Recently we are getting dos attack by spoofing IP. How can we prevent this, We have APF firewall and it is not helping since they are spoofing those IPS. Is anyone can help me out?
Agreed, but if this is a full out ddos attack not a (dos)
But if the connection to the hardware firewall uplink is the same speed as the server itself..
And the server is already experiencing issues then it will not help much.
Its expensive, but a good robust IPS solution should be able to handle DDOS attacks. Sourcefire is the one I like/use the most. They have some good info on it on their site www.sourcefire.com.