An Intrusion Detection System (IDS) monitors network traffic and alerts administrators of any suspicious or malicious activity detected. The Advanced Inspection and Prevention – Security Services Module (AIP-SSM) can perform intrusion detection in promiscuous mode, where it monitors traffic without interfering, or intrusion prevention in inline mode, where it actively blocks attacking traffic. The IDS provides benefits like reduced costs from infection cleanup, proactive network protection and monitoring, and near real-time updates to respond quickly to new threats when used alongside a Cisco ASA firewall.