Well, the Intrusion Prevention System is an essential element of the answer. Analysts are now calling IPS an the, must-have element of any network security infrastructure.
IPS provides proactive security, by detecting computer intrusions, and actively defending against these intrusions.
IPS reduces exposure by detecting exploit-based attacks.