However, as with an IDS, the IPS must be properly configured and tuned to be effective. Threshold settings that
are too high or low will lead to limited effectiveness of the IPS. Additionally, some concerns have been raised that
IPSs may in themselves constitute a threat, because a clever attacker could send commands to a large number of
hosts protected by an IPS in order to cause them to become dysfunctional. Such a situation could have a potentially
catastrophic outcome in today’s typical corporate computing environment where continuity of service is so critical. In
addition, IPSs can generate false positives that can create serious problems if automated responses are used.