Security professionals are under extreme pressure to stop a dizzying array of threats against their organizations. Said one Arbor client, “ … I feel like I’m in a constant gun fight with an enemy that is surrounding me and completely stealth.”
The nature of security these days is often just trying to make the most educated guesses as quickly as possible – starting with a firewall. Why not go with what’s tried and true? The firewall is there to stop bad people from sending anyone in the organization bad information. Furthermore the ‘next generation’ firewalls that vendors provide these days claim to stop DDoS attacks, too. Check. All set: on to the next problem.
Unfortunately, this is where many organizations fail. The reality is that while vendor firewall security may stop some DDoS attacks – in other cases they can make matters worse.