Next-Gen IDS / IPS, inline
Detect and block intrusions in the traffic path at every site, with detections informed by the same fleet-wide threat intelligence
Products · Secure SD-WAN
Why it matters
Stop intrusions at the site
Intrusion detection (IDS) watches traffic for signs of an attack. Intrusion prevention (IPS) goes one step further and blocks it. Many networks only run them at a central data center, so an attack at a branch has already crossed the WAN before anything sees it.
Hermes runs IDS/IPS inline on every edge, next to the firewall. Malicious traffic is stopped at the site where it appears, detections are informed by fleet-wide threat intelligence, and every event feeds the same XDR picture as the 360 Guard endpoint agent.
At a glance
Detect and stop
Runs on the Hermes edge
Inline on every Hermes edge
IDS / IPS runs in the traffic path on each SD-WAN AI Edge appliance, next to the firewall, so intrusions are stopped at the site before they cross the WAN
SD-WAN AI Edge 24P PoE
Inline IDS / IPS for larger sites, with 24 PoE+ ports on the same box.
Product Catalog 2026
Every Hermes product with key specifications, in English and Traditional Chinese.
How it works
How an intrusion is stopped
1
Inspect
Traffic passes through IDS/IPS inline on the Hermes edge.
2
Detect
Signatures and behavioural rules flag malicious patterns.
3
Block
The attack is stopped at the site, before it crosses the WAN.
4
Correlate
The event joins endpoint and network signals in one incident.
An intrusion detection system (IDS) monitors traffic and alerts on suspicious activity. An intrusion prevention system (IPS) sits in the traffic path and blocks malicious traffic automatically.
Inline on every Hermes SD-WAN AI Edge appliance, next to the firewall, so intrusions are stopped at the site.
Signatures and behavioural rules are updated continuously from fleet-wide threat intelligence, without manual updates at each site.
Detection is tuned to keep false positives low, and related events are correlated so analysts see incidents rather than individual alerts.
IDS/IPS events feed the same correlated picture as the 360 Guard endpoint agent and identity signals, as part of Hermes threat detection and response.
Keep exploring
Related solutions
See it on your network
Book a working session with a Hermes solutions architect —
we’ll model your sites in a Digital Twin first.