Consists of identifying abnormal or suspicious activity on a given network. The anti-intrusion feature protects the network from criminal attacks by analyzing traffic, and blocks threats before they reach sensitive resources.