Detection + prevention + policy review
Intrusion Prevention for Michigan businesses.
Intrusion prevention adds the ability to take defined action on selected network activity. CTS helps connect the policy, deployment and review process so prevention supports the way the business operates.
The business question
Apply network controls with the business in mind.
A blocking decision can affect legitimate work as well as unwanted traffic. The useful service includes deliberate policy, tuning, change control and a clear way to handle an unexpected impact.
An application stops working after a policy change.
The team needs a way to identify the affected traffic, understand the rule and restore an appropriate path without abandoning the wider security objective.
Define the service
What the relationship needs to cover.
The useful scope connects the technical capability with the people and operating work around it.
Policy and deployment
Understand the traffic path and the actions appropriate for the environment.
Prevention and exceptions
Define how approved rules and necessary exceptions are handled.
Ongoing review
Connect logged activity and operational feedback to policy improvements.
From discussion to operation
Make the next step explicit.
Start with the current environment, define the responsibility and agree on how the work will be reviewed.
- 01
Set the objective
Identify the network services and business processes the control needs to support.
- 02
Introduce the policy
Plan the deployment, testing and handling of expected traffic.
- 03
Review the impact
Use findings and business feedback to refine the design.
Prevention is limited by deployment, supported traffic and policy. The appropriate product terminology and actions are confirmed during design; this page covers the intrusion-prevention service.
Questions before you decide
Understand what you are buying.
These distinctions help make the service conversation more useful.
Is intrusion prevention the same as a firewall?
They can be combined in one platform, but access policy and intrusion-prevention capabilities have different roles.
Can rules interrupt legitimate work?
Yes. Deployment, tuning and exception handling are important parts of the operating process.
How does IDS fit?
Detection can provide visibility and alerts. Prevention adds defined actions on selected activity. They should be designed as related capabilities.
Part of the wider environment
Connect the responsibilities.
This service works alongside other parts of your IT and security operating model.
Useful reading
Keep exploring the question.
Related CTS articles offer background and practical perspectives.
Are SSL VPNs Still Secure? Why Businesses Are Moving Beyond Them
Read more about the operating decisions behind this service.
Read the articleThe Day Cybersecurity Needed a Telephone Tree
Read more about the operating decisions behind this service.
Read the articleStart with your environment
Talk through intrusion prevention with CTS.
Tell us what is changing, what concerns you and how the responsibility is handled today. We will help you identify a useful next step.