The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in mid-October 2026. We hope you enjoy the updated experience.

How Network IPS works

Prev Next

The Network Intrusion Prevention (also known as Network IPS) technology monitors network activity to protect client systems from threats.

Note

Network Intrusion Prevention (Network IPS) is not supported in the ARM architecture.

The Network IPS protection filter driver inspects all data that flows between the client system and the network. It compares the network data with the known network-based attacks in the Network IPS signatures. If the data matches a known attack, Network IPS responds with the configured action, for example, blocking the data from the system.

Network IPS also enables you to automatically block network intruder hosts for a specified period, even if the action for the Network IPS signature isn't set to Block. Use this option to protect client systems against network denial-of-service attacks that deny or degrade network traffic.