How to Add Targets

What is a Target?

A Target is any internet-accessible endpoint you plan to evaluate in a DDoS simulation. This can include: 

• Servers (e.g., SIP, API, DNS servers)
• Public websites or web applications
• Mobile app backends and microservices
• Infrastructure endpoints like load balancers, routers, or CDN nodes
• Other exposed points such as SMTP mail servers, gaming servers, or IoT gateways

Targets are defined by their IP address or Fully Qualified Domain Name (FQDN) and represent the entry point to your infrastructure or services. 

During a simulation, the RADAR platform generates synthetic traffic toward the Target to assess its: 

• Resilience - ability to maintain service availability under stress
• Availability - uptime and responsiveness during the event
• Mitigation effectiveness - how well your defenses handle the simulated attack

What You'll Learn On This Page

In this section, you’ll learn how to add and configure Targets in your RADAR environment. By defining Targets, you identify which endpoints should be assessed against selected attack vectors, allowing you to understand how protected (or vulnerable) each Target may be.

---

Creating a Target

Follow these steps to add a Target in the RADAR platform:

1. In the left-hand navigation menu, click Environment.
2. Select Targets.
3. Click the "Add Target" button.
4. Fill in the required details:
   • Target Name
   • Target Type
   • Target FQDN or IP Address
   • IP Version
   • Target Description (Optional)
5. Click Save to add the Target.

Once a Target has been created, click the Edit icon next to it to complete the setup.

The event creation wizard includes 3 configuration steps:
1 - General
2 - Monitors
3 - Attack Vectors

Each step is explained in detail below.

Step 1: General

On this tab, you can see your Target's basic information and optionally provide a Description to further identify your Target.

Under the Description box, you can access 2 options: Monitoring Status and Standard Assessment Status.

• Monitoring Baseline - Opens the Monitors page, where you can review the current status of the target's Monitors.
• Simulation Results - Opens the Simulation Results page, where you can review the status of the target's simulation results.

Step 2: Monitors

1. Enable Services
   Select the services that apply to the Target. These define the service types that the Target is intended to represent.

2. Enable Monitors
   Select the applicable Monitors. A Monitor defines how the Target is expected to be reached. Monitors are used to track the Target’s response time for Target's health and baseline creation.
   

Step 3: Attack Vectors

Select the attack vector groups you want to enable for this Target. Each group represents a category of DDoS attacks that can be simulated.

 

Diagnostics

Diagnostics is a built-in validation tool that helps ensure your network setup is correctly configured before running a simulation. It verifies that the mirror port is actively capturing traffic and that the RADAR Detector is receiving the expected data to the Target.

Running a diagnostics test verifies that the configured mirror ports are correctly detecting the network traffic sent to the Target and forwarding it to the RADAR Detector, preventing unnecessary troubleshooting during simulation execution.

Accessing and Running Diagnostics

To run a Diagnostics test, go to the Target Settings of the Target you wish to validate and click the Diagnostics button.

In the Diagnostics window, select the required parameters:

• Monitor – Displays a drop-down list of Monitors associated with the selected Target (as defined in the Monitor Settings tab).
  During the diagnostics test, RADAR sends traffic that resembles the selected monitor's traffic pattern, which is why the monitor you choose directly affects what the test validates.

• Profile – Displays a drop-down list of Profiles relevant to the selected Target type (as defined in the General Settings tab).

Click New Run to execute a diagnostics test.

Viewing Results

Once the test is complete, the result will indicate whether the Diagnostics test succeeded or failed.
You can view the full history of previous tests for the same Monitor and Profile combination via the Diagnostics drop-down list.

Each completed diagnostics test includes the following fields:

• Status - Indicates the outcome of the test (Succeeded or Failed).

• Time Remaining – Displays the remaining time if a test is currently running.

• Reported By – Lists each Detector and its associated network interfaces (as defined in the selected Profile), and indicates which interface detected the traffic.

• Description - Summarizes the test execution and provides details about the results.

---

What's Next

Now that you’ve created a Profile, proceed to How to Schedule a Simulation to schedule your first DDoS attack simulation.