System Configuration

• ESM Site Server will be connected via Internet to secui.com's ESM Center Server.
• Security log for targeted security equipment will be collected by the Site Server, and the collected logs will be transmitted to the Center Server in real-time.
• Site Server and Center Server will communicate using encryption to prevent information leaks.
• In case of an emergency, Site Server will be controlled by Center Server for proper response and countermeasures.

Service Name	secuiMSS-Basic	secuiMSS-Pro
secuiSCAN	Implementation of weakness analysis once a month, using automated weakness analysis tools Countermeasure Recommendation Analysis result reporting	Basic service New weaknesses checking and reporting Selection of target system, implementation of mock hacking once every 6 months, and result reporting
secuiWALL	Firewall log monitoring Abnormal log occurrence notification and counter-measure recommendation Operation reporting once a month	Basic service Firewall rule audit and policy recommendation (Once in every 3 months) Performance monitoring of security system and result reporting once a month.
secuiIDS	IDS log monitoring Abnormal log occurrence notification and counter-measure recommendation New weakness pattern update support Operation reporting once a month	Basic service IDS configuration checking (Once every 3 months) Performance monitoring of a security system and result reporting once a month
secuiLOG	N/A	Log monitoring Abnormal log occurrence notification and countermeasure recommendation