A device or software application that monitors network activities for policy violations or malicious activities. It also produces reports to the Management Station when these activities occur. IDS may try to prevent Intrusion but is not expected or required to provide this protection.