Enabling IPS & AV

[Ydaew]

Hello Everyone, 

If we want to enable both IPS and AV profiles on firewall policies in a production environment, will the traffic got affected (disruption, outage) in this case? 

Any reference for this?

Thanks in advance

[Fullmoon]

I usually apply AV and IPS profiles for incoming traffic/policies. For IPS profile, be specific to the signature you wish to enable.

Example: if you wish to protect web server running on windows, just enable intended for Windows application/signature I would say.

[Ydaew]

Thanks for your response, applying such profiles will not affect production traffic for the protected servers ? 

[talzub]

Yes he is correct, the traffic will not be affected. However, there may be third party issues that could affect the traffic but don't think enabling AV and IPs will cause any disruption in the smooth flow of traffic