Trying out running Suricata as an IDS and Crowdsec as an IPS.
I have both enabled with Suricata set to just alert.
I see a lot of alerts in Suricata for port scans but no action from Crowdsec regarding the Suricata alerts.
Is that normal or should Crowdsec be taking action on the Suricata alerts?