Which protection setting is generally the MOST resource-intensive?
Prevent activates IPS inspection and applies active prevention, adding enforcement work to the traffic inspection already required for detection. Detect activates inspection only to track related traffic and events, whereas Inactive does not enforce the protection. Check Point: Configuring IPS Protections for Custom Threat Prevention
Community Discussion