Intrusion Detection and Prevention

Suricata IPS manual blocking/unblocking vs. snort and guardian

Started by maureenhackney

Replies: 0
Views: 2,360

February 21, 2024, 11:31:50 AM
by maureenhackney

Poor Reputation Groups

Started by spetrillo

Replies: 2
Views: 2,451

February 19, 2024, 02:54:53 AM
by spetrillo

Change of IP in case of event X

Started by pille

Replies: 6
Views: 3,105

February 17, 2024, 09:57:46 AM
by meyergru

How can Suricata function prior to scrub?

Started by barold

Replies: 1
Views: 2,433

February 17, 2024, 01:22:05 AM
by JakaylaLee

How to subscribe ETPRO telemetry edition

Started by hansolkim92

Replies: 4
Views: 4,253

January 30, 2024, 12:09:25 AM
by Mr. Me

[Suricata] Would it be possible to add IPS blocked hosts to a custom block list?

Started by chropnsense

Replies: 0
Views: 2,334

January 20, 2024, 09:54:03 AM
by chropnsense

[Solved] Beginner question: should i be conserned about this firewall logs?

Started by macege

Replies: 6
Views: 3,028

January 20, 2024, 01:57:14 AM
by macege

[Suricata] IPS inside LAN; Changing Home Networks results in no/missing alerts

Started by chropnsense

Replies: 4
Views: 7,137

January 19, 2024, 12:53:49 PM
by chropnsense

Intrusion Detection: Alert Pagination Issue

Started by hsing

Replies: 0
Views: 2,341

January 18, 2024, 06:33:25 AM
by hsing

DMZ Question(s)

Started by EasyGoing1

Replies: 1
Views: 3,109

January 16, 2024, 11:28:41 PM
by cookiemonster

IPS mode freezing OPNsense

Started by morphxyz

Replies: 1
Views: 3,594

January 16, 2024, 06:01:25 PM
by JL

Suricata in Wan does not work with ppoe

Started by yeraycito

Replies: 2
Views: 5,747

January 16, 2024, 05:58:28 PM
by JL

[solved][how-to-fix] OPNSense with Suricata IPS service failure crash

Started by JL

Replies: 0
Views: 7,880

January 15, 2024, 11:30:41 PM
by JL

Suricata crashing

Started by jan.stasik

Replies: 4
Views: 6,136

January 15, 2024, 06:09:08 PM
by JL

pfsense equivalent to SourceIP/SID whitelisting

Started by nekopep

Replies: 5
Views: 5,498

January 14, 2024, 10:12:50 PM
by nekopep

Issue with Disabled Intrusion Detection Rules Remaining in Policy

Started by hsing

Replies: 0
Views: 2,323

January 11, 2024, 07:30:48 AM
by hsing

[SOLVED] Disabled rules are still popping up into alert tab

Started by nekopep

Replies: 1
Views: 2,342

January 10, 2024, 09:52:35 PM
by nekopep

Updated beginner's guide to implementing IPS with HTTPS inspection

Started by Mario_Rossi

Replies: 0
Views: 2,858

January 06, 2024, 02:50:14 PM
by Mario_Rossi

Portscan?

Started by Hansiii

Replies: 9
Views: 5,125

January 05, 2024, 06:12:52 PM
by cookiemonster

crowdsec - only show logs from the internal nic

Started by sp33dy

Replies: 2
Views: 3,959

January 02, 2024, 02:36:30 PM
by doktornotor