IDS vs. IPS

Gartner predicted intrusion-detection systems would be dead by 2005

A firestorm of controversy exploded four years ago when consulting firm Gartner declared that intrusion-detection systems that passively monitor for malicious traffic would be “dead” by 2005, a dinosaur wiped out by intrusion-prevention systems that proactively block bad traffic.

Buying an IDS to monitor unwanted traffic is a waste of time and money, Gartner stated, urging enterprise managers to start

buying in-line IPS products and step up to the plate and block the attack traffic comin’ at ‘em, primarily from the Internet.

Blocking the bad traffic with an in-line IPS opened the possibility of mistakenly blocking good traffic, too, yelped IDS proponents.