By definition, your services are always protected due to automatic mitigation (always-on detection), which activates within seconds once an attack is detected. By activating permanent mitigation, you constantly apply a first level of filtering through our Shield hardware, as well as with the filtering rules you have defined in the Edge Network Firewall. If automatic mitigation is triggered, all stages of VAC will be involved. It is important to note that for security and service availability reasons, only our game range of servers may have deep packet analysis (Game DDoS Protection) always enabled. Our other solutions can use permanent mitigation too - you can enable it from the OVHcloud's Control Panel.