Intrusion prevention systems (IPS), also known as intrusion detection and prevention systems (IDPS), are network security appliances that monitor network and/or system activities for malicious activity. The main functions of intrusion prevention systems are to identify malicious activity, log information about said activity, attempt to block/stop it, and report it.
Intrusion prevention systems are considered to be extensions of intrusion detection systems, because they both monitor network traffic and/or system activities for malicious activity. Unlike intrusion detection systems, intrusion prevention systems are placed in-line and are able to actively prevent/block intrusions that are detected. More specifically, IPS can perform such actions as setting off an alarm, dropping the malicious packets, resetting the connection and/or blocking the traffic from the offending IP address. An IPS can also correct Cyclic Redundancy Check (CRC) errors, defragment packet streams, prevent TCP sequencing issues and clean up unwanted transport and network layer options.
Do you need more information about this sector?
For additional information, please fill out the contact form.