Firewall vs IPS vs IDS

• Firewall is a network security device that filters incoming and outgoing network traffic based on predetermined rules.

• Intrusion Prevention System (IPS) is a device that inspects traffic, detects it, classifies and then proactively stops malicious traffic from attack.

• Intrusion Detection System (IDS) is a device or software application that monitors traffic for malicious activity or policy violations and sends alert on detection.

Deep Security on AWS

• Trend Micro Deep Security is a host-based security product that provides Intrusion Detection and Prevention, Anti-Malware, Host Firewall, File and System Integrity Monitoring, Log Inspection, and Content Filtering modules in a single agent running in the guest operating system.

• In the public subnet, a Deep Security public elastic load balancer.

• In the public subnet, Deep Security Manager instances.

• In the private subnets, a highly available Deep Security database and its mirror.