Short answer
FirstNet blends upstream filtering with on-net protections to mitigate distributed denial-of-service (DDoS) attacks swiftly, and applies DDoS protection and access controls at key points in its network.
In detail
A DDoS attack floods a target with traffic from many sources to overwhelm its link or services. Filtering upstream, closer to where that traffic enters, removes much of it before it reaches your connection, while on-net protections deal with what remains.
These controls sit within FirstNet's wider backbone design: its own Autonomous System with diverse, multi-homed upstreams, peering at NAPAfrica, JINX, CINX and DINX, a 24/7 NOC with telemetry, alerts and real-time dashboards, and ITIL-aligned incident management.
Ask FirstNet to confirm the mitigation scope and any DDoS-related service commitments for your specific service during design. For protection of websites and applications, FirstNet's hosted firewall and network security services can be scoped alongside the connectivity.
Source: FirstNet Carrier-Grade ISP Infrastructure service page →
Didn’t answer your question?