The collection sensors
They capture the traffic and activity of the monitored systems.
VOGO-IDS
Intrusions, seen before they cause harm
IDS — Intrusion Detection System, the system that watches traffic and system activity and flags attack patterns and suspicious behaviour.
Installed at the organisation, on premise or in a private cloud, with minimal impact on the performance of the monitored systems.
- Updated signatures
- Behavioural analysis
- Alerts to the SIEM
VOGO-IDS
Detection, prioritisation and investigation, in a single flow
VOGO-IDS monitors network and system activity in real time and compares what it sees with known attack signatures. Where there is no signature, behavioural analysis flags deviations from the usual activity.
Each alert comes with its context — the protected asset, the severity, from informational to critical — and reaches the security team through the console, e-mail or other configured channels, even when nobody is signed in.
Relevant events go to VOGO eBS SIEM for central investigation, and administrators adapt rules, signatures and exclusion lists to their own infrastructure.
Monitoring. Detection. Alerting. Investigation.
Real-time monitoring
Traffic and system activity, collected with minimal impact on performance.
Attack signatures
Known attack patterns, updated for recent threats.
Behavioural analysis
Anomalies identified through machine learning, even without a known signature.
Prioritised alerts
From informational to critical, with the context needed for the investigation.
Custom rules
Rules created and changed by the organisation, with controlled exclusion lists.
Correlation with assets
Events linked to the protected assets, for correct prioritisation.
Notifications
E-mail and other configured channels, on events and state changes.
Security reports
Periodic reports and export for analysis and audit.
What makes the product different
Link with the SIEM
Alerts go to VOGO eBS SIEM, correlated with the other security events.
VOGO eBS identity
Role-based access, with OpenID Connect, SAML, LDAP or Active Directory.
Full audit
Who viewed or changed the rules and alerts stays on record.
Romanian-language console
A responsive web interface, adapted to the user’s role.
Support, signature updates and training are provided by VOGO, as the product’s manufacturer.
VOGO-IDS — a single integrated product
The detection engine
Applies the signatures, the custom rules and the behavioural analysis.
The alert console
Prioritised alerts, their context and the investigation.
The integration
REST API, webhooks and events forwarded to the SIEM.
Frequently asked questions
What is VOGO-IDS?
It is the VOGO intrusion detection product: it watches traffic and system activity and warns the security team of attack patterns and suspicious behaviour.
Does it detect unknown attacks too?
Yes, through behavioural analysis: activity that deviates from the usual pattern is flagged even when there is no signature for it yet.
How does it work with the SIEM?
Alerts and relevant events are forwarded to VOGO eBS SIEM, where they are correlated with the other sources and investigated centrally.
Where does it run?
On premise, in a private or hybrid cloud, in containers or on virtual machines. Security data stays with the organisation.
Request a demo
See how VOGO-IDS works
Request a demo on your organisation’s infrastructure.
Note: The services are provided in line with the European DNSH principle – “Do No Significant Harm”, in accordance with Article 17 of Regulation (EU) 2020/852 on the establishment of a framework to facilitate sustainable investment and with the European Commission’s technical guidance on the application of the DNSH principle, C/2023/111.