AS203446 Post-filtering
What the prefilter allows through is subsequently handled by AS203446 our proprietary post-filtering software. This software is powered by a cluster of Intel Xeon systems equipped with Mellanox network cards, engineered for high performance and scalability.
Protocol Attack Protection
The post-filtering can block the following types of attacks:
Invalid packets
Anomalous TCP flag combinations (e.g., no flag, SYN-FIN, SYN frag, LAND attack)
SYN-ACK amplification attack protection
IP options
Packet size validation (prevents 'Ping of Death')
TCP/UDP/SSL/ICMP flood protection
Per-connection traffic control
Challenge-based Authentication
Our software also utilizes various challenge-based authentication mechanisms:
TCP SYN cookies, SYN authentication
ACK authentication
Spoof detection
DNS authentication
Zero-day Automated Protection (ZAPR)
We also leverage machine learning algorithms for real-time attack pattern recognition and filtering, which offers:
ZAPR: Machine Learning powered attack pattern recognition
TCP progression tracking
Capability to prevent zero-day attacks
No pre-configuration or manual intervention needed
Fast, automated response
By incorporating advanced AI techniques, our system adapts to new forms of network-level attacks, offering robust security with minimal lag or disruption. This allows us to provide our users with a stable, uninterrupted experience.
Previous
Prefilter
Next
