- by x32x01 ||
What is IPs ?
The Intrusion Prevention System can be defined as a tool that is deployed in at the interface between the public network(interwork) and the private network with the intention to prevent the intrusion of malicious network packets. As the name states, the purpose of the existence of this tool is to ensure that the packets with malicious signature should not be allowed to enter the private network as they can lead to harm the internet if entertained.The intrusion prevention system is not limited to scanning the network packets at entry-level only but also to encounter the malicious activity happening in the private network.
Based on the functionality of the IPS, they are divided into various types that are mentioned below:
- Host-based intrusion prevention system
- Wireless intrusion prevention system
- Network-based intrusion prevention system
- Network behavior analysis
Here is a list of the some good IPS tools:
- SolarWinds Security Event Manager
- Datadog Real-time Threat Monitoring
- Splunk
- Sagan
- OSSEC
- Open WIPS-NG
- Fail2Ban
- Zeek