Trellix Intrusion Prevention System
Trellix Intrusion Prevention System (IPS) is a network security solution that detects and blocks malware threats across networks using both signature-based and signature-less detection methods. The system is designed to operate in hybrid environments, supporting on-premises, virtual, and cloud deployments with scalability up to 100 Gbps for on-premises appliances. It features automatic scaling for elastic workloads. Trellix IPS combines multiple detection techniques that go beyond traditional pattern matching, utilizing advanced detection and emulation capabilities to identify sophisticated and stealthy attacks. The solution provides real-time blocking capabilities and is marketed as NDR (Network Detection and Response) ready. The platform includes comprehensive investigative workflows with intuitive dashboards that correlate alerts to enable efficient threat investigation. It integrates behavioral analysis with signature-based detection to provide context for security events. The system is supported by complementary services including installation assistance, configuration support, integration capabilities, training, and ongoing optimization services such as solution tuning and incident response support.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
An extended traceroute tool for CSIRT operators with advanced features.
A powerful command-line packet analyzer and a portable C/C++ library for network traffic capture with comprehensive documentation.
AWS Network Firewall provides fine-grained control over network traffic and enables easy deployment of firewall security.
An OpenFlow honeypot that detects unused IP addresses and simulates network traffic to attract and analyze potential threats
A set of Go-based emulators for testing network security and analyzing network traffic.
A method for profiling SSL/TLS Clients with easy-to-produce client fingerprints.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.