Enhanced network throughput using network intrusion detection and prevention service (nidps) detection

Abstract

Aspects of the present invention provide an approach for performing network intrusion detection and prevention service (NIDPS) detection on a proxy server in a networked computing environment. In an embodiment, the proxy server has a front end proxy, a NIDPS component, and a back end proxy installed on it. The front end proxy decodes communications sent by external users to content servers over a network that are intercepted by the proxy server and forwards the communications to the NIDPS component. The NIDPS component performs NIDPS detection to detect whether communications comprise a network threat. Communications that have been verified as not comprising a network threat are forwarded to the back end proxy for routing to their destinations. Communications that have been verified as threats are forwarded to a cognitive engine, which initiates an automatic scaling of the NIDPS component in response to indications of network threats from the NIDPS component.