Intrusion Detection and Prevention

Poor Reputation Groups

Started by spetrillo

Replies: 2
Views: 2,184

February 19, 2024, 02:54:53 AM
by spetrillo

Change of IP in case of event X

Started by pille

Replies: 6
Views: 2,658

February 17, 2024, 09:57:46 AM
by meyergru

How can Suricata function prior to scrub?

Started by barold

Replies: 1
Views: 2,185

February 17, 2024, 01:22:05 AM
by JakaylaLee

How to subscribe ETPRO telemetry edition

Started by hansolkim92

Replies: 4
Views: 3,798

January 30, 2024, 12:09:25 AM
by Mr. Me

[Suricata] Would it be possible to add IPS blocked hosts to a custom block list?

Started by chropnsense

Replies: 0
Views: 2,133

January 20, 2024, 09:54:03 AM
by chropnsense

[Solved] Beginner question: should i be conserned about this firewall logs?

Started by macege

Replies: 6
Views: 2,685

January 20, 2024, 01:57:14 AM
by macege

[Suricata] IPS inside LAN; Changing Home Networks results in no/missing alerts

Started by chropnsense

Replies: 4
Views: 6,280

January 19, 2024, 12:53:49 PM
by chropnsense

Intrusion Detection: Alert Pagination Issue

Started by hsing

Replies: 0
Views: 2,152

January 18, 2024, 06:33:25 AM
by hsing

DMZ Question(s)

Started by EasyGoing1

Replies: 1
Views: 2,779

January 16, 2024, 11:28:41 PM
by cookiemonster

IPS mode freezing OPNsense

Started by morphxyz

Replies: 1
Views: 3,375

January 16, 2024, 06:01:25 PM
by JL

Suricata in Wan does not work with ppoe

Started by yeraycito

Replies: 2
Views: 5,349

January 16, 2024, 05:58:28 PM
by JL

[solved][how-to-fix] OPNSense with Suricata IPS service failure crash

Started by JL

Replies: 0
Views: 6,870

January 15, 2024, 11:30:41 PM
by JL

Suricata crashing

Started by jan.stasik

Replies: 4
Views: 5,389

January 15, 2024, 06:09:08 PM
by JL

pfsense equivalent to SourceIP/SID whitelisting

Started by nekopep

Replies: 5
Views: 4,720

January 14, 2024, 10:12:50 PM
by nekopep

Issue with Disabled Intrusion Detection Rules Remaining in Policy

Started by hsing

Replies: 0
Views: 2,130

January 11, 2024, 07:30:48 AM
by hsing

[SOLVED] Disabled rules are still popping up into alert tab

Started by nekopep

Replies: 1
Views: 2,136

January 10, 2024, 09:52:35 PM
by nekopep

Updated beginner's guide to implementing IPS with HTTPS inspection

Started by Mario_Rossi

Replies: 0
Views: 2,550

January 06, 2024, 02:50:14 PM
by Mario_Rossi

Portscan?

Started by Hansiii

Replies: 9
Views: 4,478

January 05, 2024, 06:12:52 PM
by cookiemonster

crowdsec - only show logs from the internal nic

Started by sp33dy

Replies: 2
Views: 3,592

January 02, 2024, 02:36:30 PM
by doktornotor

Crowdsec and external servers/services

Started by Matzke

Replies: 3
Views: 7,311

December 31, 2023, 06:20:39 PM
by Patrick M. Hausen