Controlling spyware only by IPS is it good practice? is it more recomendable to have an aditional solution specialized only in this?