The best place

Put DDoS-Guard in the best place - to your core routers. There it is able to intercept attacks at an early stage and to relieve your systems.

The bottleneck

... is always the line in front (seen from the attacker). The closer DDoS-Guard is to your uplink, the more bandwidth it can take on and monitor.

If, for example, you have a 50-Mbit connection, place DDoS-Guard in your ISP's backbone, where much more bandwidth is available to it.

Further information:
Three-level protection
Admin Interface
Redirect Mode
VLAN, MPLS, clustering
DDoS-Guard data sheet