Overview

Whilst firewalls and anti-virus solutions are an accepted part of an organisation’s security infrastructure, these tools can not by themselves provide the protection from internal and external attackers that is desired by management.

This is why intrusion prevention and detection technologies are attracting ever increasing attention by corporate IT and Security Managers worldwide, and higher budgets are being devoted to these technologies and solutions.

At the same time, the most significant challenges for organisations which decide to implement such technologies in order to protect their connection points and internal networks, is effectively managing the tools and becoming proactive enough to prevent, detect and respond to actual or suspected threats.

There is therefore a high degree of experience and focus that is necessary to:

•  identify the “peculiarities” of the infrastructure that will be protected, by determining which business resources are critical, how vulnerable those resources are to attack, current security requirements and policies, and the products needed to protect against online risk

•  correctly configure IPS / IDS technologies in a manner which corresponds to an organisation’s internal network setup and externally facing connection points

•  implement a robust security policy on the IPS/IDS technologies, which corresponds to the organisational security policy and related objectives

•  analyse the outputs of the security and other logs that are produced by the system and determine the necessary actions that are needed to prevent, or respond to an attack and

•  ensure that the products are kept up to date with the necessary upgrades and patches, in order to remain effective over time.

Key Features

•  Technical capability to prevent and detect suspected or actual attacks at all levels of computing resources (i.e. network, server and desktop level)

•  Capability to perform deep analysis of network traffic and identify “threat and risk concentrations” (i.e. specific sources that persistently attempt breaking into a company’s network, or otherwise compromising the site’s security)

•  Availability of expertise to help you be proactive by analyzing the product security and related logs, in this way minimizing the risk of unplanned downtime or unavailability of resources and services

•  Timely support for maintaining your IPS / IDS tools up to date in this way ensuring that you continue being protected from new and emerging threats and vulnerabilities

•  Demonstrable evidence of regulatory compliance through deep monitoring capability at network, server and desktop level (including mobile computers)

•  Higher network and system auditability through security logs