Messages

1

Intrusion Detection and Prevention / [SOLVED] Suricata 7 and AWS VPN Client

« on: March 01, 2024, 05:49:28 pm »

This fix can be found here:

Traffic blocked with reason: “applayer error”
https://forum.suricata.io/t/my-traffic-gets-blocked-after-upgrading-to-suricata-7/3745

2

Intrusion Detection and Prevention / Suricata 7 and AWS VPN Client

« on: March 01, 2024, 12:07:42 am »

In the latest OPNsense update, Suricata was downgraded to v7. AWS VPN Client has been working flawlessly up until this latest update and refuses to complete authentication with a TLS handshake error. Suricata does not show any 'blocked' alerts and even setting the policy to alert does not indicate any issues. But disabling IPS Mode or even temporarily disabling Suricata, AWS VPN Client functions as intended.

I also tried checking logs files, but nothing stands out in terms of what may be causing the block.

I am open up to ideas.