Intrusion Detection and Prevention

How to subscribe ETPRO telemetry edition

Started by hansolkim92

Replies: 4
Views: 4,093

January 30, 2024, 12:09:25 AM
by Mr. Me

[Suricata] Would it be possible to add IPS blocked hosts to a custom block list?

Started by chropnsense

Replies: 0
Views: 2,258

January 20, 2024, 09:54:03 AM
by chropnsense

[Solved] Beginner question: should i be conserned about this firewall logs?

Started by macege

Replies: 6
Views: 2,904

January 20, 2024, 01:57:14 AM
by macege

[Suricata] IPS inside LAN; Changing Home Networks results in no/missing alerts

Started by chropnsense

Replies: 4
Views: 6,962

January 19, 2024, 12:53:49 PM
by chropnsense

Intrusion Detection: Alert Pagination Issue

Started by hsing

Replies: 0
Views: 2,274

January 18, 2024, 06:33:25 AM
by hsing

DMZ Question(s)

Started by EasyGoing1

Replies: 1
Views: 3,024

January 16, 2024, 11:28:41 PM
by cookiemonster

IPS mode freezing OPNsense

Started by morphxyz

Replies: 1
Views: 3,516

January 16, 2024, 06:01:25 PM
by JL

Suricata in Wan does not work with ppoe

Started by yeraycito

Replies: 2
Views: 5,597

January 16, 2024, 05:58:28 PM
by JL

[solved][how-to-fix] OPNSense with Suricata IPS service failure crash

Started by JL

Replies: 0
Views: 7,282

January 15, 2024, 11:30:41 PM
by JL

Suricata crashing

Started by jan.stasik

Replies: 4
Views: 5,963

January 15, 2024, 06:09:08 PM
by JL

pfsense equivalent to SourceIP/SID whitelisting

Started by nekopep

Replies: 5
Views: 5,274

January 14, 2024, 10:12:50 PM
by nekopep

Issue with Disabled Intrusion Detection Rules Remaining in Policy

Started by hsing

Replies: 0
Views: 2,256

January 11, 2024, 07:30:48 AM
by hsing

[SOLVED] Disabled rules are still popping up into alert tab

Started by nekopep

Replies: 1
Views: 2,267

January 10, 2024, 09:52:35 PM
by nekopep

Updated beginner's guide to implementing IPS with HTTPS inspection

Started by Mario_Rossi

Replies: 0
Views: 2,773

January 06, 2024, 02:50:14 PM
by Mario_Rossi

Portscan?

Started by Hansiii

Replies: 9
Views: 4,866

January 05, 2024, 06:12:52 PM
by cookiemonster

crowdsec - only show logs from the internal nic

Started by sp33dy

Replies: 2
Views: 3,854

January 02, 2024, 02:36:30 PM
by doktornotor

Crowdsec and external servers/services

Started by Matzke

Replies: 3
Views: 7,888

December 31, 2023, 06:20:39 PM
by Patrick M. Hausen

I am thoroughly confused about Intrusion Prevention and Action=Drop vs. Alert

Started by Retired Miner

Replies: 4
Views: 7,145

December 26, 2023, 08:03:03 PM
by Retired Miner

ET Pro Telemetry edition is not working properly

Started by korea153

Replies: 2
Views: 4,214

December 20, 2023, 06:06:35 PM
by doktornotor

Enable Suricata fast.log to better enable CrowdSec integration

Started by jonny5

Replies: 1
Views: 10,178

December 18, 2023, 11:33:23 PM
by jonny5