Fortinet black logo

Cookbook

Intrusion prevention

Intrusion prevention

With the FortiOS intrusion prevention system (IPS), you can detect and block network-based attacks. You can configure IPS sensors based on IPS signatures, IPS filters, outgoing connections to botnet sites, and rate-based signatures.

FortiOS includes eight preloaded IPS sensors:

  • all_default
  • all_default_pass
  • default
  • high_security
  • protect_client
  • protect_email_server
  • protect_http_server
  • wifi-default

You can customize these sensors, or you can create your own and apply it to a firewall policy.

Note

This functionality requires a subscription to FortiGuard IPS Service.

The following topic provides information about IPS sensors:

Intrusion prevention

Intrusion prevention

With the FortiOS intrusion prevention system (IPS), you can detect and block network-based attacks. You can configure IPS sensors based on IPS signatures, IPS filters, outgoing connections to botnet sites, and rate-based signatures.

FortiOS includes eight preloaded IPS sensors:

  • all_default
  • all_default_pass
  • default
  • high_security
  • protect_client
  • protect_email_server
  • protect_http_server
  • wifi-default

You can customize these sensors, or you can create your own and apply it to a firewall policy.

Note

This functionality requires a subscription to FortiGuard IPS Service.

The following topic provides information about IPS sensors: