The majority of breaches involve exploiting known vulnerabilities where a patch was not applied. The unique architecture of the VMware vDefend distributed IDS/IPS allows organizations to front-end every workload with a purpose-built network IDS/IPS with a specific set of signatures to detect threats and prevent exploits and other threat-related activities such as command-and-control, lateral movement or data exfiltration.