Selecting the IPS sensor in a security policy
An IPS sensor directs the FortiGate unit to scan network traffic only when it is selected in a security policy. When an IPS sensor is selected in a security policy, its settings are applied to all the traffic the security policy handles.
To select the IPS sensor in a security policy — web-based manager
1. Go to Policy > Policy > Policy.
2. Select a policy.
3. Select the Edit icon.
4. Enable the IPS option.
5. Select the basic_ips profile from the list.
6. Select OK to save the security policy.
To select the IPS sensor in a security policy — CLI
config firewall policy
edit 1
set utm-status enable
set ips-sensor basic_ips
end
All traffic handled by the security policy you modified will be scanned for attacks against Windows clients. A small office may have only one security policy configured. If you have multiple policies, consider enabling IPS scanning for all of them.