Zscaler popup: "Internet security is enabled" after upgrade to 24.1.2._1

[carstenp]

I am running Suricata on my WAN interface. My work laptop has Zscaler installed.

Since upgrading to 24.1.2_1, and Suricata 7 running in IPS mode with hyperscan, I do get these popups on my laptop from Zscaler, roughly every minute or so:

"Internet security is enabled"

The laptop still seems to have good connectivity, video calls work fine.

I am using the same ruleset I used in Suricata 6.
Does anyone know which ruleset I need to massage to prevent those messages?

I do not see anything in the Suricata/opnsense logs about that, besides this message at startup:

"[100320] <Error> -- failed to obtain number of NUMA nodes in the system"

When I switch to IDS mode, the messages in Zscaler no longer appear.

[newsense]

There are a few Suricata patches queued up but I'm unsure if they'll be in 24.1.3 or later.

If you don't have other issues you can ignore the NUMA error for now, else disable Suricata