Trellix Intrusion Prevention System (replacing the former McAfee Network Security Platform) is an intrusion detection and prevention system (IDPS) for on-prem or virtual networks.
IPS sensors are more suited for companies that do not have visibility into their network with third-party analyzing tools. Scenarios would be to place IPS sensors at the perimeter firewalls mainly. IPS sensors are less appropriate for companies that have third-party analyzing tools that will mitigate vulnerabilities and malicious traffic and activities already.
McAfee Network Security does do what it promises, and it integrates nicely with other McAfee services my work computer has. Sometimes I do feel though that McAfee does hinder your computer/internet performance, but maybe it's a trade-off that's worth it. I do wish they would refine their threat detection so some websites that I don't think are harmful and want to visit for work purposes aren't blocked. There's been times where I google a question and a website has the answer but McAfee will block it. If you're in a position at a financial company like me, where you're dealing with sensitive/private information, it's important to have this type of software to protect data.
IPS sensors provides the necessary network visibility my company needs to satisfy its security appetite. By doing so, we have been able to stay compliant and up to date with today's network security requirements and procedures. We are able to be proactive with vulnerabilities and reactive to malicious traffic and intrusions in our day to day operations.
