언어 선택

AhnLab AIPS

Network Intrusion Is Nowhere Near Success

AhnLab AIPS is the future-driven network intrusion prevention system that detects and blocks advanced network attacks targeting organizations.

Why AhnLab AIPS

The Innovation of IPS Against
Ever-Evolving Cyber Attacks

Intelligence-driven
Threat Prevention

Backed by our industry-leading threat intelligence, AhnLab AIPS excels in detecting and preventing a broad spectrum of cyber threats that weaponize network, OS, web, and application vulnerabilities, as well as malware and well-known network attacks.

01

High-Performance
Traffic Processing

In environments where large-scale traffic processing is needed, AhnLab AIPS delivers fast and precise detection backed by 100G interfaces. The next-gen IPS also performs swift and in-depth analysis of a variety of cyber threats by employing its high-performance engine built on big data processing technology.

02

Intuitive Data Visualization

AhnLab AIPS feeds a wide breadth of information to fuel multi-layered analysis into detected cyber threats. Its cutting-edge ability to visualize analytics in statistics accelerates customers to achieve a greater understanding of context and underlying issues.

03

Key Features

Precise Threat Detection and Prevention
Powered by Efficient Operation

Signature-based
Detection and Prevention

AhnLab AIPS stands out with its exceptional performance and threat detection & prevention capabilities powered by our high-performance engine and thousands of network attack signatures optimized for blocking the latest network attacks.

Application Control

AhnLab AIPS provides precise control over various global applications, thereby effectively blocking application attacks and preventing the leakage of business-critical information. Also, the granular control over application behaviors contributes to a more flexible policy configuration.

Overload Rule Management

AhnLab AIPS intelligently identifies and manages rules that could impact product performance. The IPS empowers administrators to pinpoint the causes of overload and evaluate their impact on performance, ensuring smooth operation and business continuity.

Zone Settings

Users are allowed to create logically separated security zones within a single appliance. They can categorize these zones by segment, IP range, and VLAN to apply different security policies and controls to each zone.

Dashboard

Real-time Detection and Prevention Status at a Glance

2403132972524808.png

AhnLab AIPS provides an intuitive dashboard offering real-time visibility into “Traffic Trends”, “Attack Detection Trends”, and “Real-time Detection/Response Status”. By presenting different types of statistical graphics, the IPS allows users to intuitively learn about the real-time status of cyber-attack detection. It also offers a comprehensive summary of essential data, including system resources. In addition, the widgets provide links for easy access to the detailed information.

From the dashboard, you can check:

  • Traffic trends, detection/response trends, real-time detection & response status
  • Statistics on the attack trend
  • System information and system resource usage
  • Quick access to detection details and statistical graphics

FAQs

Frequently Asked Questions

AhnLab AIPS utilizes technologies such as packet inspection, signature and behavior-based detection, and malware detection to monitor network traffic and malicious activities. Unlike traditional firewalls, which rely on 5-tuple filtering, our IPS thoroughly inspects packet headers and payloads, detecting and blocking cyber-attacks based on pattern matching.
Various OS and applications used on servers, PCs, and other platforms may have flaws, such as bugs and vulnerabilities. Threat actors exploit such weaknesses to breach the network and gain unauthorized access. AhnLab AIPS detects and blocks vulnerability-based attacks through signature pattern matching.
AhnLab AIPS provides a proxy-based SSL traffic decryption that enables the detection of encrypted traffic.
As a network IPS, AhnLab AIPS monitors all traffic flowing into and out of the network and defends the system against attacks. On the other hand, host IPS is deployed on endpoints like PCs and only monitors inbound and outbound traffic for that specific device. Although their detection methods are similar, their targets and purposes differ, making network IPS and host IPS most effective when used together.