Overview

B HKEYLOCALMACHINESOFTWAREAhnlabAPC2Policy AgentAgent Action Config로 들어간다. C Remove의 값을 2 or 0 에서 1 로 변경합니다. D 제어판의 프로그램 추가/삭제에서 삭제! Remcos is a RAT (Remote Administration Tool) malware that has been distributed through spam mail for the past few years. Remcos is being sold by its developer using the website below, describing it as a RAT tool for remote management, it has been updated regularly until recent days.

AhnLab 내PC지키미는 개별 PC의 보안 상태 점검 및 자동조치를 통해 전반적인 보안 수준을 개선하는 PC취약점 점검 및 조치 솔루션입니다. 일반 기업은 물론, 공공 및 교육기관, 금융기관에까지 심각한 위협이 되고 있는 대부분의 사이버 공격은 엔드포인트, 즉. AhnLab Privacy Management Suite 는 비즈니스 환경의 다양한 경로를 통한 개인정보 유출 의심 파일을 원천 차단함으로써 기업의 개인정보 관련 규제 준수 및 대외신뢰도 향상에 기여합니다.

Ahnlab Privacy Management Suite

An increasing number of businesses are migrating their workloads to cloud environments to accelerate digital transformation. However, cloud environments requires a new security platform for centralized visibility and management of cloud workloads.

AhnLab CPP is a single, centralized cloud workload protection platform that focuses on providing optimized protection, unified management, and flexibility for workloads in hybrid environments.

Optimized Protection for Hybrid ㆍMulti-cloud Environments

• - Provides comprehensive visibility and easy management for workloads in on-premise and cloud server (AWS, Azure) environments
• - Supports automatic identification for autoscaling cloud server workloads

Unified Operation and Management

• - Delivers easy operation and management through a single, web-based management platform
• - Supports quick and simple operations with Intrusion Prevention, Firewall, Application Control, and Anti-malware
  
• - Provides integration with 3rd-party solutions via Open API
• - Enables SIEM, ESM integration via syslog logging

Flexible and Cost-efficient

• - Provides module-based CPP Management, which enables flexible configuration according to the business environment
• - Saves cost by allowing selective installation and application of security solutions

Application Control

• - Allows execution of trusted applications only
• - Ensures system stability by providing various control modes

Anti-malware

• - Provides real-time malware scan with minimal impact on resources and performance
• - Supports manual and scheduled scan

Firewall

• - Enables IP, Port , protocol-based network control
• - Supports geo-IP blocking

Intrusion Prevention

• - Detects and blocks network intrusion attacks
• - Blocks attacks within​ internal servers as well as attacks between external and internal servers
• - Provides signature recommendation
• - Supports IDS mode

TMS

Threat Management System for AhnLab’s Products

AhnLab TMS is a 'Next-generation Network integrated Threat Management Platform' that provides in-depth threat analysis based on a Big Data processing framework and efficient integrated policy management of network security products.

AhnLab TMS is the Network Threat Management Platform that manages multiple appliances, monitors and analyzes various threat information and responds to integrated appliances comprehensively.

Recent network environments are diversifying from mobile to IoT devices and security threats are evolving. The need for an integrated threat management platform that comprehensively manages and responds to changes and security threats in these environments is increasing as a single existing solution makes it difficult to respond to them.

It provides efficient policy management for integrated appliance, collection/management of high capacity events and in-depth analysis.

AhnLab TMS provides two modules, Threat Manager and Policy Manager, for effective network threat management and integrated policy management.

AhnLab TMS provides automated/in-depth threat analysis and rapid/systematic response.

AhnLab TMS provides machine learning and scenario-based correlation analysis. It automatically analyzes large volume of events collected from a variety of integrated appliances to support security administrators to analyze and respond to security threats more quickly and conveniently.

Detecting Network Abnormal Behavior with Machine Learning

It provides automatic analysis that determines and alerts abnormal behavior automatically based on the patterns accumulated for the targets that require continuous monitoring and analysis.

Scenario-based Correlation Analysis

A combination of various kinds of events collected from integrated products provides scenario-based correlation and threshold-based analysis. An integrated analysis of various penetration scenarios that cannot be detected in a single solution is made into multi-tier detection analysis that combine various events.

AhnLab TMS provides custom monitoring and reporting based on user-focused flexible statistic analysis.

AhnLab TMS provides custom monitoring and reporting to support flexible user-centered monitoring and visibility. Security administrators scan threat events and generate them as custom statistics/analysis rules when continuous statistics and analysis are required. In addition, the generated statistics/analysis rules can be added to the custom dashboard for real-time monitoring and can be flexibly used as custom reports for reporting.

AhnLab provides a comprehensive analysis of threats and systematic response to events retrieved from various interlinked products.

AhnLab TMS provides integrated management of its network security solutions, next-generation firewall, IPS, DDoS solutions and APT solutions. It also provides a flexible interlocking system for integrated analysis and response to a variety of security threats that a single solution cannot respond to.

• Efficient and Flexible Appliance Management

  · Efficient operation and monitoring of integrated appliances

  · Monitors/responds to security threats by integrating with NW security products and APT products

  · Security policy management of multiple appliances (TG, DPX, AIPS)

• Big data processing framework based integrated event management with high-performance

  · Quick collection and management of high capacity logs collected from multiple appliances

  · Quick analysis of network threat with fast discovery and flexible statistics settings

  · Big data processing framework with the technology for software with high-performance

• In-depth Analysis and Response to a Variety of Threats

  · A comprehensive analysis of various events collected from various appliances

  · In-depth threat analysis with advanced analysis technology

  · Automatic response for a rapid response

Ahnlab Privacy Management 삭제

Ahnlab Privacy Management Definition

※ There can be difference for the log capacity, number of policy management and event processing performance of AhnLab TMS, depending on the operation mode and environment and AhnLab will guide through additional technical consultations.