Intrusion Prevention Systems: Managed Intrusion Prevention

Managed Intrusion Prevention

Manage and monitor your network traffic to prevent and detect unusual traffic

Our intrusion prevention system (IPS) is a piece of software that monitors network traffic for activity that strays from usual conduct and violates policy. For example, a login after midnight combined with an export of a large amount of data could warrant an alarm. While an IDS (intrusion detection system) is limited to detecting and reporting on unusual activity inside the perimeter, an IPS is also able to shield a network from hacking attempts by helping the firewall prevent attacks. This helps detect intruders and excise them before they get to work, as well as prevent new intruders from coming in.

About Intrusion Prevention Systems

• Any detected activity or violation is typically reported either to an administrator via reports or collected centrally using a security information and event management (SIEM) system depending on the customer’s requirements.
• IPS evaluates a suspected intrusion or anomaly once it has taken place and signals an alarm, differently from a firewall that looks outwardly for intrusions in order to stop them from happening.
• IPS also watches for attacks that originate from within a system, as opposed to a Firewall that limit access between networks to prevent intrusion and do not signal an attack from inside the network.

Detection, Prevention and Blocking

24/7 network monitoring to prevent abnormal activity from suspicious sites and suspect administrators access to sensitive areas.