What is Inline Prevention
Inline prevention refers to the placement of intrusion prevention systems. An inline network device receives packets and forwards them to their intended destination. Thus, in theory, inline prevention systems can actively block intrusions that are detected.
However, the defined goal of inline prevention is to block any traffic classified as an intrusion attempt. Thus, if inline prevention succeeds, it will identify and alert about numerous intrusion attempts. Detection of these attempts, however, does not imply that the product actually prevented the attempts from succeeding. Thus, the vast majority of inline prevention alerts are considered false positives.
What does LightCyber have to do with it?
The amount of intrusion attempts on today’s network is so high that alerting about them essentially creates a flood of false positives. LightCyber detects successful intrusions, delivering only accurately-targeted, actionable alerts.Download a FREE white paper to learn more