How do intrusion detection and prevention systems (IDS/IPS) differ?

An Intrusion Detection System (IDS) monitors traffic and alerts you to suspicious or malicious activity — it watches and warns, but doesn't stop traffic. An Intrusion Prevention System (IPS) sits inline and goes a step further: it detects and actively blocks or drops malicious traffic in real time. Many organisations run IPS for automatic blocking on critical paths and IDS-style monitoring more broadly — we help you decide the right mix.