As the market is migrating from intrusion detection to intrusion prevention, networking users are intrigued, but still worried that the devices could invalidate legitimate traffic, present a single point of failure, or cause network latency. Users say the risks involved with moving to new products are acceptable, given the shortcomings of traditional intrusion detection system (IDS) products, which send alerts signaling that attacks or denial-of-service dangers might be at their door. Unlike traditional IDS products that passively monitor all the traffic passing by and leave the blocking of attacks to routers or firewalls, this new generation of intrusion prevention systems (IPSs) inspect traffic directly as it makes its way from outside a corporate local area network to end-users' desktops.
展开▼
