Intrusion prevention

With the FortiOS intrusion prevention system (IPS), you can detect and block network-based attacks. You can configure IPS sensors based on IPS signatures, IPS filters, outgoing connections to botnet sites, and rate-based signatures.

FortiOS includes eight preloaded IPS sensors:

• all_default
• all_default_pass
• default
• high_security
• protect_client
• protect_email_server
• protect_http_server
• wifi-default

You can customize these sensors, or you can create your own and apply it to a firewall policy.

This functionality requires a subscription to FortiGuard IPS Service.

The following topic provides information about IPS sensors:

• Botnet C&C IP blocking
• Detecting IEC 61850 MMS protocol in IPS
• IPS signature filter options