why use an IDS / IPS?

An IDS / IPS allows us to have a complete monitoring of the flow and state of the components of the network or system, allows to maintain a control in case attacks or anomalies are detected, including those originating from the secure portion of the network, and that without the need to be present at the time of an attack, the IDS / IPS will be configured to act in automatic response to the event presented, and will allow us to have a record of everything that has occurred for subsequent analysis and improvement of the security of the infrastructure.

IDS / IPS systems detect attacks in real time while generating minimal impact to the network, are independent of the operating system, easy to configure and can protect a complete subnet.



The IDS / IPS allow the easy incorporation of other complementary tools of computer security, maximizing its potential, being for these reasons considered an important complement for the protection of an infrastructure.