The Guard module is a denial-of-service (DDoS) mitigation product that receives traffic diverted from attacked targets, cleans this traffic, and forwards the cleaned traffic to its original path.

The Detector module is a denial-of-service (DDoS) detection product that receives a copy of the traffic on the switch, analyzes that traffic, and sends out an alert when it detects a DDoS attack. The Detector module can also activate a configured Guard module to mitigate these attacks.