Cloudaware IDS is a full platform to monitor and control systems. It mixes together all the aspects of HIDS (host-based intrusion detection), log monitoring and SIM/SIEM together in a simple, powerful solution.
...
Using Managed IDS deployment option, customers leverage IDS servers that are managed by Cloudaware.
...
Advantages | Disadvantages |
|---|---|
| Not able to deploy common OSSEC customizations without involving Cloudaware support. |
...
Under this approach customers maintain their own set of IDS servers and are responsible for many operational aspects including backup, disaster recovery and availability. Cloudaware recommends one IDS server per 500 agents and that IDS servers are deployed in the same region as agents.
Customers may also choose to deploy a hybrid approach where some agents use Cloudaware-managed IDS servers and some agents user customer-managed IDS servers.
Wazuh
Wazuh is a Host-based Intrusion Detection service provided by Cloudaware via Kibana platform user interface. You can access Wazuh application from Cloudaware Launcher.
You can use Raw Data UI to query & filter your data and/or create Dashboards to review the summary of alerts on an instance level, monitor status of agents and build any vizualizations that are meaningful to you:
IDS Status in CMDB
If Intrusion Detection module is enabled, check an instance in Cloudaware CMDB. The tile 'IDS' may display 3 values:
Monitored
Not monitored
Under Attack
...
Click the tab 'Security' to review HIDS Alerts:
...