Definition
A FortiGate IPS sensor groups signatures and actions for detecting or blocking certain network attacks.
How it works
Firewall policies attach IPS profiles to relevant traffic. Signatures, severity, exceptions and actions affect detection; encrypted traffic visibility depends on TLS inspection.
Real-world example
For a published web service, an IPS profile may block a request matching an exploit signature and record the event.
Limits and best practices
Do not enable blanket blocking without validation. Keep signatures current, review false positives, test exceptions and monitor performance.