Firewall Allow rules and Suricata

[kapara]

Will rules enabling certain IP's through the firewall override rules from Suricata or will Suricata still block the traffic if set to block and the firewall has an allow for the same IP that Suricata might block based on the rule analysis?

[AdSchellevis]

The traffic hits Suricata first, when a packet is dropped there it won't reach anything else.

[Xames81]

Then a VNC connection could be dropped because suricata think is hacker connection not me?

thanks