DefinitionMSS (Managed Security Services) is the outsourcing of security control operations, such as firewalls, VPN, IPS and endpoint protection, including administration, updates and monitoring. An MSSP (Managed Security Service Provider) is the company that delivers this service.
What it usually includes
Scope varies by contract, but an MSS service typically covers:
- Device administration: firewalls, VPN, IPS/IDS, proxies, WAF and endpoint solutions.
- Change management for rules and policies, with logging and approval.
- Updates and health of the equipment: versions, licenses, availability and capacity.
- Monitoring and notification of relevant security events.
- Specific protections, such as DDoS mitigation and email and web filtering.
MSS vs MDR
MSS was created to keep security controls configured and running, and its monitoring tends to end with a notification to the customer. MDR focuses on detection and response: the provider investigates threats in depth and takes containment actions. The two are complementary: MSS makes sure protection is well configured; MDR deals with what gets through it. Many MSSPs today also offer SOC and MDR.
Why it matters
A misconfigured firewall, a forgotten rule and an unpatched appliance are common entry points. Maintaining dozens of devices from different vendors requires specialists and continuous availability, which is hard to sustain in-house. When evaluating an MSSP, check the scope for each device, who approves changes, how incidents are handled and which reports you will receive.
Network Secure provides MSS for the continuous management and monitoring of security controls.
Frequently asked questions
What is the difference between MSS and MSSP?
MSS is the service (Managed Security Services); an MSSP is the provider that delivers it (Managed Security Service Provider).
Is MSS the same as MDR?
No. MSS focuses on administering and monitoring security controls; MDR focuses on detecting, investigating and responding to threats, including containment actions.