IPS Exception from LAN to ANY

Question

If I add an exception in IPS rules to not apply IPS from my internal LAN to ANY am I essentially turning off IPS? I'm not concerned with any device at home attempting malicious activity going outbound so I don't see the need to have IPS from LAN to ANY. I noticed with this exception I get my full Gigabit throughput but if I remove the exception I get cut down to 350-400 Mbps.

This thread was automatically locked due to age.

sachingurung · Answer

Hi, 
 From the logs, it shows you have DoS configured for UDP as UDP flood is detected from Google's IP address.Fine tune it to compliment you network architecture and flow of traffic. 
 2016:06:17-09:54:14 sophosutm ulogd[4640]: id="2105" severity="info" sys="SecureNet" sub="ips" name="UDP flood detected" action="UDP flood" fwrule="60013" initf="eth1" srcmac="90:3e:ab:f9:80:d0" dstmac="00:1b:21:a8:b0:33" srcip="74.125.3.90" dstip="162.202.206.67" proto="17" length="1378" tos="0x00" prec="0x00" ttl="54" srcport="443" dstport="64679" 
 Next, take SSH to UTM and login as root. Run " cc set ips queue_length 8192". Check the pruned session logs and the bandwidth. 
 Thanks