How does IPS per interface work?

Hi there,

Could you please clarify what happens if I switch on and off monitored interfaces in IPS.

When an interface is checked, does IPS apply to incoming traffic on that interface, or outgoing, or both?

What is an example attack vector that would justify IPS on Green or Blue assuming these networks are private?

Thank you,