Ahnlab Eps Information

2021. 2. 22. 21:56카테고리 없음



AhnLab EDR(Endpoint Detection and Response) is a next generation endpoint security solution that continuously monitors endpoints to provide comprehensive threat detection, analysis, and response. AhnLab EDR harvests and analyzes all activities at endpoint, and thereby contributing to threat hunting. AhnLab MDS (Malware Defense System) is a network sandbox based APT (Advanced Persistent Threat) protection solution that combines on-premise and cloud-based analytics to defeat advanced targeted threats anywhere across the organization.

  1. Ahnlab Eps Information Management System
  2. Ahnlab Eps Information Templates
  3. Ahnlab Eps Information Template
  4. Ahnlab Eps Information Sheet

AIPS

Advanced
Intrusion Prevention System

Ahnlab Eps Information Management System

AhnLab AIPS is an Advanced Network Intrusion Prevention solution that protects customer’s business environment in response to changes in cybersecurity threats.

Eps

AhnLab AIPS (Advanced IPS) is a powerful network intrusion prevention solution that can respond to rapidly changing cyber security threats caused by digital transformations.

Security threats are rapidly changing with changes in the network environment. As the number of targets to attack increases and the method of attack varies, there are numerous variations. Along with these threats, Intrusion Prevention Solutions are also experiencing a change. Now it’s time to detect a lot of malware and defend against unknown attacks and more diverse attack elements and environments.

Based on AhnLab’s largest security threat analysis organization and infrastructure of Asia, AhnLab AIPS provides optimized network attack response signatures for network environments. While responding to the latest security threats with a variety of sophisticated detection engines and next-generation features, visibility and convenience make it easy and intuitive to identify and analyze threats.

  • Advanced detection engine and
    sophisticated signature-based next-generation
    Intrusion Prevention System

  • Highly capable of detecting and responding
    to threats with a variety of detection filters
    and acceleration technologies

  • High-performance packet
    processing system

    that combines the HW and SW technology

  • Adopting an Open API
    approach for collaboration with
    a variety of security solutions

  • Convenient GUI
    for quick and easy
    threat visibility

  • Improved threat analysis
    across multiple data and
    high degrees of freedom

AhnLab AIPS detects and blocks attacks based on network, OS, web and application vulnerabilities as well as various types of network-based attacks and malwares.

AIPS provides an easy and convenient operational management environment while securely protecting customer’s business against evolving network threats. It also ensures availability of networks and services with superior performance.

Intelligent Network Threat Detection
· Responds to security threats across multiple paths by advanced detection engines and next-generation IPS features
· Responds in advance to complex threats with malware detection and TMS linkage
Easy and Convenient Operation Management
· Easy and intuitive to view information with excellent visibility
· Detailed analysis of threat information with a variety of statistics and flexible Drill Down
Excellent Performance
· Enhanced performance of detection with high-performance of HW and acceleration technologies
· Provides fast and flexible analysis against a variety of threats by Big Data processing engines with high performance

Multiple Detection Engines for Security Threat Response

As the network environment changes, malware-based attacks are increasing along with the existed traffic-based attacks. AhnLab AIPS responds to evolving network security threats by Interworking with advanced detection engines, next-generation IPS features, and other security solutions.

  • - High-performance pattern matching
  • - Application Control
  • - Behavioral detection (Flooding, Scanning. Etc.)
  • - Blocks abnormal protocol (HTTP, DNS, SIP)
  • - IP/MAC control (abnormal MAC, IP based Blacklist)
  • - Encrypted traffic analysis
  • - Detects and blocks C&C server access
  • - IP/TCP refragmentation and prevents bypassing attacks through XFF features
  • - YARA engine and signature (static analysis)
  • - Malicious file extraction
  • - Precious analysis through TMS

Ahnlab Eps Information Templates

Information Visibility and Convenient GUI

AhnLab AIPS supports advanced information visibility to help users to quickly and easily recognize network conditions and analyze security threats. Custom dashboards and widgets allow administrators to organize dashboards with only the information they want. It scans threat events and generates custom statistics/analysis policies if continuous statistics and analysis are required.

Enhanced Detection/Blocking Performance

AIPS detects and prevents large traffic without service failures or packet leakage through multicore CPU and AhnLab’s optimized programming, architectures for high-speed packet processing, and PCRE acceleration technologies. It provides improved performance with AFNIC (AhnLab FPGA NIC) support.

High-performance Searching and Threat Analysis

Ahnlab Eps Information Template

AhnLab AIPS applies a high-performance engine focused on Big Data processing to support fast log/event scanning and flexible statistics/analysis of numerous detected events.

Big data Processing-based High-performance Engine Applied

High-Speed Search
- Faster than competing products
- Only for Big Data processing
Various Analysis
- Supports accurate analysis of events through flexible search
- Perfect custom statistics/report
Resources Efficiency
- Efficiency of memory resources
- Storage space optimization
- Ensures high efficiency of low specification equipment

AIPS 2000

MAX IPS Throughput (UDP)

20G

CPU

8 Core

RAM

32GB

CFast

8GB

HDD

2TB

NIC Slot (Default/Max)

2 / 4

Interface

1GC

2
(Max 34 ports,
including Mgmt)

1GF

2 (Max 16 ports)

10GF

-

AFNIC

-

Gokusen season 3 sub indonesia. Bypass

Support

Power

550W Redundant

AIPS 4000

MAX IPS Throughput (UDP)

80G

CPU

20 Core

RAM

64GB

CFast

8GB

HDD

2TB

NIC Slot (Default/Max)

4 / 6

Interface

1GC

2
(Max 50 ports,
including Mgmt)

1GF

4 (Max 24 ports)

10GF

0 (Max 24 ports)

AFNIC

-

Bypass

Support

Power

550W Redundant

AIPS 10000

MAX IPS Throughput (UDP)

120G

CPU

28 Core

RAM

64GB

CFast

8GB

HDD

2TB

NIC Slot (Default/Max)

4 / 6

Interface

1GC

2
(Max 50 ports,
including Mgmt)

1GF

0 (Max 24 ports)

10GF

2 (Max 24 ports)

AFNIC

0 (Max 2 ports)
※ Cannot be used with Intel NIC

Bypass

Support

Power

550W Redundant

Overview

AhnLab AIPS is an Advanced Network Intrusion Prevention solution
that protects customer’s business environment in response to changes
in cybersecurity threats.

AhnLab AIPS (Advanced IPS) is a powerful network intrusion prevention solution that can respond to rapidly changing cyber security threats caused by digital transformations.

Security threats are rapidly changing with changes in the network environment. As the number of targets to attack increases and the method of attack varies, there are numerous variations. Along with these threats, Intrusion Prevention Solutions are also experiencing a change. Now it’s time to detect a lot of malware and defend against unknown attacks and more diverse attack elements and environments.

Ahnlab Eps Information Sheet

Based on AhnLab’s largest security threat analysis organization and infrastructure of Asia, AhnLab AIPS provides optimized network attack response signatures for network environments. While responding to the latest security threats with a variety of sophisticated detection engines and next-generation features, visibility and convenience make it easy and intuitive to identify and analyze threats.