StormWall Appliance

Both share the same StormWall filtering technology, delivered in two formats. In the cloud, traffic first passes through our filtering network and reaches you already cleaned. With Appliance, the solution is deployed inside your own infrastructure: traffic is processed on your servers and data does not leave your perimeter.

The cloud is quicker and easier to enable, while Appliance gives you full control over your traffic and data. The attack profile also matters: steady attacks within your channel capacity are effectively filtered by Appliance, while high-volume peak attacks that exceed the channel’s bandwidth are handled by our cloud protection.

Which fits your case depends on your security team requirements, industry regulator and attack profile — we’ll help you decide during the first project discussion.

Both modes are supported — your choice.

Standalone.
Appliance is deployed within your perimeter as a full-fledged on-premises DDoS protection at L3–L5 OSI: volumetric floods, TCP stack attacks, DNS, gaming protocols and attacks in encrypted traffic.

In tandem with StormWall cloud protection.
Adds application-layer (L7) protection — HTTP Flood, Slow HTTP, WAF. For high-volume attacks exceeding your channel bandwidth, StormWall cloud protection may be used. The specific integration scenario is discussed on a case-by-case basis.

No. StormWall Appliance is delivered as software and runs on your servers — physical or virtual. Standard x86 platforms that meet the system requirements are sufficient.

We recommend using hardware platforms that have passed StormWall internal testing. Deployment on other platforms is allowed — in that case compatibility is assessed individually. The license is bound to active port capacity, not to specific hardware — you can replace a server without re-issuing the license.

It depends on the support tier. On Basic you manage the solution yourself; we provide updates, documentation and ticket responses — suitable for teams with in-house InfoSec expertise.

On Advanced you get guaranteed SLA by incident priorities and active hands-on assistance from our engineers during deployment.

If you have no in-house team at all, there is the Private tier: StormWall specialists take over the solution completely — our engineers configure rules, mitigate attacks, investigate incidents and send reports, and you get a dedicated technical account manager. In effect, you get an on-premises solution managed like a cloud service — a rare offering in the on-premises market.

Yes. Traffic is processed locally and never leaves your perimeter. For isolated networks without internet access, an offline licensing option with a hardware key is available — the solution operates without connecting to StormWall servers.

On-site deployment support (available on request).

Yes. After deployment, a free trial begins — running on real traffic, in your own infrastructure and, if needed, alongside the solution you currently use. The deployment itself takes as little as one day — including setup and starting filtering.

The demo has no strings attached: if the result doesn’t suit you, you simply don’t move on to commercial operation.