Managed Intrusion Prevention
Manage and monitor your network traffic to prevent and detect unusual traffic
Our intrusion prevention system (IPS) is a piece of software that monitors network traffic for activity that strays from usual conduct and violates policy. For example, a login after midnight combined with an export of a large amount of data could warrant an alarm. While an IDS (intrusion detection system) is limited to detecting and reporting on unusual activity inside the perimeter, an IPS is also able to shield a network from hacking attempts by helping the firewall prevent attacks. This helps detect intruders and excise them before they get to work, as well as prevent new intruders from coming in.
This is part of an extensive series of guides about access management.
What Is an Intrusion Prevention Service?
An intrusion prevention service (IPS) is a network security technology that actively monitors network traffic, and detects and blocks malicious activity in real-time, providing an additional layer of defense against cyberattacks and data breaches.
About Intrusion Prevention Systems
- Any detected activity or violation is typically reported either to an administrator via reports or collected centrally using a security information and event management (SIEM) system depending on the customer’s requirements.
- IPS evaluates a suspected intrusion or anomaly once it has taken place and signals an alarm, differently from a firewall that looks outwardly for intrusions in order to stop them from happening.
- IPS also watches for attacks that originate from within a system, as opposed to a Firewall that limit access between networks to prevent intrusion and do not signal an attack from inside the network.
