IPS Policies Overview

An intrusion prevention system (IPS) policy defines how your device handles the network traffic. It allows you to enforce various attack detection and prevention techniques on traffic traversing your network. You can define policy rules to match a section of traffic based on a zone, network, and application, and then take active or passive preventive actions on that traffic.

The intrusion prevention system (IPS) profile is deployed on a device by associating the profile with a firewall policy intent, which is deployed on the device. You can associate IPS rules or exempt rules with an IPS profile.

To access the IPS Policy page, click Secure Edge > Security Subscriptions > IPS. Use this page to view, add, modify, clone, or delete the IPS rules and exempt rules in the IPS profiles.