Freedom251 › DDoS Protection Software
Nokia Deepfield Defender
What Nokia Deepfield Defender is
Nokia Deepfield Defender detects and mitigates distributed denial-of-service attacks on IP networks. It combines network telemetry with DNS and BGP information, then checks those signals against Nokia’s Deepfield Secure Genome to identify threats. Nokia says the Genome is refreshed hourly, covers more than 5 billion IPv4 and IPv6 addresses, and applies more than 100 machine-learning rules. Its security context includes information about previous attacks, insecure servers, and compromised IoT devices that could be used in attacks.
After detecting a threat, Defender can generate a mitigation strategy in seconds and deploy it automatically. It can direct network-based mitigation through Nokia FP4 and FP5 routers, work with Cisco and Juniper routers, and coordinate dedicated scrubbing systems for advanced attacks. The broader Deepfield platform accepts xFlow, BGP, SNMP, DNSflow, RADIUS/AAA, IPFIX, gRPC, and custom operational data. It can run on premises or as cloud-based software as a service, with a hybrid deployment model. For service providers, an MSSP portal, multi-tenancy, APIs, and automated workflows support managed DDoS protection. Nokia describes Basic protection as included for all customers and Premium protection as enhanced coverage for selected customers. Pricing is available through Nokia sales.
Who it suits
Deepfield Defender is aimed at service providers, cloud builders, new digital enterprises, IXPs, hosting providers, and financial institutions that need DDoS detection and mitigation. Its managed-service features also suit providers offering protection to multiple customers.
What it does well
- Correlates telemetry, DNS, and BGP with Secure Genome threat information.
- Generates and can deploy mitigation strategies automatically.
- Works with Nokia, Cisco, and Juniper routers.
- Can coordinate dedicated scrubbing systems for advanced attacks.
- Supports on-premises, cloud, and hybrid deployment.
What to know first
- Pricing is available on request.
- Deployment and integrations span a broad network toolset.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Deepfield Defender | Pricing not stated; contact Nokia sales | On request |
As nokia.com lists them, read 11 Oct 2026. The maker's own page has the final word.
Getting started
- Visit the Nokia Deepfield Defender website.
- Connect with Nokia sales to discuss pricing and deployment.
- Choose an on-premises, cloud-based, or hybrid deployment.
- Connect the relevant network telemetry and router or scrubbing systems.
Verdict
Choose Nokia Deepfield Defender if your organization needs automated DDoS mitigation across network devices or managed customer services. Consider another option if you need a published price before contacting sales.
Questions
How much does Nokia Deepfield Defender cost?
Pricing is available on request through Nokia sales.
Which platforms and deployment models does it support?
The listed platforms are API and self-hosted. Nokia says Deepfield applications can be deployed on premises or as cloud-based software as a service; the deployment model is hybrid.
Which network data can it ingest?
The Deepfield platform accepts xFlow, BGP, SNMP, DNSflow, RADIUS/AAA, IPFIX, gRPC, and custom operational data sets.
Can it mitigate attacks automatically?
Yes. It can generate mitigation strategies in seconds and deploy them without manual intervention. It can use Nokia, Cisco, or Juniper routers and coordinate dedicated scrubbing systems.
Who makes Nokia Deepfield Defender?
It is a Nokia product. Nokia also offers support from its global Deepfield Emergency Response Team.
Facts from Nokia Deepfield Defender's own pages
- APIs and tenancy
- Nokia says the MSSP Portal, multi-tenancy support, APIs and automated workflows support operators offering DDoS Protection-as-a-Service. · nokia.com, 11 Oct 2026
- Automated mitigation
- The product generates optimized mitigation strategies in seconds and can deploy them without manual intervention. · nokia.com, 4 Oct 2026
- Deployment
- Nokia says Deepfield applications can be deployed on premises within a network or as cloud-based software as a service. · nokia.com, 4 Oct 2026
- Detection
- The product correlates Secure Genome data with network telemetry, builds peacetime traffic models and raises alerts on real-time anomalies. · nokia.com, 11 Oct 2026
- Intended users
- Nokia identifies service providers, cloud builders and new digital enterprises as target users; its FAQ also names IXPs, hosting providers, large digital enterprises and financial institutions. · nokia.com, 4 Oct 2026
- Managed services
- Service providers can use its Managed Security Service Provider portal functionality to offer customizable basic and premium DDoS protection services with reporting and customer interfaces. · nokia.com, 11 Oct 2026
- Mitigation
- It generates optimized mitigation strategies in seconds and can automatically deploy them to programmable routers or dedicated scrubbing systems. · nokia.com, 11 Oct 2026
- Mitigation system
- For advanced attacks, Defender can orchestrate Nokia’s 7750 Defender Mitigation System. · nokia.com, 11 Oct 2026
- Network mitigation
- Defender can use Nokia FP4/FP5 routers for network-based mitigation and can also be deployed with third-party Cisco and Juniper routers. · nokia.com, 4 Oct 2026
- Pricing
- The product page directs prospective customers to connect with sales and does not state a price. · nokia.com, 4 Oct 2026
- Purpose
- Deepfield Defender is software for AI-driven DDoS detection and automated mitigation, aimed at service providers, cloud builders and new digital enterprises. · nokia.com, 11 Oct 2026
- Router support
- Nokia says Defender can use Nokia FP4/FP5 routers for network-based mitigation and can also be deployed with third-party routers including Cisco and Juniper. · nokia.com, 11 Oct 2026
- Sales
- The product page directs prospective customers to contact Nokia sales and does not state a public price. · nokia.com, 11 Oct 2026
- Scale and audience
- Nokia describes Defender as designed for large networks and says it serves telecommunications providers, IXPs, cloud builders, hosting providers, large digital enterprises and financial institutions. · nokia.com, 11 Oct 2026
- Scrubbing systems
- For advanced attacks, Defender can orchestrate dedicated scrubbing systems such as Nokia’s 7750 Defender Mitigation System. · nokia.com, 4 Oct 2026
- Secure Genome
- Nokia says Secure Genome is updated hourly and covers over 5 billion IPv4 and IPv6 addresses, more than 30 traffic categories and over 100 machine-learning rules. · nokia.com, 11 Oct 2026
- Security context
- Nokia says Secure Genome tracks security information including prior attacks, insecure servers and compromised IoT devices that may be used in DDoS attacks. · nokia.com, 4 Oct 2026
- Service tiers
- Nokia describes Basic protection as automatically included for all customers and Premium protection as enhanced protection for selected customers. · nokia.com, 4 Oct 2026
- Support
- Nokia offers Deepfield Emergency Response Team Support through its global Nokia Deepfield Emergency Response Team. · nokia.com, 11 Oct 2026
- Telemetry and intelligence
- It combines network data such as telemetry, DNS and BGP with Nokia’s cloud-based Deepfield Secure Genome feed. · nokia.com, 11 Oct 2026
- Telemetry integrations
- The Deepfield platform ingests network data including xFlow, BGP, SNMP, DNSflow, RADIUS/AAA, IPFIX and gRPC, and can ingest custom operational data sets. · nokia.com, 4 Oct 2026
Where Nokia Deepfield Defender stands on Freedom251
- DDoS Protection Software#25 of 37