Check Point DDoS Protector X40
Next-Generation DDoS Protection and Attack Mitigation Appliance

Automated Zero-Day Attack Defense

Behavioral-based detection and mitigation to defend against unknown zero-day attacks without impacting legitimate user experience

Keyless SSL/TLS Flood Mitigation

High-capacity keyless protection from SSL/TLS-based DDoS attacks without adding latency to customer communications and while preserving user privacy

Advanced Attack Protection

Detection and mitigation of today’s most advanced attacks, including Burst attacks, Domain Name System (DNS) amplification attacks, IoT botnet floods, Layer 3–7 and other crippling DDoS attacks

Patent Protected Real-Time Attack Signature

Automated signature creation and advanced challenge escalations to achieve the highest mitigation accuracy that can automatically mitigate unknown attacks and minimize the impact on legitimate traffic

Simple Management Dashboard

The new dashboard allows admins to easily navigate and quickly view detection events, apply policies, or refine configurations, all from the same window.

Network Analytics

Network Analytics with comprehensive visibility of traffic stats at any time.

Complete Visibility

Unified visibility and control for both out-of-path and inline DDoS protection solutions, optimized troubleshooting, and enriched search and filter capabilities.

Multiple Deployment Options

Multiple deployment options offering broad protection and mitigation capacity (6Gbps to 800Gbps), virtual appliances and integrated hybrid solution.

Fewer False-Positives

Anti-DDoS, network behavioral analysis, IPS and SSL-attack protection. Fully protects the application infrastructure against known and emerging network security attacks.

Real-Time Signature Creation

DDoS Protector is a real-time attack prevention device that protects your application infrastructure against network and application downtime, app vulnerability exploitation and network anomalies.

Real-Time Attack Detection & Prevention

Attack mitigation at scale offers a wide range of protections, up to 800Gbps. Flexible network connectivity accommodates an array of environments and networks. Options include 25G, 400G and high-density 100G ports.

Completely Managed Devices

On-premise device management provided by specialized Emergency Response Team (ERT) including security experts that set up, manage and tune the device to keep it synchronized with business processes and policies.

Flexible Deployment Options

Pick the option that best suits your architecture or use case, with cloud-based, hardware-based, or hybrid deployment options.

Dynamic & Granular Protection

Service providers with large-scale networks can easily detect and mitigate attacks and anomalies.

SSL Attack Mitigation

Hardware-based SSL engines inspect the latest SSL/TLS standards.

On Premises and Cloud-Based Mitigation

Defense Messaging between devices provides accurate and distant mitigation.