You can extend Trellix IPS data to third-party management products. By integrating the Manager with Security Information and Event Management (SIEM) products, you can further process Trellix IPS data. A SIEM product might query the Manager database for information (pull model), or the Manager can send alert and system fault data to syslog servers (push model).
The following are some of the products that Trellix IPS customers are known to have used:
- McAfee NitroSecurity products such as NitroView DBM
- ArcSight
- Cisco MARS (Protego)
- eSecurity
- GuardedNet
- NetForensics
- NetIQ
- Network Intelligence
- QRADAR from Q1Labs
- Sequation
- Symantec Remote Importer
- Tenable Networks