot, the customer has the capability to deliver traffic management to ensure QoE, and application control for QoS, and DDoS protection. This service provider was the first Allot customer to deploy Allot ServiceProtector in North America. With Allot, it has been able to successfully mitigate attacks with increasing volumes year after year. Today Allot helps this customer to mitigate a varied range of attacks including TCP (SYN) floods, UDP and HTTP floods, NTP amplification and other.

Deployment

Allot’s solution is strategically deployed at a network level to provide robust security for the network. Allot ServiceProtector is activated as part of the Allot Service Gateway multiservice platform. Allot inline mitigation inspects 100% of the network traffic and provides the industry’s fastest and precise mitigation (Time To Mitigate < 60 seconds).

Benefits

Allot was chosen by this service provider for its ability to combine QoS with DDoS protection at a competitive price point with a solution that maintains subscriber quality of experience through an attack. By deploying Allot ServiceProtector within Allot Service Gateway, the customer has been protecting subscribers from the largest volumetric DDoS attacks, while mitigating and avoiding risk to the network and services. Working together, the customer and Allot have successfully addressed the changing nature of security challenges so that it can confidently provide reliable access and protection for all users, and a consistently high quality of experience.

Conclusion

Network operators understand the importance of network security to ensure reliable and fast connectivity and consistent quality of experience for their users. Allot delivers this in a way that is flexible, future-proof, comprehensive and cost-effective, which helps to reinforce operators’ service offering and support the ongoing growth of their business. 

The Allot solution protects our network from DDOS attacks so that services are resiliently delivered and our customers maintain their quality of experience.”

Director of Network Engineering, CSP, Canada

Challenge

  • Protect services and, the network from DDoS attacks originating from the Internet
  • Maintain high quality of experience for users during DDoS attacks

Solution

Allot ServiceProtector activated on Allot Service Gateway platform provides real-time detection, reporting and mitigation of attacks

Benefits

  • Network Protection
  • Resilient Service Delivery
  • High QoE Maintained
  • Lowered overheads
  • Accelerated ROI