Enterprise security leader NETSCOUT today launched major enhancements to its Arbor Edge Defense platform. This technology solution protects critical enterprise applications against sophisticated cybersecurity threats.
Furthermore, the upgrade identifies malicious attack sources hidden behind shared content delivery network proxies. Consequently, the system applies precise countermeasures to block cyber threats without affecting legitimate customer access. Modern organizations rely heavily on content delivery networks to handle online traffic volume. However, attackers exploit application-layer gaps to launch targeted cybersecurity disruptions directly at origin servers. Therefore, NETSCOUT provides source-level visibility to eliminate traffic vulnerabilities closer to protected services.
To achieve this protection, the platform integrates a high-performance transparent proxy system. Consequently, engineering teams inspect encrypted application traffic to verify genuine headers accurately. Additionally, this capability defends direct and proxy-mediated traffic paths across complex network environments. The solution also empowers enterprise IT teams to maximize existing infrastructure investments rather than replacing existing network providers.
Enhanced Arbor Edge Defense Top Technical Features
- Sources Hidden by CDN Proxies: Uses a high-performance TLS transparent proxy for decryption and inspection of application traffic, retrieves real sources from headers and applies accurate countermeasures against hidden traffic.
- Stop Application-Layer Attacks: Detects malicious traffic that is specifically crafted to exhaust resources of the application, API, authentication, or underlying infrastructure.
- Protect Applications with Use Policies Specific to the Service: Customizes countermeasures to the unique needs and individual behavior of each protected service.
- Don’t Reject Valid Customers: Only blocks malicious traffic, not service to large swaths of users behind shared CDN infrastructure or legitimate proxy traffic.
- Defend Direct and CDN-Mediated Traffic Paths: Mitigates attacks passing through the CDN as well as exploits bypassing it to target origin infrastructure directly.
- Extend Existing CDN Investments: Adds an independent layer of defense and visibility without requiring enterprises to replace current CDN providers.
Advanced DDoS Protection and Executive Quotes
The updated security framework delivers tailored defense policies to maintain continuous service availability. Consequently, organizations secure critical APIs, authentication pathways, and uncached server requests against dynamic threat campaigns.
“Cybercriminals launch DDoS attacks for many reasons, but the ultimate outcome is to drain the targeted organization’s resources,” said Christopher Rodriguez, research director, security and trust, IDC. “These attacks pose significant operational and financial risk because adversaries can target multiple layers of an organization’s infrastructure and rapidly shift attack methods. Effective DDoS defense must be dynamic, highly performant, and broad enough to protect critical services across the attack surface.”
“Enterprises cannot assume that putting a CDN in front of an application protects every path attackers can use to reach it,” said Scott Iekel-Johnson, AVP, product management, NETSCOUT. “Attackers increasingly look for ways around defenses, including targeting origin infrastructure directly or slipping through the CDN by mimicking legitimate traffic. AED closes those gaps by extending DDoS protection beyond the CDN, closer to the application itself, securing the paths attackers still exploit, enabling enterprises to protect critical applications precisely while keeping legitimate customers connected.”
To explore how Security Operations Centers (SOC) play a crucial role in defending against modern cyber threats, read our latest SOC News.
