Introduction

FortiDDoS F-Series is a distributed denial of service (DDoS) prevention system that detects and blocks attacks that intend to disrupt network service by overwhelming server and/or other network resources.

FortiDDoS uses a variety of methods, including anomaly detection, Source IP address validation, packet header and payload validation, Source and/or Destination Layer 4 port rate limiting, specific parameter rate limiting and statistical techniques, to provide nonstop protection, including from as-yet unknown “zero-day” attacks. When FortiDDoS detects an attack, it begins mitigation within 1 second while constantly re-evaluating attacks to prevent false-positive actions.