Service Overview

IPS(Intrusion Prevention System) continuously updates IPS intrusion detection policies reflecting the latest security threats to respond in real time. Additionally, it detects up to the application layer through packet monitoring.

Features

• Latest Attack Type Detection: Generate detection patterns for new threats, and improve detection rate through continuous signature management. Apply the TI DB of security specialist companies and self-developed advanced detection policies, and provide services by correlational analysis of the relationship between attack patterns detected by IPS and patterns set in SIEM (Security Information and Event Management).
• Cloud Optimized Operations: We provide detection services optimized for cloud environments. When a security threat occurs, we respond quickly through security professionals.
• Efficient response and support: Monthly reports are provided to check the details of the event.

Configuration diagram

Provided Features

We provide the following features.

• Intrusion Detection and Analysis
  • In-depth analysis through raw data
  • New threat detection pattern update reflecting external trend information
  • Periodic detection pattern optimization
• Monitoring Information Provision
  • Monthly report provision
• Intrusion response
  • Provide IP information of attack attempts on SCP client servers

Components

• IPS provides services based on public IP configured within the VPC.
• We provide services targeting servers that can be accessed via the Internet, and when a user requests a service, we refer to the server (Virtual Server) specifications listed in the service application form.

Constraints

IPS provides detection based on traffic that is not encrypted with HTTP. It does not provide monitoring for traffic encrypted with HTTS SSL.

Provision status by region

IPS can be provided in the environment below.

Preceding Service

• This is a list of services that must be pre-configured before creating the IPS service. For details, refer to the guide provided for each service and prepare in advance.
• When creating a VPC’s Internet Gateway, you must select SIGW (Secure Internet Gateway) in the category to be able to use IPS.