Network-Based Intrusion Prevention System
A NIPS sits inline on the network and actively blocks malicious traffic as it passes through, protecting many hosts at once. It is commonly deployed behind the firewall at the perimeter or between internal zones. Because all traffic flows through it, performance and failure modes must be planned carefully.