A few years ago many people understood that retroactive monitoring will not give you any security related benefit, as it is always too late when you get an alert.

Some of these interesting products then also put "intrusion prevention" into their product descriptions.

Isn't that too a questionable promise?