How It Works

A change to your DNS records ensures that all HTTP/S traffic to your domain(s) is routed through the Incapsula network. Acting as a secure proxy, Incapsula masks your origin server IP and persistently filters incoming traffic—blocking DDoS traffic while legitimate requests flow through unhindered.

The DDoS filtering process relies on a set of security rules that observe client behavior, reputation and HTTP footprint. These rules are supported by progressively-stringed security challenges. The effect is to thwart DDoS attackers while making the process invisible to legitimate clients.

website protection how it works

High-Capacity Network

Incapsula global network holds 3Tbps (Terabits per second) of on-demand scrubbing capacity and can process 30 billion attack packets per second. Incapsula network has successfully defended clients against some of the largest attacks on record.

All-Inclusive DDoS Protection

An Always-on Solution

Incapsula automatically blocks all assaults, and does not require that you notify us you’re under attack, freeing your time for more strategic IT and business management tasks.

high-capacity-network.png

Transparent DDoS Protection

Legitimate visitors will not encounter latency CAPTCHAs or annoying wait screens when your website comes under attack.

All-Inclusive DDoS Protection

IP Masking

Incapsula prevents direct-to-IP DDoS attacks by hiding the IP of your origin server. For maximum effectiveness we suggest changing your origin IP address after onboarding

high-capacity-network.png

Continuous Traffic Visibility

Incapsula dashboard provides you with real-time information about incoming traffic and the ability to update security policies on-the-fly.

All-Inclusive DDoS Protection

Comprehensive Protection

Website Protection works in synch with our Infrastructure Protection and Name Server Protection services. Together these shield Incapsula customers against any all DDoS threats.

high-capacity-network.png