You are a security architect and need to design a secure firewall, VPN and IPS solution. Where would be the best place to install IPS in the topology if the internal network is already protected?

A.
On the firewall itself to protect all connected networks centrally.

B.
On each network segment separately.

C.
On the LAN is enough, the DMZ does not need to be protected.

D.
In front of the firewall is enough.