Intrusion Detection and Prevention

Drop Policy and directly set Rule to "Drop" not working.

Started by dot1x

Replies: 14
Views: 11,642

February 05, 2025, 05:32:17 PM
by someone

Simple IPS Policy Question for New User

Started by evanevery

Replies: 5
Views: 5,383

February 22, 2025, 04:25:30 PM
by someone

Dedicated IPS box: how to get the default deny policy to not block all traffic

Started by Deathmage85

Replies: 2
Views: 5,093

February 24, 2025, 02:27:23 AM
by Deathmage85

How to set IP for rules working

Started by someone

Replies: 10
Views: 8,497

February 24, 2025, 04:04:41 AM
by EssaMattou

pid xxx (suricata), jid 0, uid 0, was killed: failed to reclaim memory

Started by proutfoo

Replies: 4
Views: 15,472

February 25, 2025, 08:32:20 AM
by chris-stl

Suricata with Crowdsec

Started by Meg

Replies: 4
Views: 7,032

February 27, 2025, 05:23:25 PM
by Meg

Does IPS support IPV6

Started by ngr2001

Replies: 6
Views: 6,760

March 01, 2025, 10:57:12 PM
by pp25

IPS not dropping eicar test file when https

Started by porigromus

Replies: 6
Views: 10,759

March 04, 2025, 03:31:22 PM
by Greg_E

Error when the script send_telemetry.py run

Started by Glow

Replies: 5
Views: 6,973

March 08, 2025, 10:13:59 AM
by AdrainJohnston

Detect and block TCP Copy, possible?

Started by pwb

Replies: 1
Views: 3,109

March 11, 2025, 04:20:18 PM
by meyergru

Is there a way to monitor IDS IPS stats in the GUI ? (redirect)

Started by alex_62450

Replies: 2
Views: 5,883

March 17, 2025, 12:32:46 PM
by alex_62450

Policy doesnt seem to be working

Started by Meg

Replies: 1
Views: 5,990

March 18, 2025, 12:35:58 AM
by Meg

Empty rules with ET Pro Telemetry

Started by RayonRa

Replies: 9
Views: 11,518

March 20, 2025, 08:51:44 PM
by RayonRa

IDS or CrowdSec Still necessary?

Started by stanps

Replies: 6
Views: 10,731

March 26, 2025, 06:34:49 PM
by michmoor

Matching traffic for both in and out interface

Started by unlikely

Replies: 3
Views: 10,394

April 23, 2025, 02:00:12 AM
by Patrick M. Hausen

os-etpro-telemetry log error

Started by SarpeTronic

Replies: 0
Views: 6,594

April 24, 2025, 11:40:06 AM
by SarpeTronic

IDS/IPS Disabling after 30-60 seconds.

Started by thehutch

Replies: 1
Views: 8,068

May 06, 2025, 07:30:32 PM
by someone

Suricata IPS Unblocking a blocked Ip address

Started by Meg

Replies: 3
Views: 13,230

May 06, 2025, 08:05:57 PM
by someone

Surricata IDS/IPS rule to CSV

Started by MartinCCSS

Replies: 3
Views: 10,760

May 09, 2025, 10:57:57 PM
by MartinCCSS

Suricata not responding to configured or deployed rules

Started by nielser

Replies: 3
Views: 11,344

May 14, 2025, 03:36:31 AM
by EmmieVon