Microsoft announces enterprise DDoS protection for SMBs

Microsoft announced today the availability of Azure DDoS IP Protection in public preview, a new and fully managed DDoS Protection pay-per-protected IP model tailored to small and midsize businesses (SMBs).

To a great extent, it provides the same capabilities as DDoS Network Protection (previously known as DDoS Protection Standard), which is designed to help large enterprises and organizations to defend significantly larger resource deployments.

Essential capabilities bundled with this new SKU include L3/L4 automatic attack detection and mitigation, metrics and alerts, mitigation flow logs and policies tuned to customer applications.

The new SKU comes with Azure Firewall Manager, Microsoft Sentinel, and Microsoft Defender for Cloud integration.

Unlike the enterprise offering, DDoS IP Protection does not have support for DDoS rapid response support, cost protection, and discounts on WAF.

"With the DDoS IP Protection SKU, customers now have the flexibility to enable DDoS protection on individual public IP addresses," Microsoft Senior Product Manager for Azure Networking Amir Dahan said.

"SMB customers who have a few public IP addresses to protect will benefit from this cost-effective DDoS protection option."

How DDoS IP Protection works (Microsoft)

 

As further highlighted by Dahan, the list of DDoS IP Protection key features includes:

• Massive mitigation capacity and scale: Defend your workloads against the largest and most sophisticated attacks with cloud-scale DDoS protection backed by Azure's global network.
• Adaptive tuning: Protect your apps and resources while minimizing false negatives with adaptive tuning tuned to your application's scale and actual traffic patterns.
• Attack analytics, metrics, and logging: Monitor DDoS attacks near real-time and respond quickly to attacks with visibility into the attack lifecycle, vectors, and mitigation.
• Integration with Azure Firewall Manager: Centrally manage your DDoS protection across your environment alongside other network security services.
• Integration with Microsoft Sentinel and Microsoft Defender for Cloud: Strengthen your security posture with rich attack analytics and telemetry integrated with Microsoft Sentinel and security alerts and recommendations provided by Microsoft Defender for Cloud.

DDoS IP Protection is available in preview in select regions, and customers can only enable it on Public IP Standard SKU after enrolling.

You can configure the SKU in the Azure Preview Portal as part of the Azure DDoS Protection configuration workflow.

Billing for IP Protection will be effective starting February 1st, 2023, and you can find more pricing info on the Azure DDoS Protection pricing page.