With the FortiOS intrusion prevention system (IPS), you can detect and block network-based attacks. You can configure IPS sensors based on IPS signatures, IPS filters, outgoing connections to botnet sites, and rate-based signatures.
FortiOS includes eight preloaded IPS sensors:
You can customize these sensors, or you can create your own and apply it to a firewall policy.
This functionality requires a subscription to FortiGuard IPS Service.
The following topic provides information about IPS sensors: