1. Update, 14-July: There have been a number of stories published since the posting of this blog that have suggested this attack is specifically targeting SCADA energy management systems.
2. AhnLab has released various models tailored to each customers' network environments. It varies from AhnLab AIPS 2000/4000 for small and medium-sized network environments to AhnLab AIPS 10000 for enterprise businesses.

• Ahnlab Mds 4000 Iu
• Ahnlab Mds 4000 Garage Door Opener
• Ahnlab Mds 4000 Watt

AIPS

Advanced
Intrusion Prevention System

Description: Quick Connectors Part Number: 4000 Series SECTION I Date: 07/2013 Emergency Telephone 1-800-535-5053 (Infotrac) Quick Cable Corporation 3700 Quick Drive Quick Cable Product ID: Franksville, WI 53126 Telephone: 1-800-558-8667 SECTION II HAZARDOUS INGREDIENTS/IDENTITY INFORMATION. AhnLab MDS还应用了其独特的“基于内存的分析的Exploit检测”技术，与恶意行为类型或恶意行为发生与否无关，不仅可以准确检测到零日漏洞攻击，还可以分析绕过沙箱分析的恶意软件。. AhnLab MDS(MTA). Analyzer(탐지,분석) AhnLab MDS Manager. Data Viewer(통합 로그 관리) AhnLab MDS Agent. AhnLab MDS 4000. AhnLab MDS 8000; AhnLab MDS Manager 5000AR; AhnLab MDS Manager 10000AR.

AhnLab AIPS is an Advanced Network Intrusion Prevention solution that protects customer’s business environment in response to changes in cybersecurity threats.

Ahnlab Mds 4000 Iu

AhnLab AIPS (Advanced IPS) is a powerful network intrusion prevention solution that can respond to rapidly changing cyber security threats caused by digital transformations.

Security threats are rapidly changing with changes in the network environment. As the number of targets to attack increases and the method of attack varies, there are numerous variations. Along with these threats, Intrusion Prevention Solutions are also experiencing a change. Now it’s time to detect a lot of malware and defend against unknown attacks and more diverse attack elements and environments.

Based on AhnLab’s largest security threat analysis organization and infrastructure of Asia, AhnLab AIPS provides optimized network attack response signatures for network environments. While responding to the latest security threats with a variety of sophisticated detection engines and next-generation features, visibility and convenience make it easy and intuitive to identify and analyze threats.

• Advanced detection engine and
  sophisticated signature-based next-generation
  Intrusion Prevention System

• Highly capable of detecting and responding
  to threats with a variety of detection filters
  and acceleration technologies

• High-performance packet
  processing system
  that combines the HW and SW technology

• Adopting an Open API
  approach for collaboration with
  a variety of security solutions

• Convenient GUI
  for quick and easy
  threat visibility

• Improved threat analysis
  across multiple data and
  high degrees of freedom

AhnLab AIPS detects and blocks attacks based on network, OS, web and application vulnerabilities as well as various types of network-based attacks and malwares.

AIPS provides an easy and convenient operational management environment while securely protecting customer’s business against evolving network threats. It also ensures availability of networks and services with superior performance.

Intelligent Network Threat Detection

· Responds to security threats across multiple paths by advanced detection engines and next-generation IPS features

· Responds in advance to complex threats with malware detection and TMS linkage

Easy and Convenient Operation Management

· Easy and intuitive to view information with excellent visibility

· Detailed analysis of threat information with a variety of statistics and flexible Drill Down

Excellent Performance

· Enhanced performance of detection with high-performance of HW and acceleration technologies

· Provides fast and flexible analysis against a variety of threats by Big Data processing engines with high performance

Multiple Detection Engines for Security Threat Response

As the network environment changes, malware-based attacks are increasing along with the existed traffic-based attacks. AhnLab AIPS responds to evolving network security threats by Interworking with advanced detection engines, next-generation IPS features, and other security solutions.

