OPNsense Forum

English Forums => 25.7, 25.10 Series => Topic started by: nicholaswkc on November 30, 2025, 04:54:09 AM

Title: Suricata IPS Mode
Post by: nicholaswkc on November 30, 2025, 04:54:09 AM
Dear all, I'm using PPPOE connection and how to activate Suricata IPS mode?
Title: Re: Suricata IPS Mode
Post by: turipriv on December 01, 2025, 10:38:10 AM
Hi there,

What issue are you facing in enabling it?

Also, do you plan to monitor the WAN-side or the LAN-side?
Title: Re: Suricata IPS Mode
Post by: nicholaswkc on December 02, 2025, 06:16:44 AM
Suricata IPS mode on PPPOE is not permitted.
Title: Re: Suricata IPS Mode
Post by: turipriv on December 03, 2025, 11:10:11 AM
Did you take a look at this topic?

https://forum.opnsense.org/index.php?topic=9741.0
Title: Re: Suricata IPS Mode
Post by: nicholaswkc on December 15, 2025, 09:39:18 AM
Quote from: turipriv on December 03, 2025, 11:10:11 AMDid you take a look at this topic?

https://forum.opnsense.org/index.php?topic=9741.0
I tried read the posts but still not understand it.

1. Configure the WAN interface as none (IPv4 Configuration Type none)
2. Add a new OPT interface with the PPPoE configuration just like it was a WAN PPPoE.
3. Configure Suricata as IPS on WAN.