Some intrusion detection is available with next generation firewalls, but they are rarely enabled because of the sever performance degradation. Blue Coat now offers a solution without degradation, the SSL Visibility Appliance (SSLVA). It sits behind the firewall and ahead of the servers. Your current intrusion detection appliance or the Blue Coat Proxy SG may be integrated with the SSLVA to inspect and detect Malware and take action as neded.