> For the complete documentation index, see [llms.txt](https://docs.colt.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.colt.net/datasheets/security/ip-guardian.md). # IP GUARDIAN ## AUTOMATED DISTRIBUTED DENIAL OF SERVICE ATTACK MITIGATION Distributed Denial of Service (DDoS) attacks are becoming a major risk to service availability of mission critical, internet based applications. And for Colt IP Access customers, Colt IP Guardian DDoS protection service is the solution. IP Guardian will automatically filter DDoS attacks within seconds and without the necessity for human intervention, rerouting or tunnelling. IP Guardian can protect all Colt IP Access users regardless of the type or number of IP addresses used. #### AUTOMATED THREAT DETECTION AND MITIGATION IP Guardian provides a full suite of countermeasures that remove distributed denial of service attack traffic while enabling the flow of legitimate traffic – all without interrupting the network. It is proven to be effective for detecting and removing threats such as high-volume flood attacks, stealth application layer attacks and attacks hidden in SSL packets. It supports both IPv4 and IPv6 infrastructure. Fully automated, IP Guardian keeps your network and services up 24 hours a day, seven days a week, 365 days a year. #### MITIGATION IN SECONDS Key to effective mitigation is the ability to identify and block attack traffic while allowing non-attack traffic to flow through to its intended destination. Whether it’s a high-volume flood attack designed to exhaust bandwidth capacity or a targeted attack looking to bring down a website, IP Guardian can isolate and remove the attack traffic in as fast as a few seconds. Methods include identifying and black-listing malicious hosts, IP location-based mitigation, protocol anomaly-based filtering, malformed packet removal and rate limiting (to gracefully manage non-malicious demand spikes). Mitigations can be automated or left to be manually triggered by the customer. #### REAL-TIME REPORTING Our real-time mitigation dashboard is a single screen that shows users exactly what is generating a DDoS alert and what effect the countermeasures are having on the attack. If requested, it provides the ability to modify countermeasures and delivers full packet capture and decode to get a detailed view of both normal and attack packet streams. This information is stored for future reference and management reporting. All IP Guardian customers will get access to this reporting via a dedicated website. #### UNLIMITED MITIGATIONS IP Guardian DDoS mitigation is unlimited. A fixed monthly fee covers all mitigations, regardless of the number of mitigations per year or the size of the attack. The customer is charged for clean traffic bandwidth based on the bandwidth of the related IP Access which will set the price of the service, and there are no additional or hidden costs. ## KEY BENEFITS * DDoS Protection in the Backbone\ Colt implements the DDoS protection directly in the network – no rerouting, tunnelling or specific IP requirements. * Fully automated mitigation\ Fully automated mitigation is triggered within seconds, once DDoS attack is detected, and no manual intervention is necessary. * Unlimited mitigation, no hidden costs\ A fixed monthly fee covers all mitigations, regardless of the number of mitigations or the size of the attack. * High availability\ The solution is deployed across the Colt IP backbone at strategic locations. * Flexible\ Customers can choose to protect just mission critical traffic or all IP ranges. * Excellent customer service\ Our customer service is always available to help. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://docs.colt.net/datasheets/security/ip-guardian.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.