Trellix Intrusion Prevention System

Trellix IPS goes beyond traditional signature-based detection, incorporating multiple layers of protection. It combines signature-based detection with advanced botnet and malware detection, advanced intrusion prevention, DOS and DOS prevention, and sandboxing. This multi-layered approach enables Trellix IPS to detect and block known and unknown threats, including zero-day attacks and sophisticated malware. The system also offers high performance, scalability, and seamless integration with cloud environments, making it suitable for modern, hybrid network architectures.

Trellix IPS offers robust capabilities for inspecting encrypted traffic, including inbound and outbound SSL decryption. It supports various encryption protocols, including Diffie-Hellman and Elliptic-Curve Diffie-Hellman ciphers. The system uses an agent-based, shared key solution for SSL inspection, which doesn't impact sensor performance. This allows Trellix IPS to detect threats hidden in encrypted traffic without compromising network speed or user privacy. The exact throughput with SSL decryption varies by model but can reach up to 90 Gbps with 10% SSL traffic.

Yes, Trellix offers IPS+ for AWS, which is specifically designed to protect cloud assets. It integrates seamlessly with AWS Gateway Load Balancer, providing automatic scaling to match elastic workloads. This cloud-native version includes all the advanced features of the on-premises IPS, such as signature-based detection, behavioral analysis, and the Trellix IVX dynamic analysis engine. It offers protection against known and unknown exploits, DDoS attacks, and command-and-control callbacks, ensuring comprehensive security for AWS environments.

Trellix IPS offers high-performance protection that scales to meet the needs of demanding networks. Performance varies by model, but top-tier appliances can achieve a throughput of up to 100 Gbps when stacked. The system is designed for efficiency, maintaining performance regardless of security settings. It also provides features like active-active and active-passive modes with stateful failover for high availability. For cloud deployments, Trellix IPS+ for AWS leverages Gateway Load Balancer for automatic scaling, ensuring optimal performance as traffic fluctuates.