Intrusion Detection and Prevention

Performance tuning for IPS maximum performance

Started by dcol

Pages1 2 3 ... 8

Replies: 109
Views: 502,246

June 16, 2026, 06:56:19 PM
by Seimus

Using Rulesets in Suricata IPS

Started by dcol

Pages1 2

Replies: 28
Views: 197,030

July 23, 2025, 09:53:11 AM
by Nibras Al-Afoun

Suricata not exiting on stop in Divert (IPS) mode

Started by jordanwmcdonald

Replies: 1
Views: 120

July 24, 2026, 09:44:08 AM
by franco

Constant DNS queries for opnsense.emergingthreats.net

Started by nikon112

Replies: 10
Views: 21,338

July 24, 2026, 09:43:20 AM
by franco

High RAM usage after upgrading to OPNsense 26.1.11_10 (Suricata - 5.8 GB RAM)

Started by elvinmammadov

Replies: 0
Views: 167

July 17, 2026, 08:30:42 PM
by elvinmammadov

How to allow one computer on my network to use DropBox but block for others

Started by apara

Replies: 2
Views: 455

July 09, 2026, 04:43:40 AM
by gordonpiper

Feedback on using Crowdsec in OPNSense.

Started by cookiemonster

Replies: 2
Views: 220

July 07, 2026, 11:36:50 PM
by cookiemonster

Suspicious repeated DNS traffic from an external source IP address; cause unknow

Started by Dutchman

Replies: 1
Views: 586

June 29, 2026, 10:11:49 PM
by cookiemonster

Policy Editor?

Started by spetrillo

Replies: 0
Views: 159

June 29, 2026, 12:55:52 AM
by spetrillo

CLOSED: Problem with shutdown/reboot as killing suricata gets stuck forever.

Started by mrzaz

Replies: 2
Views: 284

June 25, 2026, 08:30:48 PM
by mrzaz

Suricata: no alerts ever fire from downloaded rulesets (OPNsense 26.1.10)

Started by digital_mhc

Replies: 0
Views: 504

June 19, 2026, 05:09:20 PM
by digital_mhc

Suricata 8.0.5 / 7.0.16 — Security Release (May 19, 2026) - when to update?

Started by IdolPlemeniti

Replies: 1
Views: 857

June 05, 2026, 08:27:49 AM
by franco

Bypass SURICATA RTP-Ports

Started by hebein

Replies: 0
Views: 245

May 31, 2026, 05:55:50 PM
by hebein

Issues with Divert (IPS)

Started by dubbz

Replies: 0
Views: 494

May 30, 2026, 03:02:24 AM
by dubbz

IPS fighting Corporate VPN - How best to whitelist

Started by rkubes

Replies: 0
Views: 305

May 26, 2026, 05:33:21 PM
by rkubes

Should I block outbound traffic as well?

Started by Lucid1010

Replies: 3
Views: 621

May 19, 2026, 01:56:30 PM
by NoahMitchell

Default deny rule not working

Started by PANZER

Replies: 1
Views: 436

May 09, 2026, 10:38:55 PM
by cookiemonster

Searching Intrusion Detection Alerts

Started by bzwithers99

Replies: 0
Views: 338

May 01, 2026, 11:39:51 PM
by bzwithers99

CLOSED: Get "telemetry token missing in ..." in logs even with ETPRO Telemetry ed.

Started by mrzaz

Replies: 0
Views: 313

April 27, 2026, 09:04:41 PM
by mrzaz

Update et open rules in air gapped environment

Started by rob9999

Replies: 0
Views: 445

April 22, 2026, 11:04:21 AM
by rob9999