Allot Adds Out-of-Band Sensing and Flexible Mitigation to Smart NetProtect

· Original article ↗

Summary

Allot’s 1H 2026 Smart NetProtect update adds out-of-band DDoS sensing and flexible mitigation options for telecom operators, against a backdrop of rising attack volumes and growing risks to 5G networks.

Key points

  • Allot’s hybrid architecture retains inline capabilities and adds out-of-band sensing.
  • Operators can choose BGP Flowspec mitigation or an off-ramp scrubbing center hosted in their data center.
  • The article says tier 2 carriers may favor the lower-cost BGP Flowspec option, while tier 1 carriers may prefer the higher-accuracy off-ramp model.
  • ENISA data cited in the article says DDoS attacks accounted for 77% of EU cyber incidents in the 12 months to June 2025, up from 41% in the previous 12-month period.
  • Cloudflare reported blocking 27.8 million DDoS attacks in the first half of 2025, exceeding its 21.3 million total for all of 2024.
  • The article identifies the Aisuru botnet as a major driver of 2025 DDoS activity and links it to a September 2025 attack peaking at 22.2 Tbps.
  • An optional Security Community feature enables participating telcos and ISPs to share threat intelligence.

Article Details

Event Type
Allot is introducing a hybrid DDoS defense model for Smart NetProtect, adding out-of-band sensing alongside inline capabilities and offering flexible mitigation options for telecom operators.
Impact
The article describes rising DDoS activity and increasing pressure on telecom networks, including attacks attributed to the Aisuru botnet and a reported attack peaking at 22.2 Tbps. The product update is intended to provide scalable mitigation choices and reduce the cost of always-on inline inspection. No customer outage or specific service disruption from the reported attacks is stated.

Malware

Vendors

Products

Related Articles