Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Cloudaware IDS is a full platform to monitor and control systems. It mixes together all the aspects of HIDS (host-based intrusion detection), log monitoring and SIM/SIEM together in a simple, powerful solution.

...

Under this approach customers maintain their own set of IDS servers and are responsible for many operational aspects including backup, disaster recovery and availability. Cloudaware recommends one IDS server per 500 agents and that IDS servers are deployed in the same region as agents. 
Customers may also choose to deploy a hybrid approach where some agents use Cloudaware-managed IDS servers and some agents user customer-managed IDS servers. 

Wazuh

Wazuh is a Host-based Intrusion Detection service provided by Cloudaware via Kibana platform user interface. You can access Wazuh application from Cloudaware Launcher.

You can use Raw Data UI to query & filter your data and/or create Dashboards to review the summary of alerts on an instance level, monitor status of agents and build any vizualizations that are meaningful to you:

Image Removed    Image Removed

...

IDS Status in CMDB

If Intrusion Detection module is enabled, check an instance in Cloudaware CMDB. The tile 'IDS' may display 3 values:

  • Monitored

  • Not monitored

  • Under Attack

...

Click the tab 'Security' to review HIDS Alerts:

...