Need for Network Security Devices if Antivirus Software can be used on PCs

[Timc95]

If antivirus softwares are used to provide security to PCs from internet-related threats, then what is the need for an IPS/IDS or any other network security device on a network? Wouldn't an antivirus solution be sufficient to secure the endpoints from network-related attacks and viruses? If not, then why? Just a question that popped up in my mind.

Thanks for your response!

[DarrenOC]

Because you need as many layers of protection as possible.  Reverse the question- if we have firewalls with threat protection, IPS/IDS etc then why have endpoint protection?

[Mloraditch]

Sometimes I find an analogy helps, in the spirit of May the 4th, I'll lay out this:  if the Emperor can Force Lightning you why does he have a royal guard and why does he live in a palace with several layers of security?

Layers of security.

[PhilipDAth]

Your car has a frontal crush zone to save you in an accident.  Why do you need seatbelts AND airbags?

[Brash]

I'm loving these metaphors 😆

But they're all correct, it's about having layers.

Nothing is impenetrable but if an attacker keeps coming up against more and more roadblocks, they're more likely to:

 - Be discovered and stopped before significant impact

 - Decide that it's not worthwhile persisting with an attack

Additionally different security products deliver different outcomes and source from different feeds.

[alemabrahao · Accepted solution]

Antivirus alone is not enough.

- Antivirus software is designed to protect individual devices, not the entire network.
- Antivirus relies on known malware signatures, which may not be effective against new or sophisticated attacks.
- Antivirus software doesn't monitor network traffic, leaving gaps in security that network-based attacks can exploit.

In summary, while antivirus software is crucial for endpoint protection, network security devices like IDS, IPS, and firewalls provide broader and more proactive defense mechanisms to secure the entire network from a variety of threats.

[AmyReyes]

Hi @Timc95, thank you for sharing this question with the community 😊 People are having some fun with the analogies, but all joking aside, you have gotten some good answers here. 

There is a fun blog post from Cisco that, while older (published in 2018), is still relevant and covers this very topic! Read the Layers of Security blog post here.