• - High-performance pattern matching
• - Application Control
• - Behavioral detection (Flooding, Scanning. Etc.)
• - Blocks abnormal protocol (HTTP, DNS, SIP)
• - IP/MAC control (abnormal MAC, IP based Blacklist)
• - Encrypted traffic analysis
• - Detects and blocks C&C server access
• - IP/TCP refragmentation and prevents bypassing attacks through XFF features

• - YARA engine and signature (static analysis)
• - Malicious file extraction
• - Precious analysis through TMS

Information Visibility and Convenient GUI

AhnLab AIPS supports advanced information visibility to help users to quickly and easily recognize network conditions and analyze security threats. Custom dashboards and widgets allow administrators to organize dashboards with only the information they want. It scans threat events and generates custom statistics/analysis policies if continuous statistics and analysis are required.

Enhanced Detection/Blocking Performance

AIPS detects and prevents large traffic without service failures or packet leakage through multicore CPU and AhnLab’s optimized programming, architectures for high-speed packet processing, and PCRE acceleration technologies. It provides improved performance with AFNIC (AhnLab FPGA NIC) support.

High-performance Searching and Threat Analysis

AhnLab AIPS applies a high-performance engine focused on Big Data processing to support fast log/event scanning and flexible statistics/analysis of numerous detected events.

Big data Processing-based High-performance Engine Applied

High-Speed Search

- Faster than competing products

- Only for Big Data processing

Various Analysis

- Supports accurate analysis of events through flexible search

- Perfect custom statistics/report

Resources Efficiency

- Efficiency of memory resources

- Storage space optimization

- Ensures high efficiency of low specification equipment

Ahnlab Mds 4000 Garage Door Opener

AIPS 2000
MAX IPS Throughput (UDP)		20G
CPU		8 Core Bitlife download mac.
RAM		32GB
CFast		8GB
HDD		2TB
NIC Slot (Default/Max)		2 / 4
Interface	1GC	2 (Max 34 ports, including Mgmt)
	1GF	2 (Max 16 ports)
	10GF	-
	AFNIC	-
Bypass		Support
Power		550W Redundant

AIPS 4000
MAX IPS Throughput (UDP)		80G
CPU		20 Core
RAM		Download adhoc server online ppsspp. 64GB
CFast		8GB
HDD		2TB
NIC Slot (Default/Max)		4 / 6
Interface	1GC	2 (Max 50 ports, including Mgmt)
	1GF	4 (Max 24 ports)
	10GF	0 (Max 24 ports)
	AFNIC	-
Bypass		Support
Power		550W Redundant

AIPS 10000
MAX IPS Throughput (UDP)		120G
CPU		28 Core
RAM		64GB
CFast		8GB
HDD		2TB
NIC Slot (Default/Max)		4 / 6
Interface	1GC	2 (Max 50 ports, including Mgmt)
	1GF	0 (Max 24 ports)
	10GF	2 (Max 24 ports)
	AFNIC	0 (Max 2 ports) ※ Cannot be used with Intel NIC
Bypass		Support
Power		550W Redundant

