AhnLab EPS

Overview

​Advanced cyber attacks targeting critical infrastructures and organizations of high-value have increased over the past several years. AhnLab EPS provides the control and management tools you need to protect your critical infrastructures from malicious threats.

​Utilizing a lightweight agent, AhnLab EPS ensures system availability of various fixed function systems, such as Industrial Control Systems (ICS), Point of Sale (POS) Terminals, KIOSKs, and ATMs.

Business continuity and advanced endpoint protection is also ensured by AhnLab EPS with AhnLab’s exclusive whitelisting technology. 

Resources​

[Insights] How to Ensure System Availability ​                                                             Read More >​

Features

Optimized for Fixed Function Systems​

- Provides effective malware scan while minimizing the use of system resources

- Minimizes the impact on the system with a lightweight agent

- Ensures productivity and system availability for critical infrastructures, including systems operating offline

- Supports various OS environments

- Integrates with AhnLab MDS for enhanced monitoring and response against threats, such as malicious traffic 

  and files, within the network

3-Level Lock Modes​ 

- Enables effective security operation with 3-Level Lock Modes

- Unlock Mode: Initial status of the system allowing system change and policy update

- Lock Test Mode: Simulation for expected results is possible with configured settings or security policies to

  reduce unexpected errors commonly found in untested deployments

- Lock Mode: Prevents any system changes except predefined exceptions

Comprehensive Application, Media, and Network Control​ 

- Enables Application Control to allow execution of authorized applications only

- Disables AutoRun of portable devices to prevent malware infiltration

- Blocks network connection via unauthorized IP/Port

Effective and Efficient Management ​ 

- Centralized policy management for server-managed environment

- Agent based policy management for standalone devices 

 

Advantages

In critical infrastructures, it is important to quickly detect any existing threats to ensure a seamless operation or service. But most often, frequent security updates and patches can in​terfere with the operation, taking up a lot of time and system resources. 

AhnLab EPS provides stable operation and optimized security for various environments. Through its advanced whitelisting technology, AhnLab EPS delivers cost-effective protection while also ensuring business continuity with simple and easy management.​

Simple, Easy Operation and Management

- Allows simple administration and implementation

- Provides application control based on intelligent whitelisting technology

- Enables easy management by only allowing authorized applications to be executed

- Ensures operational continuity with minimal use of system resources with a lightweight 

Ensures Productivity and Business Continuity

- Prevents malware-induced security breaches

- Provides system stability without requiring signature or patch updates

- Minimizes the use of system resources with a lightweight agent, thus providing optimized protection for fixed function systems 

Cost Efficient

- Reduces system and data restoration costs by preventing malware damages

- Reduces time and costs required for system security and maintenance

Management

AhnLab ICM is a centralized security monitoring and management solution that simplifies the management of multiple AhnLab EPS servers by centralizing the data received from each server.

AhnLab ICM collects and visualizes the data received from multiple AhnLab EPS servers, enabling users to quickly identify and respond to security issues found in devices connected to multiple servers.

AhnLab ICM allows businesses to efficiently monitor multiple systems through an intuitive user interface. The centralized management solution also provides businesses with reporting and notification services to reduce the TCO (Total Cost of Ownership).

Key Features

• 1. Identify Risk Faster with Enhanced Visibility

  - Provides an intuitive dashboard that visualizes the status of multiple AhnLab EPS servers

  - Supports user-defined dashboard and detailed view of dashboard items

  - Enables status check/search on AhnLab EPS servers and agents connected to the server

• 2. Reduce IT Workload with Centralized Security Policy

  - Allows simple application of AhnLab EPS main policies
  : Features include a search for exception list, delete all, search for disabled policies regarding malware

  - Provides search for history and results regarding the delivery of AhnLab EPS policies·commands distributed by AhnLab ICM

• 3. Protect Efficiently with Simplified Security Management and Operation

  - Supports integration via EPSIC update without the migration of all servers (AhnLab EPS 2.1 or higher)

  - Provides software type/export setting to SIEM system in CEF, LEEF, Syslog format

  - Manages the latest downloads of malware scanning engines
  : Engine update server path must be set to AhnLab ICM in servers higher than AhnLab EPS 2.1

Operating Environment

AhnLab ICM Web Console

AhnLab ICM Web Console

※ Recommended hardware specifications for servers required in the installation of AhnLab ICM may vary depending on the client's environment.

Specifications

AhnLab EPS is provided in both Server-Client Type (Managed Type) and Standalone Type for various environments.

1. Server-Client Type (Managed Type)​

AhnLab EPS Server​

* Maximum of 8,000 agents recommended

AhnLab EPS Client for Windows

* Supports both 32-bit and 64-bit versions for the OS above

* Supported OS and functions may vary due to the end of support for SHA-1 signing certificate.​

AhnLab EPS Relay Server, AhnLab EPS Relay Client​

 AhnLab EPS Client for Linux​​

2. Standalone Type

AhnLab EPS Standalone​​​​

* Supports both 32-bit and 64-bit versions for the OS above​​​

​