Using FortiDDoS SPPs
Service Protection Profile (SPP) Rules are used to enable a single FortiDDoS appliance to protect multiple network zones with thresholds appropriate for the traffic in each of those zones.
One SPP (default) is designated as the default SPP. You allocate the remaining SPPs to subnets.
In an enterprise deployment, you can configure SPPs for specific departments, geographic locations, or functions within an organization.
In a multi-tenant deployment, you can use SPPs to separate a single physical FortiDDoS device into multiple logical devices. Each SPP has its own configuration and traffic database. The configuration of each SPP can be under the control of a different administrator.
The following figure shows how multiple SPPs are used to protect multiple subnets.
Multiple SPPs, multiple subnets