Ahnlab Mds 4000 Watt

Technology Program	Vendor	Product Testing Reports	Certification	Product Version	Date	Certification Type	Operating System
Anti-Malware	Fortinet, Inc.	FortiGate® Consolidated Security Platforms	Anti-Malware - Network	For Business	FortiOS™
Anti-Malware	SonicWall	SonicWall TZ, NSa, NSsp, NSv Firewalls	Anti-Malware - Network	For Business	Proprietary
Anti-Malware	AhnLab Inc.	AhnLab V3 Endpoint Security 9.0	Anti-Malware - Endpoint	For Business	Windows 10 64-bit
Anti-Malware	ESTsecurity	ALYac 4	Anti-Malware - Endpoint	For Business	Windows 10 64-bit
Anti-Malware	TG Soft S.r.I.	VirIT eXplorer PRO	Anti-Malware - Endpoint	For Home	Windows 7 64-bit
Anti-Malware	Quick Heal Technologies Ltd.	Seqrite Endpoint Security (EPS)	Anti-Malware - Endpoint	For Business	Windows 8.1 64-bit
Anti-Malware	Acronis	Acronis Cyber Protect Cloud	Anti-Malware - Endpoint	For Business	Windows 10 64-bit
ConCert by HIMSS™	MEDfx Corporation	Lifescape Integrated EMR/PM Solution	ConCert by HIMSS™	1.0	08/05/2015	ConCert EHR	N/A
ConCert by HIMSS™	Cerner Corporation	Cerner HIE	ConCert by HIMSS™	13.1	02/11/2016	ConCert HIE	N/A
ConCert by HIMSS™	Qvera	Qvera Interface Engine	Qvera Interface Engine	2.0	12/14/2015	ConCert EHR	N/A
ConCert by HIMSS™	iPatientCare, Inc.	iPatientCare EHR	ConCert by HIMSS™	2014 (2.0)	03/19/2015	ConCert EHR	N/A
ConCert by HIMSS™	Corepoint Health	Corepoint Integration Engine	ConCert by HIMSS™	2016.1	02/26/2016	ConCert HISP	N/A
ConCert by HIMSS™	Caradigm	Caradigm Open Exchange	ConCert by HIMSS™	3.4	01/07/2016	ConCert HIE	N/A
ConCert by HIMSS™	NextGen Healthcare	NextGen Ambulatory EHR	ConCert by HIMSS™	5.8.3	02/04/2016	ConCert EHR	N/A
Firewalls	GFI Software	Kerio Control NG500	Network Firewalls	current	12/07/2020	Corporate	Proprietary
Web Application Firewalls	Citrix Systems	Citrix Web App Firewall MPX 14020	Web Application Firewall	current	10/10/2017	Not Specified	Proprietary
Firewalls	Fortinet, Inc.	FortiGate® Consolidated Security Platforms	Network Firewalls	current	10/12/2020	Corporate	Proprietary
Firewalls	Zyxel Networks Corporation	ZyWALL Series	Network Firewalls	current	09/30/2020	Corporate	Proprietary
Network Attached Peripherals	Pitney Bowes	DM Series Family	Network Attached Peripherals	current	02/13/2020	Not Specified	Proprietary
Network Attached Peripherals	Pitney Bowes	Connect+ / SendPro P-Series	Network Attached Peripherals	current	11/15/2019	Not Specified	Proprietary
Web Application Firewalls	Barracuda Networks Inc.	Barracuda Web Application Firewall Family	Web Application Firewall	current	04/17/2020	Not Specified	Proprietary
Web Application Firewalls	Fortinet, Inc.	FortiWeb 1000E	Web Application Firewall	current	11/24/2020	Not Specified	Proprietary
IPSec VPN	Fortinet, Inc.	FortiGate® Consolidated Security Platforms	IPSec IKEv2	current	05/08/2020	Enhanced	FortiOS™
Firewalls	F5 Networks Inc.	BIG-IP Family	Network Firewalls	current	11/21/2017	Corporate	Proprietary
IPSec VPN	F5 Networks Inc.	BIG-IP Family	IPSec IKEv2	current	04/24/2020	Basic	Proprietary
Firewalls	F5 Networks Inc.	BIG-IP Family	Network Firewalls	current	11/21/2017	HA	Proprietary
Web Application Firewalls	Radware Ltd.	AppWall OnDemand Switch VL	Web Application Firewall	current	09/16/2020	Not Specified	Proprietary
Firewalls	Trend Micro	Trend Micro Cloud Edge	Network Firewalls	current	12/10/2019	Corporate	Proprietary
SSL-TLS VPN	F5 Networks Inc.	BIG-IP Family	SSL-TLS VPN 4.0	current	01/21/2020	Not Specified	Proprietary
Firewalls	GajShield Infotech	GajShield Next Generation Firewall Appliance Family	Network Firewalls	current	07/24/2019	Corporate	Proprietary