Question: are usually placed in front of a firewall?
Answer: An intrusion detection system (IDS) can protect against both external and internal access. They're usually placed in front of a firewall and can identify attack signatures, trace patterns, generate alarms for the network administrator, and cause routers to terminate connections with suspicious sources.