What is the best point to deploy the IPS, not to have false positives, since the traffic is already filtered?