Intrusion Shield OnPremise is an on-premise network protection solution that monitors and blocks malicious network connections in real-time. The product sits behind the firewall and uses the Global Threat Engine, which contains decades of historical IP records and reputation data, to identify and block malicious connections while permitting trusted IP connections. The solution provides bidirectional traffic monitoring, analyzing both inbound and outbound network connections. It offers visibility into all connection attempts on the network, displaying detailed information about blocked connections including client IP, server IP, DNS queries, risk levels, and reasons for blocking. Shield OnPremise includes an interactive dashboard that shows real-time blocked connection logs, geographic visualization of traffic sources by country, and identification of devices with the most malicious connection attempts. This enables security teams to prioritize remediation efforts based on which devices are generating the most threats. The product differentiates itself from traditional firewalls, intrusion detection/prevention systems (IDS/IPS), and network detection and response (NDR) solutions through its threat intelligence-driven approach to connection blocking. It provides security teams with detailed threat context and network visibility to help identify malware and malicious activity that may already exist within the network environment.