Show Posts
1
17.7 Legacy Series / Intrusion Detection - Change multiple actions at once
« on: October 13, 2017, 10:11:38 am »
Hello,
First of thanks a lot for this piece of software you've created.
I have a question though regarding the Intrusion Detection (Suricata). I enabled the IPS feature but noticed that by default all rules are simply set to alert instead of drop / blocked in their action.
Is there a way to change the action of multiple rules in one go? Or do we really have to change each rule individually?
Kind Regards
Marc
First of thanks a lot for this piece of software you've created.
I have a question though regarding the Intrusion Detection (Suricata). I enabled the IPS feature but noticed that by default all rules are simply set to alert instead of drop / blocked in their action.
Is there a way to change the action of multiple rules in one go? Or do we really have to change each rule individually?
Kind Regards
Marc