thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Foundational

Intrusion Prevention System (IPS)

Inline security system that detects and actively blocks malicious traffic in real time.

Definition

IPS sits in the traffic path and can drop packets, reset connections, or block sources when signatures or anomaly rules match. It is often integrated into NGFWs. Because it is inline, false positives can block legitimate traffic, and the device must be designed to fail open or closed according to risk.

Example

An IPS signature drops packets attempting to exploit a known vulnerability in a VPN appliance.

Exam tip

IPS is inline and preventive; consider fail-open vs fail-closed behavior.

Don't confuse it with

Related terms