Nokia Deepfield Defender

What it does

APIs and tenancy

Nokia says the MSSP Portal, multi-tenancy support, APIs and automated workflows support operators offering DDoS Protection-as-a-Service.checked 11 Oct 2026

Automated mitigation

The product generates optimized mitigation strategies in seconds and can deploy them without manual intervention.checked 4 Oct 2026

Deployment

Nokia says Deepfield applications can be deployed on premises within a network or as cloud-based software as a service.checked 4 Oct 2026

Detection

The product correlates Secure Genome data with network telemetry, builds peacetime traffic models and raises alerts on real-time anomalies.checked 11 Oct 2026

Intended users

Nokia identifies service providers, cloud builders and new digital enterprises as target users; its FAQ also names IXPs, hosting providers, large digital enterprises and financial institutions.checked 4 Oct 2026

Managed services

Service providers can use its Managed Security Service Provider portal functionality to offer customizable basic and premium DDoS protection services with reporting and customer interfaces.checked 11 Oct 2026

Mitigation

It generates optimized mitigation strategies in seconds and can automatically deploy them to programmable routers or dedicated scrubbing systems.checked 11 Oct 2026

Mitigation system

For advanced attacks, Defender can orchestrate Nokia’s 7750 Defender Mitigation System.checked 11 Oct 2026

Network mitigation

Defender can use Nokia FP4/FP5 routers for network-based mitigation and can also be deployed with third-party Cisco and Juniper routers.checked 4 Oct 2026

Pricing

The product page directs prospective customers to connect with sales and does not state a price.checked 4 Oct 2026

Purpose

Deepfield Defender is software for AI-driven DDoS detection and automated mitigation, aimed at service providers, cloud builders and new digital enterprises.checked 11 Oct 2026

Router support

Nokia says Defender can use Nokia FP4/FP5 routers for network-based mitigation and can also be deployed with third-party routers including Cisco and Juniper.checked 11 Oct 2026

Sales

The product page directs prospective customers to contact Nokia sales and does not state a public price.checked 11 Oct 2026

Scale and audience

Nokia describes Defender as designed for large networks and says it serves telecommunications providers, IXPs, cloud builders, hosting providers, large digital enterprises and financial institutions.checked 11 Oct 2026

Scrubbing systems

For advanced attacks, Defender can orchestrate dedicated scrubbing systems such as Nokia’s 7750 Defender Mitigation System.checked 4 Oct 2026

Secure Genome

Nokia says Secure Genome is updated hourly and covers over 5 billion IPv4 and IPv6 addresses, more than 30 traffic categories and over 100 machine-learning rules.checked 11 Oct 2026

Security context

Nokia says Secure Genome tracks security information including prior attacks, insecure servers and compromised IoT devices that may be used in DDoS attacks.checked 4 Oct 2026

Service tiers

Nokia describes Basic protection as automatically included for all customers and Premium protection as enhanced protection for selected customers.checked 4 Oct 2026

Support

Nokia offers Deepfield Emergency Response Team Support through its global Nokia Deepfield Emergency Response Team.checked 11 Oct 2026

Telemetry and intelligence

It combines network data such as telemetry, DNS and BGP with Nokia’s cloud-based Deepfield Secure Genome feed.checked 11 Oct 2026

Telemetry integrations

The Deepfield platform ingests network data including xFlow, BGP, SNMP, DNSflow, RADIUS/AAA, IPFIX and gRPC, and can ingest custom operational data sets.checked 4 Oct 2026