Both IPS and IDS analyze data packets traveling into or through the network by comparing each packet's signature to known cyber attacks. An IDS detects and reports potentially malicious packets as they travel through the network. An IPS typically sits between the internal network and its firewall, actively preventing suspicious packets from being delivered into the network by dropping them and then reporting the incident.