[Magic Firewall] Merge IDS

Author: Maddy-Cloudflare

src/content/docs/cloudflare-one/traffic-policies/enable-ids.mdx

@@ -10,8 +10,20 @@ head:
 
 import { TabItem, Tabs, DashButton } from "~/components";
 
+Cloudflare's Intrusion Detection System (IDS) is an Advanced Magic Firewall feature you can use to actively monitor for a wide range of known threat signatures in your traffic. An IDS expands the security coverage of a firewall to analyze traffic against a broader threat database, detecting a variety of sophisticated attacks such as ransomware, data exfiltration, and network scanning based on signatures or “fingerprints” in network traffic.
+
+With Cloudflare's global anycast network, you get:
+
+- Cloudflare's entire global network capacity is now the capacity of your IDS.
+- Built in redundancy and failover. Every server runs Cloudflare's IDS software, and traffic is automatically attracted to the closest network location to its source.
+- Continuous deployment for improvements to Cloudflare's IDS capabilities.
+
+Refer to [Enable IDS](/cloudflare-one/traffic-policies/enable-ids/#enable-ids) for more information on enabling IDS and creating new rulesets. After IDS is enabled, your traffic will be scanned to find malicious traffic. The detections are logged to destinations that can be configured from the dashboard. Refer to [Use Logpush with IDS](/cloudflare-one/insights/logs/use-logpush-with-ids) for instructions on configuring a destination to receive the detections. Additionally, all traffic that is analyzed can be accessed via [network analytics](/analytics/network-analytics/). Refer to [GraphQL Analytics](/magic-firewall/tutorials/graphql-analytics/) to query the analytics data.
+
 Cloudflare's IDS takes advantage of the threat intelligence powered by our global network and extends the capabilities of the Cloudflare Firewall to monitor and protect your network from malicious actors.
 
+## Enable IDS
+
 You can enable IDS through the dashboard or via the API.
 
 :::note