Managed Services

  • Server Installations, configurations & support.
  • Internet/Intranet & E-mail Solutions on Networks.
  • VPN Installation & Configuration.
  • ADSL Solutions including remote access and working from Home.
  • Wireless Network Solutions.
  • mySQL Server Installation.
  • SharePoint Services.
  • E-mail Security Solutions.
  • Backup Solutions & disaster recovery options.
  • Client & Server Support including 24x7 Facility Management.
  • Implement MS security hot fixes.
  • Verify Anti virus definitions & live updates.
  • Diagnosing possible hardware issues.
  • Firewall / security check.
  • Complete documentation of Network Configuration.
  • Migration: Active Directory, Exchange Servers

Home » Technologies Supported » Intrusion Prevention Systems

Intrusion Prevention Systems

Intrusion Prevention Systems (IPS), also known as Intrusion Detection and Prevention Systems (IDPS), are network security appliances that monitor network and/or system activities for malicious activity. The main functions of ’’intrusion prevention systems’’ are to identify malicious activity, log information about said activity, attempt to block/stop activity, and report activity.

Intrusion prevention systems are considered extensions of intrusion detection systems because they both monitor network traffic and/or system activities for malicious activity. The main differences are, unlike intrusion detection systems, intrusion prevention systems are placed in-line and are able to actively prevent/block intrusions that are detected. More specifically, IPS can take such actions as sending an alarm, dropping the malicious packets, resetting the connection and/or blocking the traffic from the offending IP address. An IPS can also correct CRC, unfragment packet streams, prevent TCP sequencing issues, and clean up unwanted transport and network layer options.

Intrusion Prevention Systems can be classified into four different types:

  • Network-based Intrusion Prevention (NIPS): monitors the entire network for suspicious traffic by analyzing protocol activity.
  • Wireless Intrusion Prevention Systems (WIPS): monitors a wireless network for suspicious traffic by analyzing wireless networking protocols.
  • Network Behavior Analysis (NBA): examines network traffic to identify threats that generate unusual traffic flows, such as distributed denial of service (DDoS) attacks, certain forms of malware, and policy violations.
  • Host-based Intrusion Prevention (HIPS): an installed software package which monitors a single host for suspicious activity by analysing events occurring within that host.

Some of this text has been taken from http://cisco.com/

Powered By E-Zoneweb