DDoS Protection

DDoS Protection FAQs

• I am under DDoS attack. How can Imperva help?

  If you are currently under a DDoS attack and have no protection, click the Under DDoS Attack button on our homepage to reach our DDoS Mitigation team. Our experts will assist you in mitigating the attack and support your business during recovery. Our solution quickly detects the attack, filters out malicious traffic, and restores normal service to minimize downtime.

• How does Imperva DDoS Protection minimize downtime during an attack?

  Imperva’s DDoS Protection automatically detects and mitigates attacks in real-time. We combine advanced Anycast technology with real-time capacity management to ensure optimal performance. Traffic is dynamically routed through the most efficient paths, reducing latency and improving network speed, even during high-demand periods or DDoS attacks. Simultaneously, real-time capacity management monitors network conditions at every point of presence (PoP), allocating resources to prevent congestion and ensure smooth operations under any traffic load.This keeps downtime to a minimum and allows your operations to continue without interruption.

• Will using Imperva DDoS Protection increase my bandwidth costs?

  No, Imperva’s solution prevents the need to scale up bandwidth by automatically blocking attack traffic. This allows you to avoid additional bandwidth costs that are typically associated with managing large-scale DDoS attacks. In addition, our globally distributed network ensures minimal latency even during large-scale DDoS attacks. This extensive reach allows you to maintain high performance and reliability without the need to increase bandwidth usage.

• What types of attacks does Imperva DDoS Protection mitigate?

  Imperva mitigates a wide range of DDoS attacks, including both Layer 3/4 (e.g., UDP floods, SYN floods, DNS amplification) and Layer 7 attacks (e.g., HTTP(S) GET/POST request floods, SlowLoris attack). We also offer DDoS Protection for Individual IPs. Our multi-layered approach ensures comprehensive protection against the most complex attacks.

• How does Imperva minimize the number of false positives?

  Imperva minimizes false positives by leveraging advanced machine learning algorithms that analyze traffic patterns and automatically set optimal thresholds for Layer 7 DDoS attacks. This adaptive protection system continuously defends your applications against evolving threats without manual configuration adjustments. Using heuristic, behavioral, and contextual analysis, along with crowdsourced data, we accurately distinguish between legitimate and malicious traffic. Only 0.01% of visitors encounter CAPTCHA challenges, ensuring a seamless user experience. Regular updates from our research team further strengthen defenses against emerging threats, providing reliable protection with minimal disruption.

• What is the difference between Always-On and On-Demand DDoS Protection?

  Imperva Always-On DDoS Protection provides continuous, real-time monitoring and mitigation against DDoS attacks, ensuring that your network is protected at all times without any latency. It automatically absorbs and mitigates threats as they occur, offering immediate defense.

  In contrast, On-Demand DDoS Protection requires manual activation when an attack is detected. While it still offers robust protection, there may be a delay in activation, potentially exposing your network to risk during that window. Always-On protection is ideal for organizations seeking uninterrupted security, while On-Demand is suitable for those who prefer to activate protection only when necessary.

• How does Imperva notify me of a DDoS attack?

  Imperva provides instant attack notifications through various channels, including email, SMS, and a mobile app. This ensures that you are immediately informed and can take appropriate action if necessary.

• Can Imperva DDoS Protection integrate with my existing security infrastructure?

  Yes, Imperva DDoS Protection seamlessly integrates with leading Security Information and Event Management (SIEM) systems. This allows you to correlate DDoS events with other security data, providing greater visibility into potential threats.

• What are Ransom DDoS Attacks and how can Imperva protect against them?

  Ransom DDoS (RDoS) attacks occur when cybercriminals threaten to flood your network with a Distributed Denial of Service (DDoS) attack unless a ransom is paid, typically in Bitcoin. Imperva offers robust and scalable DDoS mitigation solutions that ensure continuous protection without manual intervention. With our advanced technology, you can prepare for RDoS attacks by evaluating risks and understanding your organization’s vulnerability to downtime. By partnering with Imperva, you can build a comprehensive response plan, ensuring resilience during an attack and minimizing disruption to your operations.

• What are ReDoS Attacks and how can Imperva protect against them?

  Regular Expression Denial of Service (ReDoS) attacks exploit vulnerabilities in regular expressions, leading to significant slowdowns or crashes in your systems. Attackers can trigger these issues with crafted input that activates inefficient regex patterns, causing extreme computational delays or resource exhaustion. Imperva helps protect against ReDoS attacks by optimizing regex patterns and validating inputs to prevent exploitation. Our monitoring solutions detect potential threats early, allowing you to mitigate ReDoS attacks effectively before they impact your system’s performance.