Simple definition
A system of prevention capable of blocking traffic identified as malicious.
Technical definition
Intrusion Prevention System analyzes online communications and can interrupt a session or apply an action when a rule is triggered.
What is it used for ?
Block some attacks before they reach the target.
Practical example
One firewall equipped withIPS may block a request corresponding to a known operation.
Common issues
- False positive blocking legitimate application
- Resource-rich inspection
- Too permissive policy
Related terms
Key takeaway: This entry explains the general operation of the term. Exact settings may vary depending on software, vendors and environments.