Nexusguard Bastions

Choose your own on-premise servers as an extension of the
Nexusguard Cloud

Customers wishing to take up Nexusguard Bastions services have a choice of two full-featured enterprise servers, incorporating Nexusguard’s proprietary technologies and processes to serve their protection needs.

Bastions server - MX7000

Suitable for large-sized CSPs and mega PoPs that require a full suite of cybersecurity services, through the Bastions server MX7000, Application Protection, Origin Protection and DNS Protection can be delivered via a Bastions PoP to their customers locally as an extension of the Nexusguard Cloud.

Occupying 7U in a high-performance chassis, the Bastions server MX7000 is capable of delivering up to 200Gbps of mitigation capacity.

Adopting both a Standalone and High Availability (HA) design, the Bastions server MX7000 can interconnect with multiple internet border routers with different port channels.

Bastions server - R650

Designed to serve smaller CSPs or large CSP satellite PoPs, the Bastions server R650's small footprint 1U engine with 40Gbps mitigation capacity, powered by AC or DC, is deployed as a standalone device connecting to 1~2 routers, operating as a Bastions PoP delivering namely Origin Protection, Network Protection and Clean Pipe locally to customers.

For clients wishing expand or complement their existing offerings by adding Application Protection and DNS Protection, these services are available for subscription via the Nexusguard Cloud or mega PoPs with MX7000 deployments.

With a number of network interface options available, the Bastions servers can integrate seamlessly with Nexusguard Cloud for true-hybrid global mitigation protection.

What sets Nexusguard Bastions Server apart?

Store and Process Data Locally

The balkanization of Internet means data sovereignty is of paramount importance. The Nexusguard managed platform allows the CSP to keep local data while countering global attacks


24x7 Access to Dedicated Technical Support

Round-the-clock technical support from a team of multilingual security experts


Frequently Asked Questions

In which countries will Bastions services be available?

Bastions services are available anywhere we can get our Bastion Servers to. To check if Bastions is available in your location, contact us.

Can I reuse my existing servers to deploy my Bastions service?

No, Bastions servers leverage Nexusguard designed infrastructure, and are only supported on a Nexusguard platform that is optimized for secure, high-performance, and reliable operations with specific hardware specification and configuration settings.

Can I order my own hardware that can be installed as part of my Bastions service?

Yes, so long as the Bill of Materials (BOM) is strictly followed.

Are there any prerequisites for deploying Bastions servers at my location?

The prerequisites are rack space, air conditioning and dual-power supply. There is a specific requirement for the power connectors if Bastions server MX7000 is to be deployed. Apart from these physical elements, there are also network connections for data transfer and out-of-band management. Typically, multiple fibre connections of 10Gbps/100Gbps are required depending on the solution design. Please refer to the datasheets for the exact details.

How does Nexuguard maintain Bastions servers infrastructure?

When your Bastions service is installed, everything including the Bastions servers, hardware, platform components and service will be monitored 24/7 by Nexusguard’s dedicated Platform Team.

Trusted By

We want to make the network environment for our customer as safe as they feel at home. Nexusguard offers a customized internet security solution so that our customers can continue to interact with us the way supposed to be and the way they want to—all the way without interruption.

Visrut Manunpon, Chief Technical Officer, SNOC

We chose to partner with Nexusguard because of its specialty in DDoS mitigation. In fact, they not only focus on DDoS attacks, they are also curious about and strive to address the pain points they face.

Lee Shih Yen, VP, Cyber Security, StarHub

We opted to partner with Nexusguard because of their global reach and robustness of their platform. They have helped many companies and governments globally defend against cyberattack. Nexusguard is consistently recognised by analysts such as Gartner and Forrester as a market leader.

Wale Ajisebutu, CEO, 21st Century Technologies

Our customers are extremely satisfied with Nexusguard DDoS Protection solutions because they have sophisticated tools that give them visibility into their networks. With Netpluz mitigation facility commissioned in Singapore, powered by Nexusguard, our customers can expect proactive and intelligent mitigations to ensure only clean traffic reaches their network.

Lau Leng Fong, CEO, Netpluz

The Nexusguard solution secures our network with enterprise-grade SLAs. Most importantly, it ensures all business-essential applications have the uptime that they require.

Michael NG, Sales Director of REDtone

When we have queries and new service requests, the Nexusguard team were able to attend to us promptly. This is a good partnership that every business would want to ensure our business plans are implemented smoothly.

Saymon Araujo, Senior Network Analyst, Azion Technologies Inc.

Nexusguard Service Provider Enablement (Partner Program) allows service providers to deliver DDoS mitigation as a service to their customers and employ a revenue sharing model. This program fills a significant market gap as many businesses lack the resources to justify a large DDoS mitigation appliance deployment.

Chris Rodriguez, Senior Industry Analyst, Frost & Sullivan

Bastions Brochure

Nexusguard Bastions is the latest in fully managed solutions delivering Nexusguard services to virtually any on-premises or edge location for a truly consistent and seamless hybrid experience.

Download now

Bastions server - MX7000 Datasheet

Nexusguard Bastions server - MX7000 mitigates all L3/L4 attacks that attempt to flood the core and downstream networks of the CSP, and mitigates complex L7 attacks that target the computing resources of their customers, by inspecting traffic, detecting threats and blocking attacks against protected networks and application resources, in real-time.

Download now

Bastions server - R650 Datasheet

Nexusguard’s Bastions Server R650 module is designed to serve smaller CSPs or large CSP satellite PoPs.

Download now

MX7000: “Cloud-in-a-Box” DDoS Protection for Regional CSPs

MX7000 is the ultimate DDoS mitigation platform regional CSPs should have for access to Nexusguard’s people, processes and technology they could not obtain otherwise in order to deploy, implement and profit from best-in-class DDoS protection services.

Read the article

InfraProtect vs Origin Protection - A Comparison Guide

InfraProtect and Origin Protection provide on-demand attack mitigation, protecting your infrastructure (and downstream) against network DDoS attacks of all sizes and types. Both solutions prevent valuable bandwidth from being saturated with malicious traffic and help maintain network and service availability even during a large-scale DDoS attack.

Read the article

Utilize Network Protection to maintain own backbone network quality and stability

Network Protection service is implemented at the Bastion PoP of the partner CSP to protect their own backbone. A highly available and stable network backbone is imperative in order to offer value added high quality network services to downstream clients.

Read now

Deliver Application Protection service to any website or TCP based application servers

Websites are exposed to both volumetric and application based DDoS attacks. While there are a number of options to protect against volumetric attacks, Application Protection is the only option that provides all round protection including WAF. Implementing together with DNS Protection would make it a perfect solution by enhancing the availability of the webdomain which is critical in diverting traffic to the cloud.

Read now

Request a Demo or Proof-of-Concept (POC)

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Get the latest cybersecurity news and expert insights direct to your inbox

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.