NetScout Arbor Edge Defense

Deployed in between the firewall and internet router, and using highly scalable stateless packet processing technology, Arbor Edge Defense acts as a network perimeter threat intelligence enforcement point where it blocks in bulk, inbound cyber threats (e.g. DDoS attacks, IOCs) and outbound malicious communication - essentially acting as the first and last line of perimeter defense for an organization. Features First & Last Line of Defense AED’s unique location on the network edge, its stateless packet processing engine and ATLAS® global threat intelligence feed allow it to stop inbound threats and outbound communication from compromised hosts. Integration with Security Stack REST API, support for STIX/TAXII, Syslog, CEF, LEEF and Contextual Threat Intelligence fueled by ATLAS enable AED to integrate into existing security stack and processes. Intelligently Automated, Hybrid DDoS Protection The intelligently automated, fully managed combination of in-cloud (via Arbor Cloud) and on-premises (via AED) is continuously armed with ATLAS global threat intelligence; offers the most comprehensive form of protection from the modern-day DDoS attack. Outbound Threat Communication Detection and Blocking AED’s ATLAS derived, reputation based threat intelligence allow it to detect and block outbound communication from internal compromised hosts; helping to stop further proliferation of malware or data breach. Support for Virtual & Hybrid-Cloud Environments vAED is a virtual version of the AED appliance that can be run in your private virtual environment like Amazon Web Services, providing unified protection for your hybridcloud environments. Benefits

• First Line of Defense: Deployed at the network perimeter, using stateless technology and armed with millions of IoCs, AED detects and blocks inbound commodity cyber threats thus taking pressure off of stateful devices such as Next Gen Firewalls.
• Last Line of Defense: Missed by existing security stack, AED can detect and block outbound communication to known bad IP addresses, domains, URLs, geographies; thus helping stop the further proliferation of malware within an organization and avoid a data breach.
• Contextual Threat Intelligence: When an IoC is blocked, AED leverages the global threat intelligence of NETSCOUT ATLAS to provide more context related to the IoC thus helping security teams determine risk and/or give them more information to proactively hunt using their other security tools.
• Best of Breed DDoS Protection: AED can automatically detect and stop inbound application layer, TCP-state exhaustion and DDoS attacks as large as 40 Gbps. In the event of even larger DDoS attacks, Cloud Signaling automatically reroutes traffic to Arbor Cloud or a MSSP’s cloud-based mitigation center.
• Integration: AED’s robust REST API, support for STIX/TAXII, Syslog, CEF, LEEF enable AED to integrate into existing security stack and processes.