FortiOS's Intrusion Prevention System (IPS) technology protects your network against attacks by looking for and blocking network-level threats before they can reach your potentially vulnerable network devices. FortiOS offers a wide range of tools to monitor, block and analyze malicious activity, including: IPS signatures, filters and sensors, quarantines, packet logging, out of band sniffer mode and options for hardware acceleration.
IPS signatures
IPS signatures are the foundation FortiOS IPS. The FortiGuard Intrusion Prevention Service provides Fortinet customers with the advanced defenses against stealthy threats over the network.
IPS filters and sensors
IPS filters can be customized to provide different levels of protection by grouping signatures together. Sensors are then used to group filters and apply them directly to network traffic. Advanced IPS filter creation tools make it easy to sort through the thousands of IPS signatures to find the ones you want to add to a sensor.
Quarantine
The IPS quarantine function extends protection by quarantining all activity from an identified attacker for an extended period of time, or even permanently. Quarantining prevents future attacks from known attackers and can be used to protect potentially vulnerable servers until a more permanent defense can be put in place. You can also use the quarantine function to protect a vulnerable server or to block all traffic received by an interface on which the IPS has detected attacks.
Packet logging
IPS packet logging saves packets for detailed analysis when an IPS signature is matched. Saved packets can be viewed and analyzed on the FortiGate unit or by using third-party analysis tools.
