The following are the advantages of integrating Trellix IPS with MVX.
- When a supported file is being downloaded into your network, it can be analyzed in depth using the MVX engine. This fortifies your already strong anti-malware defense with Trellix IPS.
- The VX appliance is not an inline device. It can receive files from IPS Sensors for malware analysis. So, it is possible to deploy the appliance in such a way that you obtain the advantages of an inline anti-malware solution but without the associated drawbacks.
- The VX appliance does not sniff or tap into your network traffic. It analyzes the files submitted to it for malware. This means that you can place the VX appliance anywhere in your network as long as it is reachable to the Manager and the Sensor.
- Files are concurrently analyzed by various engines. So, it is possible for known malware to be blocked in almost real time.
- Consider a host downloaded a zero-day malware, but a Sensor that detected this file submitted it to the VX appliance. Based on how you have configured the Advanced Malware policy, it is possible for the Manager to add this malware to the block list of all the Sensors in your organization's network. Thus, the chances of the same file re-entering your network is reduced.
- Even the first time when a zero-day malware is downloaded, you can contain it by quarantining the affected hosts until they are cleaned and remediated.