IPS firewall module is not working properly.

Attached nmap tests with the result in the firewall and in the attacker's console. The attacker launches an nmap the firewall detects it but does not stop it.

Log

Attacker consola

if you have blocked it, the apache version should not appear. I have to modify it so that nothing appears in nmap and the attacker doesn't see anything.