EW50 Industrial LTE Cellular Gateway
214
5.2.3 IPS
To provide application servers in the Internet, the administrator may need to open specific ports for services.
However, there are some risks to open service ports to the Internet. In order to avoid such attack risks, it is
important to enable IPS functions.
Intrusion Prevention System (IPS) is a network security appliance that monitors network and/or system
activities for malicious activity. The main functions of IPS are to identify malicious activity, log information
about this activity, attempt to block/stop it and report it. You can enable the IPS function and check the listed
intrusion activities when needed. You can also enable the log alerting so that the system will record Intrusion
events when corresponding intrusions are detected.
IPS Scenario
As shown in the diagram, the gateway serves
as an E-mail server, Web Server and also
provides TCP port 8080 for remote
administration. So, remote users or unknown
users can request those services from Internet.
With IPS enabled, the gateway can detect
incoming attack packets, including the TCP
ports (25, 80, 110, 443 and 8080) with services.
It will block the attack packets and let normal
ones pass through the gateway.