Blocking port scans

[someone]

Yes opnsense running suricata in IPS mode blocks port scans, blocks ssh into wrong ports and many other things
I have seen it in my logs
I run all rules to drop using policies
You will have to make several policies because they will block social media
switch one off and another on that just has those particular rules enabled and it will disable them
then switch them back