We use the firewalls and the sandbox.

I use Trellix IPS to find and fix security issues. This involves getting alerts about vulnerabilities in financial systems and sharing information with a partner organization in Sri Lanka. We also use Trellix IPS to spot other vulnerabilities and then block harmful data. 

I use Trellix Intrusion Prevention System in my company as an intrusion prevention. I don't have hands-on experience with the solution, but I deal with its implementation phase. My company's customers use the product for network security.

We use Trellix Intrusion Prevention System as a signature-based system for capturing zero-day attacks.

I look at the attack analysis, which shows me which attackers try to exploit my vulnerabilities. I can check the ticket to see if it's blocked or whether it's a false positive. Whatever the case, if it already exists, I will block it. McAfee IPS has a benign engine, so this may not be a target in your environment. If you just prevent attackers from using it, they will try another vulnerability.

I have physical routers, but they try to make some novel vulnerabilities. This is not applicable to my environment, so when I see this alert I know it's a false positive not related to my environment. In some cases, I change the action of these alerts or attacks to block. This is what happened in one of the use cases I take advantage of from IPS. I got an alert about some attacks in my environment, regarding the SPAN port and server traffic. I saw it and I detected the source point of this attack.

McAfee Network Security Platform is our intrusion prevention system.

The solution is used mostly for perimeter protection. It's to protect the client and server site. It offers basic but effective Smart Blocking. We've tested it in a product environment and it performed rather well.

We use the solution for security purposes. It allows our organization to detect a variety of malicious attacks such as malware and viruses, et cetera.

Our clients primarily use the solution for security purposes. We have it deployed on the endpoints.

We use the solution as a level of security for our organization. It can show us what's happening on our network so that we are able to monitor events effectively. We end up having to deal with many events and this helps us detect where a virus or malware is coming from. It helps buy us time so we can fight off the attack.

The primary use is to deploy sensors. We have two use cases: to predict the anomalous behavior and to predict the normal threshold for our network. 

We use it to enhance security on our EDGE network in all of our remote offices, as well as our data centers

We use a lot of the functions this solution provides such as the firewall and the ability to check aliases. We can monitor and show the traffic that's moving in and out. When we detect malware, we scan for the virus on the PC and we can decide whether to delete or block the malware. I'm a junior product consultant and we are customers of McAfee.