Hello,
First of thanks a lot for this piece of software you've created.
I have a question though regarding the Intrusion Detection (Suricata). I enabled the IPS feature but noticed that by default all rules are simply set to alert instead of drop / blocked in their action.
Is there a way to change the action of multiple rules in one go? Or do we really have to change each rule individually?
Kind Regards
Marc
First of thanks a lot for this piece of software you've created.
I have a question though regarding the Intrusion Detection (Suricata). I enabled the IPS feature but noticed that by default all rules are simply set to alert instead of drop / blocked in their action.
Is there a way to change the action of multiple rules in one go? Or do we really have to change each rule individually?
Kind Regards
Marc