Tracing DDoS attacks across 1,100 schools for a managed service provider
A telecoms and managed services provider responsible for the networks of around 1,100 schools needed application visibility across all of them from one place. Rebasoft gave it a central view of the schools’ firewall traffic and the evidence to analyse DDoS attacks.
- ~1,100
- schools covered
- 1
- central deployment
- Minimal
- configuration change at each site
- DDoS
- attacks analysed by source and scale
The challenge
- More than a thousand school sites, so any solution had to be simple to roll out.
- No central view of connectivity or application use across the schools.
- DDoS attacks affecting schools, with no easy way to see where they came from or how large they were.
Our approach
- Rebasoft traffic analysis deployed centrally by the provider.
- Flow records exported from the schools’ firewall platforms, with minimal configuration.
- One interface for network behaviour across every school.
What the provider gained
Immediate visibility
Firewall traffic from the schools visible from day one.
DDoS analysis
The source and scale of attacks understood.
Central view
All schools reported from a single deployment.
Low-touch rollout
A simple installation with minimal changes at each site.
Application insight
What applications schools are using, and how much.
A service to sell
Visibility the provider can offer as part of its managed service.
The outcome: one view across 1,100 schools, and the facts to respond to DDoS attacks.
Why it matters for service providers
Scale
Thousands of sites, one deployment.
Security insight
Attack source and scale from flow data.
Simple rollout
Uses the firewalls already in place.