Trellix

Trellix

Network Security: Trellix (formerly McAfee) Network Security Platform Technical Information

Real-time intrusion prevention with in-line connectivity

By physically placing the sensor between network equipment, it is possible to achieve IPS functionality that drops malicious packets in real time. (It can also be used as an IDS by changing the settings.)

Real-time intrusion prevention with in-line connectivity

Sensor redundancy is possible according to network redundancy. Exchange each scan information and always keep the same information. This makes it possible to detect even active-active networks without leaking.

Options for in-line connection

-Fail-Open:

Even if the sensor fails, the communication will not be cut off. However, in the event of a sensor failure, the IDS/IPS function becomes unavailable, allowing intrusion from the outside.

-Fail-Close:

If the sensor fails, cut off communication to prevent attacks/viruses from entering inside. (Mainly applied to the main line of Fail-Over connection)

SPAN connection / TAP connection (operation as IDS)

SPAN connection

SPAN connection

TAP connection

TAP connection

Sensor redundancy with Fail-Over configuration

Sensor redundancy is possible according to network redundancy. Exchange each scan information and always keep the same information. This makes it possible to detect even active-active networks without leaking.

Sensor redundancy with Fail-Over configuration

Inquiry/Document request

In charge of Macnica Trellix Co., Ltd.

  • TEL:045-476-2010

Mon-Fri 8:45-17:30