Co-Managed Network IDS/IPS

SecureWorks' Managed Network IDS/IPS service provides full lifecycle management of your Intrusion Detection and Prevention devices from initial planning and deployment to ongoing tuning and configuration updates.  Leveraging our proprietary Sherlock Security Management Platform, our certified security experts provide proactive management and real-time security event monitoring and response across your IDS and IPS infrastructure to ensure optimum protection of your IT assets.

Our Managed Network IDS/IPS service is provided in an unlimited and unmetered fashion with no limits placed on configuration changes, policy requests, help desk tickets and support from our expert SOC staff. Our experienced security professionals serve as an extension of your security team, providing recommendations and expert guidance as needed at no additional cost to your organization.

Delivered in a flexible co-managed approach where you retain ownership and administrative access to your devices, SecureWorks' Managed Network IDS/IPS service integrates tightly with your existing security program to provide unmatched, tailored protection for your environment. With support for a wide array of IDS/IPS products, our service makes the most of your investments in best-of-breed security technology. For enterprises seeking to implement IDS/IPS technology or simply update their existing deployment, SecureWorks also offers cost-effective product and service bundles using our high performance iSensor^® IPS appliances or commercially available network IDS/IPS products.

Service Features

• Site review, planning and IDS/IPS implementation
• Proactive administration, signature tuning and maintenance
• Real-time prevention of threats before compromise
• 24x7x365 real-time security event management by 100% SANS GIAC GCIA certified experts
• Countermeasure deployment based on our industry-leading threat visibility and Counter Threat Unit^SM applied research
• Unlimited and unmetered expert support and recommendations
• On-demand security and compliance reports via the SecureWorks Portal

As part of our Managed Network IDS/IPS service, logs and events from managed IDS/IPS appliances are thoroughly analyzed in real-time to identify and assess threats to your enterprise. The Sherlock Security Management Platform correlates IDS/IPS events with security activity from firewalls, network infrastructure, servers, applications and other data sources across your environment as well as vulnerability scanning data and threat intelligence from our CTU, providing our certified security analysts with the full context surrounding potential threats. Using this context, our experts eliminate false positives and identify the real security incidents that need your attention.

When an incident is identified, SecureWorks' analysts immediately assess the threat and escalate to the appropriate contacts within your enterprise. Once escalated, our professionals provide detailed recommendations and work directly with your staff to fully mitigate the threat and protect your IT assets as part of the unlimited and unmetered support we provide at no additional cost.