Managed IDS/IPS

Expert signature tuning and device management ensures you will get the maximum value out of your devices. When the service is first implemented, our experts conduct extensive base-lining to tailor detection and alerting to the customer network. Using intelligence from our Counter Threat Unit (CTU) security research group on the latest exploits and attack methods, our device engineers fine-tune IDS signatures to maximize detection capabilities in the customer network. Managed devices are continually tuned, based on CTU intelligence about emerging threats and as the customer network changes.

Our certified Security Analysts are required to hold the SANS GIAC Certified Intrusion Analyst (GCIA) certification. They monitor IDS and IPS alerts in real time, using our proprietary Counter Threat Platform to analyze events and identify threats. All event information is analyzed, including full packet payloads. Events are correlated across all available information sources, including other IDS and IPS devices, firewall logs, network devices, host and application logs, vulnerability scan results, and asset information. When a customer is at risk, our security professionals respond immediately to counter the threat.

The Managed IDS/IPS service leverages applied research from Dell SecureWorks' CTU research team to strengthen signatures and analysis of IDS alerts. Dell SecureWorks' extensive visibility into billions of events per day enables the CTU group to identify and investigate emerging threats, and develop countermeasures for our customers. This intelligence is fed back into our services to enhance Managed Network IDS/IPS monitoring and response capabilities. Dell SecureWorks provides an advanced level of protection by correlating this intelligence in real time with IDS events seen across our customer base.

Dell SecureWorks' Managed IDS/IPS service offers flexible support in the most complex environments, allowing our experts to tailor services to each customer's individual needs. Appliances can be managed in a traditional managed services model, where customer personnel have limited or no administrative privileges for their IDS/IPS devices.

Unlike other vendors, Dell SecureWorks can also support co-management, where the customer retains ownership and administrative rights to their IDS/IPS appliances to the extent that is preferred. With this approach, our experts alleviate the management, maintenance and monitoring burdens without the customer being locked out of their infrastructure.

Analysts and customers agree. The Dell SecureWorks Customer Portal is the most advanced web-based portal for Managed Security Services. The intuitive and appealing interface furnishes you with clear views into the state of your organization's security posture, supported by real-time, enterprise-wide reporting: Convey the state of your organizations' security with executive level reports and dashboards; Drill down into security activity and events using operational reporting tools; Prove regulatory compliance to auditors quickly and effectively.

As part of our Managed IDS/IPS service, your organization will receive unlimited and unmetered remediation assistance and security consultation from our team of certified Security Analysts in our Security Operations Centers. Our Analysts are required to hold the SANS GIAC GCIA certification and bring many years of security experience to help our customers address their complex issues. When an incident is identified, this team will take the necessary steps to mitigate the threat before damage is done, working hand-in-hand with your team until the issue is resolved.