IDS vs IPS
Definition
An intrusion detection system observes copied traffic and alerts. An intrusion prevention system sits inline on the data path and blocks. Snort and Suricata operate as either; Zeek (formerly Bro) is a flow-analysis engine that is detection-only.
Related terms
- CERT-in Direction April 2022
- Direction issued under Section 70B(6) of the IT Act 2000 requiring 6-hour incident reporting, 180-day log retention in India, KYC retention by...
- IPSec AH and ESP
- Authentication Header provides integrity and origin authentication only. Encapsulating Security Payload provides confidentiality plus optional integrity. Almost all modern IPSec deployments use...
- Kerberos
- An MIT-designed authentication protocol using a Key Distribution Centre, ticket-granting tickets and service tickets. The backbone of Active Directory authentication. Replay-protected via...
- NGFW
- Next-generation firewall: stateful packet inspection plus application identification, integrated IPS, TLS inspection and user-identity awareness. Palo Alto, Fortinet, Check Point and Cisco...
- Stateful Firewall
- A firewall that tracks the state of TCP connections in a connection table and permits return traffic of an established flow without...
Explained in
- Network Security: Firewalls, IDS/IPS, VPN, PKI and SIEMAn intrusion detection system observes copied traffic and alerts. An intrusion prevention system sits inline on the data path and blocks. Snort and Suricata op...