Hello, there are a number of articles about DDoS on the community, which suggest ways to identify and mitigate DDoS attacks:
https://community.pulsesecure.net/t5/Pulse-Secure-vADC/Managing-DDoS-attacks-with-Stingray-Traffic-Manager/ta-p/28485
https://community.pulsesecure.net/t5/Pulse-Secure-vADC/Enhanced-anti-DDoS-using-TrafficScript-Event-Handlers-and/ta-p/33105
https://community.pulsesecure.net/t5/Pulse-Secure-vADC/Protection-from-DOS-DDOS-and-badly-programmed-bots-on-public/m-p/28201
Pulse vADC and vWAF can also help to block some types of traffic completely, and if you have any other tools which also identify undesirable traffic, then you can use the APIs to create a new rule which will block or throttle traffic from that type of source.
Pulse Traffic Manager includes real-time activity charts on individual nodes, but you could also use the optional analytics application on Pulse Services Director to look at a complete end-to-end traffic flow, which may also help to explore different types of traffic, and look at historical activity of the same type.
Other integrations are also possible. For example, on internal networks, Pulse vWAF can alert Pulse Policy Secure of suspicious activty from endpoints or IoT devices, and Pulse Policu Secure can isolate the traffic on the network, and enforce single sign out on any device using the same credentials.
... View more
