anyone using ips on a fortigate

Hello , I am using a fortigate firewall 50b. I am not sure what
action to take on most attacks. Sometimes i am not sure if it is a
real attack. I am setting them up to clear session, but some are set
as drop or drop session. Does anyone have any recommendations on this
settings?