The Juniper Networks intrusion prevention system (IPS) feature detects and prevents attacks in network traffic.
Mode:
Integrated Mode:
Inline-tap Mode: ( copy to a IPS Queue and reset the session if packet need tro be drop, !!! delay and not so secure !!!
Sniffer Mode:
IPS Signature
It contains definitions of different objects, such as
- attack objects,
- application signature objects, and
- service objects,
that are used in defining IDP policy rules.