Service Protection Profiles (SPP) are used to enable a single FortiDDoS appliance to protect multiple network zones with thresholds appropriate for the traffic in each of those zones.
One SPP (SPP-0) is designated as the default SPP. You allocate the remaining seven SPPs to subnets.
In an enterprise deployment, you can configure SPPs for specific departments, geographic locations, or functions within an organization.
In a multi-tenant deployment, you can use SPPs to separate a single physical FortiDDoS device into up to 8 logical devices. Each SPP has its own configuration and traffic database. The configuration of each SPP can be under the control of a different administrator.
Figure 32 shows how multiple SPPs are used to protect multiple subnets.
Figure 32: Multiple SPPs, multiple subnets