What is the primary difference between Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS)?

Only IDS is susceptible to false positives

An IPS examines network traffic flows to detect and actively stop exploits and attacks

IPS identify potentially malicious traffic based on signature or behavior and IDS does not

IDS are typically deployed behind the firewall and IPS are deployed in front of the firewall