Protecting business resilience and secure network availability

Cisco Secure DDoS Protection

Protecting business resilience and secure network availability

Explore our flexible distributed denial of service (DDoS) deployment options, award-winning service, and industry-leading service-level agreements (SLAs).

Defending your customers with Cisco Secure DDoS Protection


Zero-day DDoS protection

Adaptive, behavioral-based algorithms block never-before-seen attacks with the one of the lowest false-positive rates in the industry.

Highest availability under attack

Accurately distinguishes legitimate from malicious traffic, enabling advanced SLAs and increasing service availability.

Data center efficiency

Comprehensive protection eliminates anomalous flows that consume network resources and impact application availability.

The first stop in protecting your edge

Choose the DDoS protection coverage that best suits your business needs.

Cloud DDoS

On-demand, always-on, or hybrid? We give organizations the widest security coverage to defend them from today's DDoS attacks.

On-premises DDoS

Security options include web application firewall (WAF), threat intelligence, advanced analytics, secure socket layer (SSL) traffic inspection, cloud signaling, and hybrid DDoS protection.

DDoS on Firepower

Cisco Firepower 4100 Series and 9300 appliances have enterprise-grade DDoS mitigation capabilities with Virtual DefensePro (vDP).

Flexible deployment options


On-premises

This deployment option protects against application layer attacks and provides limited protection against volumetric attacks.

Always-on

An always-on solution is ideal for customers at high risk for attacks and/or are very sensitive to downtime.

On-demand

The on-demand option works well for customers who have not yet been attacked and can tolerate brief outages.

Hybrid

The hybrid deployment option is the best overall solution for protection against application layer and volumetric attacks.


Explore deployment options

Get more information on our flexible deployment options.

Featured resources


Cisco Secure DDoS At-a Glance

DDoS protects organizations against sophisticated DDoS attacks and maintains availability using advanced behavioral-based and machine learning algorithms.

Evolution of DDoS Attack Vectors

This white paper charts the evolution of DDoS attacks and was published by Cisco in collaboration with Radware.

5 Steps to Protecting Your Organization from a DDoS Attack

This paper outlines five simple steps you can take to protect your organization from DDoS attacks. 

What is a DDoS attack?

A distributed-denial-of-service (DDoS) attack is the bombardment of simultaneous data requests to a central server.

What's new in DDoS Protection


DDoS Edge Protection is now available

Cisco Secure DDoS Edge Protection on IOS XR routers brings security to the network edge.

Secure Cloud DDoS in Security Enterprise Agreement

Add Secure Cloud DDoS Protection to your Cisco Security Enterprise Agreement (EA) to enhance network resilience.

DefensePro X

This solution provides adaptive protection from today’s most advanced DDoS threats.

Web DDoS Protection

Behavioral-based technologies provide highly effective protection from encrypted, application layer attacks.