The basics of network intrusion prevention systems

Network intrusion prevention systems (IPSes) monitor and analyze an organization’s network traffic to identify malicious activity and — optionally — stop that activity by dropping and/or blocking associated network connections. IPSes have been used for many years at key network locations, such as in close proximity to firewalls to identify a variety of network-based attacks that other security technologies are unable to detect.