FastNetMon

What FastNetMon is

FastNetMon analyzes live network traffic to detect DDoS attacks in near real time and trigger mitigation according to operator-defined rules and workflows. It identifies volumetric and packet-rate attacks using configurable thresholds and detection logic. Traffic telemetry can come from routers and switches through sFlow, NetFlow, IPFIX, jFlow, or mirrored traffic. Mitigation options include remote-triggered blackholing, BGP FlowSpec filtering, and sending attack traffic to external scrubbing centres.

FastNetMon supports IPv4 and IPv6 and is described as scaling to terabits of traffic and millions of flows per second on commodity hardware. Listed networking vendors include Cisco, Juniper, Nokia, Huawei, and Arista. Other capabilities include AWS and Google Cloud traffic visibility, Grafana dashboards, blocklist filtering, and embeddable solutions. Deployment choices include Docker, virtual machines and hypervisors, Google Compute Engine, ARM 64, and Ubuntu LTS. A 30-day trial provides DDoS detection, automated mitigation tools, and traffic visibility and analytics, with no credit card required.

Paid plans start at $115 per month for 10G, which covers 10 Gbps of observed traffic and allows one FastNetMon instance. The monthly subscription also has a one-time $85 USD activation fee. Licensing is based on average combined incoming and outgoing bandwidth over one month and must cover the network's total bandwidth.

Who it suits

FastNetMon is designed for telcos, ISPs, cloud providers, and enterprise networks that need to detect DDoS traffic and apply rule-based mitigation. Its listed deployment options and network telemetry inputs suit teams working with routers, switches, cloud traffic, or mirrored traffic.

Limits

The cheapest listed paid plan, 10G at $115 per month, covers 10 Gbps of observed traffic, one instance, and one support ticket per month. Monthly subscriptions also carry a one-time $85 USD activation fee; listed prices exclude UK VAT where applicable.

Getting started

1. Visit the FastNetMon website.
2. Start the 30-day free trial; no credit card is required.
3. Choose a deployment route such as Docker, a virtual machine, Google Compute Engine, ARM 64, or Ubuntu LTS.
4. Connect supported network telemetry sources such as sFlow, NetFlow, IPFIX, jFlow, or mirrored traffic.
5. Select a paid bandwidth plan if you need a subscription.

Verdict

Choose FastNetMon if your network team needs configurable DDoS detection with several mitigation methods and supports its traffic input protocols. Check that the 10G plan's 10 Gbps capacity and one-instance allowance fit your network, and account for the activation fee and bandwidth-based licensing.