Operator fatigue—making large figures of IDS alerts on reason to distract the incident response staff from their genuine exercise. An IDS is usually positioned powering the firewall to observe internal community site visitors that has already been filtered via the firewall.