You can configure IPS for a gateway to inspect the traffic from the external to internal network only. Change the IPS protection scope to protect only the internal network. IPS does not run scans on traffic from the internal to the external network.
To change the IPS Protection Scope:
The Enforcing Gateways window opens.
The IPS page of the gateway window opens.