언어 선택

AhnLab EPS

Full-Scale OT Endpoint Protection

AhnLab EPS is the first-in-industry OT endpoint protection solution that only allows the execution of authorized programs without compromising system performance.

Why AhnLab EPS

Perfectly Meeting OT Security Requirements

Stable System Operation

Given that stable operation is the foremost priority of the OT environment, AhnLab EPS ensures minimal system performance impact with its super lightweight agent. At the same time, it successfully addresses OT security requirements by serving the flexible three-stage “Lock Mode”, “Emergency Unlock Mode” and “Lock Exception” features.

01

Extensive OS Support

AhnLab EPS detects and prevents malware across a wide range of operating systems (OS), including Windows and Linux. It also supports outdated OS to guarantee the secure operation of old OT systems that lack security updates and patches.

02

Securing Business Continuity

To secure business continuity, the whitelist-based AhnLab EPS essentially blocks any potentially unwanted programs, storage, devices, and network connections. This approach stands out with unmatched protection from unexpected system failure due to the execution of unwanted files and traffic overflow.

03

Key Features

Stable Operation and Powerful Threat Prevention

3-Stage Operation Modes

AhnLab EPS empowers users with convenient operational management and policy settings by harnessing the 3-stage operation modes composed of “Unlock Mode” for system updates, “Lock Test Mode” for testing, and “Lock Mode” for actual operation. Such flexibility grants stability and efficiency to OT system management.

Application Control

AhnLab EPS restricts execution of all but authorized programs powered by the application control feature based on its “allow list”. Users can also make a “block list” to prevent unwanted programs from running.

Network and Storage Control

AhnLab EPS prevents malware infiltration by rigorously controlling program execution and device access to the system. The network connections to unauthorized IPs or ports are blocked in the same way.

Malware Detection and Block

Given the stability-sensitive characteristics of industrial control systems, AhnLab EPS detects malware at the agent level and performs a robust analysis on its servers. Such a systematic security process ensures real-time detection, analysis, and prevention of malware without compromising performance.

Extensive Monitoring

Interacting with AhnLab MDS, our sandboxing solution, AhnLab EPS augments its detection and analysis of malicious files and traffic enabled by its extended network monitoring of systems where AhnLab EPS Agent is installed.

Admin Features

The centralized web management of AhnLab EPS enables users to achieve unified visibility and control of fragmented systems across OT environments. In addition, users can configure and enforce policy by group to effectively manage systems and address different security requirements.

Dashboard

There Is No More OT Blind Spot

2407314114934149.png

AhnLab EPS dashboard delivers exceptional visibility into agent connection, unauthorized access prevention, and detection and block of malware, particularly the notorious ones such as “Conficker” and “Stuxnet”. The customizable dashboard allows users to design it based on their needs and look up data by Windows or Linux agent. Users can find in-depth information and data by clicking the “Detail” tab.

From the dashboard, you can check:

  • Agent connection status
  • The “Lock Mode” status of agents
  • Malware detection, prevention and infection status
  • Number of Conficker, Stuxnet, and ARP Spoofing attacks blocked

Industry Recognition

2509027941071383.png

Recognized as CPS Security Leader
in Frost Radar™ 2025

“With systematic threat management process and deep asset visibility, AhnLab CPS PLUS delivers cutting-edge security for cyber-physical systems. Organizations can benefit from AhnLab’s proactive threat identification, highly accurate detection, and prioritized response with a platform-powered experience.”

2509027941517288.png

Together We Make CPS Environments More Secure

As a member of OT-ISAC, we work hand-in-hand with its expert analysts, sharing attack tactics, threat intelligence, and best practices to fortify defenses against evolving cyber threats. Our unified CPS protection platform, powered by abundant expertise, references, and experience, contributes to keeping a global CPS community more secure.

FAQs

Frequently Asked Questions

A general IT security control cannot be applied to industrial control systems due to their high sensitivity to operational stability and availability. Thus, devices in the OT environment require OT-native solutions like AhnLab EPS that consider distinct characteristics and deliver optimal security features such as whitelist-based application control and flexible “Lock Mode” to ensure powerful protection and business continuity.
AhnLab EPS supports Windows and various Linux OS (CentOS, RHEL, Ubuntu, Fedora, and Debian). In particular, it supports outdated OS with expired security patches, such as Windows XP or any old embedded OS. Please refer to the solution brief for details of OS support.
In the past, there were difficulties in monitoring, reporting, and management of multiple AhnLab EPS servers. AhnLab ICM offers centralized monitoring and management of multiple AhnLab EPS servers, and it has extended its coverage to other products in our OT security framework. The solution also delivers various features in line with its unified management approach, including batch data lookup and policy enforcement to address operational complexity.
AhnLab Xcanner is a portable malware scanning and removal tool for Windows-based OT and Industrial Control Systems (ICS). AhnLab Xcanner scans and removes malware without installation, thereby minimizing the performance impact on critical systems. Users, including non-experts, can conveniently use the solution by mounting it on the authorized removable device or downloading it through AhnLab EPS Agent.
AhnLab EPS Relay essentially relays PCs in a closed and separate environment to AhnLab EPS Server. It allows console-based security management by enabling server-client connection and eliminates security blind spots.