Microsoft has announced that the Azure DDoS IP Protection SKU, a new SKU of Azure DDoS Protection built for SMBs, is now available in preview. This will help SMBs on their digital transformation journey by ensuring that they are protected against the latest DDoS attack vectors.
DDoS IP Protection helps SMBs by providing enterprise-grade DDoS protection at an affordable price. It offers the same essential capabilities as Azure DDoS Network Protection which was previously known as Azure DDoS Protection Standard. It provides protection against DDoS attacks, including L3/L4 automatic attack detection and mitigation, metrics and alerts, mitigation flow logs, mitigation policies tuned to customer applications, and tight integration with Azure Firewall Manager, Microsoft Sentinel, and Microsoft Defender for Cloud.
The DDoS IP Protection SKU lets customers protect individual public IP addresses from DDoS attacks. This is a cost-effective option for SMB customers who have a few public IP addresses to protect.
Features of Azure DDoS IP Protection
- Massive mitigation capacity and scale: Azure DDoS IP Protection defends customers’ workloads against the largest and most sophisticated attacks using cloud-scale DDoS protection which is backed by Azure’s global network.
- Adaptive tuning: It minimizes false negatives with adaptive tuning which is tuned to the scale and actual traffic patterns of customer applications.
- Attack analytics, metrics, and logging: Customers will be able to monitor DDoS attacks in real-time. They can quickly respond to attacks by knowing what is happening, where the attack is coming from, and how to stop it.
- Integration with Azure Firewall Manager: Customers can centrally manage DDoS protection across their environment alongside other network security services.
- Integration with Microsoft Sentinel and Microsoft Defender for Cloud: Azure DDoS IP protection strengthens the security posture with deep attack analytics and telemetry which is integrated with Microsoft Sentinel and security alerts and recommendations offered by Microsoft Defender for Cloud.
Azure DDoS protection now offers two SKUs, namely, DDoS IP Protection and DDoS Network Protection.
DDoS IP Protection is recommended for SMB customers with a few public IP resources who need a fully managed, and easy to deploy and monitor comprehensive DDoS protection solution.
DDoS Network Protection is recommended for larger enterprises and organizations that plan to protect their entire deployment spanning multiple virtual networks.
The below image shows a detailed comparison of these two SKUs.
With DDoS IP Protection SKU, SMB customers only need to pay for the public IP resources protected. The monthly cost for each public IP resource protected is fixed with no additional variable costs. Billing for IP Protection will be effective from February 1, 2023.
Read next: Microsoft to drive sustainability through the Microsoft Cloud
