Intrusion Prevention and Denial of Service

Deploy IPS sensors with filtered signatures, set signature actions, add interface DoS policies, and troubleshoot detections.

The Intrusion Prevention System matches traffic against attack signatures to detect and block exploits targeting known vulnerabilities (buffer overflows, injection, exploit kits, C&C). Signatures come from FortiGuard and must be kept current. IPS is applied via a sensor attached to a firewall policy and can run in flow mode for low latency.

What does an IPS primarily detect?