Intrusion prevention systems and intrusion detection systems are similar in function. But they differ in how advanced they are as solutions. Both systems operate to detect malicious activity, but whereas intrusion detection systems largely stop here, an intrusion prevention system works to mitigate the threat itself. In more detail, an intrusion detection system responds by sending out alerts to security information and event management (SIEM) systems. The threats are then analyzed by a security operation center (SOC) analyst or an incident response team. Conversely, an intrusion prevention system is able to provide an instant reaction. These systems are often included as a component in a next-generation firewall (NGFW) or a unified threat management (UTM) solution.