OT Endpoint Protection

Home OT Endpoint Protection

AhnLab EPS is the first-in-industry OT endpoint protection solution that only allows the execution of authorized programs without compromising system performance.

Stable System Operation

Given that stable operation is the foremost priority of the OT environment, AhnLab EPS ensures minimal system performance impact with its super lightweight agent. At the same time, it successfully addresses OT security requirements by serving the flexible three-stage “Lock Mode”, “Emergency Unlock Mode” and “Lock Exception” features.

Extensive OS Support

AhnLab EPS detects and prevents malware across a wide range of operating systems (OS), including Windows and Linux. It also supports outdated OS to guarantee the secure operation of old OT systems that lack security updates and patches.

Secure Business Continuity

To secure business continuity, the whitelist-based AhnLab EPS essentially blocks any potentially unwanted programs, storage, devices, and network connections. This approach stands out with unmatched protection from unexpected system failure due to the execution of unwanted files and traffic overflow.

Key Features

3-Stage Operation Modes

AhnLab EPS empowers users with convenient operational management and policy settings by harnessing the 3-stage operation modes composed of “Unlock Mode” for system updates, “Lock Test Mode” for testing, and “Lock Mode” for actual operation. Such flexibility grants stability and efficiency to OT system management.

Application Control

AhnLab EPS restricts execution of all but authorized programs powered by the application control feature based on its “allow list”. Users can also make a “block list” to prevent unwanted programs from running.

Network and Storage Control

AhnLab EPS prevents malware infiltration by rigorously controlling program execution and device access to the system. The network connections to unauthorized IPs or ports are blocked in the same way.

Malware Detection and Block

Given the stability-sensitive characteristics of industrial control systems, AhnLab EPS detects malware at the agent level and performs a robust analysis on its servers. Such a systematic security process ensures real-time detection, analysis, and prevention of malware without compromising performance.

Extensive Monitoring

Interacting with AhnLab MDS, our sandboxing solution, AhnLab EPS augments its detection and analysis of malicious files and traffic enabled by its extended network monitoring of systems where AhnLab EPS Agent is installed.

Admin Features

The centralized web management of AhnLab EPS enables users to achieve unified visibility and control of fragmented systems across OT environments. In addition, users can configure and enforce policy by group to effectively manage systems and address different security requirements.

DashBoard

There Is No More OT Blind Spot

AhnLab EPS dashboard delivers exceptional visibility into agent connection, unauthorized access prevention, and detection and block of malware, particularly the notorious ones such as “Conficker” and “Stuxnet”. The customizable dashboard allows users to design it based on their needs and look up data by Windows or Linux agent. Users can find in-depth information and data by clicking the “Detail” tab.

From the dashboard, you can check:

Agent connection status
The “Lock Mode” status of agents
Malware detection, prevention, and infection status
Number of Conficker, Stuxnet, and ARP Spoofing attacks blocked

FAQ's

1. What is AhnLab EPS and why is it important for OT environments?

AhnLab EPS is an endpoint protection solution tailored for Operational Technology (OT) systems. It prioritizes stable operation by using a super lightweight agent that ensures minimal system performance impact while delivering essential security features. This makes it ideal for the stability-sensitive nature of industrial control systems.

2. How does AhnLab EPS protect OT systems from malware and unauthorized programs?

AhnLab EPS uses a whitelist-based approach that blocks all but authorized programs, storage, devices, and network connections. It incorporates application control with an “allow list” for trusted applications and enables users to create a “block list” for unwanted software, rigorously preventing malware infiltration through tightly controlled execution and device access.

3. Which operating systems and environments are supported by AhnLab EPS?

AhnLab EPS supports a wide range of operating systems, including both Windows and Linux. It is also compatible with outdated OS versions, ensuring that even legacy OT systems lacking security updates or patches can remain protected.

4. What are the three-stage operation modes in AhnLab EPS, and what are their purposes?

The three operational modes are: Unlock Mode: Used for maintenance and updates. Lock Test Mode: For testing new policies or configurations. Lock Mode: For everyday secure operation. This structure offers flexibility in managing OT system stability while enabling secure updates and policy changes.

5. How does AhnLab EPS ensure centralized and effective management of OT security?

AhnLab EPS provides centralized web management, giving administrators unified visibility and control over disparate OT systems. Policies can be configured and enforced by group, customized for different requirements, and managed through a dashboard for quick monitoring and response.

6. Does AhnLab EPS integrate with other security solutions?

Yes, AhnLab EPS can integrate with AhnLab MDS, a sandboxing solution. This integration extends detection and analysis of malicious files and network traffic, providing robust real-time malware detection without compromising system performance.