AGAT Software, an innovative security provider specializing in external access authentication and data protection solutions, has released an innovative ADFS (Active Directory Federation Services) Protector.
The ADFS solution, which uses a unified monitoring and prevention mechanism, blocks DDoS attacks causing Active Directory network account lockout. It is an ideal solution for Office 365 deployments, Skype for Business and Microsoft Exchange.
The security component protects against account lockout attacks coming through ADFS authentication channels by monitoring the traffic to the ADFS server. It sanitizes and blocks (in the DMZ) failed login attempts to the Active Directory, while allowing valid users to continue working seamlessly.
“As a growing number of companies move online, the usage of ADFS is growing accordingly and companies are seeking to handle DDoS attacks, which cause account lockouts,” says Yoav Crombie, Product Manager at AGAT Software. “We are proud to announce a solution that resolves the problem entirely. By using our ADFS Protector, companies can manage their identities on premise in their Active Directory, while taking advantage of online services such as Skype for Business and Exchange.”
AGAT Software ADFS Protector offers the following advantages:
Prevents account lockout while using ADFS
Provides generic protection covering all Office 365 services and custom application using ADFS
Supports Azure AD connect
Allows unified monitoring of ADFS and Active directory services
Provides monitoring tools with extended info
Provides generic protection covering all Office 365 services and custom application using ADFS
Supports Azure AD connect
Allows unified monitoring of ADFS and Active directory services
Provides monitoring tools with extended info
The solution minimizes the load on the Active Directory and improves security by configuring a whitelist pattern of authentication requests, filtering the requests in the DMZ and enabling valid requests to enter the network.
ADFS protector addresses scenarios that other generic solution fail to handle, including the ADFS Extranet Lockout feature of Win 2012 R2.
The ADFS Protector supports hybrid and online deployments of any services using ADFS authentication such as Office 365, Skype for Business and Microsoft Exchange.
