Chapter 15 Security Profiles : Intrusion protection : Enable IPS scanning : General configuration steps
  
General configuration steps
For best results in configuring IPS scanning, follow the procedures in the order given. Also, note that if you perform any additional actions between procedures, your configuration may have different results.
1. Create an IPS sensor.
2. Add signatures and /or filters
These can be:
Pattern based
Rate based
Customized
3. Select a security policy or create a new one.
4. In the security policy, turn on IPS, and choose the IPS sensor from the list.
All the network traffic controlled by this security policy will be processed according to the settings in the policy. These settings include the IPS sensor you specify in the policy.