Intrusion Prevention

An Intrusion Prevention System (IPS) is a network service that sits behind the perimeter firewalls. It examines network traffic and attempts to detect and eliminate network vulnerabilities. An IPS sits inline and monitors network traffic. If suspicious activity is detected an alert is raised, then the suspicious packets are dropped, the sending address can also be blocked and the network connection to the remote site can be reset. IPS systems are often core components on network management devices, where they have dedicated resources to enable the realtime monitoring of network traffic entering an organisations network.